last executing test programs:

1m56.852969798s ago: executing program 3 (id=820):
sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000180)="cfad33", 0x3}], 0x1, 0x0, 0x0, 0x4040000}, 0x20040000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
close(r0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128836360864666702c1ffe8000"], 0xffdd)

1m52.866562723s ago: executing program 3 (id=843):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000540)='task_rename\x00', r0}, 0x11)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r2}, &(0x7f0000000080), &(0x7f0000000240)=r1}, 0x20)

1m52.716581604s ago: executing program 3 (id=847):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r3], 0x18}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
close(r3)
close(r4)

1m52.626354299s ago: executing program 3 (id=848):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef)
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000000), 0xfdef)

1m52.486418619s ago: executing program 3 (id=850):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0xe511})
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000280)={'macvlan1\x00', 0x400})
close(r1)

1m49.530340944s ago: executing program 3 (id=855):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0xffffffffffffffff)
socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={<r1=>0x0, <r2=>0x0})
close(r1)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000180), 0x4bd)
close(0xffffffffffffffff)
close(r2)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000200)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r3=>0x0}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'\x00', 0x52d35ce30131f272})
ioctl$TUNSETOFFLOAD(r4, 0x400454c9, 0x9)
ioctl$TUNSETOFFLOAD(r4, 0x400454d0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x6, 0x0, &(0x7f0000000180))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r5}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000580)={{r0}, &(0x7f0000000500), &(0x7f0000000540)='%pB    \x00'}, 0x20)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0))

1m37.25969313s ago: executing program 4 (id=914):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendmsg$inet(r0, &(0x7f0000000700)={&(0x7f0000000080)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, 0x0}, 0x4040080)

1m37.039348174s ago: executing program 4 (id=917):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000088500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
close(r1)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mm_page_free_batched\x00', r1}, 0x10)
syz_clone(0x8828000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m36.758961935s ago: executing program 4 (id=919):
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r2}, 0x10)
syz_clone(0x4d100000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m31.322365218s ago: executing program 4 (id=947):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})

1m29.530412032s ago: executing program 4 (id=959):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"/1664], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x702, 0xe, 0x0, &(0x7f0000000380)="e460334470b8d480eb00c1520820", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1m29.27025131s ago: executing program 4 (id=961):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10)
syz_clone(0x40004000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m15.281852692s ago: executing program 0 (id=1010):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000480)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000580)={@ptr={0x70742a85, 0xfffffffc, 0x0}, @ptr={0x70742a85, 0xfffffffc, &(0x7f0000000900)=""/206, 0xce}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

1m15.171470879s ago: executing program 0 (id=1011):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)=ANY=[@ANYBLOB="12010000020000402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241a00fbff0905810310000000000904010000020d000009040101"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
io_pgetevents(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x80, 0x1c, {0x0, 0xcb, 0x0, 0x0, 0x0, 0x2, 0x0, 0xffffffff}}, 0x0, 0x0, 0x0, 0x0})

1m13.1615081s ago: executing program 0 (id=1012):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000000580)=""/156, 0x9c}, {&(0x7f00000000c0)=""/11, 0xb}, {&(0x7f0000000640)=""/247, 0xf7}], 0x4, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10)
socketpair(0x2, 0x2, 0x0, &(0x7f0000000bc0))

1m12.920747935s ago: executing program 0 (id=1013):
r0 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f00000005c0)=ANY=[@ANYBLOB="18080000000000060000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="0000000000000020660800002ab91a00180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a000001000000850000000600000095000000000000009ab30e81bcd85a9a83b805fdeb2147e3f870681826a1a628b6b306424ebb29"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)

1m10.845406343s ago: executing program 0 (id=1015):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x10000}}, {@nolazytime}]}, 0x1, 0x451, &(0x7f0000000780)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40044, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r1 = dup(r0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

58.369852491s ago: executing program 1 (id=1050):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x200000, &(0x7f0000000a40)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000340)="$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")
syz_mount_image$ext4(&(0x7f00000003c0)='ext2\x00', &(0x7f0000001100)='./file0\x00', 0x3014490, &(0x7f0000000d40)={[{@usrquota}, {@bh}, {@errors_remount}, {@norecovery}, {@mblk_io_submit}, {@bh}, {@init_itable}, {@barrier_val}, {@grpjquota}, {}]}, 0x45, 0x7c6, &(0x7f0000001380)="$eJzs3c9rHNcdAPDvrFY/7VYqFFr3JCi0BuNV5ap2C4Wq9FAKNRjaUw+1xWotbK20RrsylhCtTSn0UmhDbsnFZ+fXJeSaH4dckv8j2DixbOKQQ1CY/SGtpF1lV5F27fjzgbHem3k7733nzb553hl2A3hhTab/ZCJORcT/kojx+vokIgarqWzEbK3c082NfLoksbX1l8+Sapknmxv5aHpN6kQ98+OIeP/fEWcy++str60vzhWLhZV6fqqydGOqvLZ+9trS3EJhobB8fnpm5tyFX104f3Sxfv7x+skH///jz9+Y/fJfP3rzvx8kMRsn69ua4zgqkzFZPyaD6SHc5Q9HXVnfvP2PDgo1nQHZ42wMXUo7ZqDeK6diPAYO6p/RXrYMADgu/4yIrXYGtlOjBxUDAJ43Se3C/rt+twMA6JXG5wBPNjfyjaW/n0j01sPfR8RILf7G/c3almz9nt1I9T7o2JNk152RJCImjqD+yYh49Z2/v5YucUz3IQFauX0nIq5MTO4f/5N9zyx06xetVy80Zyb3bDT+Qe+8m85/ft1q/pfZnv9Ei/nPcIv37mF88/s/c/8Iqmkrnf/9tunZtqdN8ddNDNRz36vO+QaTq9eKhXRs+35EnI7B4TQ/fUAdpx9/9bjdtub536OXrt9L60//7pTI3M8O737N/Fxl7tvE3OzhnYifZHfFX3vsrzr+D1f7P2kz/73UYR1/+s1/Xmm3LY0/jfdRcv1e6/iP19bdiJ+17P9ku0xy4POJU9XTYapxUrTw1myMtat/MrvT/+mS1t/4v0AvpP0/dnD8E0nz85rljne9/bTYR3fH32tXqPn8bx1/6/N/KPlrNT1UX3drrlJZmY4YSv68f/25ndc28o3yafynf9r6/d8Y/1qc/39L93+lwwORffDp64eP/3il8c931f9dJ2Lk6eJAu/o76/+ZXa/pZPzrtIGHPW4AAAAAAAAAAAAAAAAAAAAAAAAA0I1MRJyMJJPbTmcyuVztN7x/GGOZYqlcOXO1tLo8H9Xfyp6IwUzjqy7Hm74Pdbr+ffiN/Lk9+V9GxA8i4uXh0Wo+ly8V5/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUnWjz+/+pT4b3FB7oRwsBgGMx4sIOAC+aJJvtdxMAgF4b6ar06LG1AwDone6u/wDAd4HrPwC8eHZf//c+9b9/BQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHTp0sWL6bL1xeZGPs3P31xbXSzdPDtfKC/mllbzuXxp5UZuoVRaKBZy+dJS2x3drv0plko3ZmJ59dZUpVCuTJXX1i8vlVaXK5evLc0tFC4XBnsWGQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB0rry2vjhXLBZWnoHE0DPWnpaJoTjSHS5+WOuHvsclcahE3K7137PSnqNLxNDOKDHan8EJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DnwdQAAAP//NgocHQ==")
rename(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x810, 0xffffffffffffffff, 0x2000000)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
statfs(&(0x7f0000000080)='./file0\x00', 0x0)
read$FUSE(r2, &(0x7f0000006340)={0x2020, 0x0, <r3=>0x0}, 0x2058)
write$FUSE_LSEEK(r2, &(0x7f00000021c0)={0x18, 0x0, r3, {0x7}}, 0x18)
umount2(&(0x7f0000000180)='./file0\x00', 0xb)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001300), 0x140, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000001340)=0xfa)
syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0x2020)

