last executing test programs:

1m50.499408974s ago: executing program 2 (id=848):
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000240)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc2d, &(0x7f0000001900)="$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")
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)

1m49.788141911s ago: executing program 2 (id=854):
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000600))
timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_emit_vhci(0x0, 0x22)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac3"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0003c8000000000000000000000000000002"], 0x14)
write$binfmt_script(r0, &(0x7f0000000b80)={'#! ', './file0', [{0x20, '\xba[\xc1\x8f\n\'\xf90\xf7k\x96K,\xe4\xfa*\xfb)\x17\xc1\x0fs\xd3sV9xE\xef\xe6+\xc1\x85\xd3W\xd0M\x81\xf0\a7\xd2\x14\xf6\xf7.\x1d)L\x9eE >\xd3\xf9C\xf6\xcb*;^h\xd5A\x12`\xa1*\xfb\xfb\xff\x14\xe0'}, {0x20, ' \x01\x00\x02\x00'/16}, {0x20, '\x00\xf5Ir\xfc\xea\xd3\'|\x91\xa5\'Oso\xd7\xe9\xf1\xd6\xf2Kq\x8c<V\x9d|l(m\xea\xc9*\x1cI~PA\xb7\x96\xe4\xaf\xba\xb4@\xcdUw?h2aNJ\n\xe20~\xdd\xd5\v\xf5h\xb8h(\xf5\xe1uE\x8bO\xa0u<\xb6n{-w\"\xd9\xa7\xec\xbc\xe2c\x97\x17R!\xf6T\xaf\x82\x12\x01\xc9G\xc9\x14\xd9\x04t\x11\xf3\x94\xae\xaaQ\x97\xa7\xa1\x10\xa5\xf3\x12\x85w*\xe4f\x0fc\x03\xcf\xb3\xee<\xd5\xec\x8a\xf4\x17\xe4\x99\xe1\x8b\xe3z\xa4M\xd0\xb2\x1e\x15\xdd\xeb:\xbb\x05\xe68\xd2\x91\bxb!\x9a|\xe8L \x97\xc0Y\n\xfa\xaeq\x97\xc2\xaf\xd3\x97\x01\xeb\xe8\xb8\x05m\x13y%\xa7\xf4\xfc*\x06H\xff*x\x00\x183G\xd5\xe3?2\xa7Q\xf4\x8b\xf7m\xec\xa47b\x062\x94\xb6,\x8f*T\v\xd7\xf7*p; !\xf4\x98O\x13@\xe8;\x89\xfd\xdb\xd4*\xd4D\xfd\xe0\xfeX\vn\x1f\xc7,\x14QwM\fW*\xc3\x17U\xf8xc\x8a]\xd7\xb3\xda\x92\x87\x1f\xf3;\xdd\xf8\xd3+\xd8\x19_l$\x9b\xddx\xb2\x93\x8e\xdbdH\x9bPv\xc8 \x1d\xf5\x15Qj\xa2+\xbfst\xcdt\x92\xc3}'}, {}, {0x20, '\xf1^@\x80_\x9clG&8t\xd1oHRE\x90\xb2\x0f\x1az\xf0\xc0O\xb2\xbc%@U\x90Z\x92xc\x82:\xcf\x1b8^\xc3it;E@\xf2\x02\n_\xf7|h\x14\x95\xee\r\xbd@*\xd1\x92W\x82\x991\xa3\xbb\x89\xf0\xe7c2\xd4#\x9ea\xd6~\xbb\xd4e\xd0\x9a1\xf6\xbaK\xdd<\x9b\x85\xc4}\x83\x0f \xc1\xc8\xa6\xc6*\xb5\xd8\xdd\xfdI\xcbY\xa4\xe3\xbe5\xb2R\xdb\xd05\xae#\xc4\xecK\xc2`E6\x92\xcey\xcbp\xdb\xd6\xbc\xa0\x87E\xd7\xac\xb3k\xc7\x13\x8b\x04^\xe0\xc6\x1eM\xba\xc2\\t/\xb5\xaeD\xfb\x93\xa5*\xe4\xe4\xd7\x0fW\xd4U\xbf\xf6#A\xff\xdb<h\x83\xbd;\xef\xe9\xcd\x17\\2\\(\xcd\x0f\xb4\xd5d\xa4C\x155\x0e\x04\x02}!\'\xd6\xe9\xa4\xc6\xd5\x15\xf0\x9f\n\xf6g\x18W\xecy\xd8k\xd1{z\x01G'}, {0x20, '&7\xfa\x16\xfdOW\xc3@\x06\x00'}], 0xa, "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"}, 0xfffffffffffffe24)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(r2, 0x4, 0x0)
getdents(r2, 0x0, 0x48)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
listen(r3, 0x80080400)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
r6 = socket(0x1, 0x2, 0x0)
syz_io_uring_setup(0x3465, &(0x7f0000000340)={0x0, 0x0, 0x40}, 0x0, 0x0)
r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
readv(r7, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@bsdgroups}, {@resuid}, {@delalloc}, {@resgid}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}]}, 0x1, 0x5e7, &(0x7f0000000c00)="$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")

1m30.376061294s ago: executing program 2 (id=854):
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000600))
timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_emit_vhci(0x0, 0x22)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac3"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0003c8000000000000000000000000000002"], 0x14)
write$binfmt_script(r0, &(0x7f0000000b80)={'#! ', './file0', [{0x20, '\xba[\xc1\x8f\n\'\xf90\xf7k\x96K,\xe4\xfa*\xfb)\x17\xc1\x0fs\xd3sV9xE\xef\xe6+\xc1\x85\xd3W\xd0M\x81\xf0\a7\xd2\x14\xf6\xf7.\x1d)L\x9eE >\xd3\xf9C\xf6\xcb*;^h\xd5A\x12`\xa1*\xfb\xfb\xff\x14\xe0'}, {0x20, ' \x01\x00\x02\x00'/16}, {0x20, '\x00\xf5Ir\xfc\xea\xd3\'|\x91\xa5\'Oso\xd7\xe9\xf1\xd6\xf2Kq\x8c<V\x9d|l(m\xea\xc9*\x1cI~PA\xb7\x96\xe4\xaf\xba\xb4@\xcdUw?h2aNJ\n\xe20~\xdd\xd5\v\xf5h\xb8h(\xf5\xe1uE\x8bO\xa0u<\xb6n{-w\"\xd9\xa7\xec\xbc\xe2c\x97\x17R!\xf6T\xaf\x82\x12\x01\xc9G\xc9\x14\xd9\x04t\x11\xf3\x94\xae\xaaQ\x97\xa7\xa1\x10\xa5\xf3\x12\x85w*\xe4f\x0fc\x03\xcf\xb3\xee<\xd5\xec\x8a\xf4\x17\xe4\x99\xe1\x8b\xe3z\xa4M\xd0\xb2\x1e\x15\xdd\xeb:\xbb\x05\xe68\xd2\x91\bxb!\x9a|\xe8L \x97\xc0Y\n\xfa\xaeq\x97\xc2\xaf\xd3\x97\x01\xeb\xe8\xb8\x05m\x13y%\xa7\xf4\xfc*\x06H\xff*x\x00\x183G\xd5\xe3?2\xa7Q\xf4\x8b\xf7m\xec\xa47b\x062\x94\xb6,\x8f*T\v\xd7\xf7*p; !\xf4\x98O\x13@\xe8;\x89\xfd\xdb\xd4*\xd4D\xfd\xe0\xfeX\vn\x1f\xc7,\x14QwM\fW*\xc3\x17U\xf8xc\x8a]\xd7\xb3\xda\x92\x87\x1f\xf3;\xdd\xf8\xd3+\xd8\x19_l$\x9b\xddx\xb2\x93\x8e\xdbdH\x9bPv\xc8 \x1d\xf5\x15Qj\xa2+\xbfst\xcdt\x92\xc3}'}, {}, {0x20, '\xf1^@\x80_\x9clG&8t\xd1oHRE\x90\xb2\x0f\x1az\xf0\xc0O\xb2\xbc%@U\x90Z\x92xc\x82:\xcf\x1b8^\xc3it;E@\xf2\x02\n_\xf7|h\x14\x95\xee\r\xbd@*\xd1\x92W\x82\x991\xa3\xbb\x89\xf0\xe7c2\xd4#\x9ea\xd6~\xbb\xd4e\xd0\x9a1\xf6\xbaK\xdd<\x9b\x85\xc4}\x83\x0f \xc1\xc8\xa6\xc6*\xb5\xd8\xdd\xfdI\xcbY\xa4\xe3\xbe5\xb2R\xdb\xd05\xae#\xc4\xecK\xc2`E6\x92\xcey\xcbp\xdb\xd6\xbc\xa0\x87E\xd7\xac\xb3k\xc7\x13\x8b\x04^\xe0\xc6\x1eM\xba\xc2\\t/\xb5\xaeD\xfb\x93\xa5*\xe4\xe4\xd7\x0fW\xd4U\xbf\xf6#A\xff\xdb<h\x83\xbd;\xef\xe9\xcd\x17\\2\\(\xcd\x0f\xb4\xd5d\xa4C\x155\x0e\x04\x02}!\'\xd6\xe9\xa4\xc6\xd5\x15\xf0\x9f\n\xf6g\x18W\xecy\xd8k\xd1{z\x01G'}, {0x20, '&7\xfa\x16\xfdOW\xc3@\x06\x00'}], 0xa, "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"}, 0xfffffffffffffe24)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(r2, 0x4, 0x0)
getdents(r2, 0x0, 0x48)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
listen(r3, 0x80080400)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
r6 = socket(0x1, 0x2, 0x0)
syz_io_uring_setup(0x3465, &(0x7f0000000340)={0x0, 0x0, 0x40}, 0x0, 0x0)
r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
readv(r7, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@bsdgroups}, {@resuid}, {@delalloc}, {@resgid}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}]}, 0x1, 0x5e7, &(0x7f0000000c00)="$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")

1m11.264409704s ago: executing program 2 (id=854):
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000600))
timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_emit_vhci(0x0, 0x22)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac3"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0003c8000000000000000000000000000002"], 0x14)
write$binfmt_script(r0, &(0x7f0000000b80)={'#! ', './file0', [{0x20, '\xba[\xc1\x8f\n\'\xf90\xf7k\x96K,\xe4\xfa*\xfb)\x17\xc1\x0fs\xd3sV9xE\xef\xe6+\xc1\x85\xd3W\xd0M\x81\xf0\a7\xd2\x14\xf6\xf7.\x1d)L\x9eE >\xd3\xf9C\xf6\xcb*;^h\xd5A\x12`\xa1*\xfb\xfb\xff\x14\xe0'}, {0x20, ' \x01\x00\x02\x00'/16}, {0x20, '\x00\xf5Ir\xfc\xea\xd3\'|\x91\xa5\'Oso\xd7\xe9\xf1\xd6\xf2Kq\x8c<V\x9d|l(m\xea\xc9*\x1cI~PA\xb7\x96\xe4\xaf\xba\xb4@\xcdUw?h2aNJ\n\xe20~\xdd\xd5\v\xf5h\xb8h(\xf5\xe1uE\x8bO\xa0u<\xb6n{-w\"\xd9\xa7\xec\xbc\xe2c\x97\x17R!\xf6T\xaf\x82\x12\x01\xc9G\xc9\x14\xd9\x04t\x11\xf3\x94\xae\xaaQ\x97\xa7\xa1\x10\xa5\xf3\x12\x85w*\xe4f\x0fc\x03\xcf\xb3\xee<\xd5\xec\x8a\xf4\x17\xe4\x99\xe1\x8b\xe3z\xa4M\xd0\xb2\x1e\x15\xdd\xeb:\xbb\x05\xe68\xd2\x91\bxb!\x9a|\xe8L \x97\xc0Y\n\xfa\xaeq\x97\xc2\xaf\xd3\x97\x01\xeb\xe8\xb8\x05m\x13y%\xa7\xf4\xfc*\x06H\xff*x\x00\x183G\xd5\xe3?2\xa7Q\xf4\x8b\xf7m\xec\xa47b\x062\x94\xb6,\x8f*T\v\xd7\xf7*p; !\xf4\x98O\x13@\xe8;\x89\xfd\xdb\xd4*\xd4D\xfd\xe0\xfeX\vn\x1f\xc7,\x14QwM\fW*\xc3\x17U\xf8xc\x8a]\xd7\xb3\xda\x92\x87\x1f\xf3;\xdd\xf8\xd3+\xd8\x19_l$\x9b\xddx\xb2\x93\x8e\xdbdH\x9bPv\xc8 \x1d\xf5\x15Qj\xa2+\xbfst\xcdt\x92\xc3}'}, {}, {0x20, '\xf1^@\x80_\x9clG&8t\xd1oHRE\x90\xb2\x0f\x1az\xf0\xc0O\xb2\xbc%@U\x90Z\x92xc\x82:\xcf\x1b8^\xc3it;E@\xf2\x02\n_\xf7|h\x14\x95\xee\r\xbd@*\xd1\x92W\x82\x991\xa3\xbb\x89\xf0\xe7c2\xd4#\x9ea\xd6~\xbb\xd4e\xd0\x9a1\xf6\xbaK\xdd<\x9b\x85\xc4}\x83\x0f \xc1\xc8\xa6\xc6*\xb5\xd8\xdd\xfdI\xcbY\xa4\xe3\xbe5\xb2R\xdb\xd05\xae#\xc4\xecK\xc2`E6\x92\xcey\xcbp\xdb\xd6\xbc\xa0\x87E\xd7\xac\xb3k\xc7\x13\x8b\x04^\xe0\xc6\x1eM\xba\xc2\\t/\xb5\xaeD\xfb\x93\xa5*\xe4\xe4\xd7\x0fW\xd4U\xbf\xf6#A\xff\xdb<h\x83\xbd;\xef\xe9\xcd\x17\\2\\(\xcd\x0f\xb4\xd5d\xa4C\x155\x0e\x04\x02}!\'\xd6\xe9\xa4\xc6\xd5\x15\xf0\x9f\n\xf6g\x18W\xecy\xd8k\xd1{z\x01G'}, {0x20, '&7\xfa\x16\xfdOW\xc3@\x06\x00'}], 0xa, "bc37f784dc8a4d3338b35c4aeb376f0eff035c88ba4505000000000000002ac83e7724f4d5729d58b7e818d60e131f2ba3b1cda70fc641a0d9941ea461bffd338f6c2c1712770e75f5238bbcfbdecec85f921b1b1f92afe18bd077536be3f79c61ee219496ef5b073e54b3846e278be4b2ef2c48b68100000000000000b34f51f0b883112a74746605b2679c64832a12b214ab9be7743490b9f2434f17a64015ebfc0e6b7dfed0217b4f5fdf70f0d164579cb7ec22f270cef0a466176ffb9cc6bbe063ab93293d68a477541593b7edbeaa43c31eba13724558cbc206ff26df53ddbb03a382901e6a09740ec363a68275e7164b2ea78c0e826fb9a2a256a8127ff3a17b4c6d4a864ee8c098382bc32495b1ac7030b9a58ce4b085a785d29266c59c150d415cc80e94606d55fbd2dca2b5a4241fae0fcee986774f075886de443cfce700f9d9d9400d000000e7f3f274a162ef5093d835916705cac69b4887988fb337c9e0d2d75db07df40fefc65d265094495f73b7363c9bc1778681b7e7f98e89002610d8994c42d7f525a7fa389e1737841b30f5"}, 0xfffffffffffffe24)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(r2, 0x4, 0x0)
getdents(r2, 0x0, 0x48)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
listen(r3, 0x80080400)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
r6 = socket(0x1, 0x2, 0x0)
syz_io_uring_setup(0x3465, &(0x7f0000000340)={0x0, 0x0, 0x40}, 0x0, 0x0)
r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
readv(r7, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@bsdgroups}, {@resuid}, {@delalloc}, {@resgid}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}]}, 0x1, 0x5e7, &(0x7f0000000c00)="$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")

