last executing test programs:

11.1900625s ago: executing program 3 (id=1294):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'bridge_slave_1\x00', 0x600})

10.97951194s ago: executing program 3 (id=1297):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map, 0xffffffffffffffff, 0x21, 0x0, 0xffffffffffffffff, @void, @value}, 0x20)

8.865371056s ago: executing program 3 (id=1299):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000001100)='./file0\x00', 0x3000490, &(0x7f0000000240)={[{@nombcache}, {@usrjquota}, {@errors_remount}, {@norecovery}, {@auto_da_alloc}, {@mblk_io_submit}, {@minixdf}, {@barrier_val}, {@grpjquota}, {}]}, 0x0, 0x7b1, &(0x7f00000004c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x141842, 0x0)

8.400389759s ago: executing program 3 (id=1306):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
unlink(&(0x7f0000000080)='./file0\x00')
symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00')

7.742389111s ago: executing program 3 (id=1313):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)

4.681936295s ago: executing program 2 (id=1319):
r0 = socket$inet6(0xa, 0x2, 0x0)
mount(0x0, 0x0, 0x0, 0x800000, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.dequeue\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r1, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

4.560833876s ago: executing program 2 (id=1322):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x2)
connect$vsock_stream(r0, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x1)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040))

4.455724966s ago: executing program 2 (id=1324):
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x2, @dev, 'veth1_to_batadv\x00'}}, 0x1e)
connect$pppoe(r1, &(0x7f0000000040)={0x18, 0x0, {0xfffd, @multicast, 'veth0_to_batadv\x00'}}, 0x1e)
connect$pppoe(r0, &(0x7f0000000140)={0x18, 0x0, {0x0, @dev, 'bond_slave_0\x00'}}, 0x1e)

4.281329812s ago: executing program 4 (id=1325):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r1=>0x0})
r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'hsr0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x70bd2b, 0x29d24, {0x0, 0x0, 0x0, 0x0, 0x14415, 0x8001}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)

4.281081172s ago: executing program 2 (id=1326):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000300)={[{@min_batch_time={'min_batch_time', 0x3d, 0x4}}]}, 0x4, 0x787, &(0x7f0000001000)="$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")
r0 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0), 0x480, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_sys\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
ioctl$RNDADDENTROPY(r0, 0x40045201, &(0x7f0000000000)=ANY=[])

4.115776517s ago: executing program 2 (id=1327):
mkdir(&(0x7f0000000640)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000300)='0', 0x1}], 0x1)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

4.013453927s ago: executing program 4 (id=1328):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x29c6006, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16], 0xff, 0x2e7, &(0x7f0000000280)="$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")
rename(&(0x7f00000000c0)='./file0\x00', 0x0)
open(0x0, 0x0, 0x144)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
sendmsg$key(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)

3.937200664s ago: executing program 3 (id=1329):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x5e, &(0x7f0000000300)={[{@debug}, {@grpquota}, {@i_version}, {@data_err_ignore}]}, 0x1, 0x44b, &(0x7f0000000dc0)="$eJzs281vG0UbAPBn7aR9274lKSof/YAGCqICkTRpgR44tAgkDiAhwaEcQ5JWoW6DmiDRKoKAUDmiShy4IY5I/AWc4IKAExJXuKNKFcqlhZPR2ruJ49hJnNh1iH8/aZWZ3XFmHu+OPbPjDaBnDUXEpxHx/4j4PSIGIiKpLzBU/XN3cX7i78X5iSTK5Tf/Sirl7izOT+RF89ftyzML1fyRBvXOXrt+abxUmrqa5UfmLr83Mnvt+rPTl8cvTl2cujJ25szpU6MvPD/2XFviTNt05/CHM0cPvfr2zdcnzt985+dvkyy8qIujTYbWOvhkmyvrtv016aSviw2hJcWISE9Xf6X/D0Qxlk/eQLzySVcbB3RUuVwu725+eKEM7GBJdLsFQHfkX/Tp/Dff7tHQY1u4fa46AUrjvptt1SN9UcjK9NfNb9spnW2dX/jnq3SLztyHAABY4ftz1b+rx3+FeLCm3NlsbWgwIg7ULG4cjIgHIiplH4qIh1usv36RZPX4p3CrxX/ZknT892K2trVy/JeP/mKwmOX2V+LvTy5Ml6ZORsR9EXEi+nen+dE16vjh5d8+b3ZsqGb8l25p/flYMGvHrb66G3ST43PjW4m51u2PIw73NYo/WVoJSCLiUEQcPra5Oqaf/uZos2Prx7+GNqwzlb+OeKp6/heiLv5csvb65Mj/ojR1ciS/Klb75dcbbzSrv9X4D3y5PGdrh/T87214/S/FP1gu1qzXzrZex40/Pms6p9ns9b8reauS3pXt+2B8bu7qaMSu5LVs/9nl/WPLr83zefk0/hPHG/f/+2P5nTgSEelF/EhEPBoRx7K2PxYRj0fE8TXi/+mlJ97dfPydlcY/uc75T2rX6zeRKF768bsVlQ62En96/k9XUieyPRv5/NtoA7f6/gEAAMB/QaHy2/+kMLyULhSGh6u/lz8Yewulmdm5Zy7MvH9lsvqMwGD0F/I7XQM190NHs2l9nh+ry5/K7ht/UdxTyQ9PzJQmux089Lh9Tfp/6s9it1sHdJzntaB36f/Qu/R/6F36P/SsRs//79lAGWAHaPT9/1EX2gHce8b/0Lta7f/VyYEpAewEvv+hd+n/0JO28lx/JxP5+sN2ac+KRLm8Xpm+7dLUziWisC2aIdGhRJc/mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANrk3wAAAP//+TvoKw==")
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x4000001)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000001fc0)=""/4086, 0xff6)

3.66230045s ago: executing program 2 (id=1332):
ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, &(0x7f00000003c0)={0x0, 0x0, @pic={0x0, 0xff}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="bd1a46f1c4e224e4cf07a981e7ef64e92d92df3b5944933c99331303f158dfaeb34e8771e434ce53fbc595c60f73dbb55afe51509d0d7595edb532256ca7570d5c59661bf6e1d8c63a3fad78b67c3ae342c087fd9fe845a57d436532d6ce66ab182c376d826f2418d18cb0b96cb4bb276823d9e6696547487a"], 0x1, 0x174, &(0x7f0000000240)="$eJzsVb1OMkEUPQPDwvfFgtpWIlgoy6LEN5DKygeQwIrExR+WRCEUa8WjkPgUFr6DhYkNFhZaYGli1uzM3fHyAJqQzEl2z7l35t47u8WZ0/AqzAP4WkzaKEJBYA1PQkACKAudO8xr/nA0Nyh+lZprlL8jfiEOR+OzVhD4g18UfzHDCiusWDXxEx7cZvCuvOxxMWkn4hhAHMdxkuvoR/A9WQAPbM+6VI/IIjZ7pHJLoAygOuxfVsPReLvXb3X9rn/uefWGu+u6e171pBf4rn4LNiKjPRIJbwFIPPUfW88BeCaD/Y9lCHY0Whe81mHmXNlYrs2wWt5D9703PcjjkfyKI2yiAOA6EixbUt0k1Kc1IZCloCbZOfXMglrYaV8EnSkERFo2gzQ9anPkTODxoL4fpUecEpeIm8Qz4jlxeneld5JUHd4oqkSAg5vWcDhQl5dWJueZnFeM+I9Lpn46yx9XysPCwsLCwsLCYkXwHQAA///lnWJh")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r2, 0x4140aecd, &(0x7f00000002c0)=ANY=[])

3.461394718s ago: executing program 1 (id=1333):
unshare(0x68040200)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
socket$kcm(0x2, 0x3, 0x84)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x4c, r1, 0x1, 0x70bd2b, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}}, {0x8, 0xb, 0x20000000}, {0x6}}]}, 0x4c}}, 0x0)

2.528212245s ago: executing program 1 (id=1335):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/kcm\x00')
r2 = dup(r0)
setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040)=0xfff, 0x4)
sendmsg$kcm(r2, &(0x7f0000002f80)={0x0, 0x0, 0x0}, 0x44004)
preadv(r1, &(0x7f0000000700)=[{&(0x7f0000000280)=""/124, 0x7c}], 0x1, 0x1ee, 0x0)

2.389126108s ago: executing program 1 (id=1337):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$inet6(r1, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x2}], 0x1}, 0xff03}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}}], 0x4000070, 0x8000)
recvmmsg(r1, &(0x7f00000018c0)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f0000000400)=""/34, 0x22}, {&(0x7f0000000480)=""/160, 0xa0}], 0x2}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000380)=""/8, 0x8}, {&(0x7f0000000ec0)=""/253, 0xfd}], 0x2}}], 0x2, 0x10020, 0x0)

1.576503353s ago: executing program 1 (id=1339):
r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001200), 0x0, 0x0)
r1 = dup2(r0, r0)
r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000018c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000000)={{0x0, 0x3}})
dup2(r2, r1)
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, &(0x7f0000000040))

1.575849793s ago: executing program 4 (id=1340):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x200cc, 0x6, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f00000002c0), 0x400, r0}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, &(0x7f0000000080)=""/231, &(0x7f0000000180), &(0x7f0000000240), 0x2, r1}, 0x38)

1.481318292s ago: executing program 0 (id=1341):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000001c0)='reno\x00', 0x5)
setsockopt$inet_tcp_int(r1, 0x6, 0x1b, &(0x7f0000000000), 0x4)

1.477637622s ago: executing program 1 (id=1342):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000100), 0x1, 0x559d, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f00000002c0)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff]}, {0x10000, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000280), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f00000000c0))

1.386434611s ago: executing program 4 (id=1343):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000cc0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73742880", 0x31}, {&(0x7f0000000340)="b0fef28adda655a00a8ce0bb7d504206000000000000001abe0a88f67472c3cd975c9884ae01084df2b7f556e2a043b74efe85a30267fae395e8a051934cefd1a1f19f89180ab1fe20a7e4088d8a3f4304feafe592c403cb5d1991683fcbda9a1404998bc92cb28946223165c906e2bed23adce7939d37148e79c6b485db91083de9905e7de49fd8837cf3792d697bf8b29b9c6e8daee80e86778a4a2426e6459d4a30ad36b138b31570d8342f7094ca640633ba7e0793a6e21acbc4749413f629ba4de97b84ed9acc06a3d29ef68cd6d32fc4398429c472891f8e244d27a4b6241083efd4ecd2c92d91399de6ddcafbcd07000000000000009d1b7d60c898340102268c474bf8b7db27c8787b34cae8a9c676907ec017733c1ece82e11b99a4bdc74c8d9d1871be6af0fef62b529af9ab1f37d60a2f967d715b301856b033a7e7dac74416447a090f7b6693bbd2deaf5eebbfc9adff299bafcf57774d0c993f5524409672b4f35409a8720dc2b78f83198096c60126f911fd42c29cd6fa311e2c8daef3927ccdc90436b2b6ee4c79ff80f6938e0560d9d8e925bdc4fffffffffffffff8d9b7977fff6c4293065de2ff26a041e67954f68871d010d377f9ba1ee447b5bfd5b9d3711b3ea5c6361a97d4d46b8b406091be9433f950613083805aa4ae31e3aef57eb8d299548df54dffb7c4af7f00a869c6bdbc6c2bd1a83262981638ae365b2611d2b50c5f000000d620e2a52db4283dc9", 0x217}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c77ca0d06d1576a43cbd48ecc22dd81c5aeeef4a0a53a5d93a9b5b000bba7223848aa6b97abe164077f7737311f187ffdfefdae072f6c3d59bf", 0x91}], 0x3}, 0x0)
recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0)
close(r0)

1.193285849s ago: executing program 0 (id=1344):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', <r1=>0x0})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge_slave_0\x00', <r3=>0x0})
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2037d}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x0)

1.173243711s ago: executing program 4 (id=1345):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)

743.73508ms ago: executing program 0 (id=1346):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'syz_tun\x00'}]}]}]}], {0x14}}, 0x80}}, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4)
syz_emit_ethernet(0xe80, &(0x7f0000000080)={@multicast, @dev, @val={@void}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x0, 0x0, @empty}}}}}, 0x0)

558.669578ms ago: executing program 0 (id=1347):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x2000c050}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x2c, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_PRIVACY={0x4}]}, 0x2c}}, 0x0)

304.462902ms ago: executing program 0 (id=1348):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r1, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x34}}, 0x0)

145.497586ms ago: executing program 0 (id=1349):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xdc, 0x3f, 0x6e, 0x40, 0x813, 0x1, 0x3a08, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x26, 0x9b}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f00000002c0)={0x0, 0x0, 0x1, "04"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000240)={0x44, &(0x7f0000000580)={0x0, 0x0, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)

144.827006ms ago: executing program 1 (id=1358):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800"/11], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f00000000c0))

