last executing test programs:

14.005881305s ago: executing program 1 (id=1408):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = dup(r0)
sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001600)=[{&(0x7f0000000140)="be38", 0xffdf}], 0x1, &(0x7f0000000c80)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa0100deffffffe3001c0000000000000000000000070000004404730001000000"], 0x40}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
read$FUSE(r1, &(0x7f0000005680)={0x2020}, 0xfdef)

13.3334799s ago: executing program 1 (id=1409):
syz_mount_image$squashfs(&(0x7f00000010c0), &(0x7f0000001100)='./file0\x00', 0xa10040, &(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x1, 0x1b1, &(0x7f0000000f00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYRES16], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
syz_emit_vhci(&(0x7f0000000580)=@HCI_EVENT_PKT={0x4, @hci_ev_remote_oob_data_request={{0x35, 0x6}}}, 0x9)
link(&(0x7f0000000240)='.\x02/file1\x00', 0x0)

11.840214571s ago: executing program 1 (id=1411):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x3, "26e3d0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.785771062s ago: executing program 1 (id=1429):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x82, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@shortad}, {@gid_forget}, {@anchor={'anchor', 0x3d, 0x6}}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@uid}, {@gid}, {@anchor={'anchor', 0x3d, 0x2}}]}, 0x10, 0xc34, &(0x7f00000002c0)="$eJzs3U9sHNd9B/DfGy5F0m4rJk5Uu42LTVukMmO5sqSYilW4q5pmG0CWiVDMLQBX5EpdmFoSJNXIbtowvfTQQ4Ci6CEnAq1RIEUDoymKHtnWBZKLD4VPPREtbARFD2wRIKeAxcy+FVf/LMkkJcr+fGzqOzv73sx7M+MZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+8cvb48+lhtwIAeJDOT3/1+AnPfwD4RLng//8BAAAAAAAAAAAAAOCgS1HEE5Fi6fxWmq0+dw2fa3euXpuZmLx9tZFU1Ryoypc/w8+fOHnqSy+Mn+7lh9ffa0/Fa9MXztZfXryytNxaWWnN12c67bnF+dY9b2G39W82Vh2A+pXXr85furRSP/HcyRu+vjb6wdDjR0bPjD9z7Ole2ZmJycnpvjK1wY+891vcaYTHoSjiWKR49vs/Ts2IKGL3x+Iu185+G6k6MVZ1YmZisurIQrvZWS2/nOodiCKi3lep0TtGD+Bc7EojYq1sftngsbJ700vN5ebFhVZ9qrm82l5tL3amUre1ZX/qUcTpFLEeEZtDt25uMIqoRYrvHt5KFyNioHccvlgNDL5zO4p97OM9KNtZH4xYLx6Bc3aADUURr0aKn7xTxFx5zPJPfCHi1TL/MeKtMl+KSOWFcSri/eo6GnnILWcv1KKIPyvP/5mtNF/dD3r3lXNfq3+lc2mxr2zvvvLIPx8epAN+bxqOIprVHX8rffTf7AAAAAAAAAAAAAAAAACw10aiiKcixSv//gfVuOKoxqUfPjP+u6M/3z9m/Mm7bKcs+1xErBX3Nib3UB5CPJWmUnrIY4k/yYajiD/K4/++/bAbAwAAAAAAAAAAAAAAAAAA8IlWxHuR4sV3j6b16J9TvN25XL/QvLjQnRW2N/dvb8707e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjluvnbOSczbmWcz3nRs7NnHFA5u4FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPg4KaKIn0WK73xjK0WKiEbEbHRzY6hXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4mIZSET+IFPXfa1xfV4uIVP3bdbT85VQ0DpX56WiMl/lSNM7mbFZZa3z7IbSf3RlMRfwoUgwNv339hOfzP9j9dP0yiLe+ufPpl2rdHOh9OfrB0ONHDp8Zn/yVJ++0nG7XgLFz7c7Va/WZicnJ6b7Vtbz3T/etG837Lfam60TEyhtvvt5cWGgtW/hkLNS6C7XY0y2PROztBvduodZdyPereOjtucNC42A0Y2chqnv/be/ZfGyUz//3I8VvvvsfvQd+7/n/c91P15/w8dM/3nn+v3jzhvbp+f9E37oX8+9GBmsRw6tXlgaPRAyvvPHmsfaV5uXW5Vbn1PHjXx4f//LJ44OHIoYvtRdafUu7PlQAAAAAAAAAAAAAAAAAD1Yq4rcjRfNHW6keEdeq8VqjZ8afOfb0QAxU461uGLf12vSFs/WXF68sLbdWVlrz9ZlOe25xvnWvuxuuhnvNTEzuS2fuamSf2z8y/PLi0hvL7cu/v3rb7x8bPntxZXW5OXf7r2MkiohG/5qxqsEzE5NVoxfazU5VdWqPBmYOpiL+M1LMnaqnz+d1efxfGe8N9pXtH/+/1re+Wt6n8X+fumk/KRXx00jxG3/+ZHy+audjccsxy+X+OlKMnf5cLheHynK9NnTfK9AdGViW/d9I8fc/u7Fsr+9P7JR9/v6O7sFXnv/DkeIHf/q9+NW87sb3P+yM/+w//4/dvKF9Ov+f6Vv32A3vK9h118nn/1ikeOmJt+PX8roPe/9HEdvb29+KOJoLX38/xz6d/8/2rRuN7n5/fe+6DwAAAAAAAAAA8MgaTEX8TaR4erKWXsjr7uXv/83fvKF9+vtfv9i3bv4BzVe064MKAAAAAAfEYCrivUhxefXt62Oo+8Z/3zj+87d25l6fSDd9W/053y9U7w3Yyz//6zea9zu7+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dRn7zKf+kakeOW/n83l0pGyXG8e+NHq1+Hzi51jZxcWFueaq82LC6369FJzrlXW/Uyk2Pqrz+W6RTW/em+++e4c78PbvbnYlyPF5N/2ynbnYu/NTd6dD7w7F3tZ9lOR4r/+7sayvXmsP7tT9kRZ9i8jxdf/6fZlj+yUPVmW/V6k+OHX672yj5Vle+9H7b6TdLgWC63n5hYXbnkVKgAAAAAAAAAAAAAAAAAAANyvwVTEn0SK/7myHmt52H+e/783A3+tV/atb/bN93+Ta9U8/6PV/P93Wv4o8/+P7llPAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg0ZGiiDcjxdL5rbQxVH7uGj7X7ly9NjMxeftqI6mqOVCVL3+Gnz9x8tSXXhg/3csPr7/XnorXpi+crb+8eGVpubWy0pqvz3Tac4vzrXvewm7r7xy6rrHqANSvvH51/tKllfqJ507e8PW10Q+GHj8yemb8mWNP98rOTExOTveVqQ3ex97vq3E7DkURfxEpnv3+j9M/D0UUsftjcZdrZ7+NVJ0YqzoxMzFZdWSh3eysll9O9Q5EEVHvq9ToHaMHcC52pRGxVja/bPBY2b3ppeZy8+JCqz7VXF5tr7YXO1Op29qyP/Uo4nSKWI+IzaFbNzcYRbweKb57eCv9y1DEQO84fPH89FePn7hzO4p97OM9KNtZH4xYLx6Bc3aADUUR/xApfvLO0fjXoYhadH/iCxGv9hd8KSKVF8apiPdvcx3xaKpFEf9Xnv8zW+mdofJ+0LuvnPta/SudS4t9ZXv3lYP0fNi+/2txZA92e+8O+L1pOIr4YXXH30r/5r9rAAAAAAAAAAAAAAAAgAOkiF+OFC++ezRV44Ovjyludy7XLzQvLnSH9fXG/tUj/rDM7e3t7XrqZiPnbM61nOs5N3Ju5owi18/ZyDmbcy3nes6NnJs5YyDXz9nIOZtzLed6zo2cmzmjVsX29va3uvVruX7OtZzrtYiirJ8/b+aMAzJ2DwAAAAAAAAAAAAAAAAAA+Hgpqn9SfOcbW6maS7URMRvd3DAf6Mfe/wcAAP//3sf+xA==")
syz_mount_image$fuse(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
r2 = open(&(0x7f0000000200)='./bus\x00', 0x161b42, 0x0)
sendfile(r2, r1, 0x0, 0x100800001)

8.699670489s ago: executing program 0 (id=1430):
prctl$PR_MCE_KILL(0x21, 0x1, 0x2000000)

8.629535554s ago: executing program 3 (id=1431):
r0 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r0, r1, 0x0, 0x4000000000010046)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
write$binfmt_script(r3, &(0x7f0000000000), 0xb)

8.55569834s ago: executing program 1 (id=1433):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffffffffffeea, &(0x7f00000001c0)=""/99}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

8.505633114s ago: executing program 0 (id=1434):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x89}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x4e, &(0x7f0000000040)=0x5)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000020000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10)
syz_open_dev$tty1(0xc, 0x4, 0x1)
openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r1)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x80}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket(0x1, 0x803, 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10)
read$char_usb(r7, &(0x7f0000000480)=""/194, 0xc2)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
getsockname$packet(r6, 0x0, &(0x7f00000001c0))
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c0000001000030400"/20, @ANYBLOB="a5fdad88000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32, @ANYBLOB="485157a6f2b41c0300d1460bfaa1ab2cf2fad8fb92602295688a00"/36, @ANYRES32=0x0, @ANYBLOB], 0x4c}}, 0x0)

8.505512274s ago: executing program 4 (id=1435):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee059853", 0xfffffffffffffcc1, 0x840, 0x0, 0x56)
mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffe000/0x1000)=nil, 0xb00, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0}, &(0x7f0000000180)=0x40)

8.390016724s ago: executing program 4 (id=1436):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000001fd8)=@framed={{0xffffffb7, 0x0, 0x0, 0x0, 0x0, 0x4e, 0xa}, [@ldst={0x0, 0x0, 0x2, 0x0, 0xe}]}, 0x0, 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90)
r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000a40), 0x0, 0x0)
ppoll(&(0x7f0000000a80)=[{r0}], 0x1, &(0x7f0000000b00), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
creat(&(0x7f0000000140)='./file0\x00', 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000880)={'bridge_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001900)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3, 0x0, 0x4}, [@NDA_LLADDR={0xa, 0x2, @dev}]}, 0x28}}, 0x0)

8.388996904s ago: executing program 3 (id=1437):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000001dc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0)
ioctl$CEC_S_MODE(r1, 0x40046109, &(0x7f0000000080)=0x22)
close_range(r1, 0xffffffffffffffff, 0x0)

8.19735308s ago: executing program 3 (id=1438):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00', r1}, 0x10)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/../file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x13}, 0x18)
r2 = socket(0xa, 0x801, 0x0)
getsockopt$bt_BT_SECURITY(r2, 0x6, 0x17, 0x0, 0x20000000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
listen(0xffffffffffffffff, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
close(r6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0))
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r6}, 0x20)
r9 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r9, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
recvfrom(0xffffffffffffffff, &(0x7f0000000480)=""/110, 0xfffffe32, 0x734, 0x0, 0xfffffffffffffecb)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

7.304107313s ago: executing program 0 (id=1440):
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000180)='memory.events.local\x00', 0x275a, 0x0)
r2 = syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000240)={[{@lazytime}, {}, {@filestreams}, {@uqnoenforce}, {@prjquota}]}, 0x4, 0x9606, &(0x7f0000009680)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000380)=ANY=[@ANYRESHEX=r2, @ANYRESDEC, @ANYRESDEC=r0, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16, @ANYRES64=0x0, @ANYRESHEX, @ANYRES8=0x0], 0xdf, 0x0, &(0x7f0000000000))
chdir(&(0x7f0000000300)='./bus\x00')
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
rename(&(0x7f0000000600)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
pwritev2(r1, &(0x7f0000000280)=[{&(0x7f0000000200)="af4cfc5d866693a1d5c5ba268b8e7c1ca88f3197cf37886d7e028bddf64f0cbc45fd7e2e4f05", 0x26}, {&(0x7f00000004c0)="8a88b41f62d32f0413711ea5f447c9edfd41e07a1117b1c03ba82c", 0x1b}], 0x2, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)

7.303885662s ago: executing program 4 (id=1441):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000480), 0x4)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xc8, 0x0, 0x4)
listen(0xffffffffffffffff, 0x0)
close(r0)

7.241604718s ago: executing program 1 (id=1442):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xc, 0x1c, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

6.041490156s ago: executing program 3 (id=1445):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x0, 0x620b, &(0x7f000000d140)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000280), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0)
removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00')

6.036497146s ago: executing program 4 (id=1446):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x38, r1, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x1}]}]}]}, 0x38}}, 0x0)

5.885758189s ago: executing program 2 (id=1447):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14}}, 0xa4}}, 0x0)

5.885509169s ago: executing program 4 (id=1448):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x6, 0x0, 0x7, 0x4, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x4, 0x4, 0x2}, 0x48)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
signalfd(0xffffffffffffffff, &(0x7f0000000a40)={[0x5]}, 0x8)
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xc, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="8500000022"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={0xffffffffffffffff, 0x0, 0x22, 0x0, &(0x7f00000001c0)="348b0d151f8218e3c73697e4080049c416b90900000093291cfc5e8b99005e8b9900", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = dup3(0xffffffffffffffff, r4, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0xfffffffc, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0x800090, &(0x7f0000000480)={[{@fat=@showexec}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@shortname_lower}, {@uni_xlateno}, {@uni_xlate}, {@rodir}, {@fat=@check_strict}, {@rodir}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-7'}}, {@shortname_win95}, {@shortname_mixed}, {@fat=@dmask={'dmask', 0x3d, 0x6}}, {@uni_xlateno}, {@shortname_lower}, {@uni_xlate}, {@rodir}, {@shortname_win95}, {@utf8no}, {@shortname_lower}, {@utf8}, {@shortname_win95}, {@utf8no}, {@uni_xlateno}, {@shortname_win95}, {@shortname_win95}, {@nonumtail}, {@utf8}, {@fat=@nfs_nostale_ro}], [{@defcontext={'defcontext', 0x3d, 'unconfined_u'}}]}, 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==")
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r7 = socket$inet(0x2, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r7, 0x8933, &(0x7f0000000200)={'wg0\x00'})

5.786125567s ago: executing program 2 (id=1449):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r5, 0x0, 0x0)