49.47820172s ago: executing program 2 (id=854):
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000600))
timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_emit_vhci(0x0, 0x22)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac3"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0003c8000000000000000000000000000002"], 0x14)
write$binfmt_script(r0, &(0x7f0000000b80)={'#! ', './file0', [{0x20, '\xba[\xc1\x8f\n\'\xf90\xf7k\x96K,\xe4\xfa*\xfb)\x17\xc1\x0fs\xd3sV9xE\xef\xe6+\xc1\x85\xd3W\xd0M\x81\xf0\a7\xd2\x14\xf6\xf7.\x1d)L\x9eE >\xd3\xf9C\xf6\xcb*;^h\xd5A\x12`\xa1*\xfb\xfb\xff\x14\xe0'}, {0x20, ' \x01\x00\x02\x00'/16}, {0x20, '\x00\xf5Ir\xfc\xea\xd3\'|\x91\xa5\'Oso\xd7\xe9\xf1\xd6\xf2Kq\x8c<V\x9d|l(m\xea\xc9*\x1cI~PA\xb7\x96\xe4\xaf\xba\xb4@\xcdUw?h2aNJ\n\xe20~\xdd\xd5\v\xf5h\xb8h(\xf5\xe1uE\x8bO\xa0u<\xb6n{-w\"\xd9\xa7\xec\xbc\xe2c\x97\x17R!\xf6T\xaf\x82\x12\x01\xc9G\xc9\x14\xd9\x04t\x11\xf3\x94\xae\xaaQ\x97\xa7\xa1\x10\xa5\xf3\x12\x85w*\xe4f\x0fc\x03\xcf\xb3\xee<\xd5\xec\x8a\xf4\x17\xe4\x99\xe1\x8b\xe3z\xa4M\xd0\xb2\x1e\x15\xdd\xeb:\xbb\x05\xe68\xd2\x91\bxb!\x9a|\xe8L \x97\xc0Y\n\xfa\xaeq\x97\xc2\xaf\xd3\x97\x01\xeb\xe8\xb8\x05m\x13y%\xa7\xf4\xfc*\x06H\xff*x\x00\x183G\xd5\xe3?2\xa7Q\xf4\x8b\xf7m\xec\xa47b\x062\x94\xb6,\x8f*T\v\xd7\xf7*p; !\xf4\x98O\x13@\xe8;\x89\xfd\xdb\xd4*\xd4D\xfd\xe0\xfeX\vn\x1f\xc7,\x14QwM\fW*\xc3\x17U\xf8xc\x8a]\xd7\xb3\xda\x92\x87\x1f\xf3;\xdd\xf8\xd3+\xd8\x19_l$\x9b\xddx\xb2\x93\x8e\xdbdH\x9bPv\xc8 \x1d\xf5\x15Qj\xa2+\xbfst\xcdt\x92\xc3}'}, {}, {0x20, '\xf1^@\x80_\x9clG&8t\xd1oHRE\x90\xb2\x0f\x1az\xf0\xc0O\xb2\xbc%@U\x90Z\x92xc\x82:\xcf\x1b8^\xc3it;E@\xf2\x02\n_\xf7|h\x14\x95\xee\r\xbd@*\xd1\x92W\x82\x991\xa3\xbb\x89\xf0\xe7c2\xd4#\x9ea\xd6~\xbb\xd4e\xd0\x9a1\xf6\xbaK\xdd<\x9b\x85\xc4}\x83\x0f \xc1\xc8\xa6\xc6*\xb5\xd8\xdd\xfdI\xcbY\xa4\xe3\xbe5\xb2R\xdb\xd05\xae#\xc4\xecK\xc2`E6\x92\xcey\xcbp\xdb\xd6\xbc\xa0\x87E\xd7\xac\xb3k\xc7\x13\x8b\x04^\xe0\xc6\x1eM\xba\xc2\\t/\xb5\xaeD\xfb\x93\xa5*\xe4\xe4\xd7\x0fW\xd4U\xbf\xf6#A\xff\xdb<h\x83\xbd;\xef\xe9\xcd\x17\\2\\(\xcd\x0f\xb4\xd5d\xa4C\x155\x0e\x04\x02}!\'\xd6\xe9\xa4\xc6\xd5\x15\xf0\x9f\n\xf6g\x18W\xecy\xd8k\xd1{z\x01G'}, {0x20, '&7\xfa\x16\xfdOW\xc3@\x06\x00'}], 0xa, "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"}, 0xfffffffffffffe24)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(r2, 0x4, 0x0)
getdents(r2, 0x0, 0x48)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
listen(r3, 0x80080400)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
r6 = socket(0x1, 0x2, 0x0)
syz_io_uring_setup(0x3465, &(0x7f0000000340)={0x0, 0x0, 0x40}, 0x0, 0x0)
r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
readv(r7, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@bsdgroups}, {@resuid}, {@delalloc}, {@resgid}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}]}, 0x1, 0x5e7, &(0x7f0000000c00)="$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")

20.515422867s ago: executing program 2 (id=854):
timer_create(0x0, &(0x7f00000005c0)={0x0, 0x0, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000600))
timer_settime(0x0, 0x0, &(0x7f0000000640)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_emit_vhci(0x0, 0x22)
r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04040a00000000000054679202ce9eaa48b326b038d97544c8b681bad547412afab3663029531077c8c4fa2f7501610d4eae6214096ae92430cd63486f07b04d9c519ab15a6e842e1352398f95ff35f5115a2c6c50f63336179b5e6b1f774a63506e8cb76bba42c6bee078240ec871a2bcf7dd5691833ac53a02f3614eae3afb9549df1b77ce0baebc9f6306644f6f08bbd3ca3229d272acd3483bf3ae4228f7a2b839594856918b10ca47ad4dc249d99c244aba277d101b5ac3"], 0xd)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040f0003c8000000000000000000000000000002"], 0x14)
write$binfmt_script(r0, &(0x7f0000000b80)={'#! ', './file0', [{0x20, '\xba[\xc1\x8f\n\'\xf90\xf7k\x96K,\xe4\xfa*\xfb)\x17\xc1\x0fs\xd3sV9xE\xef\xe6+\xc1\x85\xd3W\xd0M\x81\xf0\a7\xd2\x14\xf6\xf7.\x1d)L\x9eE >\xd3\xf9C\xf6\xcb*;^h\xd5A\x12`\xa1*\xfb\xfb\xff\x14\xe0'}, {0x20, ' \x01\x00\x02\x00'/16}, {0x20, '\x00\xf5Ir\xfc\xea\xd3\'|\x91\xa5\'Oso\xd7\xe9\xf1\xd6\xf2Kq\x8c<V\x9d|l(m\xea\xc9*\x1cI~PA\xb7\x96\xe4\xaf\xba\xb4@\xcdUw?h2aNJ\n\xe20~\xdd\xd5\v\xf5h\xb8h(\xf5\xe1uE\x8bO\xa0u<\xb6n{-w\"\xd9\xa7\xec\xbc\xe2c\x97\x17R!\xf6T\xaf\x82\x12\x01\xc9G\xc9\x14\xd9\x04t\x11\xf3\x94\xae\xaaQ\x97\xa7\xa1\x10\xa5\xf3\x12\x85w*\xe4f\x0fc\x03\xcf\xb3\xee<\xd5\xec\x8a\xf4\x17\xe4\x99\xe1\x8b\xe3z\xa4M\xd0\xb2\x1e\x15\xdd\xeb:\xbb\x05\xe68\xd2\x91\bxb!\x9a|\xe8L \x97\xc0Y\n\xfa\xaeq\x97\xc2\xaf\xd3\x97\x01\xeb\xe8\xb8\x05m\x13y%\xa7\xf4\xfc*\x06H\xff*x\x00\x183G\xd5\xe3?2\xa7Q\xf4\x8b\xf7m\xec\xa47b\x062\x94\xb6,\x8f*T\v\xd7\xf7*p; !\xf4\x98O\x13@\xe8;\x89\xfd\xdb\xd4*\xd4D\xfd\xe0\xfeX\vn\x1f\xc7,\x14QwM\fW*\xc3\x17U\xf8xc\x8a]\xd7\xb3\xda\x92\x87\x1f\xf3;\xdd\xf8\xd3+\xd8\x19_l$\x9b\xddx\xb2\x93\x8e\xdbdH\x9bPv\xc8 \x1d\xf5\x15Qj\xa2+\xbfst\xcdt\x92\xc3}'}, {}, {0x20, '\xf1^@\x80_\x9clG&8t\xd1oHRE\x90\xb2\x0f\x1az\xf0\xc0O\xb2\xbc%@U\x90Z\x92xc\x82:\xcf\x1b8^\xc3it;E@\xf2\x02\n_\xf7|h\x14\x95\xee\r\xbd@*\xd1\x92W\x82\x991\xa3\xbb\x89\xf0\xe7c2\xd4#\x9ea\xd6~\xbb\xd4e\xd0\x9a1\xf6\xbaK\xdd<\x9b\x85\xc4}\x83\x0f \xc1\xc8\xa6\xc6*\xb5\xd8\xdd\xfdI\xcbY\xa4\xe3\xbe5\xb2R\xdb\xd05\xae#\xc4\xecK\xc2`E6\x92\xcey\xcbp\xdb\xd6\xbc\xa0\x87E\xd7\xac\xb3k\xc7\x13\x8b\x04^\xe0\xc6\x1eM\xba\xc2\\t/\xb5\xaeD\xfb\x93\xa5*\xe4\xe4\xd7\x0fW\xd4U\xbf\xf6#A\xff\xdb<h\x83\xbd;\xef\xe9\xcd\x17\\2\\(\xcd\x0f\xb4\xd5d\xa4C\x155\x0e\x04\x02}!\'\xd6\xe9\xa4\xc6\xd5\x15\xf0\x9f\n\xf6g\x18W\xecy\xd8k\xd1{z\x01G'}, {0x20, '&7\xfa\x16\xfdOW\xc3@\x06\x00'}], 0xa, "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"}, 0xfffffffffffffe24)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)
r2 = syz_open_procfs(0x0, &(0x7f0000000040)='map_files\x00')
lseek(r2, 0x4, 0x0)
getdents(r2, 0x0, 0x48)
ioctl$MON_IOCX_GET(0xffffffffffffffff, 0x40189206, &(0x7f00000002c0)={0x0, &(0x7f0000000340)=""/121, 0x79})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r4 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
listen(r3, 0x80080400)
r5 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
r6 = socket(0x1, 0x2, 0x0)
syz_io_uring_setup(0x3465, &(0x7f0000000340)={0x0, 0x0, 0x40}, 0x0, 0x0)
r7 = syz_open_dev$swradio(&(0x7f00000046c0), 0x1, 0x2)
readv(r7, &(0x7f0000000380)=[{&(0x7f0000000000)=""/135, 0x87}], 0x300)
ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}})
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0x10000}}, {@bsdgroups}, {@resuid}, {@delalloc}, {@resgid}, {@errors_remount}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}]}, 0x1, 0x5e7, &(0x7f0000000c00)="$eJzs3c1vFVUbAPBnbj9oKe/bQt68igtpYgwkSksLGGJcwNaQBj/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHDUuM1cztTem/n9ou2Qzq/X7h05sw9PWd6+/ScOfecuQFU1mD6Xy1if0RMJxH9yfzisc7IDg4uPO/Bnx+dTR9J1Ouv/Z5EkqXlz0+yr31Z5p6I+PGHJPZ1LC93Zu7axfGpqcmr2f7w7KXp4Zm5a4cvXBo/P3l+8vLoC6Mnjh87fmLkyIbO63pB2umb777f/8nYm9989Vcy8u0vY0mcjJezJy49j80yGIONn0my/FDfic0urCQd2e/J0pc46SyxQqxL/vp1RcQT0R8d8fDF64+PXym1csCWqicRdaCiEvEPFZX3A/Jr+9br4FopvRJgO9w/tTAAsDz+OxfGBqOnMTaw+0ESS4d1kojY2Mhcsz0RcffO2M1zd8ZuxhaNwwHF5m9ExJNF8Z804n8gemKgEf+1pvhP+wVnsq9p+qsbLL91qFj8w/ZZiP+eFeM/2sT/W0vi/+2/Wy4o1mjw4eY7vU3x3/uopwYAAAAAAACVc/tURDxf9P5/bXH+TxTM/+mLiJObUP5gy/7y9/9r9zahGKDA/VMRLxXO/63ls38HOrKt/zTmA3Ql5y5MTR6JiP9GxKHo2pXujzR/22TpotfDn+77sl35g9n8v/yRln83mwuY1eNe567mPBPjs+Obc/ZQbfdvRDxVOP83WWz/k4L2P/17ML3GMvY9e+tMu2Orxz+wVepfRxwsbP8fNuDJyvfnGG70B4bzXsFyT3/42Xftyt9o/LvFBDy6tP3fvXL8DyRL79czs/4yjs51tp0WvNH+f3fyeuOWM91Z2gfjs7NXRyK6k9MdaWpT+uj66ww7UR4Pebyk8X/omZXH/4r6/70RMd/yvZM/ipcA/P+fvl/b1Uf/H8qTxv/Eutr/9W+M3hr4vl35a2v/jzXa+kNZivE/WPBFHqbdzekF4dhZdGi76wsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO0EtIvZEUhta3K7VhoYi+iLif7G7NnVlZva5c1feuzyRHmt8/n8t/6Tf/oX9JP/8/4El+6Mt+0cjYm9EfN7R29gfOntlaqLskwcAAAAAAAAAAAAAAAAAAIDHRF+b9f+p3zrKrh2w5TrLrgBQmoL4/6mMegDbT/sP1SX+obrEP1SX+IfqEv9QXeIfqkv8Q3WJfwAAAAAA2FH2Hrj9cxIR8y/2Nh6p7uxYV6k1A7ZarewKAKVxix+oLlN/oLpc4wNJ4197PW0yrZJtFdNnHyEzAAAAAAAAAAAAAFTOwf3W/0NVWf8P1WX9P1RXvv7/QMn1ALafa3wgVlnJX7j+f9VcAAAAAAAAAAAAAMBmmpm7dnF8amryqo03Ho9qbHBjV0SsO1e9Xr+e/haUXfkdspFPhX9c6tOyka/1W1uu8v4mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzf4NAAD//2bJKwE=")

7.835277165s ago: executing program 4 (id=1160):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x4)
syz_usbip_server_init(0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000340), 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000440)=0x82, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
recvmsg(r1, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x0)
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40041271, &(0x7f0000002040))
syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7)
add_key(&(0x7f00000001c0)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="26b6869a6519a2c59a83a856cdd003f652ca7b0000", 0x15, 0x0)
keyctl$get_persistent(0x16, 0x0, 0x0)
personality(0x400000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)

5.91636487s ago: executing program 1 (id=1163):
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
syz_io_uring_setup(0x39a8, &(0x7f0000000300), 0x0, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = socket(0x18, 0x0, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r2, &(0x7f00000002c0)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
sendfile(r1, r0, 0x0, 0x80006)

5.779089772s ago: executing program 4 (id=1164):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fanotify_init(0x0, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x49)
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x69, 0x0, &(0x7f0000001140)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa53f40829275486304e253cf84880ca2735c5d59c1c7843087978fb7b85e8391d418e5292cedca85", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x3}, 0x50)
unshare(0x60400)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/41, 0x29}, 0x0)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x0, 0x1000009, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000040)=0x1000)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

5.661686831s ago: executing program 0 (id=1165):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000001c000000000000002300850000000700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
dup2(r3, r3)
setrlimit(0x40000000000008, &(0x7f0000000000))
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, <r6=>0x0}, &(0x7f0000000280)=0x5)
setresuid(0x0, r6, 0x0)
setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4)
sendmmsg$inet(r4, &(0x7f0000000780)=[{{&(0x7f0000000040)={0x2, 0x4e21, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaffffffff0000000010000000000000000000000007"], 0x30}}], 0x1, 0x4008804)
socket$netlink(0x10, 0x3, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x20000, 0x0)

5.297554811s ago: executing program 1 (id=1167):
io_uring_setup(0x177f, &(0x7f0000000140))
syz_open_dev$vim2m(&(0x7f0000000140), 0x0, 0x2)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x10007, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r1, 0x402, 0x8000003d)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x202, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x1b4f, 0x101, 0x4, 0x20, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x82}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="8e412e02bc36cb7637d7002bdcaa8dd125c123da1d", @ANYRES32=r0], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, 0x0)
dup3(0xffffffffffffffff, r2, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000180)={r5})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000002780)={<r6=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r4, 0x40182103, &(0x7f0000000080)={r6, 0x3, r4, 0x5})
r7 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BLKALIGNOFF(r7, 0x127a, &(0x7f0000000000))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

4.524267243s ago: executing program 0 (id=1168):
keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f00000003c0)=' hash=', 0x0)

3.740266397s ago: executing program 0 (id=1169):
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x82, &(0x7f0000000040), 0x7, 0x4d6, &(0x7f0000000740)="$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")
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0)