57.342113168s ago: executing program 1 (id=1051):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1804810, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvrDd2Ni3BTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTs7a6/XL10njb1pP59o9nmeeWae+T2/2Zl9saIN8IW1MJn6gxRZmHxlvd3e2pxtbm3O3u3Wk4wl2UjqSWpJiv+2Wq0Pk+tJsTNM0Vfu8/7y/GsffbL1cadVr5Zy+9pR+/WpttvoW73RXTeRZKQqH8Ge8W488njFTuTXk1ypSjh1Z5K09vjZ35/e6enROGjvsycSI/B4FZ3XzX3Gk3PVhd5+H9B95a2dbHSDGxtwu/53EAAAAPCkGeQz8Je3s5314vwJhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfCxu7v/9fVEutW59I0f39/9FqXar6cHnxeJs/eFxxAAAAAAAAAMAJenE721nP+W67VZR/83+pbFwsH5/KW1nNUlZyNetZzFrWspLpJOM9A42uL66trUwPsOfMgXvOfEqgY1XZ+GzmDQAAAAAAAACfM7/Kwu7f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBgUyUinSHG/Z/V4avUkZ5OMtldsJP/s1p9kD047AAAAADgBY8l21nO+224VuZjkufI7gLN5K/eyluWspZml3Cy/F+h86q9tbc42tzZn77aX/eN+/z/HCqMcMZ3vHg4+8uVyi0ZuZblcczU38kaauZlauWfb5Sqe7qh9cd1vx1R8rzJgZDersj3z96pyn3ePNdnDHPPLlPEyI2d2MjJVxdbOxjPdM3PwGTrm2ek/0nRqO8Fe7DvS6N7JPFTOz1Vlez6/Oyznp6I/EzM9z77njs558vW//OmnU1V9eKY0mJGqbJWPjf2ZmO3JxPODZOJ2896d27dWJ5+0TOwzVWbi0k57IT/KTzKZibyalSzn51nMWpYykR+WtcXq5Bc9l/whmbq+p/Xqp0UyWj1DOyfreDG9VO57Psv5cd7IzSzl5fLfTKbz7cxlLvM9Z/jS0We4vOprh1z1rS8dGPyVb1SVRpLfV+VwaOf1mZ689t5zx8u+3jW7WbowQJaOeW+sf7WqtI/x66ocDv2ZmO7JxLNHZ+IP5W1ltXnvzsrtxTcHO9yF96pK+zr6bTIxPDeS9vPlQvtkla29z45237MH9k2XfRd3+mr7+i7t9HWu1I1Dr9TR6j3c/pFmyr7nD+ybLfsu9/Qd9H4LgKF37pvnRhv/bvyj8UHjN43bjVfO/mDsO2MvjObMX898tz418rXaC8Wf80F+ufv5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHirb79zZ7HZXFrpq7RarXcP6RqwUq+O8JC7P0IlE/96qn3kA7q6P2d2gvF85enk5OY+rJX/tVqtak1xyDZ//NvQJKpVGYrUnVLl9O5JwMm4tnb3zWurb7/zreW7i68vvb50b35ubn5qfu7l2Wu3lptLU53H044SeBx2X/RPOxIAAAAAAAAAAABgUCfx3wlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAk21hMvUHKTI9dXWq3d7anG22l259d8t6klqS4hdJ8WFyPZ0l4z3DFYcd5/3l+dc++mTr492x6t3ta0ftN5iNaslEkpFOef+zGu9GVR6pOGoKxc4M2wm70k0cnLb/BwAA//+o5gZ+")
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
unshare(0x0)
read$FUSE(r0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = fcntl$dupfd(r1, 0x0, 0xffffffffffffffff)
fanotify_init(0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xe, &(0x7f0000000440), 0x3, 0x440, &(0x7f00000006c0)="$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")
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00'], 0x0)
vmsplice(r2, &(0x7f0000008280)=[{&(0x7f0000006100)}], 0x1, 0x0)
socket(0x18, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f00000002c0)=0x20)
unlinkat(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', 0x200)

53.192209843s ago: executing program 1 (id=1064):
mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x4, 0x6031, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000ceb000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
munlock(&(0x7f0000e4a000/0x1000)=nil, 0x1000)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
ftruncate(r0, 0x8001)
r1 = socket(0xa, 0x3, 0x1)
getsockopt(r1, 0xff, 0x24, 0x0, &(0x7f0000000040))
futex(&(0x7f00000000c0), 0x5, 0x0, 0x0, &(0x7f0000004000), 0xb1004000)

15.147604376s ago: executing program 0 (id=1015):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000100)='./bus\x00', 0x10e, &(0x7f0000000340)={[{@data_err_ignore}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6e}}, {@block_validity}, {@block_validity}, {@init_itable_val={'init_itable', 0x3d, 0x10000}}, {@nolazytime}]}, 0x1, 0x451, &(0x7f0000000780)="$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")
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff0ff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b70000000000000095000010000000004e62011c3034fdb117168bd07ba08af339d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d458e17f791f4798c8eb484de03312c69b3edff5be26765ba5f8f2879021c2ea53ac547a654bbd2db5356b971d83dd12742be9087a3e7b7c0efd3e38c794eb06b0b8c392904ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057826ef4e912f01a201e694e3049b8c8fe8b65d8d66bb766f7f3f918c86a702522368d9f81897133af94a5a4cff7f4d8b9d8eaf302f0b2e0c252b0000000000000000ee917bca4885bbf597a14ab6458e6272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36be115be3b325ecd201d2ffb0a7fa4f5d1106560cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b861299fcd9ed9d8679406419406bf0c5329bd5b4697336112b0b8756ce3574046bf611a108f8df4d1a88597840b702b6fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf39a43a66c5540b8762b42007c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4b19b53b60322af0aa66e8f448e1bd96822e6b70b62912c926dbe417cccd4f696d528fa8a3ea847f10e9b1106f3bb506f1d7fbdf801000000000000006c028eb5b5a073d0de5538ab42e171b3baae34c35987b0dda497ac3f5e97e60eaeea15c6d55badf9b86b1c000100006e60cd06c9ed24313ce607d403bb6030f800000000690db0221b1705c501f802ff59b4e683efa4b6e77e042072ec9eb8166f6e28b49a7705a1befc4d315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621fc0e3ba04020000c149ee6601728c750930519339b44197c22da865059b475afd96187d881e93b42a5fdfd686d8900c44c67133eeb0109dcb60dddad58037fda65885a15a42560ee3027a5ebf95254744f10fd607bc3100b94932b8d9447c42f6e21ee0e54f8be386bdc09decece910a481e648e0cb074536a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6ae00f0000000000006a8194479700a02b92bec8d05eae1f24fdd7b80d3dde04c22f689594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4acd7acf1dfe79d6771903b76e2ae47d972651390c22d641030e1ddac018dc3116e1803af10a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f00000000000000001000ba96edb95ede0e1957c2a2754258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548941d5d16297757310d9daebd5a3dabbced3b051129cd60a37d397643324e6f0aadf978d639650000000000000000570b0acbcaa196e6b46e213a34c1a550e7c2d8cee7a278cee591f360e345d37dc9f8991a16c08d72317e42d2ac9126acd76130ef1086016697e4d51c4b42b2efc8edab88d46bc3d5d6e5a634c912bc40513643bf44cb416b3149040220aa39035ae46d16d879fc815a5cb84b0d5c8ad970128adf8dec1171e860ca54ce5d6a5aa0327bca4f49a710bf8a8399071237fe5d764e2034873c94a4f21287f3bce3eeb69e94df2e14e4ab10cc7834b304bc879b80255991dd7aac2e92c9e7c411c019d229c1f1e563152f1c5ae9cda3e808000000a0c779d624c5a2b7491b8f73e767389ecd1dee951353bb22b7caf89468871520823715cfebd04189c6c6b34bd8a6541f6bc0630000000000f94e85f5111add3a3cb5bcace95f38465402c39df835754ef33056b0e1134187822c001a25304f3e00b44675d0a25a21dc4023c642cc6f5a75c45a29ab933600acf9a2d471b73a73178cdf309e5d53311996215b44295dfddc1dd6b81132e999366e460d15d366e84da02b8afc40c47e733f804460ed8300ec34eab2ed80097bd32ff1a6143ab1476037e474ca876187c85bed4391215cd77e6a1fd6399a498b96b9b0cca93255acb08c67e50004c5af6fd5b4ce7c1ebc9202bd7b329a4d2530486d5999dd7f90ebecca37f2869135438f0540801fd7481daf9ec94b799c12e714d573e2a6331f496254f254a60c52b2026ed6a72c82cd191490fabe7b151f92e5d700f21830d613fbe490f305b3845a78817e59bf7ed36471dbca01d39e50ae2535460e1d2f2614940647233a02d5000000000000000000f70e52f0d56f6a4dcf7e57c03d4b4add0500000000000000320304d0d2b308c5ed3956eae263035d703f862224e9818a3d7ac270793a7bf2af87585293960a80ac63c54e55063bf8d24639e561253ef0caf6c58118120d8acecc0528f0d81d291009fc46401baf9c22d1c452a5b61b7a1b9adfcc17f5ad99dcdf935923185db7b14a7fa7babc1f53df70618bb73aa810b756696f26653b84cf842ae433fda59fbe312be11bb7dfecdc38c1c1f688d2724568cc396fca7c74984b7f7bd000000000000003ff3e5857fc6598c933610be374909dc8622b0722259e922f40d7862f7ea72f1754f07711de76000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040))
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1000f4)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x40044, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil)
r0 = memfd_create(&(0x7f0000000180)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x0)
r1 = dup(r0)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

11.290293842s ago: executing program 1 (id=1065):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x2000480, &(0x7f0000000280), 0x1, 0x784, &(0x7f00000007c0)="$eJzs3c1rHOUfAPDvbJKmSfv7JYKg9RQQNFC6MTW2Ch4qHkSwUNCz7bLZhppNtmQ3pQkBW0TwIqh4EPTSsy/15tWXq/4XHqSlalqseJDI7Eu7bXbTTZvdDeTzgck+z8xsnue7z8wzz+wMOwHsWRPpn0zEoYj4KIkYq89PImKomhqMOFFb7/b6Wj6dktjYePOPpLrOrfW1fDS9J3WgnnkyIn58P+JwZnO55ZXV+VyxWFiq56cqC+enyiurR84t5OYKc4XFY9MzM0ePv3D82M7F+tcvqwevf/zas9+c+Oe9J65++FMSJ+JgfVlzHDtlIibqn8lQ+hHe49WdLqzPkn5XgIeS7poDtb08DsVYDFRTbYz0smYAQLe8GxEbAMAekzj+A8Ae0/ge4Nb6Wr4x9fcbid668UpE7K/F37i+WVsyWL9mt796HXT0VnLPlZEkIsZ3oPyJiPjiu7e/Sqfo0nVIgFYuXY6IM+MTm/v/ZNM9C9v13FYLN4arLxP3zdb/Qe98n45/Xmw1/svcGf9Ei/HPcIt992E8eP/PXNuBYtpKx38vN93bdrsp/rrxgXruf9Ux31By9lyxkPZt/4+IyRgaTvPT1VVb3wU1efPfm+3Kbx7//fnJO1+m5aevd9fIXBscvvc9s7lK7lHjbrhxOeKpwVbxJ3faP2kz/j3VYRmvv/TB5+2WpfGn8TamzfF318aViGdatv/dtky2vD9xqro5TDU2iha+/fWz0XblN7d/OqXlN84FeiFt/9Gt4x9Pmu/XLG+/jJ+vjP3QbtmD42+9/e9L3qqm99XnXcxVKkvTEfuSNzbPP3r3vY18Y/00/smnW+//W23/6TnhmQ7jH7z++9cPH393pfHPbqv9t5+4ent+oF35nbX/TDU1WZ/TSf/XaQUf5bMDAAAAAAAAAAAAAAAAAAAAAAAAgE5lIuJgJJnsnXQmk83WnuH9eIxmiqVy5fDZ0vLibFSflT0eQ5nGT12ONf0e6nT99/Ab+aP35Z+PiMci4tPhkWo+my8VZ/sdPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWjz/P/Ub8P9rh0A0DX7+10BAKDnHP8BYO/Z3vF/pGv1AAB6x/k/AOw9HR//z3S3HgBA7zj/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoMtOnTyZTht/r6/l0/zshZXl+dKFI7OF8nx2YTmfzZeWzmfnSqW5YiGbLy20/UeXai/FUun8TCwuX5yqFMqVqfLK6umF0vJi5fS5hdxc4XRhqGeRAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnyiur87lisbAksWViZHdUY9ckBmNXVEOia4nmXmKkfx0UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwC73XwAAAP//+Lkq2Q==")
syz_open_dev$evdev(0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r0, &(0x7f00000005c0)=[{&(0x7f0000000000)='K', 0x1}], 0x1, 0x7fff, 0x0, 0x0)
ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628)