0s ago: executing program 4 (id=1350):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@disable_roll_forward}, {@background_gc_on}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "8914de1bbff65625a89b15f4701e986868871b41ac45a5af8638745049380b10d03fcf4db349d07e019b5c99470dbd251e927b10a5991a72fcb1052fc22cb106cd5a33df202105eb8c645dc145f7ae101c257078c33b32bbaa0604f7126bf600b349c11839adefedab09a68e4eb03e148d7e245ae42b"}, 0x81)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000003, 0x11, r1, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc004ae0a, &(0x7f0000000080)=""/1)

kernel console output (not intermixed with test programs):

t 0
[  167.004672][   T11] team0 (unregistering): Port device team_slave_0 removed
[  167.112037][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  167.193562][ T3683] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  167.211172][ T3683] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.219231][ T3683] usb 1-1: Product: syz
[  167.231975][ T3683] usb 1-1: Manufacturer: syz
[  167.236611][ T3683] usb 1-1: SerialNumber: syz
[  167.275350][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  167.297235][ T6256] input: syz0 as /devices/virtual/input/input8
[  167.321485][ T3638] Bluetooth: hci1: command tx timeout
[  167.455520][ T6263] loop4: detected capacity change from 0 to 512
[  167.529824][ T6263] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  167.539360][ T6263] ext4 filesystem being mounted at /147/bus supports timestamps until 2038 (0x7fffffff)
[  167.658006][ T3907] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  167.676635][ T3634] EXT4-fs (loop4): unmounting filesystem.
[  167.741475][ T3683] cdc_ncm 1-1:1.0: bind() failure
[  167.755327][ T3683] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  167.769475][ T3683] cdc_ncm 1-1:1.1: bind() failure
[  167.777568][ T3683] usb 1-1: USB disconnect, device number 10
[  167.926853][ T3907] usb 3-1: Using ep0 maxpacket: 16
[  168.052212][ T3907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.070792][ T3907] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.089660][ T3907] usb 3-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  168.099113][ T3907] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.113858][ T3907] usb 3-1: config 0 descriptor??
[  168.217976][   T11] bond0 (unregistering): Released all slaves
[  168.227153][ T6280] capability: warning: `syz.4.711' uses deprecated v2 capabilities in a way that may be insecure
[  168.256557][ T6280] printk: syz.4.711 (6280): Attempt to access syslog with CAP_SYS_ADMIN but no CAP_SYSLOG (deprecated).
[  168.399833][ T6157] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.451250][ T6157] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.459877][ T6157] device bridge_slave_0 entered promiscuous mode
[  168.482545][ T6157] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.489734][ T6157] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.498647][ T6157] device bridge_slave_1 entered promiscuous mode
[  168.581035][ T6157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.590449][ T6291] capability: warning: `syz.3.714' uses 32-bit capabilities (legacy support in use)
[  168.624118][ T6157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.720736][ T6157] team0: Port device team_slave_0 added
[  168.732466][ T6157] team0: Port device team_slave_1 added
[  168.777562][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.786810][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.821120][ T6157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.850657][ T6157] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.861410][ T6157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.901290][ T6157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.994210][ T6157] device hsr_slave_0 entered promiscuous mode
[  169.002668][ T6157] device hsr_slave_1 entered promiscuous mode
[  169.021954][ T6157] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  169.029572][ T6157] Cannot create hsr debugfs directory
[  169.048064][ T3907] letsketch 0003:6161:4D15.0006: Device info: Д
[  169.077959][ T6283] loop4: detected capacity change from 0 to 40427
[  169.087703][ T6283] F2FS-fs (loop4): invalid crc value
[  169.127208][ T6283] F2FS-fs (loop4): Found nat_bits in checkpoint
[  169.188556][ T6283] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  169.197708][ T6283] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  169.215345][ T6283] syz.4.712: attempt to access beyond end of device
[  169.215345][ T6283] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  169.252293][ T3907] letsketch 0003:6161:4D15.0006: Device info: í—¶
[  169.401331][ T3638] Bluetooth: hci1: command tx timeout
[  169.437981][ T6307] 9pnet: p9_errstr2errno: server reported unknown error œæçûŒÎsÅwRk‚Ú·M6°'–û@1![g™ã±8
[  169.441270][ T3713] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  169.571031][ T6311] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  169.583523][ T6157] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  169.594788][ T6157] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  169.605061][ T6157] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  169.615078][ T6157] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  169.662478][ T3907] usb 3-1: Max retries (5) exceeded reading string descriptor 202
[  169.670345][ T3907] letsketch: probe of 0003:6161:4D15.0006 failed with error -71
[  169.690927][ T3907] usb 3-1: USB disconnect, device number 8
[  169.705654][ T6157] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.713068][ T3713] usb 4-1: Using ep0 maxpacket: 8
[  169.726243][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.736770][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.752044][ T6157] 8021q: adding VLAN 0 to HW filter on device team0
[  169.767085][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.776976][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.788897][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.796030][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.807254][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.816088][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.826556][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.833699][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.841340][ T3713] usb 4-1: unable to get BOS descriptor or descriptor too short
[  169.842610][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.890895][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.905813][ T3713] usb 4-1: unable to read config index 0 descriptor/start: -71
[  169.909095][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.914610][ T3713] usb 4-1: can't read configurations, error -71
[  169.923566][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.947877][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.970247][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  170.002226][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.025930][ T6157] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  170.037253][ T6157] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.050004][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.058794][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.067518][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.080221][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.096169][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.120594][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  170.407886][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.416775][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.442245][ T6157] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.485665][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  170.530808][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.565776][ T6157] device veth0_vlan entered promiscuous mode
[  170.588925][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  170.602509][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.631925][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.660149][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.669342][ T6319] loop4: detected capacity change from 0 to 32768
[  170.686542][ T6157] device veth1_vlan entered promiscuous mode
[  170.699560][ T6319] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.724 (6319)
[  170.746132][ T6319] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  170.748933][ T6157] device veth0_macvtap entered promiscuous mode
[  170.782824][ T6319] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  170.801226][ T6319] BTRFS info (device loop4): enabling auto defrag
[  170.808049][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  170.823289][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  170.831483][ T6319] BTRFS info (device loop4): max_inline at 0
[  170.837497][ T6319] BTRFS info (device loop4): enabling ssd optimizations
[  170.864632][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.864938][ T6319] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  170.898100][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.902056][ T6319] BTRFS info (device loop4): use lzo compression, level 0
[  170.922202][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  170.939935][ T6319] BTRFS info (device loop4): using free space tree
[  170.953523][ T6157] device veth1_macvtap entered promiscuous mode
[  171.020680][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.055416][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.083414][ T6327] loop3: detected capacity change from 0 to 32768
[  171.120284][ T6327] JBD2: Ignoring recovery information on journal
[  171.126803][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.154203][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.171927][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.194429][ T6349] netlink: 7232 bytes leftover after parsing attributes in process `syz.0.728'.
[  171.205661][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.226799][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.241130][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.259182][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.270195][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.288519][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.288772][ T6327] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  171.302216][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.376341][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.378272][ T3634] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  171.409761][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  171.433277][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.454169][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.493188][ T3638] Bluetooth: hci1: command tx timeout
[  171.494885][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.567107][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.618793][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.659364][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.696388][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.722015][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.746478][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.768109][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.780809][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.798954][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.808953][ T6157] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.821335][ T6157] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.836168][ T6157] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.858390][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.731'.
[  171.868346][ T4643] ocfs2: Unmounting device (7,3) on (node local)
[  171.976243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.993849][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.034424][ T6157] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.056680][ T6157] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.081112][ T6157] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.089846][ T6157] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.268967][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.290619][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.320830][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  172.358891][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.380871][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.432027][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  172.477324][ T6369] loop4: detected capacity change from 0 to 256
[  172.720111][ T6379] loop0: detected capacity change from 0 to 4096
[  172.872789][ T6385] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  172.934869][   T27] audit: type=1800 audit(1726696446.456:51): pid=6379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.740" name="file1" dev="loop0" ino=15 res=0 errno=0
[  172.980885][ T6359] loop3: detected capacity change from 0 to 32768
[  172.995438][   T27] audit: type=1800 audit(1726696446.486:52): pid=6388 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.740" name="file1" dev="loop0" ino=15 res=0 errno=0
[  173.017789][ T6359] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.732 (6359)
[  173.043907][ T6392] loop1: detected capacity change from 0 to 512
[  173.049983][ T6390] loop4: detected capacity change from 0 to 2048
[  173.062676][ T6392] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  173.072644][ T6359] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.084990][ T6359] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  173.096280][ T6359] BTRFS info (device loop3): using free space tree
[  173.096393][ T6390] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  173.124384][ T6392] EXT4-fs (loop1): 1 truncate cleaned up
[  173.137912][ T6392] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  173.184182][ T6390] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  173.221346][ T6359] BTRFS info (device loop3): enabling ssd optimizations
[  173.394756][ T4643] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  173.671226][ T3713] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  173.676742][ T6420] loop3: detected capacity change from 0 to 1024
[  173.756315][   T56] hfsplus: b-tree write err: -5, ino 4
[  174.071380][ T3713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.098659][ T3713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.129805][ T3713] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  174.141035][ T3713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.158966][ T3713] usb 5-1: config 0 descriptor??
[  174.623073][ T3713] hid-thrustmaster 0003:044F:B65D.0007: unknown main item tag 0x0
[  174.667304][ T3713] hid-thrustmaster 0003:044F:B65D.0007: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  174.689618][ T3713] hid-thrustmaster 0003:044F:B65D.0007: Wrong number of endpoints?
[  174.894285][ T3861] usb 5-1: USB disconnect, device number 11
[  174.911145][    C1] hid-thrustmaster 0003:044F:B65D.0007: URB to get model id failed with error -2
[  174.932908][ T6446] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.760'.
[  174.938898][ T6445] loop0: detected capacity change from 0 to 256
[  174.958613][ T6442] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.760'.
[  174.964447][ T6445] FAT-fs (loop0): Directory bread(block 64) failed
[  174.981842][ T6445] FAT-fs (loop0): Directory bread(block 65) failed
[  174.992044][ T6445] FAT-fs (loop0): Directory bread(block 66) failed
[  174.998855][ T6445] FAT-fs (loop0): Directory bread(block 67) failed
[  175.007349][ T6445] FAT-fs (loop0): Directory bread(block 68) failed
[  175.014758][ T6445] FAT-fs (loop0): Directory bread(block 69) failed
[  175.021585][ T6445] FAT-fs (loop0): Directory bread(block 70) failed
[  175.028162][ T6445] FAT-fs (loop0): Directory bread(block 71) failed
[  175.041237][ T6445] FAT-fs (loop0): Directory bread(block 72) failed
[  175.051624][ T6445] FAT-fs (loop0): Directory bread(block 73) failed
[  175.081256][ T3915] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  175.238948][ T6450] loop0: detected capacity change from 0 to 4096
[  175.270327][ T6450] NILFS (loop0): invalid segment: Checksum error in segment payload
[  175.284898][ T6450] NILFS (loop0): trying rollback from an earlier position
[  175.331193][ T3915] usb 4-1: Using ep0 maxpacket: 8
[  175.335889][ T6450] NILFS (loop0): recovery complete
[  175.361174][ T6451] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  175.453574][ T3915] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  175.453931][   T52] block nbd4: Attempted send on invalid socket
[  175.468456][   T52] blk_print_req_error: 3 callbacks suppressed
[  175.468468][   T52] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  175.471322][ T3915] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  175.494638][ T6454] exFAT-fs (nbd4): unable to read boot sector
[  175.500738][ T6454] exFAT-fs (nbd4): failed to read boot sector
[  175.535844][ T6454] exFAT-fs (nbd4): failed to recognize exfat type
[  175.550520][ T3915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  175.560869][ T3915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  175.576017][ T3915] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  175.625112][ T3915] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  175.643546][ T3915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.824770][ T6157] EXT4-fs (loop1): unmounting filesystem.
[  175.922839][ T3915] usb 4-1: usb_control_msg returned -32