3.565707381s ago: executing program 4 (id=1170):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_setup(0x0, 0x0)
syz_read_part_table(0x1055, &(0x7f0000001980)="$eJzsz8GNwjAUBNCfbFbR1rAt7Hk7SRcUETrhTAWUQwVc4cQgIwI0gBDSe4cvj8eW5eKt/mqoGmv47Z9319e56o5J0rdqf2t2y5GMy2rO9+PmUPV1D0lOOfxP1bXQRm1+quY6J2nPTttX/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsUlAAD//67CF/8=")

3.560915721s ago: executing program 3 (id=1171):
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4b, &(0x7f0000000000))

3.259485236s ago: executing program 3 (id=1172):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x201, 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)

3.032728914s ago: executing program 1 (id=1173):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
sendto$inet(r0, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0)

2.879039657s ago: executing program 4 (id=1174):
r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0)
ioctl$VIDIOC_TRY_DECODER_CMD(r0, 0xc0585605, &(0x7f0000000100)={0x0, 0x1, @raw_data=[0x0, 0x0, 0x1013]})

2.874629417s ago: executing program 0 (id=1175):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000080)={0x0, 0x0})
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x4)
syz_usbip_server_init(0x1)
syz_emit_vhci(&(0x7f0000000040)=ANY=[], 0x7)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_group_source_req(r0, 0x0, 0x23, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x0, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000000340), 0x4)
setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000440)=0x82, 0x4)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
recvmsg(r1, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{&(0x7f0000000080)=""/49, 0x31}, {&(0x7f0000000f80)=""/4096, 0xffffffe1}, {0x0}, {&(0x7f0000000100)=""/102, 0x66}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x5, &(0x7f0000001f80)=""/178, 0xb2}, 0x0)
ioctl$BLKBSZSET(0xffffffffffffffff, 0x40041271, &(0x7f0000002040))
syz_emit_vhci(&(0x7f0000000200)=ANY=[], 0x7)
add_key(&(0x7f00000001c0)='pkcs7_test\x00', 0x0, &(0x7f00000000c0)="26b6869a6519a2c59a83a856cdd003f652ca7b0000", 0x15, 0x0)
keyctl$get_persistent(0x16, 0x0, 0x0)
personality(0x400000)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0)

2.752111447s ago: executing program 3 (id=1176):
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
chdir(&(0x7f0000000240)='./file0\x00')
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$security_ima(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300), &(0x7f0000000000)=@md5={0x1, "1bc1120b4367acaaba77705abf88d3f9"}, 0x11, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000440))
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmsg$IPSET_CMD_LIST(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[], 0x14}}, 0x8018)
write$binfmt_script(r4, 0x0, 0x0)

2.661281334s ago: executing program 4 (id=1177):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80000001}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x2a}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r1=>0x0})
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0x1, <r2=>0xffffffffffffffff}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x200}, [@map_idx={0x18, 0x3, 0x5, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @jmp={0x5, 0x0, 0x3, 0x0, 0x9, 0x2, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @generic={0x0, 0x0, 0xe, 0x9, 0xefcc}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00', 0xfffffffa, 0x69, &(0x7f0000000140)=""/105, 0x41000, 0x50, '\x00', r1, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000200)={0x4, 0x5}, 0x8, 0x10, &(0x7f0000000240)={0x3, 0x5, 0x800, 0x3}, 0x10, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[{0x4, 0x4, 0x2, 0x5}, {0x2, 0x0, 0x10, 0xa}, {0x4000002, 0x1, 0xe, 0xc}], 0x10, 0x2}, 0x90)
r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000680)=0xffffffffffffffff, 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000002c0)=0x2000000)
close(r4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000003500)={0xffffffffffffffff, 0x20, &(0x7f00000034c0)={&(0x7f0000003340)=""/120, 0x78, <r5=>0x0, &(0x7f00000033c0)=""/221, 0xdd}}, 0x10)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000017c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000003540)={0x0, 0xd, &(0x7f0000001100)=ANY=[@ANYBLOB="180000000900000000000000606edbdaa3bd806003c5edbd43e68004cc00001830000002000000000009040000185b00000300000000004fd36100000000000085100000000000001869000008000000080000000000008018e1e2cbacb16400"/107], &(0x7f0000000480)='GPL\x00', 0x4, 0xed, &(0x7f0000003240)=""/237, 0x41100, 0x14, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, &(0x7f00000004c0)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x0, 0xe, 0x0, 0x8c2}, 0x10, r5, r6}, 0x80)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xa, &(0x7f0000001180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a9}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x400b}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff9}, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x56}, @func={0x85, 0x0, 0x1, 0x0, 0x7}]}, &(0x7f00000003c0)='GPL\x00', 0x0, 0x6d, &(0x7f0000000400)=""/109, 0x41100, 0x0, '\x00', 0x0, 0x23, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x0, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1]}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x1a, 0x8, &(0x7f0000001800)=ANY=[@ANYBLOB="859af4ff0400000018250000", @ANYRES32], &(0x7f0000000180)='syzkaller\x00', 0x6, 0x26, &(0x7f0000000280)=""/38, 0x41000, 0x2, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x3, 0x6, 0x0, 0x101}, 0x10, r5, r7, 0x0, &(0x7f0000000600)}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000001480)={0xb, 0x16, &(0x7f0000001580)=ANY=[@ANYBLOB="180000000002000000000000ff0f0000d3ef9aa06d117e0448f9040000000018640000070000f400000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800003f0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018410000fdffffff0000000000000000850000005d0000001800000007000000000000007f95000085200000050000005f64feff000000009500000000000000"], &(0x7f0000001300)='GPL\x00', 0x7fc0, 0xb6, &(0x7f0000001340)=""/182, 0x41000, 0x0, '\x00', r1, 0x36, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0xffffffffffffffff, 0x3, &(0x7f0000001400)=[r8, r2, r4, r2, r2, r4], &(0x7f0000001440)=[{0x4, 0x4, 0x0, 0x5}, {0x2, 0x1, 0xc}, {0x0, 0x5, 0xd, 0xb}], 0x10, 0x8}, 0x90)
r9 = bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
r10 = socket(0x10, 0x6, 0x1)
r11 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r11, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r11, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0xadf29f33fb903ae1, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c)
ioctl$int_in(r11, 0x5452, &(0x7f00000002c0)=0x1)
recvmsg(r11, &(0x7f00000008c0)={0x0, 0x4, &(0x7f0000000840)=[{&(0x7f0000000040)=""/50, 0xfffffe72}, {&(0x7f0000000240)=""/48, 0x1b}, {&(0x7f0000000780)=""/129, 0x80}, {&(0x7f0000000300)=""/68, 0x44}, {&(0x7f0000000380)=""/124, 0x79}, {&(0x7f0000000400)=""/168, 0xb7}], 0x6, 0x0, 0x0, 0xb7}, 0x40000110)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x0, 0x1, 0xc0}]}, &(0x7f0000000080)='syzkaller\x00', 0x6, 0x94, &(0x7f00000000c0)=""/148}, 0x80)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001780)={&(0x7f0000000040), 0xc, &(0x7f00000001c0)=[{&(0x7f0000000280)={0x10, 0x36, 0x400, 0x70bd28, 0x25dfdbfe}, 0x10}, {&(0x7f0000001680)={0xb0, 0x3e, 0x300, 0x70bd29, 0x25dfdbfe, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x41, 0x0, 0x0, @u32=0x6}, @nested={0x8d, 0x0, 0x0, 0x1, [@typed={0x8, 0x3, 0x0, 0x0, @fd=r9}, @typed={0x8, 0x48, 0x0, 0x0, @fd}, @typed={0x14, 0x45, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @generic="41a86662b5cb89a5d37722ee951e6490fa5032ba8076fa012c18898df7e7a2c37bb9936918693451294b62d81073968446fd3ae57962f4dd8d73a6c2024b098e2ed51d3f453073ef4187eeaa57c9303a6615e84d8a81cc6c35eb88b91e3ec55481fd09acb3"]}]}, 0xb0}], 0x2, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r10, r11, 0xffffffffffffffff]}}], 0x28, 0x4040000}, 0x4801)
ioctl$KVM_CREATE_DEVICE(r4, 0xc00caee0, &(0x7f00000010c0)={0x6, <r12=>0xffffffffffffffff, 0x1})
bpf$OBJ_GET_PROG(0x7, &(0x7f0000001200)=@o_path={&(0x7f0000001080)='./file0\x00', 0x0, 0x0, r12}, 0x18)
ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000001540)=0x1000)
bpf$PROG_LOAD(0x5, &(0x7f0000001cc0)={0x18, 0x13, &(0x7f0000001240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x9}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x270}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_val={0x18, 0x1, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x7}, @tail_call={{0x18, 0x2, 0x1, 0x0, r4}}, @map_idx_val={0x18, 0x1, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2e2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}]}, &(0x7f0000001640)='GPL\x00', 0x4, 0x0, 0x0, 0x41100, 0x40, '\x00', r1, 0x2e, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001840)={0x4, 0x4, 0x1000, 0x6}, 0x10, r5, 0xffffffffffffffff, 0x4, &(0x7f0000001c40)=[0xffffffffffffffff, r4, r2, r2, r2, r2], &(0x7f0000001c80)=[{0x5, 0x5, 0x4, 0x2}, {0x2, 0x3, 0x5, 0x1}, {0x4, 0x3, 0xc, 0xa}, {0x2, 0x1, 0x8}], 0x10, 0x8}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0xe, &(0x7f00000000c0)=@raw=[@cb_func={0x18, 0x9, 0x4, 0x0, 0x3}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9}, @ldst={0x0, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1}, @initr0={0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x401}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @alu={0x7, 0x0, 0x1, 0x3, 0x1, 0xfffffffffffffff0, 0xffffffffffffffff}, @cb_func={0x18, 0xa, 0x4, 0x0, 0x1}, @cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffc}], &(0x7f0000000140)='GPL\x00', 0x5, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x8, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0x1, 0xf3, 0x4}, 0x10, r5, r9}, 0x90)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x1d, 0x14, &(0x7f0000000300)=@raw=[@generic={0x75, 0x9, 0x7, 0xfffa, 0x3}, @exit, @btf_id={0x18, 0xf, 0x3, 0x0, 0x3}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x2}, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @cb_func={0x18, 0x2, 0x4, 0x0, 0xfffffffffffffff8}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x2}], &(0x7f0000000100)='GPL\x00', 0x134ed9d9, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, r4, 0x8, &(0x7f0000000180)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x2, 0xc, 0x0, 0x6}, 0x10, r5, 0x0, 0x4, 0x0, &(0x7f00000003c0)=[{0x5, 0x3, 0xc, 0x5}, {0x2, 0x5, 0xc, 0x4}, {0x5, 0x5, 0x10, 0xa}, {0x4, 0x2, 0x0, 0xb}], 0x10, 0x82d}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x7, 0xb, &(0x7f00000004c0)=@raw=[@map_val={0x18, 0x5, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x4000}, @alu={0x0, 0x1, 0x9, 0x1, 0x6, 0x10, 0x1}, @map_val={0x18, 0x8, 0x2, 0x0, r2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x1}], &(0x7f0000000540)='syzkaller\x00', 0x6, 0xd5, &(0x7f0000000580)=""/213, 0x41000, 0xa, '\x00', 0x0, 0x34, r3, 0x8, &(0x7f00000006c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000700)={0x2, 0x9, 0x9, 0x3}, 0x10, r5, r0, 0x9, 0x0, &(0x7f0000000740)=[{0x1, 0x5, 0x2}, {0x5, 0x1, 0xa, 0x6}, {0x2, 0x1, 0x3, 0x1}, {0x0, 0x2, 0x8, 0x2}, {0x5, 0x3, 0x3, 0xa}, {0x3, 0x2, 0x8, 0x1}, {0x3, 0x5, 0xc, 0xc}, {0x4, 0x1, 0x7}, {0x2, 0x4, 0x5, 0x3}], 0x10, 0x1}, 0x90)

1.946417482s ago: executing program 1 (id=1178):
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB='iocharset=euc-jp,codepage=macturkish,gid=', @ANYRESHEX=0x0, @ANYBLOB=',quiet,file_umask=00000000000000000000010,dir_umask=00000000000000000000010,part=0x0000000000000008,uid=', @ANYRESHEX=0xee00, @ANYBLOB="2c00b5da9d1423dd002677aa1201e709a1d87a5d98dd2d573f736e6187cdccc9836cd3a59342771e3be9d5a347f287a519daaae09a721e14b3df1c8b3936683409026968b019ef655268ae6bc2e6538f397c76c0376ccefb655a71bea92591b7cef711e5315a9e43e69a9ff0c92afd7c8092f1d092e2bf4a38695f12f941e2ea2b7514287242d039208f3a91ce5865b6d0650372cc6345c31c475e32bcfae8d07db6"], 0x5, 0x2d1, &(0x7f0000000600)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
unlink(&(0x7f0000000180)='./file1\x00')

1.615108649s ago: executing program 1 (id=1179):
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
r3 = socket$inet(0xa, 0x1, 0x0)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="5300000007000046009d40ed06cb7248", @ANYRES8, @ANYRES64=r3], 0x53)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})

1.374609449s ago: executing program 3 (id=1180):
r0 = fsopen(&(0x7f0000000280)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='source', &(0x7f0000000f80)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b/\\\\\xf9/mD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)

1.285885786s ago: executing program 1 (id=1181):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0xffffffffffffffca, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
fanotify_init(0x0, 0x0)
read$midi(0xffffffffffffffff, 0x0, 0x49)
ioctl$SNDCTL_SEQ_PANIC(0xffffffffffffffff, 0x5100)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000000)={0x0, 0x2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002c00)={r1, 0x18000000000002a0, 0x69, 0x0, &(0x7f0000001140)="b9ff0300600d698cb89e14f008001f000c0cae0e4000632177fbac14140ee934a0a662079f4b4d2f87e5feca6aab845013f2325f1a39010108038da1924425181aa53f40829275486304e253cf84880ca2735c5d59c1c7843087978fb7b85e8391d418e5292cedca85", 0x0, 0x100, 0x60000000, 0x0, 0x91, &(0x7f0000000000), &(0x7f0000002c80)="8dc92a8ff39080a675b6565efa3ed46f2a2756e43abbfd8c44686c04d6a0c42f2599fc2b73f432c834dac249597b646035045af99decf86f5b32dc0404e599f56091e15e581ff6805ee283c0313298a5b8ba1c84f1850c217b5a2c2bc547eaf4585e5ba878d1660fa871a275fb61d1fec75942919083919f8d8fdad79615bc5d2d3fa40e054d38d49dfbebc2f137fc7110", 0x3}, 0x50)
unshare(0x60400)
r2 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0)
recvmsg$kcm(r2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/41, 0x29}, 0x0)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x0, 0x1000009, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = socket$inet6(0xa, 0x805, 0x0)
getsockopt$bt_hci(r4, 0x84, 0x80, &(0x7f0000000080)=""/4096, &(0x7f0000000040)=0x1000)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @multicast1}, 0x10)

1.207748942s ago: executing program 4 (id=1182):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x67}, [@ldst]}, &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x1}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2a6, &(0x7f0000000440)="$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")
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x0, 0x0, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mremap(&(0x7f0000356000/0x3000)=nil, 0x3000, 0x2000, 0x4, &(0x7f0000a4a000/0x2000)=nil)
syz_open_dev$usbmon(0x0, 0x0, 0x80)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f00000001c0)=ANY=[@ANYBLOB="00e0c6e4d9182ec69e599fd4d32ba9c5146fbc43a33914b2b1a5ce8843b193dc82dbc512b6fabfe6fbdd2a8bdeeda78e17b18f1b6e80c81cd67046e6a85e7160112d613e4c6dcab2404d58291ec130b9fd2785ce8dd5538f70998f2d50005813ba6c65cd3c25a8e730e1cd7b11cf7f6cc0fba6b670c64374abd09518ffba0c5eb2e602b1a64ac897fce7fae33878c0e57398a4cc6ce9bee1d70bef22f10c7776c2f5077cb1de63832b1bab15c6caf549a1cd58106494d92d1159033b2e27eceae339414a62aca9cf6a00c07e2a181dd9668a64b5eefc8e5ebc6564442a8d"], 0x1, 0x14fe, &(0x7f0000001580)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000180)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f00000001c0)='./file0\x00', 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.swap.events\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000020240), 0x10010)
r6 = open$dir(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
unlinkat(r6, &(0x7f00000000c0)='./file0\x00', 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.sectors\x00', 0x275a, 0x0)
ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r7, 0x40047211, 0x1000000000000)
ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000280)={'veth0\x00', @multicast})