9.902388208s ago: executing program 1 (id=1116):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={0x0, r1}, 0x18)
bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

9.499406897s ago: executing program 1 (id=1119):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000de0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb0100180000000000000018"], 0x0, 0x3c, 0x0, 0x6, 0x0, 0x0, @void, @value}, 0x28)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000006c0)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, 0x0, 0x36)

8.77589441s ago: executing program 5 (id=1124):
ioctl$PPPIOCSMAXCID(0xffffffffffffffff, 0x40047451, &(0x7f0000000300))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
getsockopt$inet_buf(r3, 0x0, 0x37, &(0x7f0000000540)=""/237, &(0x7f0000000180)=0xed)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0, r3}, 0x10)
ftruncate(0xffffffffffffffff, 0x0)
r4 = syz_open_dev$rtc(&(0x7f0000000140), 0x0, 0x0)
ioctl$RTC_UIE_ON(r4, 0x7003)
ioctl$RTC_WKALM_SET(r4, 0x4028700f, &(0x7f0000000000)={0x1, 0x0, {0x0, 0x0, 0x0, 0x16, 0x0, 0x8000}})
ioctl$RTC_AIE_OFF(r4, 0x7002)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={<r5=>0xffffffffffffffff})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000400)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff7000/0x9000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0, 0x0, r5}, 0x68)
ioctl$PPPIOCGIDLE64(0xffffffffffffffff, 0x8010743f, 0x0)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x4000, &(0x7f00000000c0), 0x2, 0xbb8, &(0x7f00000017c0)="$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")

7.16524576s ago: executing program 5 (id=1126):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
pipe(&(0x7f0000000900)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, &(0x7f0000000380)=0x5, 0x10000, 0x0)

6.771808163s ago: executing program 5 (id=1127):
add_key$fscrypt_v1(0x0, &(0x7f0000000080)={'fscrypt:', @desc2}, 0x0, 0x0, 0xffffffffffffffff)
listen(0xffffffffffffffff, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
r1 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
sendmsg(r0, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

6.313311582s ago: executing program 5 (id=1142):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe2c, 0x60000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c)

6.128514533s ago: executing program 2 (id=1133):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@mark={0xc, 0x15, {0x35075c, 0x3ff}}]}, 0xc4}}, 0x804)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
msync(&(0x7f000081d000/0x1000)=nil, 0x1000, 0x3)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000001d40)={r4, &(0x7f0000001b80), 0x0}, 0x20)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="b80000001400674c0065000000000000e000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\b\x00'], 0xb8}, 0x1, 0x0, 0x0, 0x17}, 0x42800)

6.128245263s ago: executing program 5 (id=1134):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8a}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000000000000290000003bf6ffffff0000000000000048674cd6d400635f3cca7eec8d35f3eb5821846669d7802c8b55fce2d64442ff729e6b2a90d1356db75c01e4026ec147eebc07c383ae15b81bfd699be8a762510d10501c6b55fea7cc206b15b3ff7f0000d79680f62026eb6ce10186cd8270510cb380531390892656265306"], 0x10}, 0x0)
socket$netlink(0x10, 0x3, 0xb)
r1 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff030}, {0x80000006}]}, 0x10)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x3, @loopback}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x264e33, 0x0)

4.686830073s ago: executing program 2 (id=1135):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000300)={[], [{@appraise_type}, {@permit_directio}]}, 0x1, 0x53d, &(0x7f0000000a80)="$eJzs3c9vHFcdAPDvjH82TesEeoAKSIBCQFF2400bVb20uYBQVQlRcUAcUmNvLJNdr/GuS20s4f4NIIHECf4EDkgckHriwI0jEgeEVA5IASxQjATSopkdO1t7TZbsepd6Px9pMvPmzcz3vWxm39u3m3kBTKyrEbEXEbMR8VZELBT7k2KJ1zpLdtzD/d3lg/3d5STa7Tf/muT52b7oOifzdHHN+Yj42pcjvpWcjNvc3rm/VKtVN4t0uVXfKDe3d26s1ZdWq6vV9Url9uLtmy/feqkytLpeqf/8wZfWXv/6r375yfd/u/fF72XFuljkdddjmDpVnzmKk5mOiNfPItgYTBXr2TGXgyeTRsRHIuIz+f2/EFP5v04A4DxrtxeivdCdBgDOuzQfA0vSUkSkadEJKHXG8J6LC2mt0Wxdv9fYWl/pjJVdipn03lqtevPy3O+/kx88k2TpxTwvz8/TlWPpWxFxOSJ+OPdUni4tN2or4+nyAMDEe7q7/Y+If8ylaanU16k9vtUDAD405sddAABg5LT/ADB5tP8AMHn6aP+LL/v3zrwsAMBo+PwPAJNH+w8Ak0f7DwAT5atvvJEt7YPi+dcrb29v3W+8fWOl2rxfqm8tl5Ybmxul1UZjNX9mT/1x16s1GhuLL8bWO+VWtdkqN7d37tYbW+utu/lzve9WZ0ZSKwDgv7l85b3fJRGx98pT+RJdczloq+F8S8ddAGBspgY5WQcBPtTM9gWTq68mPO8k/ObMywKMR8+Hec/33PygH/8PQfzOCP6vXPt4/+P/5niG88X4P0yuJxv/f3Xo5QBGz/g/TK52Ozk+5//sURYAcC4N8BO+9veH1QkBxupxk3kP5ft/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGcuRsS3I0lL+VzgafZnWipFPBMRl2ImubdWq96MiGfjSkTMzGXpxXEXGgAYUPrnpJj/69rCCxeP584m/5zL1xHx3Z+8+aN3llqtzcVs/9+O9s8dTh9WeXTeAPMKAgBDlrfflWLd9UH+4f7u8uEyyvI8uBP/LqYiXj7Y382XTs50ZDsj5vO+xIW/JzFdnDMfEc9HxNQQ4u+9GxEf61X/JB8buVTMfNodP4rYz4w0fvqB+Gme11lnna+PDqEsMGneuxMRr/W6/9K4mq973//z+TvU4B7c6Vzs8L3voCv+dBFpqkf87J6/2m+MF3/9lRM72wudvHcjnp/uFT85ip+cEv+FPuP/4ROf+sGrp+S1fxpxLXrH745VbtU3ys3tnRtr9aXV6mp1vVK5vXj75su3XqqU8zHq8uFI9Ul/eeX6s6eVLav/hVPiz/es/+zRuZ/rs/4/+9db3/z0o+Tc8fhf+Gzv1/+5nvE7sjbx833GX7rwi1On787ir5xS/8e9/tf7jP/+n3ZW+jwUABiB5vbO/aVarbo50Eb2KXQY1zmxkRWxv4MPu4uDBf1jnEUtnnBj5qz+Vs98Y/qorzjcK38ju+KIq5MOvRYDbTwcVazxvScBo/Hoph93SQAAAAAAAAAAAAAAgNOM4r8ujbuOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnF//CQAA//+zi8zo")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095000000000000007adbb160de3298d0aebc2cb83407e80ba6da436df6aa7854ac3d415d18c59d28248dc95523808c348a0212c3fd1e9ddf58fc7d3bc8b59b790e2a50c0bd5d79a2179074dfccd93d35b7824e45"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2002, 0x0, 0x12, r3, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(0xffffffffffffffff, &(0x7f0000001400)="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", 0x575, 0x6d91fb6126d8915d, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(0xffffffffffffffff, &(0x7f0000001a80)=""/4087, 0xfffffed2, 0x12, 0x0, 0xfffffffffffffeb2)
pipe(0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140), 0x202, 0x0)
pwritev2(r4, &(0x7f0000000100)=[{&(0x7f0000000400)="bacfe885669eb0f4e4b949277c966873896aaa3b7992446cb843c1659dfc93c91637bbfa786fb0a26ebd918cfb3cdbdf6f2479a3e4561c85725e5a29217436b93263913637e623623063529b45a586a6be332ed3907e40c2fd8fe81d1d9eb4a3bdd228d600f184547c29e5e5c10cae17a0210b2d0f3f7585bca0711645e82fe0c3dccdfb05ed832ce3a7b7a6053b1bd8c9af714b4640fa8bb06756c0ab9bdcf1ad272d77a9d29f59058cf742d7e833d938b61c5eb2e8e6c1dee2d124ac642cbe00ad0e28", 0xfffffd4e}], 0x1, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
socket$inet(0x2, 0x800, 0x7)