[  175.922877][ T3915] usbtmc 4-1:16.0: can't read capabilities
[  175.981867][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.173451][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.324988][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.400934][ T6472] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  176.455828][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.515544][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  176.544596][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  176.561469][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  176.570743][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  176.581624][ T3651] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  176.589766][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  176.690260][ T6483] loop0: detected capacity change from 0 to 1024
[  176.698189][ T6483] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  176.734352][ T6483] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  176.869792][ T5735] EXT4-fs (loop0): unmounting filesystem.
[  177.045825][ T6478] chnl_net:caif_netlink_parms(): no params data found
[  177.152466][ T6478] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.159756][ T6478] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.168909][ T6478] device bridge_slave_0 entered promiscuous mode
[  177.178906][ T6478] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.186335][ T6478] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.196027][ T6478] device bridge_slave_1 entered promiscuous mode
[  177.202682][ T3908] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  177.253793][ T6478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.265823][ T6478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.333605][ T6478] team0: Port device team_slave_0 added
[  177.378433][ T6478] team0: Port device team_slave_1 added
[  177.407029][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.415685][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.442080][ T6478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.478604][ T6478] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.491370][ T6478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.533223][ T6478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.571650][ T3908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  177.591382][ T3908] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  177.603720][ T3908] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  177.616992][ T3908] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  177.626147][ T3908] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.636501][ T3908] usb 5-1: config 0 descriptor??
[  177.671358][ T6490] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.748625][ T6478] device hsr_slave_0 entered promiscuous mode
[  177.757589][ T6478] device hsr_slave_1 entered promiscuous mode
[  177.764599][ T6478] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.773755][ T6478] Cannot create hsr debugfs directory
[  177.846252][ T3911] usb 4-1: USB disconnect, device number 9
[  178.079127][    T9] device hsr_slave_0 left promiscuous mode
[  178.087275][    T9] device hsr_slave_1 left promiscuous mode
[  178.094460][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.102478][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.107423][ T6490] loop4: detected capacity change from 0 to 8
[  178.130547][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.138884][ T6490] SQUASHFS error: lzo decompression failed, data probably corrupt
[  178.145199][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.150208][ T6490] SQUASHFS error: Failed to read block 0x91: -5
[  178.166316][    T9] device bridge_slave_1 left promiscuous mode
[  178.171203][ T6490] SQUASHFS error: Unable to read metadata cache entry [8f]
[  178.176878][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.191491][ T6490] SQUASHFS error: Unable to read inode 0x11f
[  178.199124][    T9] device bridge_slave_0 left promiscuous mode
[  178.219196][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.264705][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.272267][ T3911] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  178.286631][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.305649][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.316675][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.327728][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.336942][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.347390][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.356770][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.368491][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.376084][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.383668][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.401140][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.408562][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.431732][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.439369][ T3908] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  178.448321][ T3908] plantronics 0003:047F:FFFF.0008: No inputs registered, leaving
[  178.470559][ T3908] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  178.485404][ T3908] usb 5-1: USB disconnect, device number 12
[  178.501704][    T9] device veth1_macvtap left promiscuous mode
[  178.507824][    T9] device veth0_macvtap left promiscuous mode
[  178.511206][ T3911] usb 4-1: Using ep0 maxpacket: 8
[  178.519060][    T9] device veth1_vlan left promiscuous mode
[  178.525190][    T9] device veth0_vlan left promiscuous mode
[  178.637971][ T3911] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  178.646374][ T3911] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  178.656419][ T3915] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  178.665440][ T3911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  178.676285][ T3911] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  178.686326][ T3911] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  178.691289][ T3651] Bluetooth: hci1: command tx timeout
[  178.699934][ T3911] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  178.715826][ T3911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.982993][ T3911] usb 4-1: usb_control_msg returned -32
[  178.991495][ T3911] usbtmc 4-1:16.0: can't read capabilities
[  179.031325][ T3915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  179.059975][ T3915] usb 1-1: config 1 has no interface number 0
[  179.079361][ T3915] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.106781][ T3915] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  179.124260][ T3915] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  179.214615][    T9] team0 (unregistering): Port device team_slave_1 removed
[  179.262918][    T9] team0 (unregistering): Port device team_slave_0 removed
[  179.291403][ T3915] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  179.308731][ T3915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.317338][ T3915] usb 1-1: Product: syz
[  179.321962][ T3915] usb 1-1: Manufacturer: syz
[  179.326893][ T3915] usb 1-1: SerialNumber: syz
[  179.332616][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.384829][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  179.890412][    T9] bond0 (unregistering): Released all slaves
[  179.987955][ T6529] device syzkaller1 entered promiscuous mode
[  180.252579][ T3915] cdc_ncm 1-1:1.1: bind() failure
[  180.417319][ T6478] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  180.436306][ T6478] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  180.447930][ T6478] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  180.459011][ T3915] usb 1-1: USB disconnect, device number 11
[  180.471569][ T6478] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  180.554172][ T6478] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.569456][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.580218][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.595124][ T6478] 8021q: adding VLAN 0 to HW filter on device team0
[  180.605413][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.620653][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.629327][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.636537][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.644993][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.656243][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  180.667357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.675969][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.683101][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.702126][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  180.713796][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  180.728972][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  180.740105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  180.749033][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  180.757915][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  180.767611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  180.771180][ T3651] Bluetooth: hci1: command tx timeout
[  180.785527][ T6478] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  180.802690][ T6478] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.818454][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  180.827643][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.836362][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  180.844988][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  180.853471][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  180.926727][  T151] usb 4-1: USB disconnect, device number 10
[  181.108243][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.124174][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.158048][ T6478] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.247920][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  181.271508][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.303701][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  181.331968][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.342539][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.363332][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.383843][ T6478] device veth0_vlan entered promiscuous mode
[  181.435276][ T6478] device veth1_vlan entered promiscuous mode
[  181.494251][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.521923][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.541495][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.560024][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.574660][ T6478] device veth0_macvtap entered promiscuous mode
[  181.586863][ T6478] device veth1_macvtap entered promiscuous mode
[  181.614430][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.633143][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.650802][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.669519][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.680807][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.699709][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.709924][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.728793][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.738845][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.751698][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.761585][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.772113][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.785236][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.794847][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.814206][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.838664][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.858101][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.879379][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.906659][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.928394][ T6561] loop3: detected capacity change from 0 to 32768
[  181.929890][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.946679][ T6561] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.802 (6561)
[  181.969110][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.988164][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.191153][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.221113][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.241105][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.257288][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.278319][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.291132][ T6478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.316772][ T6478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.333078][ T6478] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.399319][ T6568] loop0: detected capacity change from 0 to 32768
[  182.408064][ T6568] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.805 (6568)
[  182.851674][ T3651] Bluetooth: hci1: command tx timeout
[  182.921480][ T6581] loop4: detected capacity change from 0 to 32768
[  182.968087][ T6561] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  182.982416][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.996564][ T6568] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.052691][ T3722] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  183.074381][ T6478] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.085847][ T6561] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  183.095579][ T6568] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  183.115058][ T6581] XFS (loop4): Mounting V5 Filesystem
[  183.122180][ T6568] BTRFS info (device loop0): setting nodatacow, compression disabled
[  183.130454][ T6561] BTRFS info (device loop3): using free space tree
[  183.141174][ T6478] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.149880][ T6478] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.169363][ T6568] BTRFS info (device loop0): enabling auto defrag
[  183.199262][ T6568] BTRFS info (device loop0): max_inline at 0
[  183.230185][ T6478] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.245364][ T6568] BTRFS info (device loop0): using free space tree
[  183.254517][ T6581] XFS (loop4): Ending clean mount
[  183.267683][ T6581] XFS (loop4): Quotacheck needed: Please wait.
[  183.379609][ T6561] BTRFS info (device loop3): enabling ssd optimizations
[  183.400319][ T6581] XFS (loop4): Quotacheck: Done.
[  183.447932][   T27] audit: type=1804 audit(1726696456.966:53): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.802" name="/newroot/122/file0/bus" dev="loop3" ino=263 res=1 errno=0
[  183.497371][   T27] audit: type=1804 audit(1726696456.966:54): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.802" name="/newroot/122/file0/bus" dev="loop3" ino=263 res=1 errno=0
[  183.526135][ T3722] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.554662][ T3722] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.579801][   T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  183.589754][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  183.621287][   T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  183.630741][ T3634] XFS (loop4): Unmounting Filesystem
[  183.641653][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  183.653262][ T4643] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  183.848421][ T5735] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  184.921148][ T3651] Bluetooth: hci1: command tx timeout
[  186.173673][ T6646] loop4: detected capacity change from 0 to 256
[  186.226848][ T6646] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x3bed3e2a, utbl_chksum : 0xe619d30d)
[  186.331323][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz.0.822'.
[  186.960557][ T6685] loop3: detected capacity change from 0 to 256
[  186.994820][ T6685] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  187.007630][ T6685] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  187.051350][ T6685] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  187.060287][ T6685] UDF-fs: Scanning with blocksize 512 failed
[  187.076860][ T6685] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  187.122347][ T6685] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.256809][ T6666] loop4: detected capacity change from 0 to 32768
[  187.296925][ T6666] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.826 (6666)
[  187.348692][ T6666] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  187.368612][ T6666] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  187.378981][ T6699] loop0: detected capacity change from 0 to 256
[  187.381007][ T6666] BTRFS info (device loop4): setting nodatacow, compression disabled
[  187.403650][ T6699] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x3bed3e2a, utbl_chksum : 0xe619d30d)
[  187.406972][ T6666] BTRFS info (device loop4): enabling auto defrag
[  187.430355][ T6666] BTRFS info (device loop4): max_inline at 0
[  187.436739][ T6666] BTRFS info (device loop4): using free space tree
[  187.470912][ T6705] netlink: 12 bytes leftover after parsing attributes in process `syz.3.838'.
[  187.616233][ T6726] vxcan0: tx drop: invalid da for name 0x0000000000000001
[  187.738573][ T3634] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  188.013778][ T6719] loop0: detected capacity change from 0 to 32768
[  188.029245][ T6719] XFS: ikeep mount option is deprecated.
[  188.058402][ T6719] XFS (loop0): Mounting V5 Filesystem
[  188.084710][ T6719] XFS (loop0): Ending clean mount
[  188.091806][ T6719] XFS (loop0): Quotacheck needed: Please wait.
[  188.124967][ T6719] XFS (loop0): Quotacheck: Done.