4.776545499s ago: executing program 4 (id=1450):
syz_open_dev$swradio(&(0x7f0000000140), 0x0, 0x2)
syz_io_uring_setup(0x231, &(0x7f0000000380)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r0=>0x0, &(0x7f0000000100)=<r1=>0x0)
r2 = openat2$dir(0xffffff9c, &(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x1, 0x0, 0x20}, 0x18)
syz_io_uring_submit(r0, r1, &(0x7f00000009c0)=@IORING_OP_OPENAT={0x12, 0x10, 0x0, r2, 0x0, &(0x7f0000000480)='./file0\x00', 0x10b, 0xa000, 0x23456})
bind$l2tp(0xffffffffffffffff, 0x0, 0x0)
r3 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x0, 0x13580}, &(0x7f0000000100), &(0x7f0000000280))
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100800001)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
ioctl$FIBMAP(r3, 0x1, &(0x7f0000000200))
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="04ffffb7b88c7f"], 0x7)
r5 = syz_open_dev$cec(&(0x7f0000000680), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r5, 0xc05c6104, 0x0)
sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={0x0}}, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="030000397058abce57033f29eb6dc1f8b128a7d20200000000000037bd2f23cfa50c149ea8c11c59e6bd91a231a605e31d"], 0x3d)
setsockopt$inet6_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
connect$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
syz_emit_vhci(&(0x7f0000000300)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0x12}, @l2cap_cid_le_signaling={{0xe}, @l2cap_le_conn_rsp={{0x15, 0x0, 0xa}, {0xffff, 0x4, 0x9, 0x9c}}}}, 0x17)
r7 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r7, 0x10d, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4)
syz_emit_vhci(&(0x7f0000000240)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x1, 0x3, 0x20}, @l2cap_cid_le_signaling={{0x1c}, @l2cap_ecred_conn_req={{0x17, 0x3, 0x18}, {0x8, 0xfffb, 0x8001, 0x8, [0x2, 0x661, 0xacd, 0x800, 0x21a, 0x0, 0x2, 0x7]}}}}, 0x25)
openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x0, 0x0)
r8 = syz_io_uring_setup(0x4a8, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r8, 0x2dec, 0x0, 0x0, 0x0, 0x0)

4.712290715s ago: executing program 2 (id=1451):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000340)='./file0\x00', 0x1600008, &(0x7f00000001c0)=ANY=[], 0x0, 0x63a, &(0x7f0000000a40)="$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")
removexattr(&(0x7f0000000400)='./file0\x00', &(0x7f0000000000)=@random={'osx.', 'user.incfs.id\x00'})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_RUN(r5, 0xae80, 0x0)
r6 = syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2000003, &(0x7f0000000900), 0x3, 0x4ec, &(0x7f0000000bc0)="$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")
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6}]})
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000838500000004000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r9 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r9, 0x401c5504, 0x0)
write$uinput_user_dev(r9, &(0x7f0000000c80)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100], [0x0, 0x0, 0x0, 0xffffffff], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}, 0x45c)
ioctl$UI_SET_EVBIT(r9, 0x40045564, 0x3)
ioctl$UI_DEV_CREATE(r9, 0x5501)
r10 = gettid()
process_vm_writev(r10, &(0x7f0000000000)=[{&(0x7f0000000500)=""/259, 0x103}], 0x1, &(0x7f0000000400)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095", @ANYRES8=r7, @ANYRESDEC=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r11}, 0x10)

4.423247649s ago: executing program 0 (id=1452):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x3031, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x1}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x1, {[@global]}}, 0x0}, 0x0)

3.797228839s ago: executing program 3 (id=1453):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
r1 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r1, &(0x7f0000002780)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @local}}}, @ip_retopts={{0x10, 0x110, 0xc}}], 0x30}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000cc0)}}], 0x1, 0x0)
r4 = io_uring_setup(0x168e, &(0x7f0000000000))
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10}, 0x48)
r7 = getpid()
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {<r8=>0xee00, 0xffffffffffffffff}}, './file0\x00'})
read$FUSE(0xffffffffffffffff, &(0x7f00000061c0)={0x2020, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
sendmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, r9}}}], 0x38}, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, &(0x7f00000002c0), 0x1900)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'virt_wifi0\x00', 0x11})
ioprio_set$pid(0x3, r7, 0x0)
fstat(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r10=>0x0})
ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'bridge_slave_0\x00', {0x2, 0x0, @local}})
setreuid(0x0, r10)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000000c0)}], 0x1, 0x0, 0x0, 0x1f000000}, 0x0)

3.705836347s ago: executing program 2 (id=1454):
syz_mount_image$exfat(&(0x7f0000006c00), &(0x7f0000001b40)='./file0\x00', 0x208008de, &(0x7f0000000280)={[{@namecase}, {@discard}, {@errors_continue}, {}, {@gid}, {@umask={'umask', 0x3d, 0x3f}}, {@umask={'umask', 0x3d, 0xbbe}}, {@discard}, {@gid={'gid', 0x3d, 0xee00}}]}, 0x80, 0x1503, &(0x7f0000000580)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f00000005c0)='./bus\x00', 0x147842, 0x0)
preadv2(r1, &(0x7f0000000040)=[{&(0x7f0000001200)=""/4096, 0xfffffdef}], 0x2, 0x0, 0x0, 0x0)

2.484852717s ago: executing program 3 (id=1455):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
keyctl$clear(0x11, 0xfffffffffffffffd)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000140), 0x9)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000000c0)={0x3, &(0x7f0000000040)=[{0x50}, {0xb1, 0x0, 0x0, 0xbffff038}, {0x6}]}, 0x10)
sendmsg$inet(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000280)="9d", 0x1}], 0x1}, 0x0)
clock_settime(0x0, &(0x7f0000003c80)={0x77359400})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f0000000880)=ANY=[@ANYBLOB="189700000000009eb044c4d4240ff0cd3aaaedaed300000000000000000018ea0017202070251a33a5e8bf92000200000701f87d9f00f82e9f913b2ff2c6d8985572a3"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000003}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = socket$nl_route(0x10, 0x3, 0x0)
open$dir(&(0x7f0000000780)='./file0\x00', 0x44200, 0x54)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'lo\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x5}]}, 0x38}}, 0x0)

2.467794518s ago: executing program 2 (id=1456):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000009700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.19760887s ago: executing program 2 (id=1457):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x80001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x5, 0x0)
socket$l2tp(0x2, 0x2, 0x73)
pipe(&(0x7f0000000100))
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="540000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100766c616e000000000c000280060001000000000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="080004000040"], 0x54}}, 0x0)

1.331927861s ago: executing program 0 (id=1458):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', <r1=>0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x0, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000940)={0x6, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000200000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000780)='GPL\x00', 0x1, 0x102, &(0x7f0000000400)=""/258, 0x0, 0x0, '\x00', r1}, 0x90)

0s ago: executing program 0 (id=1459):
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f00000000c0)='./file0\x00', 0xc44, &(0x7f0000000600)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRESDEC], 0x1, 0x662, &(0x7f0000001480)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs2/custom0\x00', 0x2, 0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x14507e, 0x0)
r3 = eventfd2(0x0, 0x0)
dup2(r3, r2)
write$eventfd(r3, &(0x7f0000000000)=0xfffffffffffffffe, 0x8)
r4 = socket$netlink(0x10, 0x3, 0x4)
r5 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r5, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
connect$inet6(r5, &(0x7f0000000340)={0x2, 0x0, 0x0, @dev}, 0x1c)
syz_emit_vhci(0x0, 0x58)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="04ff0502"], 0x8)
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x0)
write$binfmt_elf32(0xffffffffffffffff, 0x0, 0x58)
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x100}]})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x2f, 0x56, 0x0, 0x400, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast2, 0x1, 0x20, 0x3, 0x80}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="b40500000000000071105f000000003e00000000000000009500000000000000327de5b926bedb4b118c6516234c42e388b6092d9aca7b190fb87efe12fc572dd19a597b3b5163794ad9c54f0f2acf92aa197af5c3ac79de1cebd48acb0b2b73e2dbffbcaf7af89aa4b7b9d25a73e1efb6f1337bd1e4f16afb2af41acc4b65a1d5aa0f9126538651231b79c7ac81fe1d2c"], &(0x7f00000003c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x8096, 0xfffffffe}, 0x10}, 0x90)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000500)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e207f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71006000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1)
writev(r4, &(0x7f0000000180)=[{&(0x7f0000000080)="580000001500add427123b472545b4560a117fffffff810001925aa8004e2a880d293e9cb37f000001e8090000ffffffffffffe7ee000000deff0000000200"/81, 0x51}], 0x1)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000240)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f0000000500)=""/73, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000480))
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0xffffffff)
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f00000000c0)={0x1, r2})

kernel console output (not intermixed with test programs):