4.642402631s ago: executing program 5 (id=1136):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

3.358297591s ago: executing program 2 (id=1137):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, 0x0, 0x0, 0x2, 0x0)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x4000000000010046)

2.30088179s ago: executing program 2 (id=1138):
syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x3810744, &(0x7f0000000700)={[{@noauto_da_alloc}, {@user_xattr}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@jqfmt_vfsv0}, {@delalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x451, &(0x7f0000000d00)="$eJzs281vVFUbAPDn3pkCL/DSivgBglbR2PjR0oLKwo1GExeamOgCl7UtBBmooTUR0mg1BpeGxL1xaeJf4MqVUVcmbnVvSIg2JqAbx9yZe9vOdKb0Y8pU5vdLBs6Ze+ae8+Tcc+fMOb0B9KzB7J8kYm9E/BIR/fVsY4HB+n83F+Ym/lqYm0iiWn3j96RW7sbC3ERRtPjcnjwzlEaknyR5JY1mLl0+N16pTF3M8yOz598dmbl0+emz58fPTJ2ZujB28uSJ46PPPTv2TEfizNp049AH04cPvvLW1dcmTl19+4evs/bee6R+fHkcnTKYBf5Htab52GOdrqzL/qkuxZmUu90a1qoUEVl39dXGf3+UYqnz+uPlj7vaOGBLZffsne0Pz1eBO1gS3W4B0B3FF332+7d43aapx7Zw/YX6D6As7pv5q36kHGlepm8L6x+MiFPzf3+RvaJpHaLaYt0AAGCzvs3mP0+tnP/V9kaWlUvyvaGBiLgrIvZHxN0RcSAi7snL3hcR96+z/uatoZXzz/TaBkNbk2z+93y+t9U4/ytmfzFQynP/r8Xfl5w+W5k6FhH7ImIo+nZm+dFWJy9O8dLPn7Wrf/n8L3tl9Rdzwfwk18pNC3ST47PjnZqUXv8o4lC5VfzJ4k5A1vcHI+LQ+k69r0icfeKrw+0K3Tr+VXRgn6n6ZcTj9f6fj6b4C8nq+5Mju6IydWykuCpW+vGnK6+3q39T8XdA1v+7G6//phL9fybL92tn1l/HlV8/bfubsrzB639H8mZtz3pH/t7747OzF0cjdiSv1vIN748tfbbIF+Wz+IeOth7/+/PPZPE/EBHZRXwkIh6MiIfyvns4Ih6JiKOrxP/9i4++0+7Yduj/yZb3v8Xrf6Cx/9efKJ377pt29a/t/neilhrK36nd/26hfXN25SU2ejUDAADAf08aEXsjSYcX02k6PFz/e/kDsTutTM/MPnl6+r0Lk/VnBAaiLy1WuvqXrYeOJvP5Gev5sXytuDh+PF83/rz0v1p+eGK6Mtnl2KHX7Wkz/jO/lbrdOmDLeV4Lelfz+E+71A7g9vP9D73L+IfeZfxD72o1/j9sytsLgDuT73/oXcY/9C7jH3qX8Q89aTPP9W9VorzK0/sS2yUR6bZohkSLRLkDo7vLNyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAO+TcAAP//uZjx6g==")
r0 = socket$packet(0x11, 0xa, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000100)}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00'}, 0x10)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000180)=0x221a, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
dup3(r4, r5, 0x0)
sendmmsg$inet(r5, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000000540)="679512f062b8d965651edd4c06c901784e56aa174403ad4134742b71d211c6a85d8bc563c27f754fc2af5351f2f41e867c71c19837f2feba7862e511a47c446cd11c960f018962a53f6cf31a1123ff8092c9ff560701bfc579fa80f9149acafe2a225fed70d9173f0243a55be3c4028da556cf126da9c1b9b8f8e113", 0x7c}, {&(0x7f00000003c0)="5a268f4785bba0774702365bf4469155da654cbe1ea17e28716b296b91c331d001fdb2018e7f32be7178d9e28e4f62931f6fe1209a7ec4edbc9e8791150d3b53dd0568cfa9755b27e0", 0x49}], 0x2}}, {{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f00000012c0)="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", 0x5c3}], 0x1}}], 0x2, 0x0)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffde4, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

285.953686ms ago: executing program 2 (id=1139):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x203, 0x8401)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000340)={0x82, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000540), 0x1, 0x4a8, &(0x7f0000000a40)="$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")

0s ago: executing program 2 (id=1140):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@nogrpid}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@debug}, {@nombcache}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x1}]}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0)
creat(&(0x7f0000000140)='./file2\x00', 0x1ad)
unlink(&(0x7f0000000180)='./file1\x00')

kernel console output (not intermixed with test programs):

 layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.434782][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.475273][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.495406][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  148.556370][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.744674][ T6072] loop1: detected capacity change from 0 to 2048
[  148.751190][ T5951] hsr_slave_0: entered promiscuous mode
[  148.776813][ T5951] hsr_slave_1: entered promiscuous mode
[  148.791124][ T6072] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.991348][   T29] audit: type=1326 audit(1726621715.373:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6082 comm="syz.3.186" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae5f7def9 code=0x0
[  149.358441][ T5504] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.657209][   T29] audit: type=1326 audit(1726621717.053:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6102 comm="syz.0.193" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  150.976663][ T5312] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  151.073127][ T5951] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  151.105492][ T6086] loop3: detected capacity change from 0 to 32768
[  151.106756][ T5951] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  151.115506][ T6086] (syz.3.186,6086,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fullntr" or missing value
[  151.136138][ T5951] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  151.146604][ T6086] (syz.3.186,6086,0):ocfs2_fill_super:1178 ERROR: status = -22
[  151.152148][ T5312] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  151.166706][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.179287][ T5312] usb 5-1: config 0 descriptor??
[  151.202753][ T5951] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  151.658186][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0
[  151.712656][ T6086] loop3: detected capacity change from 0 to 4096
[  151.724759][ T6118] netlink: 8 bytes leftover after parsing attributes in process `syz.4.194'.
[  151.757802][ T5951] 8021q: adding VLAN 0 to HW filter on device team0
[  151.780639][ T6086] ntfs3: loop3: Primary boot: invalid sectors per cluster 3.
[  151.790959][ T6122] loop0: detected capacity change from 0 to 2048
[  151.807060][ T6086] ntfs3: loop3: try to read out of volume at offset 0x1ffe00
[  151.808845][ T2476] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.821719][ T2476] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.853884][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.861142][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.894847][ T6122] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.926574][ T5332] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  152.092369][ T5238] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.106863][ T5332] usb 6-1: Using ep0 maxpacket: 32
[  152.106876][   T25] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  152.186901][ T5312] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  152.213965][ T5332] usb 6-1: unable to get BOS descriptor or descriptor too short
[  152.240305][ T5332] usb 6-1: config 7 interface 0 has no altsetting 0
[  152.254756][ T5332] usb 6-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=b5.bb
[  152.274637][ T5332] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.305401][ T5332] usb 6-1: Product: syz
[  152.427046][ T5312] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  152.441597][ T5312] [drm:udl_init] *ERROR* Selecting channel failed
[  152.451195][ T5332] usb 6-1: Manufacturer: syz
[  152.461373][ T5332] usb 6-1: SerialNumber: syz
[  152.481052][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  153.249230][ T5312] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  153.257559][   T25] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  153.275637][ T5312] [drm] Initialized udl on minor 2
[  153.282517][ T5312] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  153.310857][ T5312] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  153.327871][ T5304] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  153.332838][ T5332] usb 6-1: USB disconnect, device number 5
[  153.360208][ T5312] usb 5-1: USB disconnect, device number 11
[  153.370351][ T5304] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  153.399421][   T25] usb 4-1: string descriptor 0 read error: -71
[  153.410779][ T5304] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  153.431232][   T25] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  153.463146][   T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.487224][   T25] usb 4-1: config 0 descriptor??
[  153.516203][   T25] usb 4-1: can't set config #0, error -71
[  153.537206][   T25] usb 4-1: USB disconnect, device number 13
[  153.594893][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0
[  154.979456][ T5951] veth0_vlan: entered promiscuous mode
[  155.115670][ T5951] veth1_vlan: entered promiscuous mode
[  155.224179][ T5951] veth0_macvtap: entered promiscuous mode
[  155.255195][ T5951] veth1_macvtap: entered promiscuous mode
[  155.305984][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  155.347725][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  155.666545][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.489908][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.533179][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.552879][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.593866][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.615048][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.644873][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  156.691698][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.712613][   T29] audit: type=1326 audit(1726621723.083:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6177 comm="syz.5.216" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d7137def9 code=0x0
[  156.757475][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.842046][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  156.901562][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  156.945294][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.051093][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.130091][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.191567][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.225649][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.307134][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.347485][ T5951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  157.359656][ T5951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  157.372412][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.398794][ T5951] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.464655][ T5951] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.505510][ T5951] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.553860][ T5951] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  159.188719][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.228660][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.286153][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  159.316034][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  159.657158][ T6182] loop5: detected capacity change from 0 to 32768
[  160.664603][ T5289] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  160.847933][ T5289] usb 3-1: Using ep0 maxpacket: 16
[  160.879208][ T5289] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  160.906590][ T5289] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  160.928816][ T5289] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  160.960372][ T5289] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.974796][ T5289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.001206][ T5289] usb 3-1: Product: syz
[  161.015937][ T5289] usb 3-1: Manufacturer: syz
[  161.031776][ T5289] usb 3-1: SerialNumber: syz
[  161.069118][   T29] audit: type=1326 audit(1726621727.453:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6226 comm="syz.5.234" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d7137def9 code=0x0
[  161.289720][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.140'.
[  161.336723][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.2.140'.
[  162.696100][ T5289] usb 3-1: 0:2 : does not exist
[  162.726033][ T5289] usb 3-1: USB disconnect, device number 7
[  162.901938][   T29] audit: type=1326 audit(1726621729.293:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6251 comm="syz.0.243" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  163.075840][ T5312] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  163.249424][ T5312] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  163.273737][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.307817][ T5312] usb 5-1: config 0 descriptor??
[  164.128135][ T5312] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  164.153182][ T5312] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  164.176102][ T6257] loop0: detected capacity change from 0 to 32768
[  164.191548][ T5312] [drm:udl_init] *ERROR* Selecting channel failed
[  164.213083][ T6257] (syz.0.243,6257,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fullntr" or missing value
[  164.238416][ T5312] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  164.245212][ T5312] [drm] Initialized udl on minor 2
[  164.263578][ T6257] (syz.0.243,6257,1):ocfs2_fill_super:1178 ERROR: status = -22
[  164.272433][ T5312] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  164.294905][ T5312] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  164.336142][   T46] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  164.353736][ T5312] usb 5-1: USB disconnect, device number 12
[  164.369124][   T46] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  165.670528][   T29] audit: type=1326 audit(1726621732.063:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.2.254" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d4817def9 code=0x0
[  165.780009][ T6257] loop0: detected capacity change from 0 to 4096
[  165.814776][ T6257] ntfs3: loop0: Primary boot: invalid sectors per cluster 3.
[  166.036862][ T6257] ntfs3: loop0: try to read out of volume at offset 0x1ffe00
[  167.866443][ T5332] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  168.370984][ T6308] loop3: detected capacity change from 0 to 8
[  168.471534][ T6308] syz.3.262: attempt to access beyond end of device
[  168.471534][ T6308] loop3: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8
[  168.557399][ T6308] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5
[  168.593265][ T6308] unable to read xattr id index table
[  170.859932][   T29] audit: type=1326 audit(1726621737.253:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6333 comm="syz.3.273" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae5f7def9 code=0x0
[  170.966464][ T5332] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  171.170988][ T5332] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  171.176999][   T29] audit: type=1326 audit(1726621737.573:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.4.275" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa71717def9 code=0x0
[  171.214585][ T5332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.241436][ T5332] usb 1-1: config 0 descriptor??
[  171.834600][ T6349] netlink: 'syz.2.276': attribute type 12 has an invalid length.
[  171.842660][ T6349] netlink: 197276 bytes leftover after parsing attributes in process `syz.2.276'.
[  172.714860][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  173.757831][ T5332] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  173.785973][ T5332] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  173.807035][ T5332] [drm:udl_init] *ERROR* Selecting channel failed
[  173.865021][ T5332] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  173.917468][ T5332] [drm] Initialized udl on minor 2
[  173.936457][ T5332] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  173.966148][ T5332] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  173.996723][ T5292] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  174.030916][ T5292] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  174.040192][ T5332] usb 1-1: USB disconnect, device number 15
[  174.051042][ T5292] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  174.610107][   T29] audit: type=1326 audit(1726621741.003:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6381 comm="syz.0.291" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  174.702577][ T5249] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  174.716129][ T5249] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  174.726911][ T5249] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  174.737423][ T5249] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  174.749783][ T5249] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  174.761619][ T5249] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  176.092085][   T29] audit: type=1326 audit(1726621742.483:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6408 comm="syz.3.298" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae5f7def9 code=0x0
[  176.180845][ T5351] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.371956][ T5351] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.575651][ T5351] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.781418][ T5351] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.846528][ T5249] Bluetooth: hci3: command tx timeout
[  176.956541][ T5312] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  177.315754][ T5312] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  177.327345][ T5312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.122653][ T5312] usb 5-1: config 0 descriptor??
[  178.490912][ T6389] chnl_net:caif_netlink_parms(): no params data found
[  178.520190][ T6412] loop3: detected capacity change from 0 to 32768
[  178.542924][ T6412] (syz.3.298,6412,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fullntr" or missing value
[  178.584261][ T5351] bridge_slave_1: left allmulticast mode
[  178.591445][ T5351] bridge_slave_1: left promiscuous mode
[  178.609555][ T6412] (syz.3.298,6412,1):ocfs2_fill_super:1178 ERROR: status = -22
[  178.693357][ T5351] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.832703][ T5351] bridge_slave_0: left allmulticast mode
[  178.856719][ T5351] bridge_slave_0: left promiscuous mode
[  178.884802][ T5351] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.926518][ T5249] Bluetooth: hci3: command tx timeout
[  179.256920][ T5312] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  179.276570][ T5312] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  179.307016][ T5312] [drm:udl_init] *ERROR* Selecting channel failed
[  179.357407][ T5312] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 2
[  179.396678][ T5312] [drm] Initialized udl on minor 2