[  188.177449][ T5735] XFS (loop0): Unmounting Filesystem
[  188.290180][ T3651] Bluetooth: hci1: command tx timeout
[  188.866012][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888075590c00: rx timeout, send abort
[  188.874831][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888075590c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  188.875598][ T6767] netlink: 12 bytes leftover after parsing attributes in process `syz.2.855'.
[  191.601478][ T6765] loop1: detected capacity change from 0 to 32768
[  191.692392][ T6784] loop4: detected capacity change from 0 to 16
[  191.708634][ T6784] erofs: (device loop4): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version
[  191.740372][ T6765] XFS (loop1): Mounting V5 Filesystem
[  191.860868][ T6765] XFS (loop1): Ending clean mount
[  191.890225][ T6765] XFS (loop1): Quotacheck needed: Please wait.
[  191.965527][ T6765] XFS (loop1): Quotacheck: Done.
[  192.081546][ T6478] XFS (loop1): Unmounting Filesystem
[  193.582965][ T6822] loop3: detected capacity change from 0 to 128
[  193.604298][ T6822] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  193.618188][ T6822] ext4 filesystem being mounted at /134/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  193.728522][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  194.131587][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  194.138387][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  194.155658][ T6838] loop1: detected capacity change from 0 to 16
[  194.204024][ T6838] erofs: (device loop1): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version
[  194.673671][ T6828] loop0: detected capacity change from 0 to 40427
[  194.732136][ T6828] F2FS-fs (loop0): invalid crc value
[  194.758493][ T6828] F2FS-fs (loop0): Found nat_bits in checkpoint
[  194.928956][ T6828] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  195.111378][ T6836] loop3: detected capacity change from 0 to 32768
[  195.124044][ T5735] syz-executor: attempt to access beyond end of device
[  195.124044][ T5735] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  195.185486][ T6836] XFS (loop3): Mounting V5 Filesystem
[  195.348591][ T6864] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  195.368669][ T6864] FAT-fs (loop9): unable to read boot sector
[  195.421788][ T6836] XFS (loop3): Ending clean mount
[  195.487686][ T6836] XFS (loop3): Quotacheck needed: Please wait.
[  195.554744][ T6836] XFS (loop3): Quotacheck: Done.
[  195.663891][ T6871] Invalid ELF header type: 0 != 1
[  195.722068][ T4643] XFS (loop3): Unmounting Filesystem
[  196.012852][ T6881] loop0: detected capacity change from 0 to 16
[  196.027042][ T6881] erofs: (device loop0): check_layout_compatibility: unidentified incompatible feature 9000000, please upgrade kernel version
[  196.197914][ T6885] loop3: detected capacity change from 0 to 1024
[  196.335685][ T3722] hfsplus: b-tree write err: -5, ino 4
[  196.381764][   T27] audit: type=1326 audit(1726696469.906:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.0.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3397def9 code=0x7ffc0000
[  196.443452][   T27] audit: type=1326 audit(1726696469.906:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6888 comm="syz.0.907" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac3397def9 code=0x7ffc0000
[  196.633431][ T6901] loop0: detected capacity change from 0 to 512
[  196.671602][ T6901] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  196.766212][ T6901] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  196.783059][ T6905]  nullb0: AHDI p1
[  196.805896][ T6901] System zones: 1-12
[  196.834974][ T6901] EXT4-fs (loop0): 1 truncate cleaned up
[  196.840660][ T6901] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  197.080359][ T5735] EXT4-fs (loop0): unmounting filesystem.
[  197.210678][ T6916] loop4: detected capacity change from 0 to 1024
[  197.347648][ T3722] hfsplus: b-tree write err: -5, ino 4
[  197.392108][   T27] audit: type=1326 audit(1726696470.916:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6919 comm="syz.4.911" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6e917def9 code=0x7ffc0000
[  197.602965][ T6927] loop0: detected capacity change from 0 to 512
[  197.664677][ T6927] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  197.699836][ T6927] ext4 filesystem being mounted at /64/bus supports timestamps until 2038 (0x7fffffff)
[  197.850076][ T6910] loop3: detected capacity change from 0 to 40427
[  197.869387][ T5735] EXT4-fs (loop0): unmounting filesystem.
[  197.872165][ T6910] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[  197.910309][ T6910] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  197.958929][ T6910] F2FS-fs (loop3): invalid crc value
[  197.989651][ T6910] F2FS-fs (loop3): Found nat_bits in checkpoint
[  198.082692][ T6910] F2FS-fs (loop3): Start checkpoint disabled!
[  198.101920][ T6910] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  198.109024][ T6910] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  198.349736][ T6965] loop0: detected capacity change from 0 to 256
[  198.381288][ T3680] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  198.516874][   T38] kworker/u4:2: attempt to access beyond end of device
[  198.516874][   T38] loop3: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  198.741363][ T3680] usb 2-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  198.763787][ T3680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.800119][ T3680] usb 2-1: config 0 descriptor??
[  198.862870][ T3680] gspca_main: cpia1-2.14.0 probing 0813:0001
[  198.952078][ T6981] loop3: detected capacity change from 0 to 512
[  198.978772][ T6981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  198.987973][ T6981] ext4 filesystem being mounted at /141/bus supports timestamps until 2038 (0x7fffffff)
[  199.128452][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  199.370772][ T6999] device geneve2 entered promiscuous mode
[  199.519956][ T7005] loop3: detected capacity change from 0 to 256
[  199.619261][ T7008] loop0: detected capacity change from 0 to 4096
[  199.806760][ T7014] tipc: Started in network mode
[  199.821123][ T7014] tipc: Node identity ac14140f, cluster identity 4711
[  199.831627][ T7014] tipc: New replicast peer: 255.255.255.255
[  199.838090][ T7014] tipc: Enabled bearer <udp:syz2>, priority 10
[  199.991793][ T7024] loop3: detected capacity change from 0 to 512
[  200.004076][ T7024] EXT4-fs: Ignoring removed oldalloc option
[  200.012313][ T7024] EXT4-fs: Ignoring removed mblk_io_submit option
[  200.019452][ T7024] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  200.062410][ T7024] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b002c118, mo2=0002]
[  200.070684][ T7024] System zones: 1-12
[  200.097750][ T7024] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2186: inode #15: comm syz.3.953: corrupted in-inode xattr
[  200.119728][ T7024] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.953: couldn't read orphan inode 15 (err -117)
[  200.137630][ T7024] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  200.161300][ T3680] gspca_cpia1: usb_control_msg 03, error -71
[  200.186436][ T3680] gspca_cpia1: usb_control_msg 04, error -71
[  200.193154][ T3680] cpia1: probe of 2-1:0.0 failed with error -71
[  200.200947][ T3680] usb 2-1: USB disconnect, device number 7
[  200.257209][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  200.313614][ T7042] loop3: detected capacity change from 0 to 256
[  200.329083][ T7042] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  200.809671][ T7052] input: syz1 as /devices/virtual/input/input9
[  200.902653][ T7059] loop3: detected capacity change from 0 to 128
[  200.915645][ T7059] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  200.929774][ T7059] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  200.951219][ T3682] tipc: Node number set to 2886997007
[  200.997604][ T7061] ntfs: (device nullb0): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  201.009554][ T7061] ntfs: (device nullb0): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  201.025555][ T7061] ntfs: (device nullb0): ntfs_fill_super(): Not an NTFS volume.
[  201.069934][ T3722] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  201.142923][   T27] audit: type=1326 audit(1726696474.666:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7066 comm="syz.0.970" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fac3397def9 code=0x0
[  201.275500][ T7075] loop1: detected capacity change from 0 to 512
[  201.286652][ T7075] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz.1.972: bg 0: block 5: invalid block bitmap
[  201.302013][ T7075] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem
[  201.312444][ T7075] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.972: invalid indirect mapped block 3 (level 2)
[  201.326651][ T7075] EXT4-fs (loop1): 1 orphan inode deleted
[  201.332629][ T7075] EXT4-fs (loop1): 1 truncate cleaned up
[  201.338472][ T7075] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  201.360280][ T7075] usb usb7: usbfs: process 7075 (syz.1.972) did not claim interface 0 before use
[  201.404014][ T6478] EXT4-fs (loop1): unmounting filesystem.
[  201.563500][ T7086] loop1: detected capacity change from 0 to 2048
[  201.580270][ T7086] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  201.620256][   T27] audit: type=1804 audit(1726696475.136:59): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.977" name="/newroot/32/file0/bus" dev="loop1" ino=1367 res=1 errno=0
[  202.503510][ T7135] loop0: detected capacity change from 0 to 1024
[  202.632002][ T7135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  202.771284][ T5735] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /84/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  202.827091][ T5735] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  202.843802][ T7152] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1009'.
[  202.852313][ T3651] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  202.856868][ T7150] loop4: detected capacity change from 0 to 2048
[  202.864170][ T3651] Bluetooth: hci3: Injecting HCI hardware error event
[  202.872203][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  202.880006][ T3638] Bluetooth: hci3: hardware error 0x00
[  202.957311][ T5735] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /84/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  202.965221][ T7150]  loop4: p2 p3 p7
[  202.989290][ T5735] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  203.003849][ T7155] loop1: detected capacity change from 0 to 2048
[  203.018786][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  203.030898][ T5735] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /84/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  203.056613][ T5735] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  203.081485][ T3680] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  203.090489][ T7155] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  203.106344][ T7155] ext4 filesystem being mounted at /39/bus supports timestamps until 2038 (0x7fffffff)
[  203.117025][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  203.143256][ T5735] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /84/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  203.214834][ T6478] EXT4-fs (loop1): unmounting filesystem.
[  203.221248][ T5735] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  203.265574][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  203.286193][ T5735] EXT4-fs error (device loop0): ext4_readdir:260: inode #11: block 32: comm syz-executor: path /84/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  203.321963][ T5735] EXT4-fs error (device loop0): ext4_empty_dir:3143: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  203.360622][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  203.392931][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  203.435445][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  203.458017][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  203.481635][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  203.502424][ T5735] EXT4-fs warning (device loop0): ext4_empty_dir:3145: inode #11: comm syz-executor: directory missing '.'
[  204.127576][ T7162] loop4: detected capacity change from 0 to 131072
[  204.165920][ T7162] F2FS-fs (loop4): Found nat_bits in checkpoint
[  204.207876][ T7162] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  204.246165][ T5735] EXT4-fs (loop0): unmounting filesystem.
[  204.363062][ T3680] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  204.399604][ T3680] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  204.433515][   T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.440546][ T3680] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  204.486621][ T3680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.531462][ T7148] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  204.612981][   T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.837506][   T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.907171][ T3680] usb 4-1: USB disconnect, device number 11
[  204.922517][ T3638] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  205.055383][   T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.377661][ T3651] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  205.391857][ T3651] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  205.407210][ T3651] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  205.427017][ T3648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  205.434891][ T3648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  205.442546][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  205.945520][ T7179] loop1: detected capacity change from 0 to 32768
[  206.033742][ T7179] XFS (loop1): Mounting V5 Filesystem
[  206.057546][ T7202] loop3: detected capacity change from 0 to 8
[  206.112541][ T7202] squashfs: Unknown parameter '½FñÄâ$äÏ©�çïdé-’ß;YD“<™3ñXß®³N‡qä4ÎSûÅ•ÆsÛµZþQP�u•íµ2%l§W\YföáØÆ:?­x¶|:ãBÀ‡ýŸèE¥}Ce2ÖÎf«'
[  206.139056][ T7179] XFS (loop1): Ending clean mount
[  206.160935][ T7179] XFS (loop1): Quotacheck needed: Please wait.
[  206.162581][ T7183] chnl_net:caif_netlink_parms(): no params data found
[  206.246528][ T7179] XFS (loop1): Quotacheck: Done.
[  206.380769][ T6478] XFS (loop1): Unmounting Filesystem
[  206.463223][ T7214] loop4: detected capacity change from 0 to 4096
[  206.477880][ T7214] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  206.599449][ T7183] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.627302][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.655608][ T7183] device bridge_slave_0 entered promiscuous mode
[  206.776594][ T7183] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.797883][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.825455][ T7183] device bridge_slave_1 entered promiscuous mode
[  206.960689][ T7226] loop1: detected capacity change from 0 to 1024
[  207.051948][ T7226] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  207.144841][ T3722] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  207.171533][ T3722] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  207.198642][ T3722] EXT4-fs (loop1): This should not happen!! Data will be lost
[  207.198642][ T3722] 
[  207.218384][ T7183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.230913][ T7183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.243403][ T3722] EXT4-fs (loop1): Total free blocks count 0
[  207.249417][ T3722] EXT4-fs (loop1): Free/Dirty block details
[  207.256248][ T3722] EXT4-fs (loop1): free_blocks=68451041280
[  207.264384][ T3722] EXT4-fs (loop1): dirty_blocks=16
[  207.269690][ T3722] EXT4-fs (loop1): Block reservation details
[  207.278947][ T3722] EXT4-fs (loop1): i_reserved_data_blocks=1
[  207.331807][ T6478] EXT4-fs (loop1): unmounting filesystem.
[  207.455694][ T7183] team0: Port device team_slave_0 added
[  207.475643][ T7183] team0: Port device team_slave_1 added
[  207.481363][ T3638] Bluetooth: hci2: command tx timeout
[  207.487263][ T3680] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  207.520899][   T11] device hsr_slave_0 left promiscuous mode
[  207.529878][   T11] device hsr_slave_1 left promiscuous mode
[  207.547148][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.569728][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.592317][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.609962][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.623472][   T11] device bridge_slave_1 left promiscuous mode
[  207.636415][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.650662][   T11] device bridge_slave_0 left promiscuous mode
[  207.663410][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.697471][ T7244] loop1: detected capacity change from 0 to 32768
[  207.709002][ T7244] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1037 (7244)
[  207.722313][   T11] device veth1_macvtap left promiscuous mode
[  207.728359][   T11] device veth0_macvtap left promiscuous mode
[  207.736764][   T11] device veth1_vlan left promiscuous mode
[  207.743026][ T7244] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  207.753403][   T11] device veth0_vlan left promiscuous mode
[  207.759813][ T7244] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  207.769191][ T7244] BTRFS info (device loop1): using free space tree
[  207.771148][ T3680] usb 4-1: Using ep0 maxpacket: 16
[  207.829055][ T7244] BTRFS info (device loop1): enabling ssd optimizations