 249 > 3
[  321.793876][ T3658] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.802267][ T7304] loop3: detected capacity change from 0 to 256
[  321.855974][ T4222] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.857107][ T3659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  321.864629][ T4222] usb 5-1: Product: syz
[  321.876743][ T3659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  321.885301][ T7304] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001)
[  321.895527][ T3659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  321.905544][ T7304] FAT-fs (loop3): Filesystem has been set read-only
[  321.912526][ T3659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  321.919894][ T4222] usb 5-1: Manufacturer: syz
[  321.925059][ T3659] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  321.932438][ T3659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  321.954524][ T4222] usb 5-1: SerialNumber: syz
[  321.977862][ T7306] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  322.021787][ T4222] usb 5-1: config 0 descriptor??
[  322.135254][ T7306] overlayfs: failed to set xattr on upper
[  322.141192][ T7306] overlayfs: ...falling back to index=off,metacopy=off.
[  322.369798][ T4222] qmi_wwan: probe of 5-1:0.0 failed with error -22
[  322.419369][ T7306] overlayfs: './file0' not a directory
[  322.578360][ T4222] usb 5-1: USB disconnect, device number 9
[  323.293049][ T7322] loop3: detected capacity change from 0 to 2048
[  323.414466][ T7322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  323.526845][ T7300] chnl_net:caif_netlink_parms(): no params data found
[  323.578673][ T7322] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  323.633521][ T7322] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 65536 with max blocks 1 with error 28
[  323.674186][ T7322] EXT4-fs (loop3): This should not happen!! Data will be lost
[  323.674186][ T7322] 
[  323.724886][ T7322] EXT4-fs (loop3): Total free blocks count 0
[  323.730934][ T7322] EXT4-fs (loop3): Free/Dirty block details
[  323.813482][ T7322] EXT4-fs (loop3): free_blocks=2415919104
[  323.821842][ T7342] loop4: detected capacity change from 0 to 2048
[  323.823479][ T7322] EXT4-fs (loop3): dirty_blocks=16
[  323.873534][ T7322] EXT4-fs (loop3): Block reservation details
[  323.972293][ T7322] EXT4-fs (loop3): i_reserved_data_blocks=1
[  323.978778][ T7342]  loop4: p1 < > p4
[  323.993707][ T7342] loop4: p4 size 8388608 extends beyond EOD, truncated
[  324.023530][ T3659] Bluetooth: hci0: command tx timeout
[  324.115996][ T7337] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 23 with error 28
[  324.260911][ T7300] bridge0: port 1(bridge_slave_0) entered blocking state
[  324.554937][ T7300] bridge0: port 1(bridge_slave_0) entered disabled state
[  324.980880][ T7300] device bridge_slave_0 entered promiscuous mode
[  325.011996][ T7300] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.037597][ T7300] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.057052][ T7300] device bridge_slave_1 entered promiscuous mode
[  325.120933][ T7353] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  325.159999][ T7300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.208691][ T7300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.395964][ T7300] team0: Port device team_slave_0 added
[  325.433280][ T7300] team0: Port device team_slave_1 added
[  325.580796][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.588258][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.645968][ T7300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.708328][ T7300] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.736883][ T7300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.830382][ T7300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.862211][ T7361] loop4: detected capacity change from 0 to 8192
[  326.034888][ T7300] device hsr_slave_0 entered promiscuous mode
[  326.064600][ T7300] device hsr_slave_1 entered promiscuous mode
[  326.073753][ T3658] Bluetooth: hci0: command tx timeout
[  326.126958][ T7300] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  326.134997][ T7300] Cannot create hsr debugfs directory
[  326.332614][ T7370] loop1: detected capacity change from 0 to 1024
[  326.339782][ T7370] hfsplus: unable to parse mount options
[  326.351948][ T7372] netlink: 16 bytes leftover after parsing attributes in process `syz.4.961'.
[  326.438246][ T7367] netlink: 40 bytes leftover after parsing attributes in process `syz.3.960'.
[  326.832348][ T7379] loop3: detected capacity change from 0 to 128
[  326.843300][ T4224] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  326.857167][ T7300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  326.882385][ T7379] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  327.025532][ T7300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.083263][ T4224] usb 2-1: Using ep0 maxpacket: 16
[  327.203484][ T4224] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  327.223337][ T4224] usb 2-1: config 0 has no interface number 0
[  327.232348][ T4224] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  327.413412][ T4224] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  327.427042][ T4224] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  327.438230][ T4224] usb 2-1: Product: syz
[  327.442481][ T4224] usb 2-1: Manufacturer: syz
[  327.450730][ T4224] usb 2-1: SerialNumber: syz
[  327.460969][ T4224] usb 2-1: config 0 descriptor??
[  327.606724][ T7300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.723449][ T4224] usbtouchscreen 2-1:0.214: Failed to read FW rev: -71
[  327.730476][ T4224] usbtouchscreen: probe of 2-1:0.214 failed with error -71
[  327.755259][ T4224] usb 2-1: USB disconnect, device number 5
[  327.872267][ T7300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  327.966491][ T7390] devtmpfs: Too few inodes for current use
[  327.981961][    C1] eth0: bad gso: type: 1, size: 1408
[  328.153454][ T3658] Bluetooth: hci0: command tx timeout
[  328.270097][ T7300] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  328.330332][ T7300] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  328.348420][ T7300] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  328.391363][ T7300] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  328.438977][ T3659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  328.451890][ T3659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  328.467189][ T3659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  328.479868][ T3659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  328.501476][ T3659] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  328.510821][ T3659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  328.593515][ T3691] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  328.607407][ T7300] 8021q: adding VLAN 0 to HW filter on device bond0
[  328.656174][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  328.664341][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  328.675863][ T7300] 8021q: adding VLAN 0 to HW filter on device team0
[  328.726802][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  328.739072][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  328.748126][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.755353][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  328.763074][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  328.771968][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  328.780460][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.787576][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  328.795562][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  328.804403][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  328.863553][ T3691] usb 2-1: Using ep0 maxpacket: 32
[  328.873556][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  328.881618][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  328.891959][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  328.900644][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  328.984567][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  328.993620][ T4224] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  329.008543][ T7300] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  329.019946][ T7300] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  329.032574][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  329.055624][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  329.070287][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  329.079339][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  329.090994][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  329.106118][ T7396] chnl_net:caif_netlink_parms(): no params data found
[  329.128526][ T4623] device hsr_slave_0 left promiscuous mode
[  329.135182][ T4623] device hsr_slave_1 left promiscuous mode
[  329.141572][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  329.149841][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  329.157983][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  329.165551][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  329.173310][ T4623] device bridge_slave_1 left promiscuous mode
[  329.179532][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state
[  329.183433][ T3691] usb 2-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice= b.8c
[  329.196276][ T3691] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.204611][ T3691] usb 2-1: Product: syz
[  329.208894][ T3691] usb 2-1: Manufacturer: syz
[  329.209939][ T4623] device bridge_slave_0 left promiscuous mode
[  329.213593][ T3691] usb 2-1: SerialNumber: syz
[  329.215627][ T3691] usb 2-1: config 0 descriptor??
[  329.227977][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state
[  329.257565][ T4623] device veth1_macvtap left promiscuous mode
[  329.264931][ T3691] empeg 2-1:0.0: empeg converter detected
[  329.269667][ T4623] device veth0_macvtap left promiscuous mode
[  329.270736][ T3691] usb 2-1: active config #0 != 1 ??
[  329.280816][ T4623] device veth1_vlan left promiscuous mode
[  329.288364][ T4623] device veth0_vlan left promiscuous mode
[  329.498224][    T7] usb 2-1: USB disconnect, device number 6
[  329.797725][ T4623] team0 (unregistering): Port device team_slave_1 removed
[  329.851854][ T4623] team0 (unregistering): Port device team_slave_0 removed
[  329.904243][ T4623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  329.989037][ T4623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.103006][ T7407] xt_hashlimit: overflow, rate too high: 0
[  330.295231][ T3659] Bluetooth: hci0: command tx timeout
[  330.553373][ T3658] Bluetooth: hci4: command tx timeout
[  331.932619][ T7418] loop1: detected capacity change from 0 to 1764
[  332.242778][ T7423] loop1: detected capacity change from 0 to 512
[  332.251249][ T7423] EXT4-fs (loop1): Test dummy encryption mode enabled
[  332.356206][ T7423] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz.1.982: inline data xattr refers to an external xattr inode
[  332.404239][ T7423] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz.1.982: couldn't read orphan inode 12 (err -117)
[  332.471299][ T7423] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  332.633527][ T3658] Bluetooth: hci4: command tx timeout
[  333.023693][ T7427] netlink: 24 bytes leftover after parsing attributes in process `syz.1.982'.
[  333.333259][ T7427] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  333.558954][ T4623] bond0 (unregistering): Released all slaves
[  333.665388][ T4901] EXT4-fs (loop1): unmounting filesystem.
[  333.980802][ T7396] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.999173][ T7396] bridge0: port 1(bridge_slave_0) entered disabled state
[  334.046229][ T7396] device bridge_slave_0 entered promiscuous mode
[  334.081501][ T7396] bridge0: port 2(bridge_slave_1) entered blocking state
[  334.108984][ T7396] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.174676][ T7396] device bridge_slave_1 entered promiscuous mode
[  334.306850][ T7396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  334.376571][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  334.400164][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  334.425277][ T7396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  334.458076][ T7300] 8021q: adding VLAN 0 to HW filter on device batadv0
[  334.609154][ T7396] team0: Port device team_slave_0 added
[  334.629994][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  334.654120][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  334.705835][ T7396] team0: Port device team_slave_1 added
[  334.713486][ T3658] Bluetooth: hci4: command tx timeout
[  334.741909][ T7448] device batadv_slave_1 entered promiscuous mode
[  334.764578][ T7447] device batadv_slave_1 left promiscuous mode
[  334.790580][ T7300] device veth0_vlan entered promiscuous mode
[  334.856252][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  334.877036][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  334.911533][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  334.919715][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  334.951502][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_0
[  334.968651][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  334.973415][ T3686] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  335.009959][ T7396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  335.029817][ T7396] batman_adv: batadv0: Adding interface: batadv_slave_1
[  335.037537][ T7396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  335.072682][ T7396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  335.229958][ T7300] device veth1_vlan entered promiscuous mode
[  335.253291][ T3686] usb 5-1: Using ep0 maxpacket: 8
[  335.373574][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  335.393238][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  335.408233][ T7396] device hsr_slave_0 entered promiscuous mode
[  335.413357][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  335.440004][ T7396] device hsr_slave_1 entered promiscuous mode
[  335.457317][ T7396] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  335.479544][ T7396] Cannot create hsr debugfs directory
[  335.505466][ T7464] netlink: 404 bytes leftover after parsing attributes in process `syz.0.991'.
[  335.516717][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.991'.
[  335.535281][ T7464] netlink: 28 bytes leftover after parsing attributes in process `syz.0.991'.
[  335.560057][ T7464] netlink: 20 bytes leftover after parsing attributes in process `syz.0.991'.
[  335.585101][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  335.601811][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  335.613466][ T3686] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=93.e8
[  335.622575][ T3686] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.648894][ T3686] usb 5-1: Product: syz
[  335.658300][ T7300] device veth0_macvtap entered promiscuous mode
[  335.664861][ T3686] usb 5-1: Manufacturer: syz
[  335.669486][ T3686] usb 5-1: SerialNumber: syz
[  335.678338][ T7300] device veth1_macvtap entered promiscuous mode
[  335.699546][ T3686] usb 5-1: config 0 descriptor??
[  335.765880][ T3686] usbtest 5-1:0.0: couldn't get endpoints, -22
[  335.772169][ T3686] usbtest: probe of 5-1:0.0 failed with error -22
[  335.791492][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.813207][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.834100][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.853230][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.873230][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.893319][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.913247][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  335.944029][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  335.974555][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_0
[  336.014803][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  336.033503][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  336.051191][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  336.070660][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  336.097871][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.109223][ T3686] usb 5-1: USB disconnect, device number 10
[  336.120687][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.140786][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.164108][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.183410][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.203220][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.223733][ T7300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  336.244666][ T7300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  336.269542][ T7300] batman_adv: batadv0: Interface activated: batadv_slave_1
[  336.309386][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  336.324105][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  336.357167][ T7466] loop1: detected capacity change from 0 to 32768
[  336.377869][ T7300] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  336.390767][ T7300] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  336.399985][ T7300] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  336.410205][ T7300] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  336.418519][ T7466] XFS (loop1): Mounting V5 Filesystem
[  336.532217][ T7466] XFS (loop1): Ending clean mount
[  336.550737][ T7466] XFS (loop1): Quotacheck needed: Please wait.
[  336.638506][ T7466] XFS (loop1): Quotacheck: Done.
[  336.711559][ T7396] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.772463][ T3698] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.797891][ T3658] Bluetooth: hci4: command tx timeout
[  336.834053][ T3698] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.847365][ T7396] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  336.883803][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  336.896676][ T4049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  336.908039][ T4901] XFS (loop1): Unmounting Filesystem
[  336.924613][ T4049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  336.989663][ T7396] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.011966][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  337.044569][    T7] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  337.129378][ T7396] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.297931][    T7] usb 5-1: Using ep0 maxpacket: 32
[  337.425285][    T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  337.682678][ T7396] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  337.817991][ T7396] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  337.880200][ T7396] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  338.393758][    T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  338.559740][    T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  338.684230][    T7] usb 5-1: Product: syz
[  338.711661][    T7] usb 5-1: Manufacturer: syz
[  338.731893][ T7503] loop2: detected capacity change from 0 to 1024
[  338.748481][    T7] usb 5-1: SerialNumber: syz
[  338.966170][    T7] usb 5-1: config 0 descriptor??
[  338.983738][ T7484] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  339.050656][ T7396] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  339.086541][ T7499] sp0: Synchronizing with TNC
[  339.142826][ T3698] hfsplus: b-tree write err: -5, ino 4
[  339.152040][ T7509] loop1: detected capacity change from 0 to 64
[  339.180622][ T7509] Trying to free block not in datazone
[  339.193693][ T7509] Trying to free block not in datazone
[  339.204172][ T7509] Trying to free block not in datazone
[  339.209673][ T7509] Trying to free block not in datazone
[  339.255236][ T4222] usb 5-1: USB disconnect, device number 11
[  339.286163][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  339.286179][   T26] audit: type=1326 audit(1723391933.245:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz.2.1007" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f63bf3779f9 code=0x0
[  339.332406][ T7509] minix_free_block (loop1:6): bit already cleared
[  339.350798][ T7509] Trying to free block not in datazone
[  339.378940][ T7509] Trying to free block not in datazone
[  339.404423][ T7396] 8021q: adding VLAN 0 to HW filter on device bond0