[  179.417502][ T5312] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  179.460344][ T5312] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  179.498997][ T5290] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  179.509583][ T5312] usb 5-1: USB disconnect, device number 13
[  179.526536][ T5290] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[  179.589466][   T29] audit: type=1326 audit(1726621745.983:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6452 comm="syz.1.313" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02f677def9 code=0x0
[  180.333682][ T5351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.369820][ T5351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.006752][ T5249] Bluetooth: hci3: command tx timeout
[  181.210296][ T5351] bond0 (unregistering): Released all slaves
[  183.189701][ T5249] Bluetooth: hci3: command tx timeout
[  183.683601][   T29] audit: type=1326 audit(1726621750.053:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6491 comm="syz.1.324" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02f677def9 code=0x0
[  183.989569][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state
[  184.019653][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.036887][ T6389] bridge_slave_0: entered allmulticast mode
[  184.072121][ T6389] bridge_slave_0: entered promiscuous mode
[  184.291630][   T46] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  184.309367][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.333692][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.354729][ T6389] bridge_slave_1: entered allmulticast mode
[  184.827319][ T6389] bridge_slave_1: entered promiscuous mode
[  184.958185][   T46] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  184.986410][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.014025][   T46] usb 4-1: config 0 descriptor??
[  185.412265][   T29] audit: type=1326 audit(1726621751.803:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6516 comm="syz.0.334" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  185.439699][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  185.491273][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  185.842449][ T5351] hsr_slave_0: left promiscuous mode
[  185.903758][ T5351] hsr_slave_1: left promiscuous mode
[  185.909620][   T46] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  185.964355][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  185.979176][   T46] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  185.980754][ T6497] loop1: detected capacity change from 0 to 32768
[  186.002071][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_0
[  186.012328][   T46] [drm:udl_init] *ERROR* Selecting channel failed
[  186.021803][ T6497] (syz.1.324,6497,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fullntr" or missing value
[  186.040701][ T5351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  186.053229][ T6497] (syz.1.324,6497,1):ocfs2_fill_super:1178 ERROR: status = -22
[  186.056710][ T5351] batman_adv: batadv0: Removing interface: batadv_slave_1
[  186.072074][   T46] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  186.084318][   T46] [drm] Initialized udl on minor 2
[  186.102912][   T46] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  186.113982][ T5351] veth1_macvtap: left promiscuous mode
[  186.119957][   T46] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  186.131203][ T5290] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  186.142231][ T5351] veth0_macvtap: left promiscuous mode
[  186.150031][ T5290] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  186.158610][ T5351] veth1_vlan: left promiscuous mode
[  186.166881][ T5351] veth0_vlan: left promiscuous mode
[  186.167350][   T46] usb 4-1: USB disconnect, device number 14
[  186.180885][ T5290] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  187.267174][ T6497] loop1: detected capacity change from 0 to 4096
[  187.349040][ T6497] ntfs3: loop1: Primary boot: invalid sectors per cluster 3.
[  187.359259][ T6497] ntfs3: loop1: try to read out of volume at offset 0x1ffe00
[  187.831155][   T46] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  190.107318][ T5351] team0 (unregistering): Port device team_slave_1 removed
[  190.348954][ T5351] team0 (unregistering): Port device team_slave_0 removed
[  192.098886][ T5229] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  192.158017][ T6389] team0: Port device team_slave_0 added
[  192.228876][ T6389] team0: Port device team_slave_1 added
[  192.280072][ T5229] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  192.296886][ T5229] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.346603][ T5229] usb 4-1: config 0 descriptor??
[  192.382593][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.411195][   T29] audit: type=1326 audit(1726621758.803:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6574 comm="syz.1.353" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02f677def9 code=0x0
[  192.416489][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.513833][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.706044][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1
[  193.734849][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.813893][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  193.971306][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  193.980464][ T1262] ieee802154 phy1 wpan1: encryption failed: -22
[  194.080477][ T5229] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  194.104872][ T5229] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  194.116849][ T6589] Zero length message leads to an empty skb
[  194.123416][ T5229] [drm:udl_init] *ERROR* Selecting channel failed
[  194.126933][ T6389] hsr_slave_0: entered promiscuous mode
[  194.150798][ T6389] hsr_slave_1: entered promiscuous mode
[  194.152442][ T5229] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  194.174188][ T6389] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  194.185034][ T5229] [drm] Initialized udl on minor 2
[  194.190536][ T6389] Cannot create hsr debugfs directory
[  194.194479][ T5229] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  194.227411][ T5351] IPVS: stop unused estimator thread 0...
[  194.229494][ T5229] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  194.251431][    T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  194.283366][    T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  195.136490][ T5229] usb 4-1: USB disconnect, device number 15
[  195.167034][    T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  195.319475][ T6576] loop1: detected capacity change from 0 to 32768
[  195.739566][ T5332] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[  195.905606][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  195.921271][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  195.942713][ T5332] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  195.953443][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  195.964602][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  195.974260][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  195.982541][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  195.997366][ T5332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.005668][ T5332] usb 3-1: Product: syz
[  196.009141][ T6604] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  196.055831][ T5332] usb 3-1: Manufacturer: syz
[  196.064373][   T29] audit: type=1326 audit(1726621762.453:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6606 comm="syz.0.363" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  196.067922][ T5332] usb 3-1: SerialNumber: syz
[  196.315064][ T5332] usb 3-1: config 0 descriptor??
[  196.727714][ T5292] usb 3-1: USB disconnect, device number 8
[  196.924889][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  196.936562][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  196.953480][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  196.967394][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  196.991750][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  197.000629][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  197.129923][ T1065] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.235417][ T6389] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  197.276816][ T6389] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  197.304509][   T29] audit: type=1326 audit(1726621763.693:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6634 comm="syz.0.374" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  197.371800][ T1065] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.392669][ T6389] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  197.419124][ T6389] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  197.486710][    T8] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  197.762646][    T8] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  197.866873][ T1065] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.889442][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.231706][    T8] usb 4-1: config 0 descriptor??
[  198.444830][ T1065] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.114336][ T5234] Bluetooth: hci0: command tx timeout
[  199.721708][    T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  199.747423][    T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  199.756657][    T8] [drm:udl_init] *ERROR* Selecting channel failed
[  199.774910][    T8] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  199.782428][    T8] [drm] Initialized udl on minor 2
[  199.792240][    T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  199.803479][ T6639] loop0: detected capacity change from 0 to 32768
[  199.804846][    T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  199.817183][ T6639] (syz.0.374,6639,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fullntr" or missing value
[  199.831265][ T6639] (syz.0.374,6639,1):ocfs2_fill_super:1178 ERROR: status = -22
[  199.870816][ T5229] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  199.899551][    T8] usb 4-1: USB disconnect, device number 16
[  199.925357][ T5229] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  200.078913][ T6639] loop0: detected capacity change from 0 to 4096
[  200.113750][ T6639] ntfs3: loop0: Primary boot: invalid sectors per cluster 3.
[  200.143657][ T6639] ntfs3: loop0: try to read out of volume at offset 0x1ffe00
[  200.158982][ T1065] bridge_slave_1: left allmulticast mode
[  200.170288][ T1065] bridge_slave_1: left promiscuous mode
[  200.176149][ T1065] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.191677][ T1065] bridge_slave_0: left allmulticast mode
[  200.198106][ T1065] bridge_slave_0: left promiscuous mode
[  200.204091][ T1065] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.557872][ T5312] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  201.190893][ T5246] Bluetooth: hci5: command 0x0406 tx timeout
[  201.227812][ T5246] Bluetooth: hci0: command tx timeout
[  201.247890][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  201.312117][ T5312] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  201.368418][ T5312] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  201.382775][    C1] raw-gadget.0 gadget.0: ignoring, device is not running
[  201.391602][ T5312] usb 1-1: string descriptor 0 read error: -71
[  201.399519][ T5312] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  201.408925][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.447007][ T5312] usb 1-1: config 0 descriptor??
[  201.457000][ T5312] usb 1-1: can't set config #0, error -71
[  201.469208][ T5312] usb 1-1: USB disconnect, device number 16
[  201.505409][   T29] audit: type=1326 audit(1726621767.903:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.0.382" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  201.851807][ T1065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.864549][ T1065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.881540][ T1065] bond0 (unregistering): Released all slaves
[  202.005631][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.312303][ T6619] chnl_net:caif_netlink_parms(): no params data found
[  202.381095][ T6389] 8021q: adding VLAN 0 to HW filter on device team0
[  203.269744][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.276994][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.326708][ T5249] Bluetooth: hci0: command tx timeout
[  203.391501][ T1065] hsr_slave_0: left promiscuous mode
[  203.606634][ T1065] hsr_slave_1: left promiscuous mode
[  203.616634][   T29] audit: type=1326 audit(1726621769.903:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6706 comm="syz.1.394" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02f677def9 code=0x0
[  203.673284][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  203.691852][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.703602][ T1065] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  203.865236][ T1065] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.934672][ T6697] ALSA: mixer_oss: invalid OSS volume ''
[  204.638969][ T1065] veth1_macvtap: left promiscuous mode
[  204.644604][ T1065] veth0_macvtap: left promiscuous mode
[  204.696895][ T1065] veth1_vlan: left promiscuous mode
[  204.706519][ T1065] veth0_vlan: left promiscuous mode
[  205.406852][ T5249] Bluetooth: hci0: command tx timeout
[  205.753384][ T6713] loop1: detected capacity change from 0 to 32768
[  205.797460][ T6713] (syz.1.394,6713,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fullntr" or missing value
[  205.822448][ T6713] (syz.1.394,6713,0):ocfs2_fill_super:1178 ERROR: status = -22
[  206.686200][ T6713] loop1: detected capacity change from 0 to 4096
[  206.703100][ T6713] ntfs3: loop1: Primary boot: invalid sectors per cluster 3.
[  206.722037][ T6713] ntfs3: loop1: try to read out of volume at offset 0x1ffe00
[  207.026742][ T5293] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  207.228179][ T5293] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  207.240402][ T5293] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  207.267987][ T5293] usb 2-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  207.282497][ T5293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.290775][ T5293] usb 2-1: Product: syz
[  207.296044][ T5293] usb 2-1: Manufacturer: syz
[  207.303266][ T5293] usb 2-1: SerialNumber: syz
[  207.312279][ T5293] usb 2-1: config 0 descriptor??
[  207.320389][ T5293] kvaser_usb 2-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  207.355277][   T29] audit: type=1326 audit(1726621773.743:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6735 comm="syz.0.402" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  207.576998][ T6713] loop1: detected capacity change from 0 to 136
[  207.583864][ T6713] iso9660: Unknown parameter '5¡y¡-ª½#D’Rxoœ´<£”´Õm–ð£“Z'
[  207.921677][ T1065] team0 (unregistering): Port device team_slave_1 removed
[  208.018531][ T1065] team0 (unregistering): Port device team_slave_0 removed
[  208.437841][ T5312] usb 2-1: USB disconnect, device number 6