[  207.926079][ T3680] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  207.936645][ T3680] usb 4-1: config 0 has no interface number 0
[  207.966929][ T6478] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.136751][ T3680] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  208.148698][ T3680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.171101][ T3680] usb 4-1: Product: syz
[  208.175300][ T3680] usb 4-1: Manufacturer: syz
[  208.179904][ T3680] usb 4-1: SerialNumber: syz
[  208.195840][ T3680] usb 4-1: config 0 descriptor??
[  208.235627][ T3680] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  208.354407][ T7272] vivid-004: disconnect
[  208.379681][ T7268] vivid-004: reconnect
[  208.779893][ T4000] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  208.890728][   T11] team0 (unregistering): Port device team_slave_1 removed
[  208.939093][   T11] team0 (unregistering): Port device team_slave_0 removed
[  208.986046][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.021290][ T4000] usb 5-1: Using ep0 maxpacket: 32
[  209.036070][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.141380][ T4000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  209.153330][ T4000] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  209.165532][ T4000] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  209.174991][ T4000] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.186317][ T4000] usb 5-1: config 0 descriptor??
[  209.211551][ T7277] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  209.233512][ T4000] hub 5-1:0.0: USB hub found
[  209.451381][ T4000] hub 5-1:0.0: 2 ports detected
[  209.522355][ T3680] gspca_spca1528: reg_w err -71
[  209.527320][ T3680] spca1528: probe of 4-1:0.1 failed with error -71
[  209.539666][ T3680] usb 4-1: USB disconnect, device number 12
[  209.565412][ T3651] Bluetooth: hci2: command tx timeout
[  209.663239][   T11] bond0 (unregistering): Released all slaves
[  209.757755][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_0
[  209.764955][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.792184][ T7183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  209.820340][ T7183] batman_adv: batadv0: Adding interface: batadv_slave_1
[  209.837160][ T7183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  209.872966][ T7183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  209.918168][ T7286] loop1: detected capacity change from 0 to 1024
[  209.964231][ T7183] device hsr_slave_0 entered promiscuous mode
[  209.980324][ T7183] device hsr_slave_1 entered promiscuous mode
[  209.988557][ T7183] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  209.996867][ T7183] Cannot create hsr debugfs directory
[  210.021392][ T4000] hub 5-1:0.0: set hub depth failed
[  210.071578][ T4000] usb 5-1: USB disconnect, device number 13
[  210.101450][    T7] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  210.111695][ T7290] tls_set_device_offload: netdev not found
[  210.248794][ T7294] loop3: detected capacity change from 0 to 1024
[  210.305903][ T7294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  210.389309][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  210.449672][ T7301] team0: Port device virt_wifi0 added
[  210.461474][    T7] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  210.471383][    T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.571361][    T7] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  210.588496][    T7] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  210.597183][    T7] usb 3-1: Manufacturer: syz
[  210.640245][ T7307] loop4: detected capacity change from 0 to 512
[  210.653681][    T7] usb 3-1: config 0 descriptor??
[  210.722445][ T7307] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  210.732930][ T7307] ext4 filesystem being mounted at /218/file0 supports timestamps until 2038 (0x7fffffff)
[  210.810847][ T7307] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1059: corrupted inode contents
[  210.860298][ T7307] EXT4-fs error (device loop4): ext4_dirty_inode:6086: inode #2: comm syz.4.1059: mark_inode_dirty error
[  210.911277][    T7] rc_core: IR keymap rc-hauppauge not found
[  210.919600][    T7] Registered IR keymap rc-empty
[  210.930465][    T7] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  210.939525][ T7307] EXT4-fs error (device loop4): ext4_do_update_inode:5224: inode #2: comm syz.4.1059: corrupted inode contents
[  210.948360][    T7] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input10
[  210.963701][ T7307] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz.4.1059: mark_inode_dirty error
[  211.014273][ T7183] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  211.024474][ T7183] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  211.031265][    C0] igorplugusb 3-1:0.0: Error: urb status = -32
[  211.041484][   T27] audit: type=1326 audit(1726696484.556:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7317 comm="syz.1.1062" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f833257def9 code=0x0
[  211.052456][ T7307] EXT4-fs error (device loop4): ext4_get_first_dir_block:3592: inode #18: comm syz.4.1059: directory missing '.'
[  211.088317][ T3680] usb 3-1: USB disconnect, device number 9
[  211.122992][ T7183] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  211.141368][ T7183] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  211.161760][ T7320] loop1: detected capacity change from 0 to 2048
[  211.190492][ T3634] EXT4-fs (loop4): unmounting filesystem.
[  211.250837][ T7322] loop4: detected capacity change from 0 to 16
[  211.267918][ T7322] erofs: (device loop4): mounted with root inode @ nid 36.
[  211.281931][ T7322] syz.4.1064: attempt to access beyond end of device
[  211.281931][ T7322] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16
[  211.309047][ T7183] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.363443][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  211.370230][ T7323] syz.4.1064: attempt to access beyond end of device
[  211.370230][ T7323] loop4: rw=0, sector=14552337248, nr_sectors = 16 limit=16
[  211.385204][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  211.397675][ T7183] 8021q: adding VLAN 0 to HW filter on device team0
[  211.461865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  211.488540][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  211.500566][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.507752][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  211.542039][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  211.572798][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  211.591755][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  211.600159][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.607294][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  211.641362][ T3651] Bluetooth: hci2: command tx timeout
[  211.717282][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  211.750351][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  211.831950][ T7322] syz.4.1064 (7322): drop_caches: 2
[  211.832250][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  211.837239][ T7322] syz.4.1064 (7322): drop_caches: 2
[  211.893408][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  211.927383][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  212.030700][ T7336] loop1: detected capacity change from 0 to 256
[  212.070818][ T7336] FAT-fs (loop1): Directory bread(block 64) failed
[  212.089805][ T7336] FAT-fs (loop1): Directory bread(block 65) failed
[  212.098932][ T7336] FAT-fs (loop1): Directory bread(block 66) failed
[  212.113509][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  212.141776][ T7336] FAT-fs (loop1): Directory bread(block 67) failed
[  212.151559][ T7336] FAT-fs (loop1): Directory bread(block 68) failed
[  212.156418][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  212.164219][ T7336] FAT-fs (loop1): Directory bread(block 69) failed
[  212.198330][ T7336] FAT-fs (loop1): Directory bread(block 70) failed
[  212.214781][ T7336] FAT-fs (loop1): Directory bread(block 71) failed
[  212.228673][ T7183] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  212.248095][ T7336] FAT-fs (loop1): Directory bread(block 72) failed
[  212.248689][ T7183] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  212.255727][ T7344] loop4: detected capacity change from 0 to 256
[  212.277789][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  212.278144][ T7336] FAT-fs (loop1): Directory bread(block 73) failed
[  212.299028][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  212.328916][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  212.345672][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  212.357565][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  212.598548][   T11] device hsr_slave_0 left promiscuous mode
[  212.621243][   T56] kworker/u4:4: attempt to access beyond end of device
[  212.621243][   T56] loop1: rw=1, sector=1224, nr_sectors = 128 limit=256
[  212.661675][   T11] device hsr_slave_1 left promiscuous mode
[  212.670896][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.692010][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.762044][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.769487][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.830085][   T11] device bridge_slave_1 left promiscuous mode
[  212.871217][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.919664][   T11] device bridge_slave_0 left promiscuous mode
[  212.931416][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.041734][   T11] device veth1_macvtap left promiscuous mode
[  213.047805][   T11] device veth0_macvtap left promiscuous mode
[  213.082591][   T11] device veth1_vlan left promiscuous mode
[  213.088423][   T11] device veth0_vlan left promiscuous mode
[  213.727722][ T3651] Bluetooth: hci2: command tx timeout
[  216.219997][   T11] team0 (unregistering): Port device team_slave_1 removed
[  216.286307][ T7362] 9pnet: p9_errstr2errno: server reported unknown error œæç(üx<xÚæ¬-n:Óš�ÊšðãƒÌØe Ê6Öª‹A¡o
[  216.379577][   T11] team0 (unregistering): Port device team_slave_0 removed
[  216.532290][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  216.654257][ T3755] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  216.681621][ T3638] Bluetooth: hci4: command 0x0406 tx timeout
[  216.891978][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  217.730393][ T7383] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  218.234430][   T11] bond0 (unregistering): Released all slaves
[  218.529281][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  218.539303][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  218.555250][ T7183] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.561294][ T7402] loop1: detected capacity change from 0 to 1024
[  218.586214][ T7402] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.612785][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  218.651507][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  218.773824][ T7183] device veth0_vlan entered promiscuous mode
[  218.790266][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  218.803726][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  218.831565][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  218.839317][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  218.885678][ T7183] device veth1_vlan entered promiscuous mode
[  219.007965][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  219.024406][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  219.039743][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  219.050750][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  219.070804][ T7183] device veth0_macvtap entered promiscuous mode
[  219.096405][ T7183] device veth1_macvtap entered promiscuous mode
[  219.158125][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.187629][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.199930][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.210705][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.227702][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.238637][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.249159][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.259731][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.271893][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.282451][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.309060][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.322228][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  219.330662][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  219.367684][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  219.392388][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  219.408692][ T7426] loop4: detected capacity change from 0 to 2048
[  219.438772][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.471096][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.491353][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.511114][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.528174][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.551215][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.569237][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.588152][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.598381][ T7183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.622654][ T7183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.658931][ T7183] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.675780][ T7183] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.694817][ T7183] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.711078][ T7183] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.735685][ T7183] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.766868][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  219.785494][ T4740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  219.814570][ T7433] device syzkaller1 entered promiscuous mode
[  219.998513][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.032233][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.050862][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  220.094130][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.112260][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.168358][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  220.184944][ T7442] loop1: detected capacity change from 0 to 1764
[  220.393887][ T7454] loop1: detected capacity change from 0 to 1024
[  220.451965][ T7454] hfsplus: inconsistency in B*Tree (31095,1,255,1,0)
[  220.496796][ T7454] hfsplus: xattr searching failed
[  220.501182][ T3911] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  220.509587][ T7458] hfsplus: inconsistency in B*Tree (31095,1,255,1,0)
[  220.628763][ T7439] loop4: detected capacity change from 0 to 32768
[  220.639609][ T7439] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1110 (7439)
[  220.662617][ T7439] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.677733][ T7439] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  220.688728][ T7439] BTRFS info (device loop4): turning on flush-on-commit
[  220.701607][ T7439] BTRFS info (device loop4): enabling auto defrag
[  220.708068][ T7439] BTRFS info (device loop4): doing ref verification
[  220.718216][ T7439] BTRFS info (device loop4): max_inline at 0
[  220.721386][    T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  220.724909][ T7439] BTRFS info (device loop4): force clearing of disk cache
[  220.750598][ T7439] BTRFS info (device loop4): turning on sync discard
[  220.778026][ T7439] BTRFS info (device loop4): disabling free space tree
[  220.871228][ T3911] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  220.881800][ T3911] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  220.904992][ T7439] BTRFS info (device loop4): enabling ssd optimizations
[  220.925176][ T7439] BTRFS info (device loop4): rebuilding free space tree
[  220.971385][ T3911] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  220.980763][ T3911] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  220.989529][ T3911] usb 4-1: SerialNumber: syz
[  220.993090][ T7439] BTRFS info (device loop4): disabling free space tree
[  221.002015][ T7439] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  221.021939][ T7439] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  221.101298][    T7] usb 1-1: config 0 interface 0 has no altsetting 0
[  221.108158][    T7] usb 1-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[  221.120758][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.133035][    T7] usb 1-1: config 0 descriptor??
[  221.181159][ T3755] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  221.195687][ T3634] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  221.335692][ T3911] usb 4-1: 0:2 : does not exist
[  221.340648][ T3911] usb 4-1: unit 5 not found!
[  221.380558][ T3911] usb 4-1: USB disconnect, device number 13
[  221.461766][ T3679] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  221.541320][ T3755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.552615][ T3755] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.562653][ T3755] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  221.571799][ T3755] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.582784][ T3755] usb 3-1: config 0 descriptor??
[  221.701119][ T3679] usb 2-1: Using ep0 maxpacket: 8
[  221.821199][ T3679] usb 2-1: config index 0 descriptor too short (expected 301, got 45)