[  339.419980][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  339.439782][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  339.502897][ T7396] 8021q: adding VLAN 0 to HW filter on device team0
[  339.516382][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  339.526125][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  339.535067][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state
[  339.542208][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state
[  339.554634][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  339.607270][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  339.616697][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  339.627504][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  339.634671][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  339.643047][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  339.696448][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  339.706483][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  339.725815][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  339.774385][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  339.783545][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  339.796756][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  339.806076][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  339.814704][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  339.823576][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  339.832132][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  339.843340][ T7396] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  340.227421][ T4623] device hsr_slave_0 left promiscuous mode
[  340.250934][ T4623] device hsr_slave_1 left promiscuous mode
[  340.275732][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.281159][ T7525] loop1: detected capacity change from 0 to 32768
[  340.293597][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.298071][ T7525] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1012 (7525)
[  340.314082][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.321783][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.330504][ T7525] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  340.344150][ T4623] device bridge_slave_1 left promiscuous mode
[  340.350408][ T7525] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  340.360524][ T7525] BTRFS info (device loop1): using free space tree
[  340.372879][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.382133][ T4623] device bridge_slave_0 left promiscuous mode
[  340.389280][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.429135][ T4623] device veth1_macvtap left promiscuous mode
[  340.435783][ T4623] device veth0_macvtap left promiscuous mode
[  340.441914][ T4623] device veth1_vlan left promiscuous mode
[  340.450359][ T4623] device veth0_vlan left promiscuous mode
[  340.549572][ T7525] BTRFS info (device loop1): enabling ssd optimizations
[  340.698600][ T7534] loop4: detected capacity change from 0 to 32768
[  340.706892][ T7534] /dev/loop4: Can't open blockdev
[  340.801344][ T3773] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  341.099858][ T4901] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  341.159448][ T7554] loop4: detected capacity change from 0 to 8192
[  341.553416][ T4224] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  341.600012][ T4623] team0 (unregistering): Port device team_slave_1 removed
[  341.647202][ T4623] team0 (unregistering): Port device team_slave_0 removed
[  341.694606][ T4623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  341.715504][ T4476] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  341.750036][ T4623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  341.803358][ T4224] usb 5-1: Using ep0 maxpacket: 16
[  341.930443][ T4224] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[  341.938815][ T4224] usb 5-1: config 0 has no interface number 0
[  341.945228][ T4224] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 184, changing to 11
[  341.956418][ T4224] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 32908, setting to 1024
[  341.980796][ T4476] usb 2-1: Using ep0 maxpacket: 32
[  342.087515][ T4224] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  342.096707][ T4224] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  342.104898][ T4224] usb 5-1: Product: syz
[  342.109083][ T4224] usb 5-1: SerialNumber: syz
[  342.115451][ T4224] usb 5-1: config 0 descriptor??
[  342.155776][ T4224] cm109 5-1:0.8: invalid payload size 1024, expected 4
[  342.181470][ T4224] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input13
[  342.276556][ T4476] usb 2-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  342.285821][ T4476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.293955][ T4476] usb 2-1: Product: syz
[  342.298139][ T4476] usb 2-1: Manufacturer: syz
[  342.302739][ T4476] usb 2-1: SerialNumber: syz
[  342.309285][ T4476] usb 2-1: config 0 descriptor??
[  342.327012][ T4623] bond0 (unregistering): Released all slaves
[  342.451907][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  342.471568][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  342.487666][ T7558] loop2: detected capacity change from 0 to 256
[  342.494892][ T7396] 8021q: adding VLAN 0 to HW filter on device batadv0
[  342.532108][ T7558] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  342.535822][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  342.555915][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  342.603236][    C1] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
[  342.616874][ T7396] device veth0_vlan entered promiscuous mode
[  342.623503][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  342.631207][ T4222] usb 5-1: USB disconnect, device number 12
[  342.643679][    C1] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71
[  342.650760][    C1] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[  342.663322][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  342.671873][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  342.690436][ T4222] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[  342.701434][ T7396] device veth1_vlan entered promiscuous mode
[  342.756172][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  342.764389][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  342.782843][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  342.794828][ T3724] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  342.813520][ T4476] airspy 2-1:0.0: Board ID: 00
[  342.818433][ T4476] airspy 2-1:0.0: Firmware version: 
[  342.844649][ T7396] device veth0_macvtap entered promiscuous mode
[  342.853714][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  342.862566][ T3711] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  342.876650][ T7396] device veth1_macvtap entered promiscuous mode
[  342.892247][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  342.901059][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  342.949808][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  342.983558][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  342.994179][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.013199][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.029575][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.042856][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.053441][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.065400][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.088315][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_0
[  343.098770][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  343.117322][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  343.173379][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.213322][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.232177][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.242689][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.271754][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.290709][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.302439][ T7396] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  343.318719][ T7396] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.330424][ T7396] batman_adv: batadv0: Interface activated: batadv_slave_1
[  343.344769][ T7568] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  343.353349][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  343.362159][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  343.380380][ T7396] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  343.393821][ T7396] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  343.402717][ T7396] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  343.420986][ T7396] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  343.568715][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.577670][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.592754][ T3773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  343.602293][ T3773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  343.620392][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  343.640961][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  343.828834][ T3383] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  343.904482][ T4476] airspy 2-1:0.0: usb_control_msg() failed -71 request 10
[  343.921634][ T4476] airspy 2-1:0.0: Registered as swradio16
[  343.938932][ T4476] airspy 2-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  343.964996][ T4476] usb 2-1: USB disconnect, device number 7
[  344.103422][ T3383] usb 5-1: Using ep0 maxpacket: 16
[  344.242081][ T3383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.267877][ T3383] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.289718][ T3383] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  344.314329][ T3383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.340082][ T3383] usb 5-1: config 0 descriptor??
[  344.427664][ T7579] loop3: detected capacity change from 0 to 32768
[  344.536133][ T7580] loop2: detected capacity change from 0 to 32768
[  344.609114][ T7580] BTRFS: device fsid 92aec1fe-fee8-4e05-92dc-790b47b871d9 devid 1 transid 8 /dev/loop2 scanned by syz.2.1025 (7580)
[  344.753557][ T7580] BTRFS info (device loop2): first mount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  344.778707][ T7580] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  345.553319][ T7580] BTRFS info (device loop2): using free space tree
[  345.574186][ T3383] elan 0003:04F3:0755.0004: item fetching failed at offset 1/5
[  345.582647][ T3383] elan 0003:04F3:0755.0004: Hid Parse failed
[  345.597275][ T3383] elan: probe of 0003:04F3:0755.0004 failed with error -22
[  345.771886][ T3383] usb 5-1: USB disconnect, device number 13
[  345.923504][ T7580] BTRFS info (device loop2): enabling ssd optimizations
[  346.023798][ T7610] loop3: detected capacity change from 0 to 512
[  346.062553][ T7610] EXT4-fs (loop3): Test dummy encryption mode enabled
[  346.114954][ T7610] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.1030: inline data xattr refers to an external xattr inode
[  346.188160][ T7300] BTRFS info (device loop2): last unmount of filesystem 92aec1fe-fee8-4e05-92dc-790b47b871d9
[  346.203109][ T7610] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1030: couldn't read orphan inode 12 (err -117)
[  346.243241][ T7610] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  347.250868][ T7619] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  347.261660][ T7620] fscrypt (loop3): Missing crypto API support for AES-256-CTS-CBC (API name: "cts(cbc(aes))")
[  347.480278][ T7396] EXT4-fs (loop3): unmounting filesystem.
[  348.213331][   T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  348.574131][   T14] usb 4-1: too many configurations: 164, using maximum allowed: 8
[  349.004053][ T7652] fuse: Bad value for 'fd'
[  349.951018][ T7660] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'.
[  349.971792][ T7660] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1040'.
[  349.981553][ T7662] loop2: detected capacity change from 0 to 128
[  350.072833][ T7664] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1043'.
[  350.128440][ T7666] loop1: detected capacity change from 0 to 1024
[  350.207878][   T14] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  350.217664][   T14] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  350.238333][   T14] usb 4-1: config 0 descriptor??
[  350.292464][   T14] usb 4-1: bad CDC descriptors
[  350.336144][   T14] usb 4-1: bad CDC descriptors
[  350.486073][ T7679] loop4: detected capacity change from 0 to 256
[  350.493028][ T7679] /dev/loop4: Can't open blockdev
[  350.510057][ T7682] netlink: 'syz.1.1052': attribute type 2 has an invalid length.
[  350.993373][ T3773] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.208774][ T3773] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.313428][ T3773] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.376489][ T3659] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  351.389171][ T3659] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  351.407920][ T3659] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  351.424913][ T3773] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.437152][ T3659] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  351.444985][ T3659] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  351.454208][ T3659] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  351.564486][ T4222] usb 4-1: USB disconnect, device number 10
[  351.573063][ T7696] loop4: detected capacity change from 0 to 2048
[  351.619636][ T7696] /dev/loop4: Can't open blockdev
[  351.690331][ T7701] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0.
[  351.714530][    C1] eth0: bad gso: type: 1, size: 1408
[  351.990899][ T7693] chnl_net:caif_netlink_parms(): no params data found
[  353.182800][ T7729] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1070'.
[  353.487981][ T7730] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1070'.
[  353.513498][ T3658] Bluetooth: hci0: command tx timeout
[  353.562067][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state
[  353.585583][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state
[  353.630906][ T7693] device bridge_slave_0 entered promiscuous mode
[  353.682120][ T7718] loop3: detected capacity change from 0 to 32768
[  353.689859][ T7718] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1067 (7718)
[  353.706686][ T7729] netlink: 'syz.0.1070': attribute type 5 has an invalid length.
[  353.724095][ T7718] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  353.737893][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state
[  353.740469][ T7718] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  353.749681][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state
[  353.770731][ T7693] device bridge_slave_1 entered promiscuous mode
[  353.773428][ T7718] BTRFS info (device loop3): using free space tree
[  353.913378][ T4223] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  353.935191][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  354.059285][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  354.069140][ T7718] BTRFS info (device loop3): enabling ssd optimizations
[  354.337338][ T7693] team0: Port device team_slave_0 added
[  354.361577][ T7693] team0: Port device team_slave_1 added
[  354.413901][ T4223] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.875338][ T4223] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  354.888324][ T4223] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  354.897427][ T4223] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.907339][ T4223] usb 5-1: config 0 descriptor??
[  355.060936][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  355.081554][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.125661][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  355.183085][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  355.235724][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  355.303576][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  355.375509][ T4223] plantronics 0003:047F:FFFF.0005: ignoring exceeding usage max
[  355.386419][ T7396] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  355.416157][ T4223] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  355.440483][ T4223] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  355.541117][ T7768] fuse: Bad value for 'fd'
[  355.603405][ T3658] Bluetooth: hci0: command tx timeout
[  355.866352][ T7693] device hsr_slave_0 entered promiscuous mode
[  355.891564][ T7693] device hsr_slave_1 entered promiscuous mode
[  355.908100][ T7693] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  355.923320][ T7693] Cannot create hsr debugfs directory
[  356.306564][ T3725] usb 5-1: USB disconnect, device number 14
[  356.377597][ T3773] device hsr_slave_0 left promiscuous mode
[  356.391395][ T3773] device hsr_slave_1 left promiscuous mode
[  356.400316][ T3773] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  356.417032][ T3773] batman_adv: batadv0: Removing interface: batadv_slave_0
[  356.428576][ T3773] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  356.439793][ T3773] batman_adv: batadv0: Removing interface: batadv_slave_1
[  356.451075][ T3773] device bridge_slave_1 left promiscuous mode
[  356.460821][ T3773] bridge0: port 2(bridge_slave_1) entered disabled state
[  356.477916][ T3773] device bridge_slave_0 left promiscuous mode
[  356.487870][ T3773] bridge0: port 1(bridge_slave_0) entered disabled state
[  356.550849][ T3773] device veth1_macvtap left promiscuous mode
[  356.560601][ T3773] device veth0_macvtap left promiscuous mode
[  356.570158][ T3773] device veth1_vlan left promiscuous mode
[  356.579861][ T3773] device veth0_vlan left promiscuous mode
[  356.778145][ T7783] loop1: detected capacity change from 0 to 1024
[  356.911610][ T7783] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  357.041948][ T7783] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  357.063762][ T7790] VFS: Lookup of 'file0' in fuse fuse would have caused loop
[  357.069323][ T7795] loop4: detected capacity change from 0 to 64
[  357.249826][ T4901] EXT4-fs (loop1): unmounting filesystem.
[  357.578316][ T7811] loop4: detected capacity change from 0 to 512
[  357.618189][ T7811] /dev/loop4: Can't open blockdev
[  357.684143][ T3658] Bluetooth: hci0: command tx timeout
[  357.982366][ T3773] team0 (unregistering): Port device team_slave_1 removed
[  358.055967][ T3773] team0 (unregistering): Port device team_slave_0 removed
[  358.169813][ T3773] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  358.252415][ T7807] loop1: detected capacity change from 0 to 40427
[  358.283768][ T3773] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  358.319926][ T7807] F2FS-fs (loop1): invalid crc value
[  358.401137][ T7807] F2FS-fs (loop1): Found nat_bits in checkpoint
[  358.462256][ T7807] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  358.473518][ T7807] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  358.538897][ T7823] f2fs_ckpt-7:1: attempt to access beyond end of device
[  358.538897][ T7823] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  359.075292][ T3773] bond0 (unregistering): Released all slaves
[  359.126196][ T7830] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1099'.
[  359.619238][ T7843] 9pnet_fd: Insufficient options for proto=fd
[  360.422259][ T3658] Bluetooth: hci0: command tx timeout
[  360.503259][   T14] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  360.601982][ T7850] device syzkaller0 entered promiscuous mode
[  360.907489][   T14] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  360.927845][   T14] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  361.054916][   T14] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  361.073277][   T14] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  361.093285][   T14] usb 5-1: SerialNumber: syz
[  361.229481][ T7868] nft_compat: unsupported protocol 0
[  361.366845][   T14] usb 5-1: 0:2 : does not exist
[  361.400416][   T14] usb 5-1: USB disconnect, device number 15
[  364.352067][    C1] eth0: bad gso: type: 1, size: 1408