1.135645548s ago: executing program 0 (id=1183):
syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x4b4b, &(0x7f0000000000))

1.134640708s ago: executing program 3 (id=1184):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x80}, 'port0\x00'})

55.404705ms ago: executing program 0 (id=1185):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_uring_setup(0x0, 0x0)
syz_read_part_table(0x1055, &(0x7f0000001980)="$eJzsz8GNwjAUBNCfbFbR1rAt7Hk7SRcUETrhTAWUQwVc4cQgIwI0gBDSe4cvj8eW5eKt/mqoGmv47Z9319e56o5J0rdqf2t2y5GMy2rO9+PmUPV1D0lOOfxP1bXQRm1+quY6J2nPTttX/g0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsUlAAD//67CF/8=")

0s ago: executing program 3 (id=1186):
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
syz_open_dev$hidraw(0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r1 = inotify_init1(0x0)
fcntl$setown(r1, 0x8, 0xffffffffffffffff)
fcntl$getownex(r1, 0x10, &(0x7f0000000140)={0x0, <r2=>0x0})
r3 = syz_open_procfs(r2, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r3, 0x4004662b, &(0x7f0000000180)={@id={0x2, 0x0, @auto="ffee8e7268b4fecd2fce2d54fbd909e4"}})
ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  281.887134][   T51] bond0 (unregistering): Released all slaves
[  281.992173][ T3554] Bluetooth: hci1: command tx timeout
[  282.702352][ T3554] Bluetooth: hci0: command tx timeout
[  283.254319][   T51] bond0 (unregistering): Released all slaves
[  283.342452][ T3554] Bluetooth: hci2: command tx timeout
[  283.348526][ T6927] team0: Port device team_slave_0 added
[  283.446321][ T6927] team0: Port device team_slave_1 added
[  283.584132][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_0
[  283.628554][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.712319][ T6927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  283.803868][   T41] usb 5-1: USB disconnect, device number 9
[  283.841294][   T41] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  283.855608][   T41] cp210x 5-1:0.0: device disconnected
[  283.899550][ T7068] device batadv_slave_1 entered promiscuous mode
[  283.911243][ T6927] batman_adv: batadv0: Adding interface: batadv_slave_1
[  283.921706][ T6927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  283.967518][ T6927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  284.062320][ T3554] Bluetooth: hci1: command tx timeout
[  284.147360][ T7067] device batadv_slave_1 left promiscuous mode
[  284.342985][ T6927] device hsr_slave_0 entered promiscuous mode
[  284.369509][ T6927] device hsr_slave_1 entered promiscuous mode
[  284.473214][ T7099] loop4: detected capacity change from 0 to 128
[  284.484530][ T7099] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  284.494116][ T7099] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038 (0x7fffffff)
[  284.571594][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  284.582412][  T154] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  284.738753][ T6905] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  284.757790][ T6905] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  284.786694][ T7108] loop3: detected capacity change from 0 to 512
[  284.818404][ T7108] ext4: Unknown parameter '.'
[  284.832345][  T154] usb 1-1: Using ep0 maxpacket: 16
[  284.853827][ T6927] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  284.880373][ T6905] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  284.914848][ T6905] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  284.957910][  T154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 31551, setting to 1024
[  284.985943][  T154] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  285.044311][ T6927] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.193413][  T154] usb 1-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a
[  285.213455][  T154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.219608][ T6927] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.230518][  T154] usb 1-1: Product: syz
[  285.247498][  T154] usb 1-1: Manufacturer: syz
[  285.251264][ T7118] loop3: detected capacity change from 0 to 1024
[  285.256695][  T154] usb 1-1: SerialNumber: syz
[  285.282468][ T7118] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  285.308564][  T154] usb 1-1: config 0 descriptor??
[  285.332647][ T7093] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  285.351442][ T7118] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  285.353463][  T154] quatech2 1-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  285.387732][ T6927] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.446289][ T6905] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.460630][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  285.468798][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  285.498785][ T6905] 8021q: adding VLAN 0 to HW filter on device team0
[  285.585503][  T154] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  285.602170][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  285.646042][  T154] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  285.691615][  T154] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB2
[  285.700973][   T41] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  285.730561][  T154] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB3
[  285.756743][ T6905] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  285.790537][ T6905] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  285.824331][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  285.852941][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  285.866467][ T3596] usb 1-1: USB disconnect, device number 10
[  285.879128][ T3596] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  285.892484][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.899589][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.908167][ T3596] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  285.931143][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  285.952170][   T41] usb 4-1: Using ep0 maxpacket: 8
[  285.959126][ T3596] quatech-serial ttyUSB2: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB2
[  285.962815][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  286.002838][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  286.009951][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  286.013516][ T3596] quatech-serial ttyUSB3: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB3
[  286.052639][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  286.056511][ T3596] quatech2 1-1:0.0: device disconnected
[  286.061364][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  286.075024][   T41] usb 4-1: config 0 has an invalid interface number: 6 but max is 2
[  286.092148][   T41] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  286.100344][   T41] usb 4-1: config 0 has an invalid interface number: 49 but max is 2
[  286.122215][   T41] usb 4-1: config 0 has no interface number 0
[  286.142572][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  286.151445][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  286.152349][ T3562] Bluetooth: hci1: command tx timeout
[  286.188676][   T41] usb 4-1: config 0 has no interface number 1
[  286.205223][   T41] usb 4-1: config 0 has no interface number 2
[  286.232244][   T41] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  286.241587][   T41] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.253211][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  286.261943][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  286.283816][   T41] usb 4-1: config 0 descriptor??
[  286.303918][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  286.312608][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.325368][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.369373][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.378391][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  286.409260][ T7151] loop4: detected capacity change from 0 to 64
[  286.409469][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.442556][ T7151] hfs: unable to locate alternate MDB
[  286.452259][ T7151] hfs: continuing without an alternate MDB
[  286.459046][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.516660][ T6927] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  286.539512][   T26] audit: type=1800 audit(1721904141.503:1020): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.947" name="file1" dev="loop4" ino=18 res=0 errno=0
[  286.605173][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz.3.942'.
[  286.642410][   T41] qcserial 4-1:0.6: Qualcomm USB modem converter detected
[  286.653248][ T7156] netlink: 56 bytes leftover after parsing attributes in process `syz.3.942'.
[  286.692340][ T6927] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  286.727110][ T6927] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  286.791076][ T6927] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  286.852347][   T41] qcserial 4-1:0.49: Qualcomm USB modem converter detected
[  286.887896][ T7164] loop4: detected capacity change from 0 to 128
[  286.976653][ T7164] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  286.995989][ T7164] ext4 filesystem being mounted at /14/mnt supports timestamps until 2038 (0x7fffffff)
[  287.032385][ T3562] Bluetooth: hci2: command tx timeout
[  287.100011][ T6927] 8021q: adding VLAN 0 to HW filter on device bond0
[  287.113882][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  287.122299][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  287.133353][ T6927] 8021q: adding VLAN 0 to HW filter on device team0
[  287.166699][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  287.173082][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  287.180808][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  287.185552][ T7156] fuseblk: Bad value for 'fd'
[  287.233459][ T6905] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.246628][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  287.268588][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  287.309009][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  287.316352][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  287.335961][ T7175] binder: 7173:7175 ioctl c0306201 0 returned -14
[  287.372527][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  287.383577][ T3596] usb 4-1: USB disconnect, device number 12
[  287.390254][ T3596] qcserial 4-1:0.6: device disconnected
[  287.408241][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  287.435535][ T3596] qcserial 4-1:0.49: device disconnected
[  287.437655][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  287.448452][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  287.502984][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  287.597596][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  287.606336][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  287.636451][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  287.669643][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  287.698647][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  287.724791][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  287.762423][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  287.781746][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  287.853237][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  287.861204][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  287.895396][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  287.914256][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  287.932900][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  287.959317][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  287.968922][ T6534] EXT4-fs error (device loop3): ext4_map_blocks:607: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[  288.004237][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  288.040546][ T6927] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  288.053989][ T6905] device veth0_vlan entered promiscuous mode
[  288.072225][ T6534] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  288.092878][ T6534] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  288.104495][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  288.122940][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  288.161059][ T6905] device veth1_vlan entered promiscuous mode
[  288.220550][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  288.243885][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  288.275328][ T6534] EXT4-fs (loop3): unmounting filesystem.
[  288.293611][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  288.313101][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  288.327550][ T7201] loop4: detected capacity change from 0 to 512
[  288.338348][ T6905] device veth0_macvtap entered promiscuous mode
[  288.383870][ T6905] device veth1_macvtap entered promiscuous mode
[  288.460715][ T3895] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  288.616390][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.636463][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.660940][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.671955][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.682298][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.693748][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.704243][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  288.729296][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.741310][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_0
[  288.769680][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  288.787916][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  288.818438][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  288.841792][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  288.872732][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.902550][ T3596] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  288.905918][ T7209] loop0: detected capacity change from 0 to 4096
[  288.920396][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  288.940856][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  288.982054][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.005898][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.031820][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.062481][ T6905] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.098471][ T6905] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.122763][ T6905] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.142392][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  289.156580][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  289.214539][ T6905] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  289.244127][ T6905] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  289.255967][ T6905] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  289.265340][ T6905] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  289.285893][ T6927] 8021q: adding VLAN 0 to HW filter on device batadv0
[  289.308401][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  289.316361][ T3596] usb 5-1: config 16 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[  289.329832][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  289.349148][ T3596] usb 5-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  289.370331][ T3596] usb 5-1: config 16 has no interfaces?
[  289.377090][ T3596] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  289.396435][ T3596] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.495198][   T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.582681][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  289.601606][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  289.686200][   T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.740534][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  289.745163][ T3595] usb 5-1: USB disconnect, device number 10
[  289.765458][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  289.805434][   T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  289.838985][ T6927] device veth0_vlan entered promiscuous mode
[  289.848144][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  289.861835][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  289.870865][ T3554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  289.881676][ T3554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  289.895945][ T3554] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  289.905081][ T3554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  289.926359][ T3668] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  289.937042][ T3554] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  289.946025][ T3554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  289.955143][ T3668] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  289.988498][   T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  290.014931][ T6927] device veth1_vlan entered promiscuous mode
[  290.027442][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  290.036502][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  290.095452][ T3668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.125941][ T3668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.167020][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  290.183433][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  290.191451][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  290.207128][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  290.262430][ T6927] device veth0_macvtap entered promiscuous mode
[  290.354604][ T6927] device veth1_macvtap entered promiscuous mode
[  290.375832][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  290.385027][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  290.478444][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.522458][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.533521][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.551782][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.571088][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.615810][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.646797][ T7252] delete_channel: no stack
[  290.653029][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.684613][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.706446][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  290.718225][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.730519][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_0
[  290.759855][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  290.774858][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  290.805528][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.816630][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.827337][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.840253][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.850467][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.863231][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.880541][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.891495][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.917058][ T6927] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  290.937624][ T6927] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  290.964123][ T6927] batman_adv: batadv0: Interface activated: batadv_slave_1
[  291.064546][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  291.075495][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  291.086973][ T6927] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  291.096695][ T6927] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  291.106183][ T6927] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  291.115643][ T6927] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  291.468802][ T7275] Cannot find del_set index 0 as target
[  291.559028][ T7229] chnl_net:caif_netlink_parms(): no params data found
[  291.574722][ T7276] loop0: detected capacity change from 0 to 64
[  291.631881][ T7276] hfs: unable to parse mount options
[  291.779032][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  291.825090][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  291.960385][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  291.992277][ T3554] Bluetooth: hci2: command tx timeout
[  292.359561][ T3829] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  292.376366][ T7265] loop4: detected capacity change from 0 to 40427
[  292.383577][ T3829] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  292.430928][ T7265] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  292.455090][ T7265] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  292.521502][ T7265] F2FS-fs (loop4): invalid crc value
[  292.593806][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  292.608196][ T7265] F2FS-fs (loop4): Found nat_bits in checkpoint
[  293.303426][ T7265] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  293.310697][ T7265] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  293.438116][ T7229] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.452419][ T7229] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.473769][ T7229] device bridge_slave_0 entered promiscuous mode
[  293.485920][ T7229] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.503011][ T7229] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.528714][ T7229] device bridge_slave_1 entered promiscuous mode
[  293.642972][ T4985] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  293.928049][ T7229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.969218][ T7229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  294.073567][ T3554] Bluetooth: hci2: command tx timeout
[  294.150041][ T4985] usb 2-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=f0.a0
[  294.170686][ T4985] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.224133][ T4985] usb 2-1: config 0 descriptor??
[  294.258101][ T7229] team0: Port device team_slave_0 added
[  294.285042][ T4985] kl5kusb105 2-1:0.0: KL5KUSB105D / PalmConnect converter detected
[  294.317209][ T4985] usb 2-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  294.498887][ T3594] usb 2-1: USB disconnect, device number 10
[  294.522073][ T3594] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  294.563545][ T3594] kl5kusb105 2-1:0.0: device disconnected
[  294.735223][ T7229] team0: Port device team_slave_1 added
[  294.890343][ T3562] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  294.914948][ T3562] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  294.923203][ T3562] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  294.934311][ T3562] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  294.944719][ T3562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  294.952033][ T3562] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  295.023351][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.043986][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.182588][ T7229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.218043][ T7229] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.242569][ T7229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  295.400160][ T7229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.669429][ T7346] loop0: detected capacity change from 0 to 512
[  295.731624][ T7346] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  295.757389][ T7346] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  295.845740][ T7229] device hsr_slave_0 entered promiscuous mode
[  295.870016][ T7346] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002]
[  295.881756][ T7229] device hsr_slave_1 entered promiscuous mode
[  295.896138][ T7346] System zones: 1-12
[  295.909245][ T7229] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.932251][ T7229] Cannot create hsr debugfs directory
[  295.965090][ T7346] EXT4-fs (loop0): 1 truncate cleaned up
[  295.982360][ T7346] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  296.142231][ T3554] Bluetooth: hci2: command tx timeout
[  296.149866][ T6729] EXT4-fs (loop0): unmounting filesystem.