[  221.831807][ T3679] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  221.841908][ T3679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  221.851749][ T3679] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  221.861711][ T3679] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  221.874725][ T3679] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  221.883871][ T3679] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.025248][ T7496] "syz.4.1137" (7496) uses obsolete ecb(arc4) skcipher
[  222.056132][ T7498] loop3: detected capacity change from 0 to 1024
[  222.064574][ T3755] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  222.074042][ T3755] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0
[  222.151212][ T3679] usb 2-1: usb_control_msg returned -32
[  222.157117][ T3679] usbtmc 2-1:16.0: can't read capabilities
[  222.277467][    T7] radio-keene 1-1:0.0: V4L2 device registered as radio32
[  222.291683][ T3755] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE
[  222.490760][    T7] usb 1-1: USB disconnect, device number 12
[  222.548384][ T7525] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1141'.
[  222.619034][ T7525] device hsr_slave_1 left promiscuous mode
[  222.941189][ T3755] cp2112 0003:10C4:EA90.0009: error reading lock byte: -71
[  222.961272][ T3755] usb 3-1: USB disconnect, device number 10
[  222.972557][ T7527] loop3: detected capacity change from 0 to 40427
[  222.982698][ T7527] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[  222.991140][ T7527] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  223.004074][ T7527] F2FS-fs (loop3): invalid crc value
[  223.020430][ T7527] F2FS-fs (loop3): Found nat_bits in checkpoint
[  223.079081][ T7527] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  223.084949][ T7534] loop0: detected capacity change from 0 to 512
[  223.093380][ T7527] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  223.116266][   T27] audit: type=1800 audit(1726696496.636:61): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1142" name="file0" dev="loop3" ino=10 res=0 errno=0
[  223.180417][ T7534] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  223.189884][ T7534] ext4 filesystem being mounted at /2/bus supports timestamps until 2038 (0x7fffffff)
[  223.211828][ T4643] syz-executor: attempt to access beyond end of device
[  223.211828][ T4643] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  223.306746][ T7183] EXT4-fs (loop0): unmounting filesystem.
[  223.904402][ T7551] loop4: detected capacity change from 0 to 1024
[  223.930904][ T7552] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.010848][ T3722] hfsplus: b-tree write err: -5, ino 4
[  224.102519][ T7542] loop0: detected capacity change from 0 to 32768
[  224.126942][ T7542] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  224.177478][  T151] usb 2-1: USB disconnect, device number 8
[  224.216508][ T7183] ocfs2: Unmounting device (7,0) on (node local)
[  224.361173][ T3854] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  224.593965][ T7572] device batadv_slave_1 entered promiscuous mode
[  224.612842][ T7571] device batadv_slave_1 left promiscuous mode
[  224.693119][ T7574] loop0: detected capacity change from 0 to 256
[  224.771867][ T3854] usb 5-1: config 0 has no interfaces?
[  224.777830][ T3854] usb 5-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  224.799565][ T3854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  224.816841][ T3854] usb 5-1: config 0 descriptor??
[  224.918269][ T7562] loop1: detected capacity change from 0 to 32768
[  224.956489][ T7562] XFS (loop1): Mounting V5 Filesystem
[  225.003382][ T7562] XFS (loop1): Ending clean mount
[  225.069142][ T3755] usb 5-1: USB disconnect, device number 15
[  225.080557][ T7599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1166'.
[  225.147517][ T6478] XFS (loop1): Unmounting Filesystem
[  225.305015][ T7603] loop0: detected capacity change from 0 to 512
[  225.326344][ T7603] EXT4-fs error (device loop0): ext4_get_branch:178: inode #13: block 2: comm syz.0.1169: invalid block
[  225.348555][ T7603] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1169: invalid indirect mapped block 10 (level 1)
[  225.362587][ T7603] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.1169: invalid indirect mapped block 8 (level 1)
[  225.378291][ T7603] EXT4-fs (loop0): 1 truncate cleaned up
[  225.384431][ T7603] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  225.460135][ T7603] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  225.510537][ T7183] EXT4-fs error (device loop0): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[  225.566353][ T7183] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  225.585433][ T7183] EXT4-fs error (device loop0): ext4_dirty_inode:6086: inode #2: comm syz-executor: mark_inode_dirty error
[  225.621528][ T7183] EXT4-fs (loop0): unmounting filesystem.
[  226.042029][    T7] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  226.182739][   T38] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.281126][    T7] usb 5-1: Using ep0 maxpacket: 8
[  226.363150][   T38] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.411375][    T7] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.427816][    T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  226.453209][ T7630] loop3: detected capacity change from 0 to 2048
[  226.475155][    T7] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  226.492121][    T7] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  226.500223][ T7630] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  226.524842][    T7] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  226.559497][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.646441][   T38] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.784968][   T38] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.821391][    T7] usb 5-1: GET_CAPABILITIES returned 0
[  226.826942][    T7] usbtmc 5-1:16.0: can't read capabilities
[  226.940139][ T3648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  226.951424][ T3648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  226.962451][ T3648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  226.974052][ T3648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  226.991821][ T3648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  226.999086][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  227.033334][ T3854] usb 5-1: USB disconnect, device number 16
[  227.418905][ T7634] chnl_net:caif_netlink_parms(): no params data found
[  227.623375][ T7631] overlayfs: failed to resolve './file0/../file0': -2
[  227.711832][ T7633] loop3: detected capacity change from 0 to 32768
[  227.751488][ T7633] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1185 (7633)
[  227.801292][ T7634] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.808462][ T7634] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.810390][ T7633] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  227.846456][ T7633] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  227.847074][ T7647] loop4: detected capacity change from 0 to 512
[  227.863405][ T7634] device bridge_slave_0 entered promiscuous mode
[  227.868728][ T7633] BTRFS info (device loop3): setting nodatacow, compression disabled
[  227.878504][ T7639] loop1: detected capacity change from 0 to 32768
[  227.883322][ T7633] BTRFS info (device loop3): max_inline at 0
[  227.889308][ T7647] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  227.893520][ T7633] BTRFS info (device loop3): enabling disk space caching
[  227.908055][ T7647] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (28729!=33349)
[  227.909328][ T7633] BTRFS info (device loop3): turning off barriers
[  227.934238][ T7633] BTRFS info (device loop3): turning on flush-on-commit
[  227.937855][ T7647] EXT4-fs (loop4): orphan cleanup on readonly fs
[  227.951747][ T7634] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.958865][ T7634] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.959464][ T7633] BTRFS info (device loop3): doing ref verification
[  227.968310][ T7634] device bridge_slave_1 entered promiscuous mode
[  227.981263][ T7647] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz.4.1196: bad orphan inode 15
[  227.983808][ T7633] BTRFS info (device loop3): force clearing of disk cache
[  227.998826][ T7633] BTRFS info (device loop3): enabling ssd optimizations
[  228.001959][ T7639] XFS (loop1): Mounting V5 Filesystem
[  228.012210][ T7633] BTRFS info (device loop3): max_inline at 4096
[  228.016917][ T7647] ext4_test_bit(bit=14, block=20) = 0
[  228.018566][ T7633] BTRFS info (device loop3): disk space caching is enabled
[  228.051527][ T7647] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  228.078666][ T7647] EXT4-fs (loop4): ext4_remount: Checksum for group 0 failed (28729!=33349)
[  228.099474][ T7634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  228.155977][ T7633] BTRFS info (device loop3): rebuilding free space tree
[  228.174364][ T7633] BTRFS info (device loop3): disabling free space tree
[  228.174901][ T3634] EXT4-fs (loop4): unmounting filesystem.
[  228.181384][ T7633] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  228.181472][ T7633] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  228.191726][ T7639] XFS (loop1): Ending clean mount
[  228.217976][ T7639] XFS (loop1): Quotacheck needed: Please wait.
[  228.252994][ T7634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.306813][ T7639] XFS (loop1): Quotacheck: Done.
[  228.371782][ T4643] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  228.392962][ T7634] team0: Port device team_slave_0 added
[  229.088744][ T3648] Bluetooth: hci2: command tx timeout
[  229.504903][ T7634] team0: Port device team_slave_1 added
[  229.588456][ T6478] XFS (loop1): Unmounting Filesystem
[  229.607354][   T38] device hsr_slave_0 left promiscuous mode
[  229.623641][   T38] device hsr_slave_1 left promiscuous mode
[  229.679477][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.721132][   T38] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.732070][   T38] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.739494][   T38] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.784541][   T38] device bridge_slave_1 left promiscuous mode
[  229.790785][   T38] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.843082][   T38] device bridge_slave_0 left promiscuous mode
[  229.849354][   T38] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.981584][   T38] device veth1_macvtap left promiscuous mode
[  229.987649][   T38] device veth0_macvtap left promiscuous mode
[  230.001321][   T38] device veth1_vlan left promiscuous mode
[  230.007364][   T38] device veth0_vlan left promiscuous mode
[  231.161995][ T3651] Bluetooth: hci2: command tx timeout
[  231.669837][ T7693] loop4: detected capacity change from 0 to 512
[  231.707581][ T7695] loop1: detected capacity change from 0 to 512
[  231.785140][ T7695] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  231.798010][ T7693] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  231.840818][ T7693] ext4 filesystem being mounted at /243/file0 supports timestamps until 2038 (0x7fffffff)
[  231.847086][ T7695] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038 (0x7fffffff)
[  231.872444][ T7708] input: syz0 as /devices/virtual/input/input11
[  231.960903][ T7711] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  231.984941][ T7695] EXT4-fs error (device loop1): ext4_get_first_dir_block:3589: inode #12: block 32: comm syz.1.1198: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  232.024691][ T7695] EXT4-fs error (device loop1): ext4_get_first_dir_block:3592: inode #12: comm syz.1.1198: directory missing '.'
[  232.034933][ T7713] 9pnet: p9_errstr2errno: server reported unknown error œæçûŒÎsÅwRk‚Ú·M6°'–û@1![g™ã±8
[  232.047949][ T3651] Bluetooth: hci5: command 0x0406 tx timeout
[  232.100885][ T6478] EXT4-fs (loop1): unmounting filesystem.
[  232.155871][ T3634] EXT4-fs (loop4): unmounting filesystem.
[  232.164577][   T38] team0 (unregistering): Port device team_slave_1 removed
[  232.303818][   T38] team0 (unregistering): Port device team_slave_0 removed
[  232.344791][ T7717] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  232.437933][   T38] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.587077][   T38] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.661930][ T7726] loop4: detected capacity change from 0 to 1024
[  232.686535][ T7726] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  232.725806][ T7726] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  232.873014][ T3634] EXT4-fs (loop4): unmounting filesystem.
[  232.988532][ T7721] loop1: detected capacity change from 0 to 32768
[  233.067008][ T7721] XFS (loop1): Mounting V5 Filesystem
[  233.227339][ T7721] XFS (loop1): Ending clean mount
[  233.234658][ T7721] XFS (loop1): Quotacheck needed: Please wait.
[  233.241290][ T3638] Bluetooth: hci2: command tx timeout
[  233.318495][ T7721] XFS (loop1): Quotacheck: Done.
[  233.362675][   T27] audit: type=1804 audit(1726696506.876:62): pid=7721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1207" name="/newroot/92/file0/file0/file0" dev="loop1" ino=9284 res=1 errno=0
[  233.613099][ T6478] XFS (loop1): Unmounting Filesystem
[  233.893736][   T38] bond0 (unregistering): Released all slaves
[  234.056410][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.056429][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.056451][ T7634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.061985][ T7634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.062001][ T7634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.062022][ T7634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.177890][ T7634] device hsr_slave_0 entered promiscuous mode
[  234.179877][ T7634] device hsr_slave_1 entered promiscuous mode
[  234.180836][ T7634] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.180936][ T7634] Cannot create hsr debugfs directory
[  234.435554][ T7762] 9pnet_fd: Insufficient options for proto=fd
[  234.642184][ T7768] loop3: detected capacity change from 0 to 2048
[  234.690934][ T7768] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  234.735028][   T27] audit: type=1804 audit(1726696508.256:63): pid=7768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1221" name="/newroot/208/file0/bus" dev="loop3" ino=16 res=1 errno=0
[  234.741330][ T7768] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1221: bg 0: block 234: padding at end of block bitmap is not set
[  234.792900][ T7768] EXT4-fs (loop3): Remounting filesystem read-only
[  234.825054][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  234.945609][ T7781] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1225'.
[  234.994538][ T3753] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  235.071698][ T7634] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  235.093734][ T7634] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  235.105059][ T7634] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  235.117201][ T7634] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  235.177807][ T7634] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.195754][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  235.204454][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  235.216387][ T7634] 8021q: adding VLAN 0 to HW filter on device team0
[  235.226589][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  235.235816][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  235.241300][ T3753] usb 2-1: Using ep0 maxpacket: 16
[  235.250084][   T38] bridge0: port 1(bridge_slave_0) entered blocking state
[  235.257265][   T38] bridge0: port 1(bridge_slave_0) entered forwarding state
[  235.274216][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  235.282830][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  235.291937][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  235.302925][   T38] bridge0: port 2(bridge_slave_1) entered blocking state
[  235.310041][   T38] bridge0: port 2(bridge_slave_1) entered forwarding state
[  235.318693][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  235.329016][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  235.333766][ T3638] Bluetooth: hci2: command tx timeout
[  235.346913][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  235.358773][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  235.378885][ T7634] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  235.391405][ T7634] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  235.406900][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  235.416025][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  235.424890][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  235.433690][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  235.442483][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  235.451301][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  235.459999][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  235.470181][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  235.521594][ T3753] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=9a.3c
[  235.535623][ T3753] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.547113][ T3753] usb 2-1: Product: syz
[  235.555502][ T3753] usb 2-1: Manufacturer: syz
[  235.560492][ T3753] usb 2-1: SerialNumber: syz
[  235.585078][ T3753] usb 2-1: config 0 descriptor??
[  235.619249][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.628018][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.639114][ T3753] usb_ehset_test: probe of 2-1:0.0 failed with error -32