[  209.974280][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.981475][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.001121][ T6619] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.010365][ T6619] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.024069][ T6619] bridge_slave_0: entered allmulticast mode
[  210.031491][ T6619] bridge_slave_0: entered promiscuous mode
[  210.106694][ T6619] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.113959][ T6619] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.157504][ T6619] bridge_slave_1: entered allmulticast mode
[  210.164728][ T6619] bridge_slave_1: entered promiscuous mode
[  212.617894][ T6777] sched: RT throttling activated
[  213.456482][   T29] audit: type=1326 audit(1726621779.843:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6782 comm="syz.1.415" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02f677def9 code=0x0
[  213.611107][ T6619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.736238][ T6619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  214.985919][ T6619] team0: Port device team_slave_0 added
[  215.068360][ T6619] team0: Port device team_slave_1 added
[  215.106915][   T29] audit: type=1326 audit(1726621781.503:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6803 comm="syz.2.421" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d4817def9 code=0x0
[  215.162457][ T6785] loop1: detected capacity change from 0 to 32768
[  215.215157][ T6785] (syz.1.415,6785,0):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "coherency=fullntr" or missing value
[  215.257050][ T6785] (syz.1.415,6785,1):ocfs2_fill_super:1178 ERROR: status = -22
[  215.325918][ T6619] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.343581][ T6619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.408037][ T6619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.455001][ T6619] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.475972][ T6619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.526895][ T6785] loop1: detected capacity change from 0 to 4096
[  215.534601][ T6619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.545404][ T6785] ntfs3: loop1: Primary boot: invalid sectors per cluster 3.
[  215.553204][ T6785] ntfs3: loop1: try to read out of volume at offset 0x1ffe00
[  215.596010][ T6389] 8021q: adding VLAN 0 to HW filter on device batadv0
[  215.689629][ T6619] hsr_slave_0: entered promiscuous mode
[  215.706599][ T6619] hsr_slave_1: entered promiscuous mode
[  215.713663][ T6619] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  215.732792][ T6619] Cannot create hsr debugfs directory
[  215.753835][ T6798] ALSA: mixer_oss: invalid OSS volume ''
[  215.966814][ T5312] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  217.799038][ T6818] ALSA: mixer_oss: invalid OSS volume ''
[  219.160036][ T6389] veth0_vlan: entered promiscuous mode
[  219.191971][ T6389] veth1_vlan: entered promiscuous mode
[  219.258616][   T29] audit: type=1326 audit(1726621785.643:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6861 comm="syz.0.438" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc5a257def9 code=0x0
[  219.302665][ T6389] veth0_macvtap: entered promiscuous mode
[  219.326308][ T6389] veth1_macvtap: entered promiscuous mode
[  219.359047][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.384347][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.394819][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.428064][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.471142][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.509959][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.562963][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.593337][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.669848][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_0
[  220.203466][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.265696][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.294793][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.322362][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.349700][   T29] audit: type=1326 audit(1726621786.743:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.2.439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d4817def9 code=0x0
[  220.372850][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.398358][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.414991][ T6389] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.433304][ T6389] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.469306][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.925463][ T6389] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.141695][ T6389] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.944313][ T6389] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  222.005873][ T6389] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.374960][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.412011][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.055054][ T6619] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  223.084953][ T6619] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  223.094908][ T1065] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  223.104278][ T1065] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  223.117887][ T6619] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  223.142798][ T6619] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  223.370906][ T6619] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.462533][ T6908] loop5: detected capacity change from 0 to 8
[  223.479614][ T6619] 8021q: adding VLAN 0 to HW filter on device team0
[  223.500918][ T6908] syz.5.283: attempt to access beyond end of device
[  223.500918][ T6908] loop5: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8
[  223.535231][ T2504] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.542452][ T2504] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.773893][ T2504] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.781085][ T2504] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.788796][ T6908] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5
[  223.799694][ T6908] unable to read xattr id index table
[  226.432902][   T29] audit: type=1326 audit(1726621792.823:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6924 comm="syz.3.455" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae5f7def9 code=0x0
[  226.912182][ T5249] Bluetooth: hci6: command 0x0406 tx timeout
[  228.239372][ T6619] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.935048][    T8] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  229.629286][    T8] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  229.681260][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.818187][    T8] usb 4-1: config 0 descriptor??
[  230.755834][    T8] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  231.200338][    T8] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  231.617172][    T8] [drm:udl_init] *ERROR* Selecting channel failed
[  231.705337][    T8] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 2
[  231.861133][    T8] [drm] Initialized udl on minor 2
[  232.197041][    T8] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  232.485346][    T8] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  232.498539][ T5229] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  232.556560][ T5229] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  232.572916][    T8] usb 4-1: USB disconnect, device number 17
[  232.617224][ T5229] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  232.627260][   T29] audit: type=1326 audit(1726621798.993:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7000 comm="syz.2.473" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d4817def9 code=0x0
[  232.676144][ T6619] veth0_vlan: entered promiscuous mode
[  232.735627][ T6619] veth1_vlan: entered promiscuous mode
[  233.759888][ T6619] veth0_macvtap: entered promiscuous mode
[  234.728595][ T6619] veth1_macvtap: entered promiscuous mode
[  235.691985][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  235.775079][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  235.808462][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.040557][ T5292] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  236.331607][ T5229] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  236.437977][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.619063][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.629742][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.689592][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.709220][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.720820][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.726422][ T5292] usb 3-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  236.731377][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.805686][ T6619] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.934188][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.081843][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.288483][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.477692][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.562590][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.593415][ T5292] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.594000][ T5229] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  237.606706][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.621596][ T5229] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  237.630320][ T5292] usb 3-1: Product: syz
[  237.635104][ T5292] usb 3-1: Manufacturer: syz
[  237.642148][ T5229] usb 2-1: config 0 descriptor??
[  237.647323][ T5292] usb 3-1: SerialNumber: syz
[  237.652561][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.658022][ T5292] usb 3-1: config 0 descriptor??
[  237.676468][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.690516][ T6619] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.714385][ T6619] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.981235][ T6619] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.435848][ T6619] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.498559][ T6619] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.507624][ T6619] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.526709][ T6619] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  238.574453][ T5293] usb 3-1: USB disconnect, device number 9
[  238.814183][ T7061] netlink: 16 bytes leftover after parsing attributes in process `syz.2.490'.
[  238.912496][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.926474][ T7061] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  238.986792][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.016514][   T29] audit: type=1326 audit(1726621805.403:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7065 comm="syz.5.491" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a9557def9 code=0x0
[  239.056947][ T5229] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  239.088801][ T5229] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  239.107314][ T5351] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  239.110287][ T5229] [drm:udl_init] *ERROR* Selecting channel failed
[  239.156614][ T5351] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  239.159319][ T5229] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  239.222980][ T5229] [drm] Initialized udl on minor 2
[  239.265672][ T5229] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  239.288477][ T5229] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  239.305501][ T5292] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  239.336935][ T5292] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  239.345332][ T5229] usb 2-1: USB disconnect, device number 8
[  239.365335][ T5292] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  241.842484][ T5292] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  242.637270][ T5292] usb 4-1: Using ep0 maxpacket: 8
[  242.711386][ T5292] usb 4-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=8a.1e
[  242.757207][ T5292] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.825073][ T5292] usb 4-1: Product: syz
[  242.854441][ T5292] usb 4-1: Manufacturer: syz
[  242.919894][ T5292] usb 4-1: SerialNumber: syz
[  243.356708][ T5292] usb 4-1: config 0 descriptor??
[  243.420753][ T5292] cyberjack 4-1:0.0: required endpoints missing
[  244.478887][ T7107] netlink: 16 bytes leftover after parsing attributes in process `syz.1.504'.
[  244.488144][ T7107] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  244.527925][ T5290] usb 4-1: USB disconnect, device number 18
[  244.558775][ T5304] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  244.741855][ T5304] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  244.769697][ T5304] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  244.791507][ T5304] usb 5-1: Product: syz
[  244.804184][ T5304] usb 5-1: Manufacturer: syz
[  244.819264][ T5304] usb 5-1: SerialNumber: syz
[  244.830501][ T5304] usb 5-1: config 0 descriptor??
[  245.136801][ T5292] usb 5-1: USB disconnect, device number 14
[  246.336732][ T5332] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  246.348802][   T29] audit: type=1326 audit(1726621812.743:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7137 comm="syz.3.513" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8ae5f7def9 code=0x0
[  247.396749][ T5332] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  247.405891][ T5332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.430168][ T5332] usb 2-1: config 0 descriptor??
[  247.599304][ T7153] netlink: 16 bytes leftover after parsing attributes in process `syz.2.519'.
[  247.628548][ T7150] loop4: detected capacity change from 0 to 8
[  247.686610][ T7153] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  247.701100][ T7150] syz.4.518: attempt to access beyond end of device
[  247.701100][ T7150] loop4: rw=2048, sector=36028797018963960, nr_sectors = 16 limit=8
[  247.787180][ T7150] SQUASHFS error: Failed to read block 0xfffffffffffffffa: -5
[  248.557714][ T7150] unable to read xattr id index table
[  250.612566][ T5332] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  250.688878][ T5332] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  250.745965][ T5332] [drm:udl_init] *ERROR* Selecting channel failed
[  250.795153][ T5332] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2
[  250.817451][ T5332] [drm] Initialized udl on minor 2
[  250.839998][ T5332] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  250.867143][ T5332] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  250.893139][ T5293] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  250.912207][ T5332] usb 2-1: USB disconnect, device number 9
[  250.922234][ T5293] udl 2-1:0.0: [drm] Cannot find any crtc or sizes
[  250.946773][    T8] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  251.125250][    T8] usb 1-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  251.160937][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.190674][    T8] usb 1-1: Product: syz