[  296.298981][   T26] audit: type=1326 audit(1721904151.263:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.0.986" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7537f75f19 code=0x0
[  296.449005][   T51] device hsr_slave_0 left promiscuous mode
[  296.472605][   T51] device hsr_slave_1 left promiscuous mode
[  296.499701][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.529327][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.569094][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.588583][ T7370] delete_channel: no stack
[  296.597943][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.619786][   T51] device bridge_slave_1 left promiscuous mode
[  296.626732][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.636765][   T51] device bridge_slave_0 left promiscuous mode
[  296.653284][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.673012][   T51] device hsr_slave_0 left promiscuous mode
[  296.686466][   T51] device hsr_slave_1 left promiscuous mode
[  296.702862][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.710297][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.729002][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.740114][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.756070][   T51] device bridge_slave_1 left promiscuous mode
[  296.767681][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.798781][   T51] device bridge_slave_0 left promiscuous mode
[  296.815864][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.915584][   T51] device veth1_macvtap left promiscuous mode
[  296.921798][   T51] device veth0_macvtap left promiscuous mode
[  296.929210][   T51] device veth1_vlan left promiscuous mode
[  296.935893][   T51] device veth0_vlan left promiscuous mode
[  296.945527][   T51] device veth1_macvtap left promiscuous mode
[  296.951656][   T51] device veth0_macvtap left promiscuous mode
[  296.958341][   T51] device veth1_vlan left promiscuous mode
[  296.964340][   T51] device veth0_vlan left promiscuous mode
[  297.016005][ T7379] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  297.022274][ T3554] Bluetooth: hci1: command tx timeout
[  297.171475][ T7381] loop4: detected capacity change from 0 to 128
[  297.243400][ T7381] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  297.264878][ T7381] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  297.519272][ T7388] loop4: detected capacity change from 0 to 512
[  297.594409][ T7388] EXT4-fs error (device loop4): __ext4_fill_super:5399: inode #2: comm syz.4.994: iget: special inode unallocated
[  297.607389][ T7388] EXT4-fs (loop4): get root inode failed
[  297.631296][ T7388] EXT4-fs (loop4): mount failed
[  297.807502][   T51] team0 (unregistering): Port device team_slave_1 removed
[  297.868902][   T51] team0 (unregistering): Port device team_slave_0 removed
[  297.906243][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  298.375489][ T3554] Bluetooth: hci2: command tx timeout
[  298.640982][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.027190][   T51] bond0 (unregistering): Released all slaves
[  299.103498][ T3554] Bluetooth: hci1: command tx timeout
[  299.347678][   T51] team0 (unregistering): Port device team_slave_1 removed
[  299.381716][   T51] team0 (unregistering): Port device team_slave_0 removed
[  299.415206][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.451143][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.798922][   T51] bond0 (unregistering): Released all slaves
[  300.127588][ T7330] chnl_net:caif_netlink_parms(): no params data found
[  300.492211][    T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  300.593961][ T7330] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.613389][ T7330] bridge0: port 1(bridge_slave_0) entered disabled state
[  300.644011][ T7330] device bridge_slave_0 entered promiscuous mode
[  300.718513][ T7330] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.728277][ T7330] bridge0: port 2(bridge_slave_1) entered disabled state
[  300.741862][ T7330] device bridge_slave_1 entered promiscuous mode
[  300.749680][    T7] usb 1-1: Using ep0 maxpacket: 8
[  300.795669][  T154] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  301.005406][ T7330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.017102][ T7330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.092283][    T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  301.110238][    T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.140963][    T7] usb 1-1: Product: syz
[  301.162324][  T154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  301.162883][    T7] usb 1-1: Manufacturer: syz
[  301.180925][  T154] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  301.192426][ T3554] Bluetooth: hci1: command tx timeout
[  301.202867][    T7] usb 1-1: SerialNumber: syz
[  301.210900][    T7] usb 1-1: config 0 descriptor??
[  301.211119][ T7330] team0: Port device team_slave_0 added
[  301.244377][ T7330] team0: Port device team_slave_1 added
[  301.352502][  T154] usb 2-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=b5.3b
[  301.361761][  T154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.386018][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.389683][  T154] usb 2-1: Product: syz
[  301.402232][  T154] usb 2-1: Manufacturer: syz
[  301.403549][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.406841][  T154] usb 2-1: SerialNumber: syz
[  301.476573][    T7] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  301.494160][  T154] usb 2-1: config 0 descriptor??
[  301.511052][ T7330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.548036][ T7330] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.552922][  T154] pn533_usb 2-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  301.566485][ T7330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.638484][ T7330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.692398][ T7229] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  301.829599][ T7229] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  301.842597][  T154] usb 2-1: USB disconnect, device number 11
[  301.880932][ T7229] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  301.925372][ T7229] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  301.959165][ T7330] device hsr_slave_0 entered promiscuous mode
[  301.968141][ T7330] device hsr_slave_1 entered promiscuous mode
[  301.981623][ T7330] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  301.992880][ T7330] Cannot create hsr debugfs directory
[  302.198268][ T7229] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.253055][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  302.267887][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  302.280272][ T7229] 8021q: adding VLAN 0 to HW filter on device team0
[  302.299209][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  302.328049][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  302.355163][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.362385][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.475027][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  302.487030][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  302.513994][ T7448] delete_channel: no stack
[  302.516940][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  302.547430][ T3595] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.554622][ T3595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.555824][   T26] audit: type=1326 audit(1721904157.523:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7446 comm="syz.4.1005" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa832575f19 code=0x0
[  302.594696][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  302.616463][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  302.677948][ T7330] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.734361][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  302.754803][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  302.781709][ T7229] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  302.835712][ T7229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.911211][ T7330] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.933406][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  302.941325][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  302.974271][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  302.983027][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  302.991549][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  303.000635][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  303.015872][ T4986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  303.086071][ T7330] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.129954][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  303.206067][ T7330] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  303.263325][ T3554] Bluetooth: hci1: command tx timeout
[  303.472820][    T7] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  303.488729][    T7] usb 1-1: USB disconnect, device number 11
[  303.548710][ T7229] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.600007][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  303.612457][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  303.668109][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  303.693901][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  303.723474][ T7330] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  303.777005][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  303.793413][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  303.812032][ T7330] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  303.831471][ T7330] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  303.852835][ T7229] device veth0_vlan entered promiscuous mode
[  303.863292][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  303.877753][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  303.904833][ T7330] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  303.927367][ T7229] device veth1_vlan entered promiscuous mode
[  304.199197][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  304.208307][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  304.357307][ T7491] overlayfs: failed to get inode (-116)
[  304.364397][ T7491] overlayfs: failed to get inode (-116)
[  304.370829][ T7491] overlayfs: failed to get inode (-116)
[  304.377555][ T7491] overlayfs: failed to get inode (-116)
[  304.915647][ T7229] device veth0_macvtap entered promiscuous mode
[  304.992490][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  305.001138][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  305.046041][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  305.108413][ T7229] device veth1_macvtap entered promiscuous mode
[  305.314550][ T7501] loop1: detected capacity change from 0 to 1024
[  305.321756][ T7501] EXT4-fs: Ignoring removed orlov option
[  305.380329][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  305.389109][ T7474] loop4: detected capacity change from 0 to 40427
[  305.397482][ T7474] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  305.406336][ T7474] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  305.420764][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.435207][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.447009][ T7501] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  305.456820][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.468271][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.478907][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.491901][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.524277][ T7474] F2FS-fs (loop4): Found nat_bits in checkpoint
[  305.531347][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.588172][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.603179][ T7474] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  305.610242][ T7474] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  305.630109][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.707734][ T7330] 8021q: adding VLAN 0 to HW filter on device bond0
[  305.780378][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  305.798214][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  305.827273][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.848221][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.919357][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.967572][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.972359][   T26] audit: type=1800 audit(1721904160.933:1023): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1010" name="bus" dev="loop4" ino=10 res=0 errno=0
[  305.986787][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.050679][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.053386][   T26] audit: type=1800 audit(1721904160.983:1024): pid=7515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1010" name="bus" dev="loop4" ino=10 res=0 errno=0
[  306.067184][ T7229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.108206][ T7523] syz.4.1010: attempt to access beyond end of device
[  306.108206][ T7523] loop4: rw=2049, sector=77824, nr_sectors = 704 limit=40427
[  306.148159][ T7229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.171334][ T7229] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.173910][ T6905] EXT4-fs (loop1): unmounting filesystem.
[  306.226265][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  306.253363][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  306.278976][ T7515] syz.4.1010: attempt to access beyond end of device
[  306.278976][ T7515] loop4: rw=2049, sector=78528, nr_sectors = 248 limit=40427
[  306.308473][ T7229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.332284][ T7229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.352163][ T7229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.372240][ T7229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.408529][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  306.424943][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  306.538879][ T7330] 8021q: adding VLAN 0 to HW filter on device team0
[  306.612222][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  306.623004][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  306.631457][ T3591] bridge0: port 1(bridge_slave_0) entered blocking state
[  306.638609][ T3591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  306.686664][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  306.703749][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  306.728914][ T3591] bridge0: port 2(bridge_slave_1) entered blocking state
[  306.736062][ T3591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  306.856226][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  306.865827][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  306.945576][ T4060] kworker/u4:13: attempt to access beyond end of device
[  306.945576][ T4060] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  306.981088][ T4060] kworker/u4:13: attempt to access beyond end of device
[  306.981088][ T4060] loop4: rw=1, sector=77832, nr_sectors = 8 limit=40427
[  307.011978][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  307.024668][ T6659] syz-executor: attempt to access beyond end of device
[  307.024668][ T6659] loop4: rw=2051, sector=77824, nr_sectors = 8 limit=40427
[  307.044006][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  307.062690][ T6659] F2FS-fs (loop4): Issue discard(9728, 9728, 1) failed, ret: -5
[  307.077968][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  307.147064][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  307.167408][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  307.200047][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  307.211926][ T7531] loop0: detected capacity change from 0 to 32768
[  307.226684][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  307.238994][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  307.261363][ T7531] XFS: ikeep mount option is deprecated.
[  307.283210][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  307.297593][ T3595] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  307.376979][ T7531] XFS (loop0): Mounting V5 Filesystem
[  307.434619][ T4060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.443134][ T4060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.473515][ T7531] XFS (loop0): Ending clean mount
[  307.506923][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  307.518964][ T7531] XFS (loop0): Quotacheck needed: Please wait.
[  307.613468][ T7531] XFS (loop0): Quotacheck: Done.
[  307.718400][ T7556] loop4: detected capacity change from 0 to 64
[  307.733522][ T3562] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  307.748441][ T3832] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.764059][ T3562] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  307.773355][ T3562] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  307.782487][ T3832] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.807733][ T6729] XFS (loop0): Unmounting Filesystem
[  307.825503][ T3562] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  307.843054][ T3562] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  307.851391][ T3562] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  307.924686][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  308.139797][ T7565] loop4: detected capacity change from 0 to 512
[  308.233636][ T7565] EXT4-fs: Ignoring removed oldalloc option
[  308.287041][ T7565] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  308.356269][ T7568] loop3: detected capacity change from 0 to 1024
[  308.369950][ T7565] EXT4-fs (loop4): 1 truncate cleaned up
[  308.382458][ T7568] EXT4-fs: Ignoring removed orlov option
[  308.385007][ T7565] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  308.444115][ T7568] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  308.601376][ T7330] 8021q: adding VLAN 0 to HW filter on device batadv0
[  308.635982][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  308.653398][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  308.678746][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  308.685356][   T51] device hsr_slave_0 left promiscuous mode
[  308.706233][   T51] device hsr_slave_1 left promiscuous mode
[  308.743060][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  308.763209][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  308.783061][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  308.790760][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  308.811597][   T51] device bridge_slave_1 left promiscuous mode
[  308.818209][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  308.835599][   T51] device bridge_slave_0 left promiscuous mode
[  308.855280][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.888699][   T51] device veth1_macvtap left promiscuous mode
[  308.894854][   T51] device veth0_macvtap left promiscuous mode
[  308.902688][   T51] device veth1_vlan left promiscuous mode
[  308.908516][   T51] device veth0_vlan left promiscuous mode
[  308.954484][ T7229] EXT4-fs (loop3): unmounting filesystem.
[  309.600460][   T51] team0 (unregistering): Port device team_slave_1 removed
[  309.655689][   T51] team0 (unregistering): Port device team_slave_0 removed
[  309.724376][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  309.785514][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  309.903201][ T3554] Bluetooth: hci0: command tx timeout
[  310.319412][ T7592] loop4: detected capacity change from 0 to 4096
[  310.330882][ T7592] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  310.358300][ T7592] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  310.451627][   T51] bond0 (unregistering): Released all slaves
[  310.508318][ T3800] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22.
[  310.517552][ T6659] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  310.705572][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  310.738983][ T4985] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  310.827343][ T7552] chnl_net:caif_netlink_parms(): no params data found
[  310.862288][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  310.870587][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  310.900470][ T7604] loop4: detected capacity change from 0 to 512
[  310.901992][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  310.923052][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  310.947269][ T7330] device veth0_vlan entered promiscuous mode
[  311.042641][ T7604] EXT4-fs: Ignoring removed oldalloc option
[  311.106132][ T7604] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  311.181929][ T7604] EXT4-fs (loop4): 1 truncate cleaned up
[  311.202256][ T7604] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  311.240798][ T7330] device veth1_vlan entered promiscuous mode
[  311.328238][ T7612] No buffer was provided with the request
[  311.755635][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  311.806848][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  311.989137][ T3554] Bluetooth: hci0: command tx timeout
[  312.010036][ T7330] device veth0_macvtap entered promiscuous mode
[  312.034579][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  312.098920][ T7552] bridge0: port 1(bridge_slave_0) entered blocking state
[  312.115409][ T7552] bridge0: port 1(bridge_slave_0) entered disabled state
[  312.159795][ T7552] device bridge_slave_0 entered promiscuous mode
[  312.194162][ T3554] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  312.202739][ T3554] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  312.223632][ T3554] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  312.234862][ T3554] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  312.244600][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  312.252970][ T3554] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  312.261320][ T3554] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  312.292181][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  312.303148][ T7330] device veth1_macvtap entered promiscuous mode
[  312.339903][ T7552] bridge0: port 2(bridge_slave_1) entered blocking state
[  312.352365][ T7552] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.360451][ T7552] device bridge_slave_1 entered promiscuous mode
[  312.406680][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  312.422796][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  312.436009][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.458325][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.478903][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.500884][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.520762][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.574134][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.592167][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  312.604154][ T7615] loop0: detected capacity change from 0 to 32768
[  312.622446][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.634928][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_0
[  312.647901][ T7615] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1043 (7615)
[  312.686226][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  312.706163][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  312.724775][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.738309][ T7615] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  312.752826][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.769713][ T7615] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  312.778725][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.778746][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.778763][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.778776][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.778792][ T7330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  312.832379][ T7615] BTRFS info (device loop0): using free space tree