[  235.652388][ T7634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.668335][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  235.678252][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  235.700384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  235.708792][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  235.719579][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  235.727882][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  235.738127][ T7634] device veth0_vlan entered promiscuous mode
[  235.751603][ T7634] device veth1_vlan entered promiscuous mode
[  235.773037][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  235.782951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  235.792420][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  235.801423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  235.812426][ T7634] device veth0_macvtap entered promiscuous mode
[  235.828466][ T7634] device veth1_macvtap entered promiscuous mode
[  235.844056][ T3753] usb 2-1: USB disconnect, device number 9
[  235.849185][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.883818][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.897158][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.910849][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.931961][ T7798] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1233'.
[  235.948754][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.960258][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.976556][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.987222][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.000564][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.015492][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.029184][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.039759][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  236.048977][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  236.057618][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  236.070577][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  236.090850][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.108472][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.122742][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.133781][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.143705][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.154555][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.167407][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.207002][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.245492][ T7634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.269553][ T7634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.291920][ T7634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.292722][ T7805] loop4: detected capacity change from 0 to 4096
[  236.302157][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  236.323126][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  236.331235][ T7805] ntfs: volume version 3.1.
[  236.355148][ T7634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.365140][ T7634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.380684][ T7634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.398879][ T7634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.453811][ T3648] Bluetooth: hci6: sending frame failed (-49)
[  236.460468][ T3651] Bluetooth: hci5: unexpected event for opcode 0x043d
[  236.462393][ T7811] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  236.475530][ T3638] Bluetooth: hci6: Opcode 0x1003 failed: -49
[  236.602951][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.649046][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.649778][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  236.679989][   T38] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  236.726193][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  236.961260][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  237.675263][ T7857] loop1: detected capacity change from 0 to 1024
[  238.033091][ T7829] loop0: detected capacity change from 0 to 40427
[  238.070897][ T7829] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  238.100291][ T7829] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  238.138656][ T7829] F2FS-fs (loop0): invalid crc value
[  238.170404][ T7829] F2FS-fs (loop0): Found nat_bits in checkpoint
[  238.203854][ T7876] serio: Serial port pts0
[  238.303687][ T7829] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  238.310762][ T7829] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  238.420965][ T7853] loop3: detected capacity change from 0 to 32768
[  238.472962][ T7853] XFS (loop3): Mounting V5 Filesystem
[  238.543074][ T7853] XFS (loop3): Ending clean mount
[  238.556141][ T7853] XFS (loop3): Quotacheck needed: Please wait.
[  238.625119][ T7853] XFS (loop3): Quotacheck: Done.
[  238.724511][ T4643] XFS (loop3): Unmounting Filesystem
[  238.961800][ T7897] loop3: detected capacity change from 0 to 128
[  239.097268][ T7902] loop1: detected capacity change from 0 to 512
[  239.131316][ T3755] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  239.146391][ T7902] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  239.183080][ T7902] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  239.199877][ T7902] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.1274: Failed to acquire dquot type 0
[  239.218054][ T7902] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  239.229042][ T7902] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  239.246688][ T7902] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.1274: Failed to acquire dquot type 0
[  239.274095][ T7902] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  239.297145][ T7902] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  239.311294][ T7902] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.1274: Failed to acquire dquot type 0
[  239.335981][ T7902] EXT4-fs (loop1): 1 orphan inode deleted
[  239.342422][ T7902] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  239.351854][ T7902] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038 (0x7fffffff)
[  239.391130][ T3755] usb 1-1: Using ep0 maxpacket: 8
[  239.429113][ T6478] EXT4-fs (loop1): unmounting filesystem.
[  239.451397][ T3916] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  239.511539][ T3755] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  239.519830][ T3755] usb 1-1: config 179 has no interface number 0
[  239.541111][ T3755] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  239.571433][ T3755] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  239.616444][ T3755] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  239.651234][ T3755] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  239.671205][ T3755] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  239.680273][ T3755] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.691092][ T3916] usb 4-1: Using ep0 maxpacket: 8
[  240.127169][ T7894] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  240.266652][ T7915] loop4: detected capacity change from 0 to 32768
[  241.227212][ T3916] usb 4-1: unable to read config index 0 descriptor/start: -71
[  241.235039][ T3755] usb 1-1: can't set config #179, error -71
[  241.254930][ T3755] usb 1-1: USB disconnect, device number 13
[  241.268494][ T7915] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  241.280524][ T3916] usb 4-1: can't read configurations, error -71
[  241.303554][   T27] audit: type=1800 audit(1726696514.826:64): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1278" name="file2" dev="loop4" ino=17058 res=0 errno=0
[  241.368699][   T27] audit: type=1804 audit(1726696514.826:65): pid=7915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1278" name="/newroot/262/file1/bus" dev="loop4" ino=17059 res=1 errno=0
[  241.400543][ T3634] ocfs2: Unmounting device (7,4) on (node local)
[  241.421382][ T7933] loop1: detected capacity change from 0 to 2048
[  241.454230][ T7933] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  241.485464][ T7933] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  243.163881][ T7948] loop0: detected capacity change from 0 to 32768
[  243.761389][ T7949] loop1: detected capacity change from 0 to 32768
[  243.879868][ T7949] XFS: ikeep mount option is deprecated.
[  244.237653][ T7948] 
[  244.237653][ T7948]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.237653][ T7948] 
[  244.289903][ T7949] XFS (loop1): Mounting V5 Filesystem
[  244.305888][ T7948] 
[  244.305888][ T7948]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.305888][ T7948] 
[  244.321195][ T7948] 
[  244.321195][ T7948]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.321195][ T7948] 
[  244.361316][ T7948] 
[  244.361316][ T7948]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.361316][ T7948] 
[  244.373803][ T7948] 
[  244.373803][ T7948]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.373803][ T7948] 
[  244.432115][ T7949] XFS (loop1): Ending clean mount
[  244.458468][ T7949] XFS (loop1): Quotacheck needed: Please wait.
[  244.487588][ T7970] non-latin1 character 0x3ff found in JFS file name
[  244.502712][ T7976] loop3: detected capacity change from 0 to 2048
[  244.505217][  T133] 
[  244.505217][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.505217][  T133] 
[  244.531937][ T7976] EXT4-fs: Ignoring removed mblk_io_submit option
[  244.540030][ T7970] mount with iocharset=utf8 to access
[  244.575137][ T7974] non-latin1 character 0x3ff found in JFS file name
[  244.597070][ T7974] mount with iocharset=utf8 to access
[  244.607458][ T7976] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  244.636684][ T7949] XFS (loop1): Quotacheck: Done.
[  244.652182][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1300'.
[  244.689764][   T56] 
[  244.689764][   T56]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.689764][   T56] 
[  244.703600][   T56] 
[  244.703600][   T56]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.703600][   T56] 
[  244.715617][ T7634] 
[  244.715617][ T7634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.715617][ T7634] 
[  244.729224][  T132] 
[  244.729224][  T132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.729224][  T132] 
[  244.771107][ T7634] 
[  244.771107][ T7634]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  244.771107][ T7634] 
[  244.819423][ T6478] XFS (loop1): Unmounting Filesystem
[  244.919549][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  245.122690][ T7993] loop3: detected capacity change from 0 to 1024
[  245.211128][ T7993] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  245.389478][ T8006] loop4: detected capacity change from 0 to 1024
[  245.412866][ T8005] loop1: detected capacity change from 0 to 2048
[  245.425342][ T8005] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.477375][ T8006] hfsplus: request for non-existent node 1280 in B*Tree
[  245.491746][ T8006] hfsplus: request for non-existent node 1280 in B*Tree
[  245.617532][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  245.646615][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  245.687990][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  245.717330][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  245.738968][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  245.768185][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  248.540922][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  248.599432][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  248.643049][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  248.667923][ T4643] EXT4-fs error (device loop3): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  248.895491][ T3859] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  249.047041][ T8084] device team_slave_0 entered promiscuous mode
[  249.053764][ T8084] device team_slave_1 entered promiscuous mode
[  249.060009][ T8084] device virt_wifi0 entered promiscuous mode
[  249.075727][ T8084] device team_slave_0 left promiscuous mode
[  249.081734][ T8084] device team_slave_1 left promiscuous mode
[  249.087930][ T8084] device virt_wifi0 left promiscuous mode
[  249.187801][ T8073] loop1: detected capacity change from 0 to 32768
[  249.223771][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  249.290724][ T8088] loop4: detected capacity change from 0 to 128
[  249.297665][ T3859] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  249.308871][ T3859] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.320028][ T3859] usb 1-1: config 0 descriptor??
[  249.372349][ T3859] cp210x 1-1:0.0: cp210x converter detected
[  249.681232][ T3680] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  249.801956][ T3859] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[  249.846847][ T3859] usb 1-1: cp210x converter now attached to ttyUSB0
[  249.943595][ T3680] usb 5-1: Using ep0 maxpacket: 32
[  249.959317][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  249.969444][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  249.977904][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  249.993353][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  250.001312][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  250.008529][ T3648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  250.044729][ T3859] usb 1-1: USB disconnect, device number 14
[  250.056415][ T3859] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  250.069897][ T3859] cp210x 1-1:0.0: device disconnected
[  250.076010][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.089507][ T3680] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.099639][ T3680] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  250.108900][ T3680] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.118843][ T3680] usb 5-1: config 0 descriptor??
[  250.168476][ T3680] hub 5-1:0.0: USB hub found
[  250.371336][ T3680] hub 5-1:0.0: 1 port detected
[  250.432759][ T8097] chnl_net:caif_netlink_parms(): no params data found
[  250.477753][ T8095] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1333'.
[  250.591300][ T3680] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  250.608388][ T3680] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  250.721961][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.729358][ T8097] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.741332][ T3680] usbhid 5-1:0.0: can't add hid device: -71
[  250.747796][ T3680] usbhid: probe of 5-1:0.0 failed with error -71
[  250.767935][ T8097] device bridge_slave_0 entered promiscuous mode
[  250.791979][ T3680] usb 5-1: USB disconnect, device number 17
[  250.796786][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.824234][ T8097] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.852688][ T8097] device bridge_slave_1 entered promiscuous mode
[  250.946398][ T8097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  251.664999][ T8097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  251.768596][ T8097] team0: Port device team_slave_0 added
[  251.803294][ T8097] team0: Port device team_slave_1 added
[  251.893420][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_0
[  251.900389][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.981058][ T8097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.012943][ T8097] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.041401][ T3638] Bluetooth: hci3: command tx timeout
[  252.042482][ T8097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.146711][ T8097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  252.212969][ T8130] device netdevsim0 entered promiscuous mode
[  252.219080][ T8130] device macvtap1 entered promiscuous mode
[  252.262315][ T8130] device netdevsim0 left promiscuous mode
[  252.472347][ T8097] device hsr_slave_0 entered promiscuous mode
[  252.489991][ T8097] device hsr_slave_1 entered promiscuous mode
[  252.518201][ T8123] loop1: detected capacity change from 0 to 32768
[  252.518973][ T8097] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  252.532684][ T8123] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz.1.1342 (8123)
[  252.555238][ T8097] Cannot create hsr debugfs directory
[  252.555617][ T8123] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  252.594246][ T8123] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  252.620672][ T8123] BTRFS info (device loop1): using free space tree
[  252.891241][ T8123] BTRFS info (device loop1): enabling ssd optimizations
[  253.057964][ T8097] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.160706][ T6478] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  253.480442][ T8097] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.531321][ T3861] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  253.640607][ T8097] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.651577][   T28] INFO: task syz.2.211:4523 blocked for more than 143 seconds.
[  253.659690][   T28]       Not tainted 6.1.111-syzkaller #0
[  253.694868][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  253.711370][   T28] task:syz.2.211       state:D stack:24496 pid:4523  ppid:3646   flags:0x00004004
[  253.720632][   T28] Call Trace:
[  253.741061][   T28]  <TASK>
[  253.744041][   T28]  __schedule+0x143f/0x4570
[  253.748592][   T28]  ? xlog_grant_head_wait+0x1ee/0xa00
[  253.771050][   T28]  ? release_firmware_map_entry+0x186/0x186
[  253.777007][   T28]  ? xlog_space_left+0xa9/0x2b0
[  253.791050][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  253.796294][   T28]  ? xlog_grant_push_threshold+0x1a3/0x1f0
[  253.811136][   T28]  schedule+0xbf/0x180
[  253.815276][   T28]  xlog_grant_head_wait+0x3b6/0xa00