[  364.675194][ T7693] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  364.705413][ T7693] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  364.753805][ T7693] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  364.788941][ T7693] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  364.944865][ T7909] loop3: detected capacity change from 0 to 1024
[  364.954377][   T26] audit: type=1326 audit(1723391958.915:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7904 comm="syz.0.1129" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe715f779f9 code=0x0
[  365.005637][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0
[  365.033963][   T41] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  365.054778][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  365.062588][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  365.082895][ T7693] 8021q: adding VLAN 0 to HW filter on device team0
[  365.098432][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  365.107801][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  365.116563][ T4226] bridge0: port 1(bridge_slave_0) entered blocking state
[  365.123729][ T4226] bridge0: port 1(bridge_slave_0) entered forwarding state
[  365.148067][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  365.158278][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  365.167757][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  365.180480][ T4223] bridge0: port 2(bridge_slave_1) entered blocking state
[  365.187658][ T4223] bridge0: port 2(bridge_slave_1) entered forwarding state
[  365.195850][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  365.205096][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  365.214679][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  365.227336][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  365.249894][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  365.259106][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  365.273599][   T41] usb 2-1: Using ep0 maxpacket: 16
[  365.279424][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  365.294401][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  365.303029][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  365.315940][ T7693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  365.332179][ T7693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  365.343647][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  365.359163][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  365.377326][ T7919] loop3: detected capacity change from 0 to 512
[  365.386740][ T7919] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  365.403691][   T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  365.435706][ T7919] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  365.451788][ T7919] EXT4-fs (loop3): 1 truncate cleaned up
[  365.463620][ T7919] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  365.656624][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  365.688806][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  365.705021][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  365.744593][   T41] usb 2-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[  365.768527][   T41] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.259842][   T41] usb 2-1: Product: syz
[  366.280467][   T41] usb 2-1: Manufacturer: syz
[  366.313289][   T41] usb 2-1: SerialNumber: syz
[  366.344066][   T41] usb 2-1: config 0 descriptor??
[  366.378172][ T7396] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  366.401649][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  366.420573][   T41] xbox_remote_probe: Unexpected endpoint_in
[  366.429274][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  366.446527][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  366.459461][ T7933] syz.0.1136[7933] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  366.459570][ T7933] syz.0.1136[7933] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  366.471477][ T7396] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  366.502075][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  366.513634][ T7693] device veth0_vlan entered promiscuous mode
[  366.528253][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  366.544471][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  366.557070][ T7693] device veth1_vlan entered promiscuous mode
[  366.629040][   T41] usb 2-1: USB disconnect, device number 8
[  366.636432][ T7934] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  366.672979][ T7934] CIFS mount error: No usable UNC path provided in device string!
[  366.672979][ T7934] 
[  366.684232][ T7934] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  366.752492][ T7693] device veth0_macvtap entered promiscuous mode
[  366.765585][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  366.775167][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  366.799046][ T7693] device veth1_macvtap entered promiscuous mode
[  366.815164][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  366.824223][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  366.842113][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.855668][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.866133][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.876937][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.887490][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.898090][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.908327][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  366.927967][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  366.939811][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  366.951477][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  366.964567][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  366.980380][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  366.993004][ T7396] EXT4-fs (loop3): unmounting filesystem.
[  366.996072][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.008851][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.019344][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.048359][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.073281][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.109671][ T7693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  367.133206][ T7693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  367.153918][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  367.302047][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  367.324382][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  367.337067][ T7693] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  367.372007][ T7693] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  367.394474][ T7693] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  367.435631][ T7693] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  367.588118][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.886043][ T4222] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  367.921035][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.945819][ T5431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  367.969264][ T5431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.051609][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.071047][ T3659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  368.082149][ T3659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  368.096157][ T3659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  368.102252][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  368.114119][ T3659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  368.121731][ T3659] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  368.125025][ T3773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  368.137807][ T3659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  368.200852][ T3773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  368.238643][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  368.261625][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  368.473840][ T4222] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  368.576256][ T4222] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.674950][ T4222] usb 2-1: Product: syz
[  368.723989][ T4222] usb 2-1: Manufacturer: syz
[  368.798297][ T4222] usb 2-1: SerialNumber: syz
[  369.035469][ T4222] r8152-cfgselector 2-1: config 0 descriptor??
[  369.373416][ T4222] r8152-cfgselector 2-1: Unknown version 0x0000
[  369.415360][ T4222] usbip-host 2-1: 2-1 is not in match_busid table... skip!
[  369.577476][ T7957] loop4: detected capacity change from 0 to 40427
[  369.648384][ T4222] usb 2-1: USB disconnect, device number 9
[  369.712709][ T7975] loop2: detected capacity change from 0 to 16
[  369.758195][ T7975] erofs: (device loop2): mounted with root inode @ nid 36.
[  369.808776][ T7975] syz.2.1150: attempt to access beyond end of device
[  369.808776][ T7975] loop2: rw=0, sector=14552337248, nr_sectors = 16 limit=16
[  369.829298][ T7975] syz.2.1150: attempt to access beyond end of device
[  369.829298][ T7975] loop2: rw=0, sector=14552337248, nr_sectors = 16 limit=16
[  369.829315][ T7954] chnl_net:caif_netlink_parms(): no params data found
[  370.037530][ T7975] syz.2.1150: attempt to access beyond end of device
[  370.037530][ T7975] loop2: rw=0, sector=14552337248, nr_sectors = 16 limit=16
[  372.312372][ T7985] loop4: detected capacity change from 0 to 32768
[  372.323453][ T3658] Bluetooth: hci4: command tx timeout
[  372.373211][ T7954] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.380422][ T7954] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.396668][ T7954] device bridge_slave_0 entered promiscuous mode
[  372.538881][ T7954] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.637593][ T7954] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.691057][ T7954] device bridge_slave_1 entered promiscuous mode
[  372.894427][ T7954] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  372.916677][ T7954] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.393321][ T3658] Bluetooth: hci4: command tx timeout
[  374.472321][ T7954] team0: Port device team_slave_0 added
[  374.507921][ T7954] team0: Port device team_slave_1 added
[  374.931512][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.945050][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.001750][ T7954] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.079147][   T11] device hsr_slave_0 left promiscuous mode
[  375.098481][   T11] device hsr_slave_1 left promiscuous mode
[  375.124526][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  375.145439][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  375.175301][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  375.191634][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  375.212377][   T11] device bridge_slave_1 left promiscuous mode
[  375.226506][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  375.275612][   T11] device bridge_slave_0 left promiscuous mode
[  375.285469][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  375.318985][ T8039] syz.2.1169 (8039): drop_caches: 2
[  375.359175][ T8045] syz.2.1169 (8045): drop_caches: 2
[  375.374997][ T8039] syz.2.1169 (8039): drop_caches: 2
[  375.390506][ T8045] syz.2.1169 (8045): drop_caches: 2
[  375.416583][   T11] device veth1_macvtap left promiscuous mode
[  375.451441][   T11] device veth0_macvtap left promiscuous mode
[  375.493474][   T11] device veth1_vlan left promiscuous mode
[  375.530002][   T11] device veth0_vlan left promiscuous mode
[  375.584826][ T8037] syz.2.1169 (8037): drop_caches: 2
[  375.600779][ T8037] syz.2.1169 (8037): drop_caches: 2
[  376.473278][ T3659] Bluetooth: hci4: command tx timeout
[  378.522358][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  378.553238][ T3659] Bluetooth: hci4: command tx timeout
[  379.099824][   T11] team0 (unregistering): Port device team_slave_1 removed
[  379.182021][   T11] team0 (unregistering): Port device team_slave_0 removed
[  379.306324][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.195271][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.274424][ T8067] nbd: must specify an index to disconnect
[  381.096889][   T11] bond0 (unregistering): Released all slaves
[  381.191208][ T7954] batman_adv: batadv0: Adding interface: batadv_slave_1
[  381.198886][ T7954] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  381.225177][ T7954] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  381.397849][ T7954] device hsr_slave_0 entered promiscuous mode
[  381.405094][ T7954] device hsr_slave_1 entered promiscuous mode
[  381.411875][ T7954] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  381.420400][ T7954] Cannot create hsr debugfs directory
[  381.617019][ T3773] Bluetooth: hci5: Frame reassembly failed (-84)
[  383.415724][ T7954] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  383.437227][ T7954] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  383.458625][ T7954] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  383.484284][ T7954] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  383.554297][ T8115] loop2: detected capacity change from 0 to 2048
[  383.612144][ T8115] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  383.673475][ T3659] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  383.770467][ T7954] 8021q: adding VLAN 0 to HW filter on device bond0
[  383.798442][   T26] audit: type=1800 audit(1723391977.755:84): pid=8115 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1194" name="bus" dev="loop2" ino=1367 res=0 errno=0
[  383.904042][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  383.916466][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  383.966002][ T7954] 8021q: adding VLAN 0 to HW filter on device team0
[  384.003998][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  384.012872][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  384.051944][ T4222] bridge0: port 1(bridge_slave_0) entered blocking state
[  384.059162][ T4222] bridge0: port 1(bridge_slave_0) entered forwarding state
[  384.117003][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  384.126293][ T8120] loop4: detected capacity change from 0 to 2048
[  384.134011][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  384.147566][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  384.166487][ T4226] bridge0: port 2(bridge_slave_1) entered blocking state
[  384.173665][ T4226] bridge0: port 2(bridge_slave_1) entered forwarding state
[  384.209213][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  384.349891][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1199'.
[  384.431778][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  384.453817][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  385.870058][ T8127] loop4: detected capacity change from 0 to 8192
[  385.969171][ T8132] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1200'.
[  386.147047][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  386.214614][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  386.260736][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  386.300428][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  386.352432][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  386.500821][ T7954] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  386.546632][ T7954] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  386.563611][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  386.594388][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  386.619450][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  387.739656][ T8148] loop4: detected capacity change from 0 to 2048
[  387.799849][ T8148] /dev/loop4: Can't open blockdev
[  388.019637][ T7954] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.148019][ T7954] device veth0_vlan entered promiscuous mode
[  388.161359][ T7954] device veth1_vlan entered promiscuous mode
[  388.173137][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  388.197997][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  389.083918][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  389.104049][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  389.112951][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  389.122260][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  389.131914][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  389.168651][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  389.182645][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  389.211295][ T7954] device veth0_macvtap entered promiscuous mode
[  389.233450][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  389.242261][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  389.253585][ T8164] loop4: detected capacity change from 0 to 2048
[  389.261011][ T8164] /dev/loop4: Can't open blockdev
[  389.278861][ T4223] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  389.285876][ T7954] device veth1_macvtap entered promiscuous mode
[  389.296907][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  389.314024][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  389.331566][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.383323][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.403179][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.417356][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.455968][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.503255][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.543222][ T4223] usb 3-1: Using ep0 maxpacket: 32
[  389.566333][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  389.591093][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  389.862578][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_0
[  390.174932][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.208154][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.234885][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.269740][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.289340][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.299942][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.309885][ T7954] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  390.320398][ T7954] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  390.332148][ T7954] batman_adv: batadv0: Interface activated: batadv_slave_1
[  390.339589][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  390.349117][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  390.358675][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  390.368496][ T6538] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  390.499078][ T7954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  390.504641][ T8171] syz.0.1214 (8171): drop_caches: 2
[  390.513932][ T8171] syz.0.1214 (8171): drop_caches: 2
[  390.523590][ T4223] usb 3-1: New USB device found, idVendor=0b48, idProduct=1009, bcdDevice=55.33
[  390.528317][ T8171] syz.0.1214 (8171): drop_caches: 2
[  390.532651][ T4223] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.538532][ T8171] syz.0.1214 (8171): drop_caches: 2
[  390.566060][ T8171] syz.0.1214 (8171): drop_caches: 2
[  390.572036][ T8171] syz.0.1214 (8171): drop_caches: 2
[  390.578048][ T7954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  390.598285][ T7954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  390.612682][ T4223] usb 3-1: Product: syz
[  390.622789][ T4223] usb 3-1: Manufacturer: syz
[  390.625453][ T7954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  390.637474][ T4223] usb 3-1: SerialNumber: syz
[  390.657503][ T4223] usb 3-1: config 0 descriptor??
[  390.725349][ T4223] ttusb_dec_send_command: command bulk message failed: error -22
[  390.743393][ T4223] ttusb-dec: probe of 3-1:0.0 failed with error -22
[  390.837981][ T4623] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.873003][ T4623] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.894792][ T4049] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.924322][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  390.944152][ T4049] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.998390][ T4223] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  391.019454][ T4223] usb 3-1: USB disconnect, device number 10
[  391.072150][ T8181] loop4: detected capacity change from 0 to 512
[  391.114524][ T8181] EXT4-fs: Ignoring removed mblk_io_submit option
[  391.147726][ T8181] /dev/loop4: Can't open blockdev
[  391.172559][ T8183] loop3: detected capacity change from 0 to 256