[  312.942399][ T7330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  312.991557][ T7330] batman_adv: batadv0: Interface activated: batadv_slave_1
[  313.023509][ T7615] BTRFS info (device loop0): enabling ssd optimizations
[  313.062779][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  313.071831][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  313.088022][ T7330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  313.113736][ T7330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  313.139906][ T7330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  313.169956][ T7330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  313.200846][ T7552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  313.270192][ T7552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  313.289124][ T6729] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  313.598614][ T7552] team0: Port device team_slave_0 added
[  313.657534][ T7552] team0: Port device team_slave_1 added
[  313.700755][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  313.742561][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  313.836006][ T7653] loop0: detected capacity change from 0 to 512
[  313.855538][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  313.900185][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_0
[  313.912056][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  313.938780][ T7552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  313.953192][ T7653] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.1045: iget: special inode unallocated
[  313.992733][ T7653] EXT4-fs (loop0): get root inode failed
[  313.998396][ T7653] EXT4-fs (loop0): mount failed
[  314.002222][ T7552] batman_adv: batadv0: Adding interface: batadv_slave_1
[  314.010222][ T7552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  314.038457][ T7552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  314.054065][ T3956] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  314.072218][ T3549] Bluetooth: hci0: command tx timeout
[  314.082151][ T3956] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  314.296879][ T7552] device hsr_slave_0 entered promiscuous mode
[  314.314655][ T7662] loop4: detected capacity change from 0 to 256
[  314.322415][ T3549] Bluetooth: hci2: command tx timeout
[  314.351263][ T7552] device hsr_slave_1 entered promiscuous mode
[  314.392074][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  314.408509][ T7618] chnl_net:caif_netlink_parms(): no params data found
[  314.415541][ T7662] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  315.404453][ T7669] loop4: detected capacity change from 0 to 256
[  315.441369][ T7669] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  315.641033][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state
[  315.664623][ T7618] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.672200][   T41] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  315.688802][ T7618] device bridge_slave_0 entered promiscuous mode
[  315.718058][ T7618] bridge0: port 2(bridge_slave_1) entered blocking state
[  315.736559][ T7618] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.763121][ T7618] device bridge_slave_1 entered promiscuous mode
[  315.852449][ T7552] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.888375][ T7618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  315.911388][ T7618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.981409][ T7552] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.032353][   T41] usb 1-1: New USB device found, idVendor=093a, idProduct=2626, bcdDevice= d.b4
[  316.041425][   T41] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.081504][   T41] usb 1-1: config 0 descriptor??
[  316.137021][   T41] gspca_main: gspca_pac7302-2.14.0 probing 093a:2626
[  316.143912][ T3549] Bluetooth: hci0: command tx timeout
[  316.171815][ T7552] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.240886][ T7618] team0: Port device team_slave_0 added
[  316.265730][ T7618] team0: Port device team_slave_1 added
[  316.320370][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.353287][ T7552] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.383086][ T3554] Bluetooth: hci2: command tx timeout
[  316.435237][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.465963][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_0
[  316.476517][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.502802][ T7618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  316.558773][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.588208][ T7618] batman_adv: batadv0: Adding interface: batadv_slave_1
[  316.595582][ T7618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  316.676538][ T7618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  316.732959][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  316.772295][   T41] gspca_pac7302: reg_w() failed i: 78 v: 00 error -71
[  316.781867][   T41] gspca_pac7302: probe of 1-1:0.0 failed with error -71
[  316.806845][   T41] usb 1-1: USB disconnect, device number 12
[  316.893959][ T7552] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  316.919050][ T7552] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  316.969702][ T7552] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  317.007099][ T7552] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  317.026034][ T1250] ieee802154 phy0 wpan0: encryption failed: -22
[  317.032406][ T1250] ieee802154 phy1 wpan1: encryption failed: -22
[  317.070517][ T7618] device hsr_slave_0 entered promiscuous mode
[  317.111024][ T7618] device hsr_slave_1 entered promiscuous mode
[  317.125702][ T7618] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.140419][ T7618] Cannot create hsr debugfs directory
[  317.232923][ T3549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  317.243605][ T3549] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  317.260471][ T3549] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  317.274479][ T3549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  317.287921][ T3549] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  317.302710][ T3549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  317.566229][ T7684] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1052'.
[  317.757755][   T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  317.996712][   T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.165479][ T7552] 8021q: adding VLAN 0 to HW filter on device bond0
[  318.240635][ T7700] loop4: detected capacity change from 0 to 8192
[  318.256553][   T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.290288][ T7700] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  318.328589][ T7552] 8021q: adding VLAN 0 to HW filter on device team0
[  318.340717][ T7700] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  318.343338][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  318.363344][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  318.401467][ T7700] REISERFS (device loop4): using ordered data mode
[  318.410036][ T7700] reiserfs: using flush barriers
[  318.426987][ T7700] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  318.443889][   T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  318.462445][ T3549] Bluetooth: hci2: command tx timeout
[  318.467880][ T7700] REISERFS (device loop4): checking transaction log (loop4)
[  318.484238][ T7700] REISERFS (device loop4): Using r5 hash to sort names
[  318.491521][ T7700] REISERFS (device loop4): using 3.5.x disk format
[  318.514676][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  318.552800][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  318.561331][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.568476][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  318.578172][ T7700] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  318.597346][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  318.610315][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  318.631485][ T7700] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2
[  318.645235][ T7697] loop0: detected capacity change from 0 to 40427
[  318.655493][ T3596] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.662621][ T3596] bridge0: port 2(bridge_slave_1) entered forwarding state
[  318.672372][ T7700] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  318.687340][ T7697] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  318.693395][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  318.708299][ T7700] REISERFS (device loop4): Remounting filesystem read-only
[  318.720734][ T7697] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  318.724902][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  318.730420][ T7700] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  318.760554][ T7697] F2FS-fs (loop0): Found nat_bits in checkpoint
[  318.761343][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  318.803444][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  318.812389][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  318.821568][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  318.891839][ T7697] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  318.912291][ T7697] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  318.951448][ T7717] loop4: detected capacity change from 0 to 512
[  318.951732][ T7552] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  318.979150][ T7552] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  318.997643][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  319.007039][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  319.015355][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  319.024461][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  319.030616][ T7717] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1057: casefold flag without casefold feature
[  319.033531][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  319.066643][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  319.078279][ T7717] EXT4-fs (loop4): 1 truncate cleaned up
[  319.088690][ T7717] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  319.123842][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  319.182578][   T26] audit: type=1800 audit(1721904174.143:1025): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1057" name="file0" dev="loop4" ino=18 res=0 errno=0
[  319.269505][ T7678] chnl_net:caif_netlink_parms(): no params data found
[  319.277235][   T26] audit: type=1804 audit(1721904174.143:1026): pid=7717 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1057" name="/newroot/60/file0/file0" dev="loop4" ino=18 res=1 errno=0
[  319.342545][ T3554] Bluetooth: hci1: command tx timeout
[  319.531830][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  319.889571][ T7678] bridge0: port 1(bridge_slave_0) entered blocking state
[  319.911148][ T7678] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.937826][ T7678] device bridge_slave_0 entered promiscuous mode
[  319.984471][ T7678] bridge0: port 2(bridge_slave_1) entered blocking state
[  319.991685][ T7678] bridge0: port 2(bridge_slave_1) entered disabled state
[  320.037457][ T7678] device bridge_slave_1 entered promiscuous mode
[  320.058955][ T7740] loop0: detected capacity change from 0 to 512
[  320.125660][ T7740] EXT4-fs error (device loop0): __ext4_fill_super:5399: inode #2: comm syz.0.1058: iget: special inode unallocated
[  320.189584][ T7740] EXT4-fs (loop0): get root inode failed
[  320.262209][ T7740] EXT4-fs (loop0): mount failed
[  320.271142][ T7749] loop4: detected capacity change from 0 to 256
[  320.284905][ T7749] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  320.552317][ T3554] Bluetooth: hci2: command tx timeout
[  320.558933][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  320.578415][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  321.422282][ T3549] Bluetooth: hci1: command tx timeout
[  321.432945][ T7552] 8021q: adding VLAN 0 to HW filter on device batadv0
[  321.611149][ T7678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  321.804287][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  321.833432][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  321.889645][ T7678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  322.202858][ T7552] device veth0_vlan entered promiscuous mode
[  322.234164][ T7678] team0: Port device team_slave_0 added
[  322.268512][ T7678] team0: Port device team_slave_1 added
[  322.296754][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  322.316718][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  322.320045][ T7760] loop0: detected capacity change from 0 to 40427
[  322.351647][ T7760] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  322.355644][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  322.386671][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  322.395926][ T7760] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  322.482018][ T7760] F2FS-fs (loop0): Found nat_bits in checkpoint
[  322.549499][ T7552] device veth1_vlan entered promiscuous mode
[  322.693943][ T7760] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  322.710731][ T7760] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  322.874044][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  322.988864][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.000251][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.055662][   T26] audit: type=1800 audit(1721904178.023:1027): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1061" name="bus" dev="loop0" ino=10 res=0 errno=0
[  323.070486][ T7678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.098921][   T26] audit: type=1800 audit(1721904178.053:1028): pid=7775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1061" name="bus" dev="loop0" ino=10 res=0 errno=0
[  323.158328][ T7775] syz.0.1061: attempt to access beyond end of device
[  323.158328][ T7775] loop0: rw=2049, sector=77824, nr_sectors = 952 limit=40427
[  323.275620][ T7678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.292492][ T7678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.325592][ T7678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.346536][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  323.362822][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  323.375360][ T7552] device veth0_macvtap entered promiscuous mode
[  323.388073][ T7618] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  323.513877][ T3549] Bluetooth: hci1: command tx timeout
[  323.541057][ T7552] device veth1_macvtap entered promiscuous mode
[  323.584623][ T7618] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  323.616803][ T7618] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  323.660057][ T3956] kworker/u4:12: attempt to access beyond end of device
[  323.660057][ T3956] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  323.673243][ T7618] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  323.761107][ T6729] syz-executor: attempt to access beyond end of device
[  323.761107][ T6729] loop0: rw=2051, sector=77824, nr_sectors = 8 limit=40427
[  323.799485][ T6729] F2FS-fs (loop0): Issue discard(9728, 9728, 1) failed, ret: -5
[  323.901557][ T7678] device hsr_slave_0 entered promiscuous mode
[  323.949866][ T7678] device hsr_slave_1 entered promiscuous mode
[  323.988333][ T7678] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  324.022356][ T7678] Cannot create hsr debugfs directory
[  324.032869][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  324.050632][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  324.110395][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.145402][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.180975][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.212351][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.231569][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.259821][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.279324][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.291368][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.311065][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  324.321928][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.363626][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_0
[  324.395381][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  324.419644][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  324.614614][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.635641][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.663237][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.682201][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.711096][ T7790] loop4: detected capacity change from 0 to 65536
[  324.732354][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.769568][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.775751][ T7790] XFS (loop4): Mounting V5 Filesystem
[  324.781374][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.795814][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.806578][ T7552] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  324.817519][ T7552] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  324.829219][ T7552] batman_adv: batadv0: Interface activated: batadv_slave_1
[  324.849656][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  324.860968][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  324.900478][ T7790] XFS (loop4): Ending clean mount
[  324.911013][ T7552] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  324.962221][ T7552] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  324.970950][ T7552] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  324.980207][ T7552] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.088996][ T7618] 8021q: adding VLAN 0 to HW filter on device bond0
[  325.226266][   T41] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  325.259956][ T6659] XFS (loop4): Unmounting Filesystem
[  325.353389][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  325.361167][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  325.390611][ T7618] 8021q: adding VLAN 0 to HW filter on device team0
[  325.436761][ T4540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  325.462218][ T4540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  325.483170][   T41] usb 1-1: Using ep0 maxpacket: 8
[  325.583522][ T3549] Bluetooth: hci1: command tx timeout
[  325.602520][   T41] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  325.643456][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  325.651355][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  325.659732][   T41] usb 1-1: language id specifier not provided by device, defaulting to English
[  325.670333][ T7647] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  325.679016][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.686172][ T7647] bridge0: port 1(bridge_slave_0) entered forwarding state
[  325.718783][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  325.735380][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  325.745682][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  325.754402][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.757837][ T7824] loop4: detected capacity change from 0 to 512
[  325.761489][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  325.772390][   T41] usb 1-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.40
[  325.776233][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  325.792017][   T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.800355][   T41] usb 1-1: Product: syz
[  325.805943][ T7824] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1071: casefold flag without casefold feature
[  325.831550][   T41] usb 1-1: Manufacturer: 𡚍
[  325.834589][ T7824] EXT4-fs (loop4): 1 truncate cleaned up
[  325.841933][ T7824] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  325.858123][   T41] usb 1-1: SerialNumber: syz
[  325.895399][   T26] audit: type=1800 audit(1721904180.853:1029): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1071" name="file0" dev="loop4" ino=18 res=0 errno=0
[  325.916738][   T26] audit: type=1804 audit(1721904180.853:1030): pid=7824 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1071" name="/newroot/67/file0/file0" dev="loop4" ino=18 res=1 errno=0
[  325.918365][   T41] usbhid 1-1:1.0: couldn't find an input interrupt endpoint
[  325.938361][    C0] vkms_vblank_simulate: vblank timer overrun
[  326.017503][ T4062] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.027792][ T4062] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.069574][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  326.142065][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  326.150256][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  326.237215][ T7647] usb 1-1: USB disconnect, device number 13
[  326.255956][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  326.267752][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  326.300685][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  326.348813][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  326.362700][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  326.371824][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  326.395217][ T7618] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.421671][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  326.430232][ T7831] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1073'.
[  326.472477][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  326.483004][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  326.497421][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  326.573117][   T51] device hsr_slave_0 left promiscuous mode
[  326.590899][   T51] device hsr_slave_1 left promiscuous mode
[  326.600679][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.617916][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.637483][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.651581][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.661792][   T51] device bridge_slave_1 left promiscuous mode
[  326.668651][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.677653][   T51] device bridge_slave_0 left promiscuous mode
[  326.684417][ T4379] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  326.700808][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.725642][   T51] device hsr_slave_0 left promiscuous mode
[  326.740066][   T51] device hsr_slave_1 left promiscuous mode
[  326.748013][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.764691][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.778877][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.811910][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.830126][   T51] device bridge_slave_1 left promiscuous mode
[  326.839655][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.861092][   T51] device bridge_slave_0 left promiscuous mode
[  326.872282][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.910802][   T51] device hsr_slave_0 left promiscuous mode
[  326.929787][   T51] device hsr_slave_1 left promiscuous mode
[  326.935990][ T4379] usb 2-1: Using ep0 maxpacket: 8
[  326.951194][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.969075][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.979931][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  327.001020][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  327.010963][   T51] device bridge_slave_1 left promiscuous mode
[  327.017957][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  327.039956][   T51] device bridge_slave_0 left promiscuous mode
[  327.056187][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  327.212286][ T4379] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  327.228331][ T4379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.237259][ T4379] usb 2-1: Product: syz
[  327.241451][ T4379] usb 2-1: Manufacturer: syz
[  327.246133][ T4379] usb 2-1: SerialNumber: syz
[  327.252185][   T51] device veth1_macvtap left promiscuous mode
[  327.258233][   T51] device veth0_macvtap left promiscuous mode