[  253.820500][   T28]  xlog_grant_head_check+0x295/0x480
[  253.841114][   T28]  ? xlog_grant_push_ail+0xd0/0xd0
[  253.846267][   T28]  ? xlog_grant_push_threshold+0x1a3/0x1f0
[  253.871219][   T28]  xfs_log_reserve+0x3e1/0xc30
[  253.876030][   T28]  ? xlog_grant_head_check+0x480/0x480
[  253.891292][   T28]  ? xfs_mod_freecounter+0x1e2/0x490
[  253.896615][   T28]  xfs_trans_reserve+0x239/0x6a0
[  253.911879][   T28]  xfs_trans_alloc+0x41e/0x890
[  253.916686][   T28]  xfs_trans_alloc_inode+0x129/0x450
[  253.931241][ T3861] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  253.940816][   T28]  ? xfs_trans_dup+0x6a0/0x6a0
[  253.946038][ T3861] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.961210][   T28]  ? xfs_da_hashname+0x26a/0x370
[  253.966184][   T28]  ? xfs_attr_leaf_newentsize+0xd5/0x1d0
[  253.982646][ T3861] usb 1-1: config 0 descriptor??
[  253.987780][   T28]  xfs_attr_set+0xa4e/0x1660
[  254.000480][ T8159] loop4: detected capacity change from 0 to 40427
[  254.001058][   T28]  ? xfs_attr_leaf_shrink+0x410/0x410
[  254.021047][   T28]  ? look_up_lock_class+0x77/0x140
[  254.023777][ T8159] F2FS-fs (loop4): invalid crc value
[  254.026179][   T28]  ? register_lock_class+0x100/0x990
[  254.026214][   T28]  ? handle_mm_fault+0x3715/0x5340
[  254.040488][ T8159] F2FS-fs (loop4): Found nat_bits in checkpoint
[  254.044980][ T3861] gspca_main: cpia1-2.14.0 probing 0813:0001
[  254.081128][   T28]  ? is_dynamic_key+0x260/0x260
[  254.086029][   T28]  xfs_xattr_set+0x227/0x3a0
[  254.090633][   T28]  ? xfs_xattr_get+0x2f0/0x2f0
[  254.108379][ T8159] F2FS-fs (loop4): Start checkpoint disabled!
[  254.111056][   T28]  ? evm_protect_xattr+0x366/0xb10
[  254.119575][   T28]  ? xfs_xattr_get+0x2f0/0x2f0
[  254.120759][ T8159] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  254.131987][ T3648] Bluetooth: hci3: command tx timeout
[  254.143723][   T28]  __vfs_setxattr+0x3e7/0x420
[  254.148451][   T28]  __vfs_setxattr_noperm+0x12a/0x5e0
[  254.161072][   T28]  vfs_setxattr+0x21d/0x420
[  254.171125][   T28]  ? xattr_permission+0x4f0/0x4f0
[  254.176404][   T28]  ? _copy_from_user+0xb1/0x170
[  254.185116][ T8159] syz.4.1350: attempt to access beyond end of device
[  254.185116][ T8159] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  254.188676][   T28]  ? copy_user_enhanced_fast_string+0xa/0x40
[  254.211174][   T28]  ? _copy_from_user+0x109/0x170
[  254.216266][   T28]  setxattr+0x250/0x2b0
[  254.220503][   T28]  ? path_setxattr+0x2a0/0x2a0
[  254.227727][   T28]  ? __mnt_want_write+0x222/0x2a0
[  254.232927][   T28]  path_setxattr+0x1bc/0x2a0
[  254.237613][   T28]  ? simple_xattr_list_add+0xf0/0xf0
[  254.252769][   T28]  ? syscall_enter_from_user_mode+0x2e/0x230
[  254.258894][   T28]  __x64_sys_setxattr+0xb7/0xd0
[  254.264036][   T28]  do_syscall_64+0x3b/0xb0
[  254.268546][   T28]  ? clear_bhb_loop+0x45/0xa0
[  254.273531][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.279520][   T28] RIP: 0033:0x7fbd1417def9
[  254.292557][   T28] RSP: 002b:00007fbd14fa6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  254.301292][   T28] RAX: ffffffffffffffda RBX: 00007fbd14335f80 RCX: 00007fbd1417def9
[  254.309379][   T28] RDX: 0000000020000100 RSI: 0000000020000340 RDI: 0000000020000040
[  254.317732][   T28] RBP: 00007fbd141f0b76 R08: 0000000000000000 R09: 0000000000000000
[  254.325987][   T28] R10: 000000000000fc21 R11: 0000000000000246 R12: 0000000000000000
[  254.334285][   T28] R13: 0000000000000000 R14: 00007fbd14335f80 R15: 00007fff7bb10988
[  254.342550][   T28]  </TASK>
[  254.350615][   T28] INFO: task syz.2.211:4554 blocked for more than 144 seconds.
[  254.364186][   T28]       Not tainted 6.1.111-syzkaller #0
[  254.370011][   T28] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  254.385708][   T28] task:syz.2.211       state:D stack:27616 pid:4554  ppid:3646   flags:0x00004004
[  254.398619][   T28] Call Trace:
[  254.406622][   T28]  <TASK>
[  254.408960][ T8055] kworker/u4:10: attempt to access beyond end of device
[  254.408960][ T8055] loop4: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  254.409627][   T28]  __schedule+0x143f/0x4570
[  254.435776][   T28]  ? xlog_grant_head_wait+0x1ee/0xa00
[  254.444494][ T8055] kworker/u4:10: attempt to access beyond end of device
[  254.444494][ T8055] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  254.447949][   T28]  ? release_firmware_map_entry+0x186/0x186
[  254.476337][   T28]  ? xlog_space_left+0xa9/0x2b0
[  254.486103][   T28]  ? do_raw_spin_unlock+0x137/0x8a0
[  254.491641][   T28]  ? xlog_grant_push_threshold+0x166/0x1f0
[  254.497579][   T28]  schedule+0xbf/0x180
[  254.501877][   T28]  xlog_grant_head_wait+0x3b6/0xa00
[  254.507450][   T28]  xlog_grant_head_check+0x295/0x480
[  254.513119][   T28]  ? xlog_grant_push_ail+0xd0/0xd0
[  254.518328][   T28]  ? xlog_grant_push_threshold+0x166/0x1f0
[  254.524300][   T28]  xfs_log_reserve+0x3e1/0xc30
[  254.529339][   T28]  ? xlog_grant_head_check+0x480/0x480
[  254.545298][   T28]  ? xfs_mod_freecounter+0x1e2/0x490
[  254.556029][   T28]  xfs_trans_reserve+0x239/0x6a0
[  254.565590][   T28]  xfs_trans_alloc+0x41e/0x890
[  254.570466][   T28]  xfs_trans_alloc_icreate+0xc5/0x2b0
[  254.578737][   T28]  ? xfs_trans_alloc_inode+0x450/0x450
[  254.589857][   T28]  ? get_cached_acl+0xf7/0x600
[  254.594911][   T28]  xfs_create+0x749/0x1360
[  254.599435][   T28]  ? xfs_inode_inherit_flags2+0x340/0x340
[  254.605609][   T28]  ? posix_acl_create+0x155/0x420
[  254.611147][   T28]  xfs_generic_create+0x48d/0xd70
[  254.616315][   T28]  ? xfs_vn_tmpfile+0xc0/0xc0
[  254.621143][   T28]  ? from_kgid+0x1a3/0x730
[  254.625788][   T28]  ? common_perm+0x16a/0x1c0
[  254.630505][   T28]  ? apparmor_path_mkdir+0x204/0x2a0
[  254.636068][   T28]  ? generic_permission+0x21c/0x4f0
[  254.641462][   T28]  ? inode_permission+0xf7/0x450
[  254.646594][   T28]  ? bpf_lsm_inode_mkdir+0x5/0x10
[  254.651773][   T28]  ? security_inode_mkdir+0xb4/0x100
[  254.658963][   T28]  vfs_mkdir+0x3b6/0x590
[  254.680251][   T28]  do_mkdirat+0x225/0x360
[  254.690475][   T28]  ? vfs_mkdir+0x590/0x590
[  254.710391][   T28]  ? getname_flags+0x1f9/0x4f0
[  254.727670][   T28]  __x64_sys_mkdirat+0x85/0x90
[  254.751180][   T28]  do_syscall_64+0x3b/0xb0
[  254.755933][   T28]  ? clear_bhb_loop+0x45/0xa0
[  254.760635][   T28]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  254.781126][   T28] RIP: 0033:0x7fbd1417def9
[  254.785578][   T28] RSP: 002b:00007fbd14f85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  254.801129][   T28] RAX: ffffffffffffffda RBX: 00007fbd14336058 RCX: 00007fbd1417def9
[  254.809134][   T28] RDX: 0000000000000000 RSI: 0000000020000140 RDI: ffffffffffffff9c
[  254.841057][   T28] RBP: 00007fbd141f0b76 R08: 0000000000000000 R09: 0000000000000000
[  254.849072][   T28] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  254.857499][   T28] R13: 0000000000000000 R14: 00007fbd14336058 R15: 00007fff7bb10988
[  254.866103][   T28]  </TASK>
[  254.869182][   T28] 
[  254.869182][   T28] Showing all locks held in the system:
[  254.892365][   T28] 1 lock held by rcu_tasks_kthre/12:
[  254.897675][   T28]  #0: ffffffff8d32b1d0 (rcu_tasks.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  254.918828][   T28] 1 lock held by rcu_tasks_trace/13:
[  254.925162][   T28]  #0: ffffffff8d32b9d0 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{3:3}, at: rcu_tasks_one_gp+0x29/0xe30
[  254.936435][   T28] 1 lock held by khungtaskd/28:
[  254.942233][   T28]  #0: ffffffff8d32b000 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x51/0x290
[  254.952404][   T28] 2 locks held by getty/3391:
[  254.957091][   T28]  #0: ffff88807e948098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  254.967898][   T28]  #1: ffffc900031262f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a7/0x1db0
[  254.978328][   T28] 5 locks held by kworker/1:17/3861:
[  254.983939][   T28]  #0: ffff88801d6b7538 ((wq_completion)usb_hub_wq){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  254.998758][   T28]  #1: ffffc90004a87d20 ((work_completion)(&hub->events)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  255.010294][   T28]  #2: ffff888143fd3190 (&dev->mutex){....}-{3:3}, at: hub_event+0x1fe/0x5730
[  255.019514][   T28]  #3: ffff88801d6a1190 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  255.029136][   T28]  #4: ffff88801d6a5118 (&dev->mutex){....}-{3:3}, at: __device_attach+0x8a/0x570
[  255.038721][   T28] 2 locks held by kworker/0:15/3911:
[  255.044344][   T28]  #0: ffff888017c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  255.054958][   T28]  #1: ffffc90004d17d20 ((work_completion)(&rew->rew_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  255.068276][   T28] 3 locks held by syz.2.211/4523:
[  255.073550][   T28]  #0: ffff8880288c2460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  255.083028][   T28]  #1: ffff88805503f778 (&inode->i_sb->s_type->i_mutex_dir_key){++++}-{3:3}, at: vfs_setxattr+0x1dd/0x420
[  255.094747][   T28]  #2: ffff8880288c2650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_inode+0x129/0x450
[  255.105137][   T28] 3 locks held by syz.2.211/4554:
[  255.110244][   T28]  #0: ffff8880288c2460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  255.119696][   T28]  #1: ffff8880741cf778 (&inode->i_sb->s_type->i_mutex_dir_key/1){+.+.}-{3:3}, at: filename_create+0x25c/0x530
[  255.134435][   T28]  #2: ffff8880288c2650 (sb_internal#3){.+.+}-{0:0}, at: xfs_trans_alloc_icreate+0xc5/0x2b0
[  255.144835][   T28] 8 locks held by syz-executor/8097:
[  255.150196][   T28]  #0: ffff88807eaa8460 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x269/0xbc0
[  255.159308][   T28]  #1: ffff888025648088 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1e7/0x4f0
[  255.170216][   T28]  #2: ffff88801f759578 (kn->active#50){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20b/0x4f0
[  255.180493][   T28]  #3: ffffffff8de22aa8 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xf8/0x480
[  255.190986][   T28]  #4: ffff888145f4f0e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xb6/0x880
[  255.201832][   T28]  #5: ffff88805af7e2f8 (&devlink->lock_key#6){+.+.}-{3:3}, at: nsim_drv_remove+0x54/0x160
[  255.212094][   T28]  #6: ffffffff8e4f97a8 (rtnl_mutex){+.+.}-{3:3}, at: nsim_destroy+0x3a/0x140
[  255.221126][   T28]  #7: ffffffff8d3305f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x4f0/0x930
[  255.246773][   T28] 
[  255.251082][   T28] =============================================
[  255.251082][   T28] 
[  255.282613][   T28] NMI backtrace for cpu 0
[  255.286975][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0
[  255.294871][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  255.304931][   T28] Call Trace:
[  255.308219][   T28]  <TASK>
[  255.311160][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  255.315907][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  255.321388][   T28]  ? panic+0x764/0x764
[  255.325463][   T28]  ? vprintk_emit+0x622/0x740
[  255.330158][   T28]  ? printk_sprint+0x490/0x490
[  255.334938][   T28]  ? nmi_cpu_backtrace+0x252/0x560
[  255.340073][   T28]  nmi_cpu_backtrace+0x4e1/0x560
[  255.345041][   T28]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  255.351215][   T28]  ? _printk+0xd1/0x111
[  255.355409][   T28]  ? panic+0x764/0x764
[  255.359486][   T28]  ? __wake_up_klogd+0xcc/0x100
[  255.364357][   T28]  ? panic+0x764/0x764
[  255.368439][   T28]  ? nmi_trigger_cpumask_backtrace+0xe0/0x3f0
[  255.374527][   T28]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  255.380615][   T28]  nmi_trigger_cpumask_backtrace+0x1ae/0x3f0
[  255.386612][   T28]  watchdog+0xf88/0xfd0
[  255.390768][   T28]  ? watchdog+0x1f8/0xfd0
[  255.395093][   T28]  kthread+0x28d/0x320
[  255.399150][   T28]  ? hungtask_pm_notify+0x50/0x50
[  255.404165][   T28]  ? kthread_blkcg+0xd0/0xd0
[  255.408746][   T28]  ret_from_fork+0x1f/0x30
[  255.413164][   T28]  </TASK>
[  255.417398][   T28] Sending NMI from CPU 0 to CPUs 1:
[  255.423009][    C1] NMI backtrace for cpu 1
[  255.423018][    C1] CPU: 1 PID: 4740 Comm: kworker/u4:8 Not tainted 6.1.111-syzkaller #0
[  255.423035][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  255.423043][    C1] Workqueue: phy9 ieee80211_iface_work
[  255.423064][    C1] RIP: 0010:memset_erms+0x9/0x10
[  255.423081][    C1] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 <f3> aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01
[  255.423094][    C1] RSP: 0018:ffffc9000318f5d0 EFLAGS: 00010246
[  255.423105][    C1] RAX: ffff8880244ee800 RBX: 0000000000000000 RCX: 0000000000000240
[  255.423115][    C1] RDX: 0000000000000400 RSI: 0000000000000000 RDI: ffff8880244ee9c0
[  255.423125][    C1] RBP: 0000000000000001 R08: ffffc9000318f650 R09: ffff8880244ee800
[  255.423135][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  255.423144][    C1] R13: 0000000000000b20 R14: 0000000000000001 R15: ffffc9000318f650
[  255.423153][    C1] FS:  0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  255.423166][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  255.423176][    C1] CR2: 00007ffec36f1b58 CR3: 000000000d08e000 CR4: 00000000003506e0
[  255.423188][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  255.423197][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  255.423205][    C1] Call Trace:
[  255.423210][    C1]  <NMI>
[  255.423216][    C1]  ? nmi_cpu_backtrace+0x3de/0x560
[  255.423238][    C1]  ? read_lock_is_recursive+0x10/0x10
[  255.423261][    C1]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  255.423283][    C1]  ? nmi_handle+0x25/0x440
[  255.423312][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  255.423349][    C1]  ? nmi_handle+0x12e/0x440
[  255.423370][    C1]  ? nmi_handle+0x25/0x440
[  255.423390][    C1]  ? memset_erms+0x9/0x10
[  255.423404][    C1]  ? default_do_nmi+0x62/0x150
[  255.423419][    C1]  ? exc_nmi+0xa8/0x100
[  255.423432][    C1]  ? end_repeat_nmi+0x16/0x31
[  255.423458][    C1]  ? memset_erms+0x9/0x10
[  255.423472][    C1]  ? memset_erms+0x9/0x10
[  255.423493][    C1]  ? memset_erms+0x9/0x10
[  255.423506][    C1]  </NMI>
[  255.423511][    C1]  <TASK>
[  255.423515][    C1]  slab_post_alloc_hook+0x71/0x3a0
[  255.423536][    C1]  __kmem_cache_alloc_node+0x137/0x260
[  255.423553][    C1]  ? ieee802_11_parse_elems_full+0xc4/0x1380
[  255.423570][    C1]  ? ieee802_11_parse_elems_full+0xc4/0x1380
[  255.423585][    C1]  __kmalloc+0xa1/0x230
[  255.423602][    C1]  ieee802_11_parse_elems_full+0xc4/0x1380
[  255.423618][    C1]  ? trace_raw_output_contention_end+0xd0/0xd0
[  255.423638][    C1]  ? rcu_is_watching+0x11/0xb0
[  255.423652][    C1]  ? trace_contention_end+0x61/0x170
[  255.423670][    C1]  ? __mutex_lock+0x2f7/0xd80
[  255.423685][    C1]  ? reacquire_held_locks+0x660/0x660
[  255.423701][    C1]  ? ieee80211_queue_delayed_work+0x160/0x160
[  255.423716][    C1]  ? mutex_lock_nested+0x10/0x10
[  255.423731][    C1]  ? mark_lock+0x9a/0x340
[  255.423755][    C1]  ieee80211_ibss_rx_queued_mgmt+0x430/0x2dd0
[  255.423774][    C1]  ? __lock_acquire+0x125b/0x1f80
[  255.423801][    C1]  ? ieee80211_ibss_rx_no_sta+0x740/0x740
[  255.423822][    C1]  ? mark_lock+0x9a/0x340
[  255.423843][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  255.423865][    C1]  ? print_irqtrace_events+0x210/0x210
[  255.423884][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  255.423901][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  255.423918][    C1]  ? skb_dequeue+0x10f/0x140
[  255.423934][    C1]  ieee80211_iface_work+0x7aa/0xce0
[  255.423955][    C1]  ? process_one_work+0x7a9/0x11d0
[  255.423971][    C1]  process_one_work+0x8a9/0x11d0
[  255.423994][    C1]  ? worker_detach_from_pool+0x260/0x260
[  255.424041][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  255.424058][    C1]  ? kthread_data+0x4e/0xc0
[  255.424080][    C1]  ? wq_worker_running+0x97/0x190
[  255.424095][    C1]  worker_thread+0xa47/0x1200
[  255.424115][    C1]  ? _raw_spin_unlock+0x40/0x40
[  255.424138][    C1]  kthread+0x28d/0x320
[  255.424149][    C1]  ? worker_clr_flags+0x190/0x190
[  255.424164][    C1]  ? kthread_blkcg+0xd0/0xd0
[  255.424178][    C1]  ret_from_fork+0x1f/0x30
[  255.424204][    C1]  </TASK>
[  255.428996][ T8097] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  255.450200][   T28] Kernel panic - not syncing: hung_task: blocked tasks
[  255.450213][   T28] CPU: 0 PID: 28 Comm: khungtaskd Not tainted 6.1.111-syzkaller #0
[  255.450230][   T28] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  255.450239][   T28] Call Trace:
[  255.450244][   T28]  <TASK>
[  255.450250][   T28]  dump_stack_lvl+0x1e3/0x2cb
[  255.450278][   T28]  ? nf_tcp_handle_invalid+0x642/0x642
[  255.450301][   T28]  ? panic+0x764/0x764
[  255.450318][   T28]  ? llist_add_batch+0x160/0x1d0
[  255.450342][   T28]  ? vscnprintf+0x59/0x80
[  255.450361][   T28]  panic+0x318/0x764
[  255.450379][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  255.450403][   T28]  ? memcpy_page_flushcache+0xfc/0xfc
[  255.450425][   T28]  ? nmi_trigger_cpumask_backtrace+0x2bf/0x3f0
[  255.450445][   T28]  ? nmi_trigger_cpumask_backtrace+0x338/0x3f0
[  255.450469][   T28]  ? nmi_trigger_cpumask_backtrace+0x33d/0x3f0
[  255.450493][   T28]  watchdog+0xfc7/0xfd0
[  255.450517][   T28]  ? watchdog+0x1f8/0xfd0
[  255.450539][   T28]  kthread+0x28d/0x320
[  255.450553][   T28]  ? hungtask_pm_notify+0x50/0x50
[  255.450571][   T28]  ? kthread_blkcg+0xd0/0xd0
[  255.450591][   T28]  ret_from_fork+0x1f/0x30
[  255.450621][   T28]  </TASK>
[  255.452360][   T28] Kernel Offset: disabled
[  255.964048][   T28] Rebooting in 86400 seconds..