[  391.212973][ T8183] exfat: Unknown parameter 'allo˙˙utime'
[  393.118953][ T3658] Bluetooth: hci5: sending frame failed (-49)
[  393.127271][ T3659] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  393.400082][ T8190] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  393.812565][ T8202] loop2: detected capacity change from 0 to 2048
[  393.887618][ T8202]  loop2: p1 < > p4
[  393.892767][ T8202] loop2: p4 size 8388608 extends beyond EOD, truncated
[  395.483428][   T41] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  396.406843][ T3658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  396.417646][ T3658] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  396.426013][ T3658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  396.435014][ T3658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  396.444848][ T3658] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  396.452204][ T3658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  396.560528][ T8224] syz.4.1226 (8224): drop_caches: 2
[  396.567838][ T8224] syz.4.1226 (8224): drop_caches: 2
[  396.580091][ T8224] syz.4.1226 (8224): drop_caches: 2
[  396.585989][ T8224] syz.4.1226 (8224): drop_caches: 2
[  396.595499][ T8224] syz.4.1226 (8224): drop_caches: 2
[  396.601919][ T8224] syz.4.1226 (8224): drop_caches: 2
[  396.959999][   T41] usb 3-1: Using ep0 maxpacket: 8
[  397.113838][   T41] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  397.174446][   T41] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  397.612279][   T41] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  397.685095][   T41] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  397.766318][   T41] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  397.818911][   T41] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  397.843635][   T41] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  398.052421][ T8219] chnl_net:caif_netlink_parms(): no params data found
[  398.119400][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.133597][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.181308][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.190159][   T41] usb 3-1: usb_control_msg returned -32
[  398.196642][   T41] usbtmc 3-1:16.0: can't read capabilities
[  398.224440][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.247965][ T8214] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  398.277308][ T8214] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  398.282625][ T8248] loop3: detected capacity change from 0 to 1024
[  398.293072][ T8219] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.323688][ T8219] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.347898][ T8219] device bridge_slave_0 entered promiscuous mode
[  398.349839][ T7618] usb 3-1: USB disconnect, device number 11
[  398.376785][ T8219] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.410799][ T8219] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.427027][ T8219] device bridge_slave_1 entered promiscuous mode
[  398.473462][ T3659] Bluetooth: hci5: command tx timeout
[  398.498963][ T4623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.545253][ T8219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.557198][ T8219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.642642][ T4623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.676479][ T8219] team0: Port device team_slave_0 added
[  398.702831][ T8219] team0: Port device team_slave_1 added
[  398.797899][ T4623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.826553][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.838048][ T8248] loop3: detected capacity change from 0 to 4096
[  398.844810][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.871579][ T8219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.885046][ T8219] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.900883][ T8248] EXT4-fs (loop3): Test dummy encryption mode enabled
[  398.916188][ T8219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.963115][ T8219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.988756][ T8248] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  399.050181][ T4623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  399.105555][ T8219] device hsr_slave_0 entered promiscuous mode
[  399.112379][ T8219] device hsr_slave_1 entered promiscuous mode
[  399.121282][ T8219] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  399.133772][ T8219] Cannot create hsr debugfs directory
[  399.468427][ T7954] EXT4-fs (loop3): unmounting filesystem.
[  399.570771][ T8256] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1247'.
[  399.781861][ T4327] Bluetooth: hci3: Frame reassembly failed (-84)
[  399.817321][ T4327] Bluetooth: hci3: Frame reassembly failed (-84)
[  400.669319][ T8266] Bluetooth: hci5: command tx timeout
[  401.222617][ T4478] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  401.685530][ T4478] usb 5-1: Using ep0 maxpacket: 32
[  401.803387][ T4478] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  401.833330][ T8263] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  401.843316][ T8266] Bluetooth: hci3: command 0x1003 tx timeout
[  401.854861][ T3659] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  401.893414][ T4478] usb 5-1: config 0 has no interface number 0
[  401.899586][ T4478] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  401.938001][ T4478] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  401.948615][ T4478] usb 5-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  401.957742][ T4478] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.974539][ T4478] usb 5-1: config 0 descriptor??
[  402.793273][ T8266] Bluetooth: hci5: command tx timeout
[  402.928098][ T8219] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  403.034583][ T8219] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  403.063560][ T8219] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  403.123611][ T8219] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  403.156681][ T4478] uclogic 0003:28BD:0094.0006: failed retrieving string descriptor #100: -71
[  403.176267][ T4478] uclogic 0003:28BD:0094.0006: failed retrieving pen parameters: -71
[  403.194091][ T4478] uclogic 0003:28BD:0094.0006: pen probing failed: -71
[  403.211218][ T4478] uclogic 0003:28BD:0094.0006: failed probing parameters: -71
[  403.221358][ T4478] uclogic: probe of 0003:28BD:0094.0006 failed with error -71
[  403.242847][ T4478] usb 5-1: USB disconnect, device number 16
[  403.269462][ T8219] 8021q: adding VLAN 0 to HW filter on device bond0
[  403.355206][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  403.363867][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  403.377142][ T8219] 8021q: adding VLAN 0 to HW filter on device team0
[  403.391351][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  403.400920][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  403.416823][ T7618] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.424031][ T7618] bridge0: port 1(bridge_slave_0) entered forwarding state
[  403.463835][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  403.472109][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  403.488061][ T7617] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  403.497285][ T7617] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.504542][ T7617] bridge0: port 2(bridge_slave_1) entered forwarding state
[  403.576020][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  403.588375][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  403.602188][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  403.615277][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  403.648057][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  403.656953][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  403.666098][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  403.678953][ T4623] device hsr_slave_0 left promiscuous mode
[  403.692674][ T4623] device hsr_slave_1 left promiscuous mode
[  403.706243][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  403.729585][    C1] eth0: bad gso: type: 1, size: 1408
[  403.741638][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  403.760430][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  403.778184][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  403.801099][ T4623] device bridge_slave_1 left promiscuous mode
[  403.824929][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.878962][ T4623] device bridge_slave_0 left promiscuous mode
[  403.883733][ T8298] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1248'.
[  403.901990][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.982643][ T4623] device veth1_macvtap left promiscuous mode
[  403.989173][ T4623] device veth0_macvtap left promiscuous mode
[  403.996198][ T4623] device veth1_vlan left promiscuous mode
[  404.002124][ T4623] device veth0_vlan left promiscuous mode
[  404.015539][ T8291] loop2: detected capacity change from 0 to 2048
[  404.112589][ T8299] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  404.130493][   T41] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  404.404589][   T41] usb 5-1: Using ep0 maxpacket: 8
[  404.543358][   T41] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  404.554811][   T41] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  404.583011][   T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  404.607386][   T41] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  404.624321][   T41] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  404.637643][   T41] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  404.646854][   T41] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  404.883235][ T3659] Bluetooth: hci5: command tx timeout
[  404.925657][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  404.934332][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  404.963283][   T41] usb 5-1: usb_control_msg returned -32
[  404.968914][   T41] usbtmc 5-1:16.0: can't read capabilities
[  404.975443][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.002169][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.036392][ T8297] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  405.063200][ T8297] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  405.112200][   T41] usb 5-1: USB disconnect, device number 17
[  405.196547][ T4623] team0 (unregistering): Port device team_slave_1 removed
[  405.253629][ T4623] team0 (unregistering): Port device team_slave_0 removed
[  405.313289][ T4623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  405.405189][ T4623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  405.787738][ T8311] loop4: detected capacity change from 0 to 256
[  405.808602][ T8311] /dev/loop4: Can't open blockdev
[  405.887594][ T8314] loop2: detected capacity change from 0 to 1024
[  406.059784][ T7616] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  406.953336][ T3659] Bluetooth: hci5: command tx timeout
[  406.993239][ T7616] usb 4-1: Using ep0 maxpacket: 16
[  407.240979][ T8308] loop2: detected capacity change from 0 to 4096
[  407.265187][ T8308] EXT4-fs (loop2): Test dummy encryption mode enabled
[  407.273995][ T7616] usb 4-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa
[  407.287970][ T8308] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  407.297056][ T7616] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.324036][ T7616] usb 4-1: Product: syz
[  407.328218][ T7616] usb 4-1: Manufacturer: syz
[  407.332801][ T7616] usb 4-1: SerialNumber: syz
[  407.354379][ T7616] usb 4-1: config 0 descriptor??
[  407.394737][ T7616] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state.
[  407.408382][ T7616] dvb-usb: bulk message failed: -22 (3/0)
[  407.422166][ T7616] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle error while loading driver (-22)
[  407.443621][ T7616] dvb_usb_dibusb_mc: probe of 4-1:0.0 failed with error -22
[  407.585870][ T4623] bond0 (unregistering): Released all slaves
[  407.641986][ T7616] usb 4-1: USB disconnect, device number 11
[  407.674287][ T7693] EXT4-fs (loop2): unmounting filesystem.
[  407.727031][ T8219] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  407.737834][ T8219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  407.754199][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  407.762680][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  407.772059][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  407.782404][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  407.798414][ T7618] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  407.974745][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  407.982344][ T3686] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  407.996802][ T8219] 8021q: adding VLAN 0 to HW filter on device batadv0
[  408.036642][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  408.049866][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  408.070246][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  408.078933][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  408.088813][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  408.103763][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  408.117347][ T8219] device veth0_vlan entered promiscuous mode
[  408.129315][ T8219] device veth1_vlan entered promiscuous mode
[  408.151475][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  408.160451][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  408.168740][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  408.186813][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  408.197905][ T8219] device veth0_macvtap entered promiscuous mode
[  408.227835][ T8219] device veth1_macvtap entered promiscuous mode
[  408.293763][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  408.332360][ T8328] loop2: detected capacity change from 0 to 2048
[  408.381808][ T8328] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  409.849896][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.167837][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.253736][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.282156][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.311503][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.354323][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  411.365079][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.376524][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_0
[  411.395920][ T8331] device dummy0 entered promiscuous mode
[  411.421047][ T8332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1253'.
[  411.442519][ T8331] device dummy0 left promiscuous mode
[  411.449492][ T7693] EXT4-fs (loop2): unmounting filesystem.
[  411.580449][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  411.603987][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  411.612262][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  411.634141][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  411.645158][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.673228][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.703322][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.723166][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.734328][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.746009][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.756146][ T8219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  411.766748][ T8219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  411.780869][ T8219] batman_adv: batadv0: Interface activated: batadv_slave_1
[  411.810594][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  411.829682][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  411.850754][ T8219] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  411.877542][ T8219] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  411.890911][ T8219] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  411.899773][ T8219] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  411.985439][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.008075][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.014698][ T4327] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  412.028849][ T4327] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  412.030712][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  412.055329][ T4222] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  413.869254][ T4265] Bluetooth: hci3: Frame reassembly failed (-84)
[  414.104248][ T8376] loop3: detected capacity change from 0 to 512
[  414.165298][ T8376] EXT4-fs: Ignoring removed mblk_io_submit option
[  414.415709][ T8376] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.1256: bad orphan inode 15
[  414.435763][ T8376] ext4_test_bit(bit=14, block=5) = 0
[  414.441233][ T8376] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  414.521145][ T8366] loop4: detected capacity change from 0 to 32768
[  414.877811][ T8366] loop4: detected capacity change from 0 to 4096
[  414.887890][ T8366] ntfs3: Bad value for 'umask'
[  415.248669][ T7954] EXT4-fs (loop3): unmounting filesystem.
[  415.913301][ T8369] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  415.913348][ T8266] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  415.926660][ T3659] Bluetooth: hci3: command 0x1003 tx timeout
[  416.012975][ T8380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'.
[  416.111634][ T8390] netlink: 232 bytes leftover after parsing attributes in process `syz.2.1258'.
[  416.247444][ T8396] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1264'.
[  416.411664][ T8396] loop3: detected capacity change from 0 to 2048
[  416.498660][ T8397] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  417.398665][    C1] eth0: bad gso: type: 1, size: 1408
[  417.464324][ T8414] capability: warning: `syz.4.1276' uses 32-bit capabilities (legacy support in use)
[  417.550362][ T8416] loop2: detected capacity change from 0 to 16
[  417.564453][ T8416] erofs: (device loop2): mounted with root inode @ nid 36.
[  418.907980][    C1] eth0: bad gso: type: 1, size: 1408
[  418.956071][ T8439] loop2: detected capacity change from 0 to 256
[  418.969109][ T8439] exfat: Unknown parameter 'allo˙˙utime'
[  419.060722][ T8443] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'.
[  419.184331][ T8446] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1286'.
[  419.809027][ T8420] loop3: detected capacity change from 0 to 32768
[  419.876784][ T8420] XFS (loop3): Mounting V5 Filesystem
[  420.049726][ T8420] XFS (loop3): Ending clean mount
[  420.079593][ T8420] XFS (loop3): Quotacheck needed: Please wait.
[  420.145814][ T8474] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1290'.
[  420.181422][ T8420] XFS (loop3): Quotacheck: Done.
[  420.253919][ T8476] Non-string source
[  420.394734][ T7954] XFS (loop3): Unmounting Filesystem
[  420.543588][ T8468] loop4: detected capacity change from 0 to 2048
[  420.643387][ T8480] loop2: detected capacity change from 0 to 8
[  420.663748][ T8480] squashfs: Unknown parameter '0x0000000000000000˙˙˙˙˙˙˙˙˙01777777777777777777777˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙˙017777777777777777777770177777777777777777777700000000000000000000˙˙˙˙'
[  420.775589][ T8480] loop2: detected capacity change from 0 to 1024
[  421.201407][ T8480] EXT4-fs (loop2): failed to open journal device unknown-block(0,0) -6
[  421.603215][ T6538] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  423.083773][ T6538] usb 2-1: unable to get BOS descriptor or descriptor too short
[  423.193458][ T6538] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  423.209415][ T6538] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 9
[  423.223392][ T6538] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  423.239316][ T6538] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x88 has invalid maxpacket 0
[  423.341854][ T8514] loop3: detected capacity change from 0 to 256
[  423.444358][ T6538] usb 2-1: New USB device found, idVendor=04e6, idProduct=5591, bcdDevice=94.39
[  423.459800][ T6538] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.483785][ T6538] usb 2-1: Product: syz
[  423.492045][ T8514] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005)
[  423.503280][ T8514] exFAT-fs (loop3): Filesystem has been set read-only
[  423.520340][ T6538] usb 2-1: Manufacturer: syz