[  327.265829][   T51] device veth1_vlan left promiscuous mode
[  327.271729][   T51] device veth0_vlan left promiscuous mode
[  327.279990][   T51] device veth1_macvtap left promiscuous mode
[  327.286147][   T51] device veth0_macvtap left promiscuous mode
[  327.292403][   T51] device veth1_vlan left promiscuous mode
[  327.300147][   T51] device veth0_vlan left promiscuous mode
[  327.309495][   T51] device veth1_macvtap left promiscuous mode
[  327.315622][   T51] device veth0_macvtap left promiscuous mode
[  327.321802][   T51] device veth1_vlan left promiscuous mode
[  327.328825][ T4379] usb 2-1: config 0 descriptor??
[  327.344776][   T51] device veth0_vlan left promiscuous mode
[  327.682694][ T4379] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  328.910893][   T51] team0 (unregistering): Port device team_slave_1 removed
[  328.959009][   T51] team0 (unregistering): Port device team_slave_0 removed
[  328.990160][ T7864] loop0: detected capacity change from 0 to 65536
[  329.026693][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.056940][ T7864] XFS (loop0): Mounting V5 Filesystem
[  329.068915][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  329.130628][ T7864] XFS (loop0): Ending clean mount
[  329.266454][ T6729] XFS (loop0): Unmounting Filesystem
[  329.615037][ T7874] loop0: detected capacity change from 0 to 512
[  329.635851][ T7874] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1081: casefold flag without casefold feature
[  329.652605][ T4379] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  329.660308][ T7874] EXT4-fs (loop0): 1 truncate cleaned up
[  329.668623][ T7874] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  329.679623][ T4379] usb 2-1: USB disconnect, device number 12
[  329.722479][   T26] audit: type=1800 audit(1721904184.683:1031): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1081" name="file0" dev="loop0" ino=18 res=0 errno=0
[  329.751864][   T26] audit: type=1804 audit(1721904184.683:1032): pid=7874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1081" name="/newroot/71/file0/file0" dev="loop0" ino=18 res=1 errno=0
[  329.909901][ T6729] EXT4-fs (loop0): unmounting filesystem.
[  329.961320][   T51] bond0 (unregistering): Released all slaves
[  330.422906][ T7887] loop1: detected capacity change from 0 to 512
[  330.447865][ T7887] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  330.618806][   T51] team0 (unregistering): Port device team_slave_1 removed
[  330.661067][ T7887] EXT4-fs (loop1): 1 truncate cleaned up
[  330.669030][ T7887] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  330.749631][   T51] team0 (unregistering): Port device team_slave_0 removed
[  330.878865][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.936435][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  331.524759][   T51] bond0 (unregistering): Released all slaves
[  331.921864][ T7552] EXT4-fs (loop1): unmounting filesystem.
[  332.306552][   T51] team0 (unregistering): Port device team_slave_1 removed
[  332.445663][   T51] team0 (unregistering): Port device team_slave_0 removed
[  332.751061][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  332.915976][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  333.174359][ T7902] loop1: detected capacity change from 0 to 256
[  333.186621][ T7902] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  333.707612][   T51] bond0 (unregistering): Released all slaves
[  334.036776][ T7907] loop4: detected capacity change from 0 to 512
[  334.120974][ T7907] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.1092: casefold flag without casefold feature
[  334.172559][ T7907] EXT4-fs (loop4): 1 truncate cleaned up
[  334.192515][ T7907] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  334.256242][ T7678] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  334.281746][   T26] audit: type=1800 audit(1721904189.243:1033): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1092" name="file0" dev="loop4" ino=18 res=0 errno=0
[  334.359198][ T7678] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  334.427077][   T26] audit: type=1804 audit(1721904189.243:1034): pid=7907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1092" name="/newroot/70/file0/file0" dev="loop4" ino=18 res=1 errno=0
[  334.453319][ T7678] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  334.514931][ T7678] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  334.732069][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  334.958574][ T7678] 8021q: adding VLAN 0 to HW filter on device bond0
[  334.980558][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  334.989799][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  335.021245][ T7618] 8021q: adding VLAN 0 to HW filter on device batadv0
[  335.124851][ T4271] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  335.881429][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  335.897428][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  335.916130][ T7678] 8021q: adding VLAN 0 to HW filter on device team0
[  335.947088][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  335.957909][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  335.982884][ T7648] bridge0: port 1(bridge_slave_0) entered blocking state
[  335.990057][ T7648] bridge0: port 1(bridge_slave_0) entered forwarding state
[  336.003919][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  336.049485][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  336.063554][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  336.072250][ T4271] usb 1-1: Using ep0 maxpacket: 8
[  336.086877][ T7932] loop4: detected capacity change from 0 to 512
[  336.101735][ T7648] bridge0: port 2(bridge_slave_1) entered blocking state
[  336.108905][ T7648] bridge0: port 2(bridge_slave_1) entered forwarding state
[  336.143689][ T7932] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  336.157557][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  336.194762][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  336.235640][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  336.276624][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  336.298044][ T7932] EXT4-fs (loop4): 1 truncate cleaned up
[  336.306775][ T7932] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  336.350137][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  336.352430][ T4271] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  336.367488][ T4271] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.390725][ T4271] usb 1-1: Product: syz
[  336.408416][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  336.416534][ T4271] usb 1-1: Manufacturer: syz
[  336.444479][ T7678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  336.452135][ T4271] usb 1-1: SerialNumber: syz
[  336.499813][ T7678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  336.499920][ T4271] usb 1-1: config 0 descriptor??
[  336.542259][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  336.550331][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  336.605548][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  336.757077][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  336.769321][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  337.532533][ T4271] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  337.545235][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  337.575935][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  337.611082][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  337.661664][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  337.698229][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  337.771757][ T7618] device veth0_vlan entered promiscuous mode
[  337.792309][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  337.799997][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  337.810661][ T7954] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1102'.
[  337.897086][ T7618] device veth1_vlan entered promiscuous mode
[  338.040034][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  338.071725][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  338.112611][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  338.153939][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  338.195608][ T7618] device veth0_macvtap entered promiscuous mode
[  338.233907][ T7618] device veth1_macvtap entered promiscuous mode
[  338.347280][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.384043][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.432471][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.490994][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.537968][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  338.577893][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.617772][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_0
[  338.693685][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  338.716191][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  338.766064][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  338.823073][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  338.833765][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.874604][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.895436][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.921639][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.940706][ T7618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  338.960902][ T7981] loop1: detected capacity change from 0 to 256
[  338.963202][ T7618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  338.994135][ T7618] batman_adv: batadv0: Interface activated: batadv_slave_1
[  339.044548][ T7678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  339.055424][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  339.071439][ T7981] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  339.099023][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  339.109694][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  339.153505][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  339.161063][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  339.202770][ T7618] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  339.211511][ T7618] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  339.236269][ T7618] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  339.245819][ T7618] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  340.120501][ T7991] loop4: detected capacity change from 0 to 64
[  340.144712][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  340.152457][ T4271] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71
[  340.168113][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  340.179019][ T4271] usb 1-1: USB disconnect, device number 14
[  340.319061][ T7678] device veth0_vlan entered promiscuous mode
[  340.358048][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  340.367159][   T26] audit: type=1804 audit(1721904195.333:1035): pid=7991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1109" name="/newroot/74/file2/bus" dev="loop4" ino=3 res=1 errno=0
[  340.379633][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  340.464946][   T26] audit: type=1804 audit(1721904195.423:1036): pid=7995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1109" name="/newroot/74/file2/bus" dev="loop4" ino=3 res=1 errno=0
[  340.486013][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  340.489474][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  340.554739][   T26] audit: type=1800 audit(1721904195.493:1037): pid=7991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1109" name="bus" dev="loop4" ino=3 res=0 errno=0
[  340.719699][ T7678] device veth1_vlan entered promiscuous mode
[  341.498564][ T7648] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  341.545775][ T4062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.561929][ T4062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.606439][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  341.621873][ T7678] device veth0_macvtap entered promiscuous mode
[  341.651441][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  341.670538][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  341.700521][ T4540] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  341.713637][ T7678] device veth1_macvtap entered promiscuous mode
[  341.733534][ T4540] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  341.745115][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  341.766611][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  341.797410][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  341.859649][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  341.940427][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.008810][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.057989][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.110344][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.134519][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.146465][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.166674][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.197400][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  342.223574][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  342.258576][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  342.292431][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.328679][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.390762][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.437080][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.502327][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.564036][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.636801][ T7678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  342.675999][ T7678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.745914][ T7678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  342.788932][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  342.806352][ T4085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  342.845854][ T7678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  342.870985][ T7678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  342.926628][ T7678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  342.962960][ T7678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.026921][ T8033] loop4: detected capacity change from 0 to 512
[  343.061400][ T8033] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  343.195425][ T3832] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.232365][ T4060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.258929][ T3832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.281429][ T4060] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  344.143925][ T8033] EXT4-fs (loop4): 1 truncate cleaned up
[  344.166281][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  344.177374][ T8033] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  344.203684][ T7649] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  344.512149][ T4379] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  344.565711][ T8052] loop1: detected capacity change from 0 to 512
[  344.576655][ T8010] loop0: detected capacity change from 0 to 40427
[  344.608676][ T8010] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  344.633389][ T8052] EXT4-fs error (device loop1): __ext4_fill_super:5399: inode #2: comm syz.1.1121: iget: special inode unallocated
[  344.646018][ T8010] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  344.688741][ T8052] EXT4-fs (loop1): get root inode failed
[  344.719990][ T8010] F2FS-fs (loop0): Found nat_bits in checkpoint
[  344.732607][ T8052] EXT4-fs (loop1): mount failed
[  344.752225][ T4379] usb 4-1: Using ep0 maxpacket: 8
[  345.791025][ T4379] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  345.811772][ T4379] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.894585][ T4379] usb 4-1: Product: syz
[  345.899245][ T4379] usb 4-1: Manufacturer: syz
[  345.907494][ T8070] loop1: detected capacity change from 0 to 64
[  345.936327][ T4379] usb 4-1: SerialNumber: syz
[  345.961060][ T4379] usb 4-1: config 0 descriptor??
[  345.981904][   T26] audit: type=1804 audit(1721904200.943:1038): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1122" name="/newroot/19/file2/bus" dev="loop1" ino=3 res=1 errno=0
[  346.099624][   T26] audit: type=1804 audit(1721904200.993:1039): pid=8071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1122" name="/newroot/19/file2/bus" dev="loop1" ino=3 res=1 errno=0
[  346.217911][   T26] audit: type=1800 audit(1721904201.023:1040): pid=8070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1122" name="bus" dev="loop1" ino=3 res=0 errno=0
[  346.267638][ T4379] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  346.597945][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.719734][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.786096][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  346.833856][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.909357][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.991751][ T8091] loop1: detected capacity change from 0 to 256
[  348.157000][ T8105] loop0: detected capacity change from 0 to 512
[  348.229356][ T8104] loop4: detected capacity change from 0 to 2048
[  348.323760][ T8105] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.1127: casefold flag without casefold feature
[  348.351499][ T3549] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  348.367636][ T8105] EXT4-fs (loop0): 1 truncate cleaned up
[  348.374456][ T8105] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  348.374524][ T3549] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  348.396883][ T8114] loop1: detected capacity change from 0 to 256
[  348.403338][ T3549] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  348.412029][ T8104] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  348.423035][ T3549] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  348.431673][ T3562] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  348.432037][ T8114] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  348.447702][ T3549] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  348.463123][   T26] audit: type=1800 audit(1721904203.433:1041): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1127" name="file0" dev="loop0" ino=18 res=0 errno=0
[  348.518912][   T26] audit: type=1804 audit(1721904203.433:1042): pid=8105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1127" name="/newroot/85/file0/file0" dev="loop0" ino=18 res=1 errno=0
[  348.622342][ T4379] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71
[  348.654349][ T4379] usb 4-1: USB disconnect, device number 13
[  348.718991][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  348.870633][ T6729] EXT4-fs (loop0): unmounting filesystem.
[  349.131329][ T8130] loop0: detected capacity change from 0 to 512
[  349.170620][ T8111] chnl_net:caif_netlink_parms(): no params data found
[  349.218659][ T8130] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1131: bg 0: block 5: invalid block bitmap
[  349.325736][ T8130] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  349.336015][ T8130] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1131: invalid indirect mapped block 3 (level 2)
[  349.369806][ T8130] EXT4-fs (loop0): 1 orphan inode deleted
[  349.375919][ T8130] EXT4-fs (loop0): 1 truncate cleaned up
[  349.381654][ T8130] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  349.561984][ T6729] EXT4-fs (loop0): unmounting filesystem.
[  349.579593][ T3549] Bluetooth: to_multiplier 7 < 10
[  349.879774][ T8150] block device autoloading is deprecated and will be removed.
[  349.916549][ T8138] loop3: detected capacity change from 0 to 8192
[  350.175992][ T8111] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.205411][ T8111] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.235658][ T8111] device bridge_slave_0 entered promiscuous mode
[  350.317047][   T51] device hsr_slave_0 left promiscuous mode
[  351.251353][ T3549] Bluetooth: hci1: command tx timeout
[  351.281168][ T8169] loop0: detected capacity change from 0 to 512
[  351.312245][   T51] device hsr_slave_1 left promiscuous mode
[  351.330344][ T8157] loop4: detected capacity change from 0 to 512
[  351.337826][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  351.347195][ T8169] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  351.371569][ T8169] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  351.384658][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  351.393171][ T8169] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002]
[  351.405687][ T8169] System zones: 1-12
[  351.413325][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  351.420898][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  351.440968][ T8169] EXT4-fs (loop0): 1 truncate cleaned up
[  351.451387][ T8157] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  351.466834][ T8169] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  351.477588][   T51] device bridge_slave_1 left promiscuous mode
[  351.492102][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.547661][   T51] device bridge_slave_0 left promiscuous mode
[  351.555890][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.656447][ T8175] loop3: detected capacity change from 0 to 256
[  351.662289][ T3549] Bluetooth: hci3: command tx timeout
[  351.676322][ T8157] EXT4-fs (loop4): 1 truncate cleaned up
[  351.682263][ T8157] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  351.710906][ T6729] EXT4-fs (loop0): unmounting filesystem.
[  351.750196][ T8178] loop1: detected capacity change from 0 to 512
[  351.813037][   T51] device veth1_macvtap left promiscuous mode
[  351.819116][   T51] device veth0_macvtap left promiscuous mode
[  351.835190][   T51] device veth1_vlan left promiscuous mode
[  351.851307][   T51] device veth0_vlan left promiscuous mode
[  351.983840][ T8178] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1142: casefold flag without casefold feature
[  352.773881][ T8178] EXT4-fs (loop1): 1 truncate cleaned up
[  352.784592][ T8178] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  352.878350][   T26] audit: type=1800 audit(1721904207.843:1043): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1142" name="file0" dev="loop1" ino=18 res=0 errno=0
[  352.970936][   T26] audit: type=1804 audit(1721904207.933:1044): pid=8178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1142" name="/newroot/22/file0/file0" dev="loop1" ino=18 res=1 errno=0
[  353.262171][ T3549] Bluetooth: hci1: command tx timeout
[  354.029858][ T7552] EXT4-fs (loop1): unmounting filesystem.
[  354.138450][ T8199] loop0: detected capacity change from 0 to 64
[  354.195747][   T26] audit: type=1804 audit(1721904209.163:1045): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1149" name="/newroot/93/file2/bus" dev="loop0" ino=3 res=1 errno=0
[  354.288987][   T26] audit: type=1804 audit(1721904209.233:1046): pid=8206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1149" name="/newroot/93/file2/bus" dev="loop0" ino=3 res=1 errno=0
[  354.485415][   T26] audit: type=1800 audit(1721904209.313:1047): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1149" name="bus" dev="loop0" ino=3 res=0 errno=0
[  354.639291][ T8203] loop3: detected capacity change from 0 to 8192
[  354.815647][ T5312] I/O error, dev loop3, sector 8064 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  355.790987][ T8224] loop1: detected capacity change from 0 to 256
[  355.849631][ T8224] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  355.982368][ T3554] Bluetooth: hci1: command tx timeout
[  356.138858][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  356.172305][ T4271] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  356.306686][ T8230] loop4: detected capacity change from 0 to 512
[  356.387590][ T8230] EXT4-fs error (device loop4): ext4_validate_block_bitmap:429: comm syz.4.1155: bg 0: block 5: invalid block bitmap