[  423.623341][ T6538] usb 2-1: SerialNumber: syz
[  423.626956][ T8514] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005)
[  423.646945][ T6538] usb 2-1: config 0 descriptor??
[  423.723655][ T8491] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  423.803201][    C1] usb 2-1: NFC: Urb failure (status -71)
[  423.811455][ T6538] usb 2-1: NFC: Unable to get FW version
[  423.820456][ T6538] pn533_usb: probe of 2-1:0.0 failed with error -90
[  424.045085][ T7954] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005)
[  424.080812][ T7617] usb 2-1: USB disconnect, device number 10
[  424.086559][ T7954] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005)
[  424.190464][ T8526] binder: 8521:8526 ioctl c0306201 20000080 returned -14
[  425.176688][ T8529] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1310'.
[  425.229796][ T8533] loop2: detected capacity change from 0 to 512
[  425.244726][ T8533] EXT4-fs: Ignoring removed i_version option
[  425.251002][ T8533] EXT4-fs: Ignoring removed nobh option
[  425.262362][ T8533] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  425.297458][ T8533] EXT4-fs (loop2): 1 truncate cleaned up
[  425.309194][ T8533] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  425.520275][ T8546] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1314'.
[  425.561315][ T7693] EXT4-fs (loop2): unmounting filesystem.
[  426.280261][ T4623] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.442216][ T4623] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.576769][ T4623] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.672107][ T3659] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  426.682530][ T3659] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  426.695477][ T3659] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  426.728333][ T3659] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  426.746880][ T3659] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  426.754310][ T3659] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  426.766071][ T8266] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  426.773908][ T8266] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  426.781291][ T8266] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  426.792844][ T8266] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  426.801444][ T8266] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  426.803465][ T4623] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  426.819020][ T8266] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  427.053316][ T7616] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  427.391833][ T8579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1326'.
[  427.434218][ T7616] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  427.443719][ T7616] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.464964][ T7616] usb 3-1: config 0 descriptor??
[  427.505235][ T7616] gspca_main: cpia1-2.14.0 probing 0813:0001
[  427.566785][ T8570] chnl_net:caif_netlink_parms(): no params data found
[  427.603627][ T8584] loop4: detected capacity change from 0 to 8
[  427.616406][ T8584] /dev/loop4: Can't open blockdev
[  428.557152][ T8570] bridge0: port 1(bridge_slave_0) entered blocking state
[  428.577943][ T8570] bridge0: port 1(bridge_slave_0) entered disabled state
[  428.614826][ T8570] device bridge_slave_0 entered promiscuous mode
[  428.623322][ T7616] gspca_cpia1: usb_control_msg 01, error -71
[  428.629352][ T7616] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  428.634592][ T8570] bridge0: port 2(bridge_slave_1) entered blocking state
[  428.653550][ T8570] bridge0: port 2(bridge_slave_1) entered disabled state
[  428.665116][ T8570] device bridge_slave_1 entered promiscuous mode
[  428.671713][ T7616] usb 3-1: USB disconnect, device number 12
[  428.723457][ T6538] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  428.888243][ T8266] Bluetooth: hci3: command tx timeout
[  429.053233][ T6538] usb 5-1: Using ep0 maxpacket: 32
[  429.642695][ T8570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  429.713339][ T6538] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  429.735843][ T6538] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0
[  429.753858][ T8570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  429.939702][ T6538] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  429.953331][ T6538] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  429.961539][ T6538] usb 5-1: Product: syz
[  429.975807][ T8570] team0: Port device team_slave_0 added
[  429.984712][ T8611] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1337'.
[  430.011732][ T6538] usb 5-1: Manufacturer: syz
[  430.015785][ T8570] team0: Port device team_slave_1 added
[  430.016545][ T6538] usb 5-1: SerialNumber: syz
[  430.053574][ T6538] usb 5-1: config 0 descriptor??
[  430.110787][ T8613] overlayfs: missing 'lowerdir'
[  430.121769][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_0
[  430.133271][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.175223][ T8613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  430.190001][ T8570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  430.252138][ T8570] batman_adv: batadv0: Adding interface: batadv_slave_1
[  430.259764][ T8570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  430.311505][ T8570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.338590][ T6538] usb 5-1: USB disconnect, device number 18
[  430.487050][ T8570] device hsr_slave_0 entered promiscuous mode
[  430.494473][ T8570] device hsr_slave_1 entered promiscuous mode
[  430.501052][ T8570] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  430.509240][ T8570] Cannot create hsr debugfs directory
[  430.623585][ T4623] device hsr_slave_0 left promiscuous mode
[  430.631357][ T4623] device hsr_slave_1 left promiscuous mode
[  430.639124][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.644177][ T4226] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  430.646707][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.661949][ T4623] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.669503][ T4623] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.677328][ T4623] device bridge_slave_1 left promiscuous mode
[  430.683619][ T4623] bridge0: port 2(bridge_slave_1) entered disabled state
[  430.692080][ T4623] device bridge_slave_0 left promiscuous mode
[  430.698586][ T4623] bridge0: port 1(bridge_slave_0) entered disabled state
[  430.733768][ T4623] device veth1_macvtap left promiscuous mode
[  430.739849][ T4623] device veth0_macvtap left promiscuous mode
[  430.746346][ T4623] device veth1_vlan left promiscuous mode
[  430.752153][ T4623] device veth0_vlan left promiscuous mode
[  430.954366][ T8266] Bluetooth: hci3: command tx timeout
[  431.044523][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  431.054634][ T4226] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  431.064896][ T4226] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  431.148505][ T8626] loop4: detected capacity change from 0 to 16
[  431.155364][ T8626] erofs: Unknown parameter ''
[  431.263682][ T4226] usb 3-1: New USB device found, idVendor=1385, idProduct=4251, bcdDevice=2c.d4
[  431.279220][ T4226] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  431.290050][ T4226] usb 3-1: Product: syz
[  431.295447][ T4226] usb 3-1: Manufacturer: syz
[  431.302326][ T4226] usb 3-1: SerialNumber: syz
[  431.320025][ T4226] usb 3-1: config 0 descriptor??
[  431.364012][ T4226] usb 3-1: Could not find all expected endpoints
[  431.663576][ T4478] usb 3-1: USB disconnect, device number 13
[  432.032037][ T4623] team0 (unregistering): Port device team_slave_1 removed
[  432.095609][ T4623] team0 (unregistering): Port device team_slave_0 removed
[  432.151627][ T4623] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  432.244963][ T4623] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  432.426991][ T8644] loop2: detected capacity change from 0 to 128
[  432.427375][ T8641] netlink: 'syz.1.1344': attribute type 29 has an invalid length.
[  432.458946][ T8644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  432.469392][ T8644] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038 (0x7fffffff)
[  432.521160][ T8635] can: request_module (can-proto-0) failed.
[  432.789337][ T8644] syz.2.1347 (8644) used greatest stack depth: 18240 bytes left
[  432.834136][ T7693] EXT4-fs (loop2): unmounting filesystem.
[  432.962195][ T4623] bond0 (unregistering): Released all slaves
[  433.043257][ T8266] Bluetooth: hci3: command tx timeout
[  433.090299][ T8641] netlink: 'syz.1.1344': attribute type 29 has an invalid length.
[  435.851159][ T8675] netlink: 212 bytes leftover after parsing attributes in process `syz.2.1355'.
[  438.450743][ T8266] Bluetooth: hci3: command tx timeout
[  439.915020][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  439.953514][ T8570] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  439.997954][ T8570] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  440.029774][ T8570] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  440.055503][ T8570] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  440.335115][ T8570] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.411011][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  440.421262][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  440.459694][ T8570] 8021q: adding VLAN 0 to HW filter on device team0
[  440.473248][ T3659] Bluetooth: hci3: command tx timeout
[  440.486891][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  440.496664][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  440.569786][ T4478] bridge0: port 1(bridge_slave_0) entered blocking state
[  440.577188][ T4478] bridge0: port 1(bridge_slave_0) entered forwarding state
[  440.653264][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  440.663308][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  440.693006][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  440.714051][ T7616] bridge0: port 2(bridge_slave_1) entered blocking state
[  440.721353][ T7616] bridge0: port 2(bridge_slave_1) entered forwarding state
[  440.753644][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  440.797002][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  440.856323][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  440.867079][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  440.905372][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  440.926196][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  440.949397][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  440.972355][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  441.001075][ T8570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  441.042252][ T8570] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  441.051109][ T8757] loop4: detected capacity change from 0 to 32768
[  441.076364][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  441.095027][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  441.113946][ T7616] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  441.685011][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  441.692518][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  441.740904][ T8570] 8021q: adding VLAN 0 to HW filter on device batadv0
[  441.795552][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  441.803845][ T7616] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  441.812794][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  441.877028][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  441.904304][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  441.913921][ T8570] device veth0_vlan entered promiscuous mode
[  441.939064][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  441.960609][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  441.979183][ T8570] device veth1_vlan entered promiscuous mode
[  442.036539][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  442.046155][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  442.059462][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  442.069008][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  442.086902][ T8570] device veth0_macvtap entered promiscuous mode
[  442.102001][ T8570] device veth1_macvtap entered promiscuous mode
[  442.122946][ T8805] loop4: detected capacity change from 0 to 512
[  442.141980][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  442.156052][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.166239][ T7616] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  442.174753][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  442.191167][ T7616] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  442.204039][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.217015][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  442.239095][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.253452][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  442.268646][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.280712][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_0
[  442.293861][ T7616] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  442.309095][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  442.318084][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  442.325735][ T7616] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  442.334935][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  442.343033][ T7616] usb 3-1: Manufacturer: syz
[  442.349724][ T7616] usb 3-1: config 0 descriptor??
[  442.356693][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  442.374013][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.390119][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.407084][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.430787][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.458487][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.514323][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.541624][ T8570] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.578576][ T7616] rc_core: IR keymap rc-hauppauge not found
[  442.584709][ T7616] Registered IR keymap rc-empty
[  442.591191][ T7616] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  442.607022][ T8570] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.625927][ T8570] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.723243][ T8570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.731990][ T8570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.815846][ T7616] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input16
[  442.821149][ T8570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.821183][ T8570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.835051][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  442.835763][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  443.510212][   T41] usb 3-1: USB disconnect, device number 14
[  443.617716][ T8710] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.717555][ T8724] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.731839][ T8724] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.755515][ T4226] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  443.791344][ T8710] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.832053][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  444.059585][ T8832] loop4: detected capacity change from 0 to 512
[  444.081531][ T8832] /dev/loop4: Can't open blockdev
[  444.703537][ T8836] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  444.726656][ T8836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  444.768144][ T8836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  444.792452][ T8836] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  445.166575][ T8832] overlayfs: overlapping lowerdir path
[  445.268284][ T8842] loop2: detected capacity change from 0 to 512
[  445.320821][ T8842] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  445.340312][ T8842] ext4 filesystem being mounted at /58/bus supports timestamps until 2038 (0x7fffffff)
[  445.665097][ T8847] overlayfs: failed to resolve './file1': -2
[  445.673051][ T8852] cgroup: Bad value for 'name'
[  445.697147][ T8852] loop4: detected capacity change from 0 to 128
[  447.760513][ T8866] netlink: 131996 bytes leftover after parsing attributes in process `syz.3.1400'.
[  447.907404][ T7693] EXT4-fs (loop2): unmounting filesystem.
[  448.120388][ T8877] loop2: detected capacity change from 0 to 2048
[  448.133558][ T8879] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT
[  448.152897][ T8877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  448.360416][ T3725] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  448.793362][ T3725] usb 4-1: Using ep0 maxpacket: 32
[  448.924080][ T3725] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be
[  449.123902][ T3725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.164043][ T3725] usb 4-1: config 0 descriptor??
[  449.245579][ T3725] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  450.667698][ T8871] loop4: detected capacity change from 0 to 40427
[  450.672410][ T8906] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1414'.
[  450.753228][   T14] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  450.863408][ T3725] gspca_vc032x: reg_w err -71
[  450.868147][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.893189][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.898606][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.918884][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.931430][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.949212][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.969443][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.979565][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.990244][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  450.999752][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.003558][   T14] usb 2-1: Using ep0 maxpacket: 16
[  451.010708][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.021787][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.033359][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.043204][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.062504][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.071214][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.090804][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.115623][ T3725] gspca_vc032x: I2c Bus Busy Wait 00
[  451.120986][ T3725] gspca_vc032x: Unknown sensor...
[  451.123342][ T4478] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  451.129776][ T3725] vc032x: probe of 4-1:0.0 failed with error -22
[  451.134320][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  451.163457][ T3725] usb 4-1: USB disconnect, device number 12
[  451.165531][   T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  451.194896][   T14] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  451.208258][   T14] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  451.217460][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  451.228667][   T14] usb 2-1: config 0 descriptor??
[  451.393259][ T4478] usb 3-1: Using ep0 maxpacket: 8
[  451.579060][ T4478] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  451.634078][ T4478] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  451.706907][ T4478] usb 3-1: config 1 has no interface number 1
[  451.839099][   T14] koneplus 0003:1E7D:2E22.0007: unknown main item tag 0x0
[  451.917442][ T4478] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  452.053404][   T14] koneplus 0003:1E7D:2E22.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.1-1/input0
[  452.089145][ T4478] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  452.804426][ T7618] usb 2-1: USB disconnect, device number 11
[  453.308234][ T4478] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  453.319658][ T4478] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  453.330303][ T4478] usb 3-1: Product: syz
[  453.354640][ T4478] usb 3-1: Manufacturer: syz
[  453.359328][ T4478] usb 3-1: SerialNumber: syz
[  453.637564][ T8950] ieee802154 phy1 wpan1: encryption failed: -22
[  453.693570][ T4478] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  453.743478][ T4478] usb 3-1: USB disconnect, device number 15
[  454.108825][ T8962] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1434'.
[  454.205481][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1434'.
[  455.049922][ T8968] loop2: detected capacity change from 0 to 8
[  455.083831][ T8968] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  455.139138][ T8968] cramfs: root is not a directory
[  456.759455][ T8989] loop4: detected capacity change from 0 to 256
[  457.340426][ T8266] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  457.351718][ T3651] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  457.360045][ T8266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  457.368103][ T3651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  457.377970][ T8266] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  457.385286][ T8266] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  457.619799][ T8996] loop2: detected capacity change from 0 to 1024
[  457.689550][ T4623] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.711098][ T8998] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[  457.753651][   T26] audit: type=1326 audit(1723392051.715:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8995 comm="syz.2.1451" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe3313779f9 code=0x0
[  457.855904][ T4623] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  457.911876][ T9001] input: syz1 as /devices/virtual/input/input17
[  458.012158][ T4623] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.084559][ T8979] loop3: detected capacity change from 0 to 32768
[  458.135483][ T4623] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  458.330263][ T8990] chnl_net:caif_netlink_parms(): no params data found
[  458.559486][ T9008] loop2: detected capacity change from 0 to 256
[  458.571123][ T9008] exfat: Deprecated parameter 'namecase'
[  458.583579][ T9008] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  458.676078][ T8990] bridge0: port 1(bridge_slave_0) entered blocking state
[  458.693361][ T8990] bridge0: port 1(bridge_slave_0) entered disabled state
[  458.715395][ T8990] device bridge_slave_0 entered promiscuous mode
[  459.433373][ T3659] Bluetooth: hci4: command tx timeout
[  459.740518][ T8990] bridge0: port 2(bridge_slave_1) entered blocking state
[  459.750337][ T8990] bridge0: port 2(bridge_slave_1) entered disabled state
[  459.761711][ T8990] device bridge_slave_1 entered promiscuous mode
[  461.553359][ T3659] Bluetooth: hci4: command tx timeout
[  463.604823][ T3659] Bluetooth: hci4: command tx timeout
[  465.704718][ T3659] Bluetooth: hci4: command tx timeout
[  467.801740][ T3651] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  467.820522][ T3651] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  467.828764][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  467.837714][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  467.845285][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  467.852552][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  469.953432][ T3659] Bluetooth: hci5: command tx timeout
[  470.548215][ T8266] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  470.566054][ T8266] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  470.574452][ T8266] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  470.582293][ T8266] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  470.589883][ T8266] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  470.597166][ T8266] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  470.654303][ T3651] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  470.674936][ T3651] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  470.683446][ T3651] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  470.691341][ T3651] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  470.698906][ T3651] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  470.706465][ T3651] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  472.004967][ T3659] Bluetooth: hci5: command tx timeout
[  472.653454][ T3659] Bluetooth: hci7: command tx timeout
[  472.753525][ T3659] Bluetooth: hci6: command tx timeout
[  473.288885][ T3651] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  473.299380][ T3651] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  473.314240][ T3651] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  473.322299][ T3651] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  473.331801][ T3651] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  473.339109][ T3651] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  474.105060][ T3659] Bluetooth: hci5: command tx timeout
[  474.753424][ T3659] Bluetooth: hci7: command tx timeout
[  474.803356][ T3659] Bluetooth: hci6: command tx timeout
[  475.455034][ T3659] Bluetooth: hci8: command tx timeout
[  476.153438][ T3659] Bluetooth: hci5: command tx timeout
[  476.804809][ T3659] Bluetooth: hci7: command tx timeout
[  476.903364][ T3659] Bluetooth: hci6: command tx timeout
[  477.553477][ T3659] Bluetooth: hci8: command tx timeout
[  478.912821][ T3659] Bluetooth: hci7: command tx timeout
[  478.953537][ T3659] Bluetooth: hci6: command tx timeout
[  479.603537][ T3659] Bluetooth: hci8: command tx timeout
[  481.703438][ T3659] Bluetooth: hci8: command tx timeout
[  564.903081][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  564.910102][    C1] rcu: 	0-...!: (1 ticks this GP) idle=f44c/1/0x4000000000000000 softirq=35841/35841 fqs=479
[  564.922258][    C1] 	(detected by 1, t=10503 jiffies, g=48941, q=659 ncpus=2)
[  564.929562][    C1] Sending NMI from CPU 1 to CPUs 0:
[  564.934806][    C0] NMI backtrace for cpu 0
[  564.934823][    C0] CPU: 0 PID: 9016 Comm: syz.3.1455 Not tainted 6.1.104-syzkaller #0
[  564.934841][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  564.934854][    C0] RIP: 0010:__lock_acquire+0x465/0x1f80
[  564.934887][    C0] Code: 10 84 c0 0f 85 e5 12 00 00 44 8b b4 24 d8 00 00 00 48 8b 44 24 08 44 89 20 48 8b 44 24 20 48 8d 5c c6 24 48 89 d8 48 c1 e8 03 <0f> b6 04 10 84 c0 4c 8b 64 24 18 0f 85 e3 12 00 00 44 89 33 44 89
[  564.934901][    C0] RSP: 0018:ffffc90000007a80 EFLAGS: 00000807
[  564.934915][    C0] RAX: 1ffff1100f09d165 RBX: ffff8880784e8b2c RCX: 0000000000080000
[  564.934927][    C0] RDX: dffffc0000000000 RSI: ffff8880784e8ae0 RDI: 0000000000004062
[  564.934939][    C0] RBP: ffff8880784e8ac4 R08: 0000000000000001 R09: 0000000000000001
[  564.934949][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 00000000000c4062
[  564.934960][    C0] R13: ffff8880784e8000 R14: 0000000000000000 R15: 0000000000000062
[  564.934971][    C0] FS:  00007f8f187ef6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  564.934985][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  564.934997][    C0] CR2: 0000000020003c80 CR3: 0000000061cc5000 CR4: 00000000003506f0
[  564.935010][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  564.935019][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  564.935029][    C0] Call Trace:
[  564.935036][    C0]  <NMI>
[  564.935045][    C0]  ? nmi_cpu_backtrace+0x3de/0x560
[  564.935070][    C0]  ? read_lock_is_recursive+0x10/0x10
[  564.935096][    C0]  ? nmi_trigger_cpumask_backtrace+0x3f0/0x3f0
[  564.935130][    C0]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  564.935155][    C0]  ? nmi_handle+0x12e/0x440
[  564.935181][    C0]  ? nmi_handle+0x25/0x440
[  564.935205][    C0]  ? __lock_acquire+0x465/0x1f80
[  564.935229][    C0]  ? default_do_nmi+0x62/0x150
[  564.935254][    C0]  ? exc_nmi+0xa8/0x100
[  564.935278][    C0]  ? end_repeat_nmi+0x16/0x31
[  564.935305][    C0]  ? __lock_acquire+0x465/0x1f80
[  564.935329][    C0]  ? __lock_acquire+0x465/0x1f80
[  564.935353][    C0]  ? __lock_acquire+0x465/0x1f80
[  564.935377][    C0]  </NMI>
[  564.935381][    C0]  <IRQ>
[  564.935394][    C0]  lock_acquire+0x1f8/0x5a0
[  564.935416][    C0]  ? __hrtimer_run_queues+0x6d3/0xe50
[  564.935440][    C0]  ? read_lock_is_recursive+0x10/0x10
[  564.935464][    C0]  ? advance_sched+0x6d0/0x970
[  564.935484][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  564.935510][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  564.935528][    C0]  ? advance_sched+0x6d0/0x970
[  564.935548][    C0]  _raw_spin_lock_irq+0xcf/0x110
[  564.935566][    C0]  ? __hrtimer_run_queues+0x6d3/0xe50
[  564.935585][    C0]  ? _raw_spin_lock_irqsave+0x120/0x120
[  564.935609][    C0]  __hrtimer_run_queues+0x6d3/0xe50
[  564.935644][    C0]  ? hrtimer_interrupt+0x980/0x980
[  564.935663][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  564.935691][    C0]  hrtimer_interrupt+0x392/0x980
[  564.935721][    C0]  __sysvec_apic_timer_interrupt+0x156/0x580
[  564.935744][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[  564.935761][    C0]  </IRQ>
[  564.935766][    C0]  <TASK>
[  564.935771][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  564.935794][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[  564.935814][    C0] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 32 8e 32 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 87 d9 ae f6 65 8b 05 28 e2 52 75 85 c0 74 3f 48 c7 04 24 0e 36
[  564.935826][    C0] RSP: 0018:ffffc9000462fb60 EFLAGS: 00000206
[  564.935840][    C0] RAX: bca6584e380c7f00 RBX: 1ffff920008c5f70 RCX: ffffffff816adfda
[  564.935852][    C0] RDX: dffffc0000000000 RSI: ffffffff8b0c0260 RDI: 0000000000000001
[  564.935864][    C0] RBP: ffffc9000462fbf0 R08: dffffc0000000000 R09: fffffbfff20e7445
[  564.935877][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  564.935888][    C0] R13: 1ffff920008c5f6c R14: ffffc9000462fb80 R15: 0000000000000246
[  564.935903][    C0]  ? mark_lock+0x9a/0x340
[  564.935930][    C0]  ? _raw_spin_unlock+0x40/0x40
[  564.935949][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  564.935975][    C0]  clock_was_set+0x179/0x900
[  564.935998][    C0]  ? destroy_hrtimer_on_stack+0x20/0x20
[  564.936017][    C0]  ? memcpy+0x3c/0x60
[  564.936035][    C0]  ? timekeeping_update+0x3e5/0x450
[  564.936059][    C0]  do_settimeofday64+0x673/0x7e0
[  564.936085][    C0]  ? cake_enqueue+0x23bb/0x8b20
[  564.936109][    C0]  ? __x64_sys_clock_settime+0x232/0x270
[  564.936126][    C0]  ? get_device_system_crosststamp+0x920/0x920
[  564.936150][    C0]  ? cake_enqueue+0x23bb/0x8b20
[  564.936175][    C0]  ? bpf_lsm_settime+0x5/0x10
[  564.936189][    C0]  ? security_settime64+0x75/0x90
[  564.936216][    C0]  __x64_sys_clock_settime+0x232/0x270
[  564.936234][    C0]  ? print_irqtrace_events+0x210/0x210
[  564.936258][    C0]  ? exit_itimers+0x690/0x690
[  564.936276][    C0]  ? syscall_enter_from_user_mode+0xcf/0x230
[  564.936296][    C0]  do_syscall_64+0x3b/0xb0
[  564.936317][    C0]  ? clear_bhb_loop+0x45/0xa0
[  564.936340][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  564.936360][    C0] RIP: 0033:0x7f8f179779f9
[  564.936378][    C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  564.936391][    C0] RSP: 002b:00007f8f187ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e3
[  564.936407][    C0] RAX: ffffffffffffffda RBX: 00007f8f17b06058 RCX: 00007f8f179779f9
[  564.936418][    C0] RDX: 0000000000000000 RSI: 0000000020003c80 RDI: 0000000000000000
[  564.936428][    C0] RBP: 00007f8f179e58ee R08: 0000000000000000 R09: 0000000000000000
[  564.936438][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  564.936447][    C0] R13: 0000000000000000 R14: 00007f8f17b06058 R15: 00007ffcf35a0a88
[  564.936465][    C0]  </TASK>
[  564.936796][    C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 8094 jiffies! g48941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402
[  565.508044][    C1] rcu: 	Possible timer handling issue on cpu=1 timer-softirq=27306
[  565.515945][    C1] rcu: rcu_preempt kthread starved for 8095 jiffies! g48941 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1
[  565.527235][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  565.537216][    C1] rcu: RCU grace-period kthread stack dump:
[  565.543118][    C1] task:rcu_preempt     state:I stack:26144 pid:16    ppid:2      flags:0x00004000
[  565.552345][    C1] Call Trace:
[  565.555633][    C1]  <TASK>
[  565.558587][    C1]  __schedule+0x143f/0x4570
[  565.563119][    C1]  ? _raw_spin_unlock+0x40/0x40
[  565.568011][    C1]  ? release_firmware_map_entry+0x186/0x186
[  565.573951][    C1]  ? lockdep_softirqs_off+0x420/0x420
[  565.579364][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  565.585285][    C1]  ? _raw_spin_unlock+0x40/0x40
[  565.590182][    C1]  schedule+0xbf/0x180
[  565.594287][    C1]  schedule_timeout+0x1b9/0x300
[  565.599172][    C1]  ? console_conditional_schedule+0x40/0x40
[  565.605117][    C1]  ? update_process_times+0x1b0/0x1b0
[  565.610527][    C1]  ? prepare_to_swait_event+0x329/0x350
[  565.616109][    C1]  rcu_gp_fqs_loop+0x2d2/0x1150
[  565.620990][    C1]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  565.627170][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  565.632391][    C1]  ? rcu_gp_init+0x15f0/0x15f0
[  565.637180][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  565.643101][    C1]  ? finish_swait+0xcf/0x1e0
[  565.647722][    C1]  rcu_gp_kthread+0xa3/0x3b0
[  565.652337][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  565.657467][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  565.663382][    C1]  ? __kthread_parkme+0x168/0x1c0
[  565.668436][    C1]  kthread+0x28d/0x320
[  565.672513][    C1]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  565.677637][    C1]  ? kthread_blkcg+0xd0/0xd0
[  565.682238][    C1]  ret_from_fork+0x1f/0x30
[  565.686703][    C1]  </TASK>
[  565.689729][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  565.696144][    C1] CPU: 1 PID: 8726 Comm: kworker/u4:21 Not tainted 6.1.104-syzkaller #0
[  565.704476][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  565.714546][    C1] Workqueue: writeback wb_workfn (flush-8:0)
[  565.720562][    C1] RIP: 0010:smp_call_function_many_cond+0x1fb0/0x3460
[  565.727343][    C1] Code: 2f 44 89 ee 83 e6 01 31 ff e8 4c 40 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 0a e8 d7 3c 0b 00 e9 1b ff ff ff f3 90 <42> 0f b6 04 2b 84 c0 75 14 41 f7 07 01 00 00 00 0f 84 fe fe ff ff
[  565.746958][    C1] RSP: 0018:ffffc900033be120 EFLAGS: 00000293
[  565.753042][    C1] RAX: ffffffff817f634b RBX: 1ffff11017308595 RCX: ffff888067b0bb80
[  565.761025][    C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  565.769003][    C1] RBP: ffffc900033be500 R08: ffffffff817f6314 R09: fffff52000677c15
[  565.776984][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000800000000
[  565.784966][    C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b9842ca8
[  565.792948][    C1] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[  565.801898][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  565.808490][    C1] CR2: 00007f949a272902 CR3: 000000000d08e000 CR4: 00000000003506e0
[  565.816476][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  565.824457][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  565.832438][    C1] Call Trace:
[  565.835744][    C1]  <IRQ>
[  565.838606][    C1]  ? rcu_check_gp_kthread_starvation+0x1b8/0x220
[  565.844954][    C1]  ? print_other_cpu_stall+0x150c/0x1640
[  565.850617][    C1]  ? print_cpu_stall+0x5f0/0x5f0
[  565.855589][    C1]  ? rcu_sched_clock_irq+0xaf6/0x1200
[  565.860984][    C1]  ? rcutree_dead_cpu+0x20/0x20
[  565.865862][    C1]  ? hrtimer_run_queues+0x163/0x450
[  565.871079][    C1]  ? acct_account_cputime+0x26e/0x270
[  565.876476][    C1]  ? update_process_times+0x147/0x1b0
[  565.881863][    C1]  ? tick_sched_timer+0x386/0x550
[  565.886905][    C1]  ? tick_setup_sched_timer+0x2f0/0x2f0
[  565.892461][    C1]  ? __hrtimer_run_queues+0x5a7/0xe50
[  565.897867][    C1]  ? hrtimer_interrupt+0x980/0x980
[  565.902995][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  565.909097][    C1]  ? hrtimer_interrupt+0x392/0x980
[  565.914246][    C1]  ? __sysvec_apic_timer_interrupt+0x156/0x580
[  565.920417][    C1]  ? sysvec_apic_timer_interrupt+0x8c/0xb0
[  565.926233][    C1]  </IRQ>
[  565.929173][    C1]  <TASK>
[  565.932112][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  565.939768][    C1]  ? smp_call_function_many_cond+0x1f94/0x3460
[  565.945935][    C1]  ? smp_call_function_many_cond+0x1fcb/0x3460
[  565.952107][    C1]  ? smp_call_function_many_cond+0x1fb0/0x3460
[  565.958300][    C1]  ? native_flush_tlb_multi+0xd0/0xd0
[  565.963693][    C1]  ? flush_tlb_func+0x620/0x620
[  565.968564][    C1]  ? mark_lock+0x9a/0x340
[  565.972921][    C1]  ? smp_call_function_many+0x30/0x30
[  565.978305][    C1]  ? __lock_acquire+0x125b/0x1f80
[  565.983355][    C1]  ? mark_lock+0x9a/0x340
[  565.987729][    C1]  ? __lock_acquire+0x125b/0x1f80
[  565.992838][    C1]  ? rcu_is_watching+0x11/0xb0
[  565.997625][    C1]  ? native_flush_tlb_multi+0xd0/0xd0
[  566.003027][    C1]  ? flush_tlb_func+0x620/0x620
[  566.007905][    C1]  on_each_cpu_cond_mask+0x3b/0x80
[  566.013041][    C1]  flush_tlb_mm_range+0x353/0x590
[  566.018100][    C1]  ? flush_tlb_multi+0x50/0x50
[  566.022986][    C1]  ? page_ext_get+0x1d2/0x2a0
[  566.027719][    C1]  ptep_clear_flush+0x116/0x160
[  566.032608][    C1]  page_vma_mkclean_one+0x569/0x930
[  566.037845][    C1]  ? pfn_mkclean_range+0x3d0/0x3d0
[  566.043005][    C1]  page_mkclean_one+0x2f8/0x4c0
[  566.047881][    C1]  ? folio_mkclean+0x430/0x430
[  566.052672][    C1]  ? page_to_pgoff+0x74/0x2b0
[  566.057398][    C1]  ? vma_address+0x22e/0x420
[  566.062004][    C1]  ? folio_mkclean+0x430/0x430
[  566.066803][    C1]  rmap_walk_file+0x369/0x740
[  566.071513][    C1]  folio_mkclean+0x250/0x430
[  566.076122][    C1]  ? rmap_walk+0xb0/0xb0
[  566.080384][    C1]  ? folio_mkclean+0x430/0x430
[  566.085162][    C1]  ? page_mkclean_one+0x4c0/0x4c0
[  566.090203][    C1]  ? find_get_pages_range_tag+0x1b7/0x810
[  566.096023][    C1]  ? folio_mapping+0x200/0x550
[  566.100813][    C1]  folio_clear_dirty_for_io+0x229/0xcf0
[  566.106387][    C1]  ? folio_wait_writeback+0x1e0/0x1e0
[  566.111980][    C1]  ? find_get_pages_range_tag+0x1b7/0x810
[  566.117747][    C1]  mpage_submit_page+0x90/0x230
[  566.122641][    C1]  mpage_process_page_bufs+0x6c8/0x8b0
[  566.128240][    C1]  mpage_prepare_extent_to_map+0xb82/0x1730
[  566.134194][    C1]  ? trace_ext4_writepages+0x270/0x270
[  566.139690][    C1]  ? kmem_cache_alloc+0x13a/0x2d0
[  566.144746][    C1]  ext4_writepages+0xcc8/0x3de0
[  566.149667][    C1]  ? ext4_read_folio+0x390/0x390
[  566.154641][    C1]  ? mark_lock+0x9a/0x340
[  566.159016][    C1]  ? __lock_acquire+0x125b/0x1f80
[  566.164086][    C1]  ? ext4_read_folio+0x390/0x390
[  566.169043][    C1]  do_writepages+0x3a2/0x670
[  566.173663][    C1]  ? __writepage+0x120/0x120
[  566.178305][    C1]  ? writeback_sb_inodes+0x760/0x1b20
[  566.183719][    C1]  ? __lock_acquire+0x1f80/0x1f80
[  566.188779][    C1]  ? do_raw_spin_lock+0x14a/0x370
[  566.193853][    C1]  __writeback_single_inode+0x15d/0x11e0
[  566.199507][    C1]  writeback_sb_inodes+0xc2b/0x1b20
[  566.204756][    C1]  ? queue_io+0x630/0x630
[  566.209119][    C1]  ? __writeback_inodes_wb+0x400/0x400
[  566.214600][    C1]  __writeback_inodes_wb+0x114/0x400
[  566.219944][    C1]  wb_writeback+0x4b1/0xe10
[  566.224474][    C1]  ? percpu_ref_tryget+0x260/0x260
[  566.229596][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  566.235611][    C1]  ? _find_next_bit+0x11b/0x120
[  566.240492][    C1]  wb_workfn+0xbec/0x1020
[  566.244869][    C1]  ? inode_wait_for_writeback+0x280/0x280
[  566.250624][    C1]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  566.256653][    C1]  ? print_irqtrace_events+0x210/0x210
[  566.262137][    C1]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  566.268053][    C1]  ? do_raw_spin_unlock+0x137/0x8a0
[  566.273277][    C1]  ? process_one_work+0x7a9/0x11d0
[  566.278407][    C1]  process_one_work+0x8a9/0x11d0
[  566.283375][    C1]  ? worker_detach_from_pool+0x260/0x260
[  566.289029][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  566.294589][    C1]  ? kthread_data+0x4e/0xc0
[  566.299121][    C1]  ? wq_worker_running+0x97/0x190
[  566.304172][    C1]  worker_thread+0xa47/0x1200
[  566.308873][    C1]  ? release_firmware_map_entry+0x186/0x186
[  566.314810][    C1]  kthread+0x28d/0x320
[  566.318979][    C1]  ? worker_clr_flags+0x190/0x190
[  566.324021][    C1]  ? kthread_blkcg+0xd0/0xd0
[  566.328628][    C1]  ret_from_fork+0x1f/0x30
[  566.333080][    C1]  </TASK>