[  356.429478][ T8230] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  356.432246][ T4271] usb 1-1: Using ep0 maxpacket: 8
[  356.477597][ T8230] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.1155: invalid indirect mapped block 3 (level 2)
[  356.562371][ T4271] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  356.568086][ T8230] EXT4-fs (loop4): 1 orphan inode deleted
[  356.606299][ T4271] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.610003][ T8230] EXT4-fs (loop4): 1 truncate cleaned up
[  356.639517][ T4271] usb 1-1: config 0 descriptor??
[  356.648025][ T8230] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  356.668441][   T51] team0 (unregistering): Port device team_slave_1 removed
[  356.826071][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  356.833933][   T51] team0 (unregistering): Port device team_slave_0 removed
[  356.972256][ T4085] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  356.984886][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.986892][ T8238] loop4: detected capacity change from 0 to 512
[  357.026006][ T8238] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  357.037647][ T8238] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  357.067581][ T8238] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a016c018, mo2=0002]
[  357.077298][ T8238] System zones: 1-12
[  357.081779][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.093135][ T8238] EXT4-fs (loop4): 1 truncate cleaned up
[  357.098763][ T8238] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  357.203036][ T6659] EXT4-fs (loop4): unmounting filesystem.
[  357.222167][ T4085] usb 4-1: Using ep0 maxpacket: 32
[  357.346366][ T4085] usb 4-1: config index 0 descriptor too short (expected 62, got 60)
[  357.355182][ T4085] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  357.366196][ T4085] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  357.532489][ T4085] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice=30.ad
[  357.541571][ T4085] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.557982][ T4085] usb 4-1: Product: syz
[  357.570471][ T4085] usb 4-1: Manufacturer: syz
[  357.571815][ T8244] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  357.575723][ T4085] usb 4-1: SerialNumber: syz
[  357.581797][ T8244] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  357.612833][ T4085] usb 4-1: config 0 descriptor??
[  357.614501][ T8244] vhci_hcd vhci_hcd.0: Device attached
[  357.887573][ T8236] loop3: detected capacity change from 0 to 512
[  357.907198][ T7649] usb 17-1: new low-speed USB device number 2 using vhci_hcd
[  358.024022][ T8236] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  358.068372][ T3554] Bluetooth: hci1: command tx timeout
[  358.079528][ T8236] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038 (0x7fffffff)
[  358.192807][ T8236] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.1157: corrupted inode contents
[  358.214436][ T4271] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  358.241196][ T8236] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz.3.1157: mark_inode_dirty error
[  358.261706][ T4271] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  358.273441][ T8236] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz.3.1157: corrupted inode contents
[  358.303241][ T4271] asix: probe of 1-1:0.0 failed with error -71
[  358.319386][ T4271] usb 1-1: USB disconnect, device number 15
[  358.449208][ T8236] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.1157: mark_inode_dirty error
[  358.526026][ T8245] vhci_hcd: connection reset by peer
[  358.540458][   T51] bond0 (unregistering): Released all slaves
[  358.550181][   T11] vhci_hcd: stop threads
[  358.555924][   T11] vhci_hcd: release socket
[  358.577038][ T4085] usb 4-1: USB disconnect, device number 14
[  358.583650][   T11] vhci_hcd: disconnect device
[  358.749175][ T8255] overlayfs: failed to get inode (-116)
[  358.755626][ T8255] overlayfs: failed to get inode (-116)
[  358.761941][ T8255] overlayfs: failed to get inode (-116)
[  358.768262][ T8255] overlayfs: failed to get inode (-116)
[  359.469374][ T8111] bridge0: port 2(bridge_slave_1) entered blocking state
[  359.486918][ T8111] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.497104][ T8111] device bridge_slave_1 entered promiscuous mode
[  359.596465][ T8111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  359.638747][ T8111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  359.820755][ T7618] EXT4-fs (loop3): unmounting filesystem.
[  359.874333][ T8111] team0: Port device team_slave_0 added
[  359.929658][ T8111] team0: Port device team_slave_1 added
[  360.740806][ T8270] loop3: detected capacity change from 0 to 256
[  361.013210][ T8273] binder: 8272:8273 ioctl c0306201 0 returned -14
[  361.803489][ T8283] loop0: detected capacity change from 0 to 512
[  361.834389][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.856500][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.946011][ T8111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.954217][ T8283] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm syz.0.1169: bg 0: block 5: invalid block bitmap
[  361.959376][ T8111] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.975898][ T8111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  362.001948][ T8111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  362.113221][ T8283] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6173: Corrupt filesystem
[  362.121345][ T8111] device hsr_slave_0 entered promiscuous mode
[  362.143816][ T8283] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.1169: invalid indirect mapped block 3 (level 2)
[  362.160113][ T8111] device hsr_slave_1 entered promiscuous mode
[  362.185510][ T8283] EXT4-fs (loop0): 1 orphan inode deleted
[  362.191284][ T8283] EXT4-fs (loop0): 1 truncate cleaned up
[  362.218002][ T8111] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  362.234032][ T8283] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  362.243880][ T8111] Cannot create hsr debugfs directory
[  362.318801][ T8291] loop4: detected capacity change from 0 to 8192
[  362.490348][ T6729] EXT4-fs (loop0): unmounting filesystem.
[  362.703387][ T8308] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4)
[  362.709947][ T8308] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  362.769503][ T8308] vhci_hcd vhci_hcd.0: Device attached
[  363.024925][ T7649] vhci_hcd: vhci_device speed not set
[  363.036228][ T7648] usb 9-1: new low-speed USB device number 2 using vhci_hcd
[  363.367899][ T8111] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  363.454535][ T8111] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  363.486031][ T8111] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  363.509540][ T8326] loop1: detected capacity change from 0 to 64
[  363.561000][ T8111] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  363.642473][ T8310] vhci_hcd: connection reset by peer
[  363.653025][   T11] vhci_hcd: stop threads
[  363.657300][   T11] vhci_hcd: release socket
[  363.678791][   T11] vhci_hcd: disconnect device
[  363.842787][ T8111] 8021q: adding VLAN 0 to HW filter on device bond0
[  363.883217][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  363.893198][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  363.906868][ T8333] 9pnet: p9_errstr2errno: server reported unknown error �@��rH�
[  363.925624][ T8111] 8021q: adding VLAN 0 to HW filter on device team0
[  363.975342][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  363.984937][ T3596] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  364.024483][ T3596] bridge0: port 1(bridge_slave_0) entered blocking state
[  364.031632][ T3596] bridge0: port 1(bridge_slave_0) entered forwarding state
[  364.153936][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  364.179918][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  364.186770][ T8340] loop4: detected capacity change from 0 to 256
[  364.216490][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  364.255326][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  364.262506][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  364.480680][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  365.244893][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  365.254010][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  365.277913][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  365.323013][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  365.331877][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  365.399374][ T8111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  365.430572][ T8356] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  365.454896][ T8111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  365.559490][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  365.568884][ T8356] 
[  365.571240][ T8356] ======================================================
[  365.578256][ T8356] WARNING: possible circular locking dependency detected
[  365.579048][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  365.585258][ T8356] 6.1.101-syzkaller-00106-gc18e82d3ee44 #0 Not tainted
[  365.585270][ T8356] ------------------------------------------------------
[  365.585276][ T8356] syz.3.1186/8356 is trying to acquire lock:
[  365.585287][ T8356] ffff888028478400 (&sb->s_type->i_mutex_key
[  365.602633][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  365.606919][ T8356] #8){++++}-{3:3}, at: ext4_bmap+0x4b/0x410
[  365.632666][ T8356] 
[  365.632666][ T8356] but task is already holding lock:
[  365.632828][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  365.640012][ T8356] ffff88814be923f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40
[  365.658547][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  365.659285][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  365.666252][ T8356] 
[  365.666252][ T8356] which lock already depends on the new lock.
[  365.666252][ T8356] 
[  365.666259][ T8356] 
[  365.666259][ T8356] the existing dependency chain (in reverse order) is:
[  365.666264][ T8356] 
[  365.666264][ T8356] -> #4 (&journal->j_checkpoint_mutex){+.+.}-{3:3}:
[  365.666293][ T8356]        lock_acquire+0x1f8/0x5a0
[  365.666320][ T8356]        mutex_lock_io_nested+0x134/0xab0
[  365.666339][ T8356]        jbd2_journal_flush+0x29b/0xc40
[  365.666364][ T8356]        ext4_ioctl+0x3986/0x5f60
[  365.666388][ T8356]        __se_sys_ioctl+0xf1/0x160
[  365.666419][ T8356]        do_syscall_64+0x3b/0xb0
[  365.666444][ T8356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.666468][ T8356] 
[  365.666468][ T8356] -> #3 (&journal->j_barrier){+.+.}-{3:3}:
[  365.666493][ T8356]        lock_acquire+0x1f8/0x5a0
[  365.666515][ T8356]        __mutex_lock+0x132/0xd80
[  365.666529][ T8356]        jbd2_journal_lock_updates+0x2b0/0x380
[  365.666547][ T8356]        ext4_change_inode_journal_flag+0x1a8/0x6e0
[  365.770113][ T8356]        ext4_fileattr_set+0xe04/0x1770
[  365.775663][ T8356]        vfs_fileattr_set+0x8f3/0xd30
[  365.781026][ T8356]        do_vfs_ioctl+0x1cd1/0x2a90
[  365.786232][ T8356]        __se_sys_ioctl+0x81/0x160
[  365.791363][ T8356]        do_syscall_64+0x3b/0xb0
[  365.796344][ T8356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.802749][ T8356] 
[  365.802749][ T8356] -> #2 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  365.811162][ T8356]        lock_acquire+0x1f8/0x5a0
[  365.816176][ T8356]        percpu_down_read+0x44/0x1a0
[  365.821449][ T8356]        ext4_writepages+0x1e5/0x3de0
[  365.826895][ T8356]        do_writepages+0x3a2/0x670
[  365.831993][ T8356]        filemap_fdatawrite_wbc+0x121/0x180
[  365.837876][ T8356]        filemap_write_and_wait_range+0x1a4/0x290
[  365.844283][ T8356]        ext4_change_inode_journal_flag+0x143/0x6e0
[  365.850949][ T8356]        ext4_fileattr_set+0xe04/0x1770
[  365.856483][ T8356]        vfs_fileattr_set+0x8f3/0xd30
[  365.861844][ T8356]        do_vfs_ioctl+0x1cd1/0x2a90
[  365.867024][ T8356]        __se_sys_ioctl+0x81/0x160
[  365.872124][ T8356]        do_syscall_64+0x3b/0xb0
[  365.877052][ T8356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.883454][ T8356] 
[  365.883454][ T8356] -> #1 (mapping.invalidate_lock){++++}-{3:3}:
[  365.891780][ T8356]        lock_acquire+0x1f8/0x5a0
[  365.896795][ T8356]        down_write+0x36/0x60
[  365.901460][ T8356]        ext4_setattr+0xec7/0x1a00
[  365.906571][ T8356]        notify_change+0xce3/0xfc0
[  365.911690][ T8356]        do_truncate+0x21c/0x300
[  365.916641][ T8356]        do_sys_ftruncate+0x2e2/0x380
[  365.922017][ T8356]        do_syscall_64+0x3b/0xb0
[  365.926947][ T8356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.933352][ T8356] 
[  365.933352][ T8356] -> #0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  365.941943][ T8356]        validate_chain+0x1661/0x5950
[  365.947309][ T8356]        __lock_acquire+0x125b/0x1f80
[  365.952674][ T8356]        lock_acquire+0x1f8/0x5a0
[  365.957686][ T8356]        down_read+0xad/0xa30
[  365.962350][ T8356]        ext4_bmap+0x4b/0x410
[  365.967015][ T8356]        bmap+0xa1/0xd0
[  365.971158][ T8356]        jbd2_journal_flush+0x5b5/0xc40
[  365.976696][ T8356]        ext4_ioctl+0x3986/0x5f60
[  365.981812][ T8356]        __se_sys_ioctl+0xf1/0x160
[  365.986923][ T8356]        do_syscall_64+0x3b/0xb0
[  365.991849][ T8356]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  365.998252][ T8356] 
[  365.998252][ T8356] other info that might help us debug this:
[  365.998252][ T8356] 
[  366.008554][ T8356] Chain exists of:
[  366.008554][ T8356]   &sb->s_type->i_mutex_key#8 --> &journal->j_barrier --> &journal->j_checkpoint_mutex
[  366.008554][ T8356] 
[  366.024122][ T8356]  Possible unsafe locking scenario:
[  366.024122][ T8356] 
[  366.031580][ T8356]        CPU0                    CPU1
[  366.036955][ T8356]        ----                    ----
[  366.042317][ T8356]   lock(&journal->j_checkpoint_mutex);
[  366.047872][ T8356]                                lock(&journal->j_barrier);
[  366.055928][ T8356]                                lock(&journal->j_checkpoint_mutex);
[  366.063982][ T8356]   lock(&sb->s_type->i_mutex_key#8);
[  366.069347][ T8356] 
[  366.069347][ T8356]  *** DEADLOCK ***
[  366.069347][ T8356] 
[  366.077493][ T8356] 2 locks held by syz.3.1186/8356:
[  366.082603][ T8356]  #0: ffff88814be92170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380
[  366.093487][ T8356]  #1: ffff88814be923f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40
[  366.104548][ T8356] 
[  366.104548][ T8356] stack backtrace:
[  366.110443][ T8356] CPU: 1 PID: 8356 Comm: syz.3.1186 Not tainted 6.1.101-syzkaller-00106-gc18e82d3ee44 #0
[  366.120257][ T8356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  366.130304][ T8356] Call Trace:
[  366.133568][ T8356]  <TASK>
[  366.136488][ T8356]  dump_stack_lvl+0x1e3/0x2cb
[  366.141257][ T8356]  ? nf_tcp_handle_invalid+0x642/0x642
[  366.146718][ T8356]  ? print_circular_bug+0x12b/0x1a0
[  366.151908][ T8356]  check_noncircular+0x2fa/0x3b0
[  366.156831][ T8356]  ? add_chain_block+0x850/0x850
[  366.161760][ T8356]  ? lockdep_lock+0x11f/0x2a0
[  366.166442][ T8356]  ? _find_first_zero_bit+0xd0/0x100
[  366.171724][ T8356]  validate_chain+0x1661/0x5950
[  366.176605][ T8356]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  366.182603][ T8356]  ? reacquire_held_locks+0x660/0x660
[  366.187978][ T8356]  ? do_raw_spin_unlock+0x137/0x8a0
[  366.193171][ T8356]  ? validate_chain+0x112/0x5950
[  366.198279][ T8356]  ? finish_task_switch+0x1ca/0x810
[  366.203476][ T8356]  ? mark_lock+0x9a/0x340
[  366.207797][ T8356]  __lock_acquire+0x125b/0x1f80
[  366.212734][ T8356]  lock_acquire+0x1f8/0x5a0
[  366.217235][ T8356]  ? ext4_bmap+0x4b/0x410
[  366.221580][ T8356]  ? read_lock_is_recursive+0x10/0x10
[  366.227066][ T8356]  ? __might_sleep+0xb0/0xb0
[  366.231655][ T8356]  ? __lock_acquire+0x125b/0x1f80
[  366.236678][ T8356]  down_read+0xad/0xa30
[  366.240822][ T8356]  ? ext4_bmap+0x4b/0x410
[  366.245143][ T8356]  ? bit_waitqueue+0x30/0x30
[  366.249725][ T8356]  ? __down_common+0x8b0/0x8b0
[  366.254479][ T8356]  ? jbd2_journal_flush+0x374/0xc40
[  366.259671][ T8356]  ? __lock_acquire+0x1f80/0x1f80
[  366.264687][ T8356]  ? jbd2_cleanup_journal_tail+0x1a7/0x2c0
[  366.270484][ T8356]  ? ext4_journalled_write_end+0xec0/0xec0
[  366.276286][ T8356]  ext4_bmap+0x4b/0x410
[  366.280436][ T8356]  ? ext4_journalled_write_end+0xec0/0xec0
[  366.286234][ T8356]  bmap+0xa1/0xd0
[  366.289862][ T8356]  jbd2_journal_flush+0x5b5/0xc40
[  366.294883][ T8356]  ? jbd2_journal_lock_updates+0x2b0/0x380
[  366.300685][ T8356]  ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50
[  366.307531][ T8356]  ? bpf_lsm_capable+0x5/0x10
[  366.312205][ T8356]  ? security_capable+0x86/0xb0
[  366.317049][ T8356]  ext4_ioctl+0x3986/0x5f60
[  366.321549][ T8356]  ? kasan_set_track+0x4b/0x70
[  366.326307][ T8356]  ? security_file_ioctl+0x6d/0xa0
[  366.331403][ T8356]  ? __se_sys_ioctl+0x47/0x160
[  366.336160][ T8356]  ? do_syscall_64+0x3b/0xb0
[  366.340763][ T8356]  ? ext4_fileattr_set+0x1770/0x1770
[  366.346079][ T8356]  ? do_vfs_ioctl+0x1ab2/0x2a90
[  366.350937][ T8356]  ? __x64_compat_sys_ioctl+0x80/0x80
[  366.356306][ T8356]  ? __lock_acquire+0x1f80/0x1f80
[  366.361334][ T8356]  ? lockdep_hardirqs_on+0x94/0x130
[  366.366531][ T8356]  ? __kmem_cache_free+0x25c/0x3c0
[  366.371639][ T8356]  ? tomoyo_path_number_perm+0x61b/0x7f0
[  366.377257][ T8356]  ? tomoyo_path_number_perm+0x68a/0x7f0
[  366.382882][ T8356]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  366.388587][ T8356]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  366.394559][ T8356]  ? __fget_files+0x28/0x4a0
[  366.399156][ T8356]  ? __fget_files+0x28/0x4a0
[  366.403730][ T8356]  ? __fget_files+0x435/0x4a0
[  366.408401][ T8356]  ? __fget_files+0x28/0x4a0
[  366.412976][ T8356]  ? bpf_lsm_file_ioctl+0x5/0x10
[  366.417897][ T8356]  ? security_file_ioctl+0x7d/0xa0
[  366.423101][ T8356]  ? ext4_fileattr_set+0x1770/0x1770
[  366.428399][ T8356]  __se_sys_ioctl+0xf1/0x160
[  366.433156][ T8356]  do_syscall_64+0x3b/0xb0
[  366.437565][ T8356]  ? clear_bhb_loop+0x45/0xa0
[  366.442408][ T8356]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  366.448401][ T8356] RIP: 0033:0x7f6c9f775f19
[  366.452815][ T8356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  366.472412][ T8356] RSP: 002b:00007f6ca0614048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  366.480818][ T8356] RAX: ffffffffffffffda RBX: 00007f6c9f906038 RCX: 00007f6c9f775f19
[  366.488778][ T8356] RDX: 0000000020000180 RSI: 000000004004662b RDI: 0000000000000005
[  366.496736][ T8356] RBP: 00007f6c9f7e4e68 R08: 0000000000000000 R09: 0000000000000000
[  366.504691][ T8356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  366.512664][ T8356] R13: 000000000000006e R14: 00007f6c9f906038 R15: 00007ffd1e9cb318
[  366.520654][ T8356]  </TASK>
[  366.536419][ T8353] loop0: detected capacity change from 0 to 8192
[  366.697037][ T8111] 8021q: adding VLAN 0 to HW filter on device batadv0
[  366.704728][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  366.712609][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  366.733548][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  366.742570][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  366.754843][ T8111] device veth0_vlan entered promiscuous mode
[  366.763412][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  366.771591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  366.780517][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  366.788233][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  366.797543][ T8111] device veth1_vlan entered promiscuous mode
[  366.811926][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  366.820546][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  366.829606][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  366.838330][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  366.849028][ T8111] device veth0_macvtap entered promiscuous mode
[  366.857623][ T8111] device veth1_macvtap entered promiscuous mode
[  366.870061][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.880997][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.891168][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.901860][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.911709][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.922592][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.932457][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.943010][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.954054][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.961416][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  366.970099][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  366.978174][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  366.986747][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  366.996360][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.007489][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.017704][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.028774][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.038867][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.049679][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.059527][ T8111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.069979][ T8111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.080883][ T8111] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.095462][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  367.104435][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  367.114302][ T8111] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.124642][ T8111] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.134164][ T8111] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.143237][ T8111] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.165609][ T8111] ieee80211 phy53: Selected rate control algorithm 'minstrel_ht'
[  367.184173][ T4062] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.185194][ T8111] ieee80211 phy54: Selected rate control algorithm 'minstrel_ht'
[  367.198493][ T4062] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.211621][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  367.226310][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.235682][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  367.243646][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  368.152186][ T7648] vhci_hcd: vhci_device speed not set
[  369.508275][   T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.376801][   T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.447630][   T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  371.516385][   T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  372.222001][   T51] device hsr_slave_0 left promiscuous mode
[  372.242592][   T51] device hsr_slave_1 left promiscuous mode
[  372.249863][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.277302][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.294250][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.301691][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.309619][   T51] device bridge_slave_1 left promiscuous mode
[  372.316225][   T51] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.324862][   T51] device bridge_slave_0 left promiscuous mode
[  372.331039][   T51] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.341748][   T51] device veth1_macvtap left promiscuous mode
[  372.348417][   T51] device veth0_macvtap left promiscuous mode
[  372.355360][   T51] device veth1_vlan left promiscuous mode
[  372.361150][   T51] device veth0_vlan left promiscuous mode
[  372.541322][   T51] team0 (unregistering): Port device team_slave_1 removed
[  372.572551][   T51] team0 (unregistering): Port device team_slave_0 removed
[  372.600615][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  372.636300][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  372.697937][   T51] bond0 (unregistering): Released all slaves