[  251.211840][    T8] usb 1-1: Manufacturer: syz
[  251.230189][    T8] usb 1-1: SerialNumber: syz
[  251.272960][    T8] usb 1-1: config 0 descriptor??
[  251.645556][ T5293] usb 1-1: USB disconnect, device number 17
[  252.060176][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  252.826449][    T8] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  252.857190][ T5332] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  253.001817][    T8] usb 5-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  253.044304][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.946524][   T29] audit: type=1326 audit(1726621820.293:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7235 comm="syz.1.551" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f02f677def9 code=0x0
[  253.968512][ T5332] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  253.979916][    T8] usb 5-1: Product: syz
[  253.984344][ T5332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.996445][    T8] usb 5-1: Manufacturer: syz
[  254.001157][    T8] usb 5-1: SerialNumber: syz
[  254.020917][ T5332] usb 1-1: config 0 descriptor??
[  254.027309][    T8] usb 5-1: config 0 descriptor??
[  255.410490][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  255.437183][ T1262] ieee802154 phy1 wpan1: encryption failed: -22
[  255.478715][ T5290] usb 5-1: USB disconnect, device number 15
[  257.209027][ T5332] [drm] vendor descriptor length:b9 data:00 00 00 00 00 00 00 00 00 00 00
[  257.256163][ T5332] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  257.281520][ T5332] [drm:udl_init] *ERROR* Selecting channel failed
[  257.368639][ T5332] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2
[  257.446542][ T5332] [drm] Initialized udl on minor 2
[  257.485882][ T5332] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  257.521871][ T5332] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  257.553140][ T5293] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  257.572835][ T5332] usb 1-1: USB disconnect, device number 18
[  257.614382][ T5293] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  258.503623][ T7291] bridge0: port 2(bridge_slave_1) entered disabled state
[  258.512982][ T7291] bridge0: port 1(bridge_slave_0) entered disabled state
[  258.584304][ T7299] syz.1.575[7299] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  258.584581][ T7299] syz.1.575[7299] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  259.230012][ T7316] pim6reg1: entered promiscuous mode
[  259.292519][ T7316] pim6reg1: entered allmulticast mode
[  259.934651][ T7333] syzkaller0: entered promiscuous mode
[  259.950439][ T7333] syzkaller0: entered allmulticast mode
[  262.629601][ T5249] Bluetooth: hci2: command 0x0406 tx timeout
[  268.928038][ T7482] pim6reg1: entered promiscuous mode
[  268.946441][ T7482] pim6reg1: entered allmulticast mode
[  269.161626][ T7498] pim6reg1: entered promiscuous mode
[  269.175392][ T7498] pim6reg1: entered allmulticast mode
[  269.506155][ T7504] syzkaller0: entered promiscuous mode
[  269.532080][ T7504] syzkaller0: entered allmulticast mode
[  270.135765][ T7521] syzkaller0: entered promiscuous mode
[  270.157190][ T7521] syzkaller0: entered allmulticast mode
[  279.093945][ T7577] veth0_vlan: entered allmulticast mode
[  279.413150][ T7588] wg2: entered promiscuous mode
[  279.446686][ T7588] wg2: entered allmulticast mode
[  279.521987][ T7595] pim6reg1: entered promiscuous mode
[  279.536383][ T7595] pim6reg1: entered allmulticast mode
[  279.620606][ T7593] syzkaller0: entered promiscuous mode
[  279.626613][ T7593] syzkaller0: entered allmulticast mode
[  279.867736][ T7604] tap0: tun_chr_ioctl cmd 1074025673
[  286.619738][ T7669] syzkaller0: entered promiscuous mode
[  286.637693][ T7669] syzkaller0: entered allmulticast mode
[  290.146099][ T7723] pim6reg1: entered promiscuous mode
[  290.172356][ T7723] pim6reg1: entered allmulticast mode
[  290.847192][ T7751] syz.1.751[7751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  290.847410][ T7751] syz.1.751[7751] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  291.501206][ T7765] syz.4.755[7765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  291.538949][ T7765] syz.4.755[7765] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  292.640245][ T7803] syz.1.771[7803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  292.662365][ T7803] syz.1.771[7803] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  292.698221][ T7808] syz.1.771[7808] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  292.714038][ T7806] syz.0.773[7806] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  292.746623][ T7808] syz.1.771[7808] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  292.759894][ T7806] syz.0.773[7806] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  292.792550][ T7803] pim6reg1: entered promiscuous mode
[  292.819034][ T7803] pim6reg1: entered allmulticast mode
[  293.385116][ T7818] syzkaller0: entered promiscuous mode
[  293.390951][ T7818] syzkaller0: entered allmulticast mode
[  298.261247][ T7904] syz.2.814[7904] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  298.262024][ T7904] syz.2.814[7904] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  298.351512][ T7907] veth0_vlan: entered allmulticast mode
[  298.449187][ T5249] Bluetooth: hci3: command 0x0406 tx timeout
[  298.553298][ T7912] ÿÿÿÿÿÿ: renamed from vlan1
[  298.794423][ T7919] syzkaller0: entered promiscuous mode
[  298.825216][ T7919] syzkaller0: entered allmulticast mode
[  302.326220][ T7960] syzkaller0: entered promiscuous mode
[  302.332006][ T7960] syzkaller0: entered allmulticast mode
[  305.805066][ T8008] tap0: tun_chr_ioctl cmd 1074025680
[  309.987951][ T8074] syzkaller0: entered promiscuous mode
[  310.013155][ T8074] syzkaller0: entered allmulticast mode
[  310.523906][ T8089] syzkaller0: entered promiscuous mode
[  310.537107][ T8089] syzkaller0: entered allmulticast mode
[  316.702087][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  316.728948][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  316.773842][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  316.812706][ T5249] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  316.843287][ T5249] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  316.852127][ T5249] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  316.870323][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  316.876915][ T1262] ieee802154 phy1 wpan1: encryption failed: -22
[  317.087389][ T8123] pim6reg1: entered promiscuous mode
[  317.094672][ T8123] pim6reg1: entered allmulticast mode
[  317.337648][ T8140] bridge0: entered promiscuous mode
[  317.342987][ T8140] bridge0: entered allmulticast mode
[  317.585525][ T8146] pim6reg1: entered promiscuous mode
[  317.619761][ T8146] pim6reg1: entered allmulticast mode
[  318.169612][ T8157] syzkaller0: entered promiscuous mode
[  318.205895][ T8157] syzkaller0: entered allmulticast mode
[  318.938231][ T5249] Bluetooth: hci4: command tx timeout
[  321.013074][ T5249] Bluetooth: hci4: command tx timeout
[  322.149796][ T2504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.413407][ T2504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  322.601363][ T8133] chnl_net:caif_netlink_parms(): no params data found
[  322.734424][ T2504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.071742][ T2504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.086556][ T5234] Bluetooth: hci4: command tx timeout
[  323.539814][ T8133] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.556539][ T8133] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.598529][ T8133] bridge_slave_0: entered allmulticast mode
[  323.606173][ T8133] bridge_slave_0: entered promiscuous mode
[  323.626046][ T8133] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.653352][ T8133] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.699071][ T8133] bridge_slave_1: entered allmulticast mode
[  323.714553][ T8133] bridge_slave_1: entered promiscuous mode
[  323.965782][ T8133] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  323.987811][ T8133] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  324.048339][ T5234] Bluetooth: hci0: command 0x0406 tx timeout
[  324.397644][ T2504] bridge_slave_1: left allmulticast mode
[  324.410977][ T2504] bridge_slave_1: left promiscuous mode
[  324.423299][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state
[  324.446901][ T2504] bridge_slave_0: left allmulticast mode
[  324.453587][ T2504] bridge_slave_0: left promiscuous mode
[  324.459828][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.180882][ T5249] Bluetooth: hci4: command tx timeout
[  325.342302][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  325.355074][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  325.369353][ T2504] bond0 (unregistering): Released all slaves
[  325.392742][ T8263] pim6reg1: entered promiscuous mode
[  325.401071][ T8263] pim6reg1: entered allmulticast mode
[  325.417903][ T8280] veth0_vlan: entered allmulticast mode
[  325.474333][ T8283] veth0_vlan: left promiscuous mode
[  325.483089][ T8283] veth0_vlan: entered promiscuous mode
[  325.672509][ T8133] team0: Port device team_slave_0 added
[  329.052733][ T8133] team0: Port device team_slave_1 added
[  329.221789][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.230798][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.291741][ T8133] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.404642][ T8133] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.421050][ T8133] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.498571][ T8133] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.717455][ T8133] hsr_slave_0: entered promiscuous mode
[  329.745244][ T8133] hsr_slave_1: entered promiscuous mode
[  329.764669][ T8133] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.783889][ T8133] Cannot create hsr debugfs directory
[  330.159714][ T8322] syzkaller0: entered promiscuous mode
[  330.165294][ T8322] syzkaller0: entered allmulticast mode
[  333.791869][ T8350] pim6reg1: entered promiscuous mode
[  333.801273][ T8350] pim6reg1: entered allmulticast mode
[  333.872748][ T2504] hsr_slave_0: left promiscuous mode
[  333.909086][ T2504] hsr_slave_1: left promiscuous mode
[  333.916663][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  333.934764][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.955166][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.965724][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  334.104183][ T2504] veth1_macvtap: left promiscuous mode
[  334.110629][ T2504] veth0_macvtap: left promiscuous mode
[  334.116768][ T2504] veth1_vlan: left promiscuous mode
[  334.123188][ T2504] veth0_vlan: left promiscuous mode
[  335.313150][ T2504] team0 (unregistering): Port device team_slave_1 removed
[  335.382855][ T2504] team0 (unregistering): Port device team_slave_0 removed
[  336.298235][ T8374] pim6reg1: entered promiscuous mode
[  336.303802][ T8374] pim6reg1: entered allmulticast mode
[  336.803554][ T8392] syzkaller0: entered promiscuous mode
[  336.843846][ T8392] syzkaller0: entered allmulticast mode
[  336.860781][ T5234] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  336.876128][ T5234] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  336.886539][ T5234] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  336.948542][ T5234] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  336.963013][ T5234] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  336.972121][ T5234] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  338.992729][ T8433] loop5: detected capacity change from 0 to 256
[  339.010916][ T5249] Bluetooth: hci1: command tx timeout
[  339.080444][ T8433] FAT-fs (loop5): Directory bread(block 64) failed
[  339.100163][ T8433] FAT-fs (loop5): Directory bread(block 65) failed
[  339.114349][ T8433] FAT-fs (loop5): Directory bread(block 66) failed
[  339.124196][ T8433] FAT-fs (loop5): Directory bread(block 67) failed
[  339.131570][ T8433] FAT-fs (loop5): Directory bread(block 68) failed
[  339.138417][ T8433] FAT-fs (loop5): Directory bread(block 69) failed
[  339.155302][ T8433] FAT-fs (loop5): Directory bread(block 70) failed
[  339.168657][ T8433] FAT-fs (loop5): Directory bread(block 71) failed
[  339.175395][ T8433] FAT-fs (loop5): Directory bread(block 72) failed
[  339.190193][ T8433] FAT-fs (loop5): Directory bread(block 73) failed
[  339.693588][ T8442] capability: warning: `syz.0.1008' uses 32-bit capabilities (legacy support in use)
[  340.396368][    T8] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  340.550272][    T8] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  340.565280][    T8] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.587873][    T8] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  340.597388][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.605541][    T8] usb 1-1: Product: syz
[  340.616347][    T8] usb 1-1: Manufacturer: syz
[  340.622451][    T8] usb 1-1: SerialNumber: syz
[  341.094177][ T5249] Bluetooth: hci1: command tx timeout
[  341.483685][    T8] cdc_ncm 1-1:1.0: SET_CRC_MODE failed
[  341.513832][    T8] cdc_ncm 1-1:1.0: SET_NTB_FORMAT failed
[  341.539530][    T8] cdc_ncm 1-1:1.0: bind() failure
[  341.568736][    T8] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  341.575603][    T8] cdc_ncm 1-1:1.1: bind() failure
[  341.584672][    T8] usb 1-1: USB disconnect, device number 19
[  343.183578][ T5249] Bluetooth: hci1: command tx timeout
[  344.275511][ T8452] loop2: detected capacity change from 0 to 128
[  344.319386][ T2504] IPVS: stop unused estimator thread 0...
[  344.323509][ T8452] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  344.376596][ T8452] ext4 filesystem being mounted at /151/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  344.784936][ T8461] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1016'.
[  344.807632][ T5951] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  344.988938][ T2504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.037749][    C0] Unknown status report in ack skb
[  345.144684][ T2504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.145058][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  345.172790][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  345.185363][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  345.195293][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  345.203162][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  345.210752][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  345.246655][ T5249] Bluetooth: hci1: command tx timeout
[  345.428768][ T8474] loop5: detected capacity change from 0 to 8192
[  345.472819][ T8474] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  346.757402][ T2504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.860864][ T8481] loop1: detected capacity change from 0 to 1024
[  346.917221][ T8483] input: syz0 as /devices/virtual/input/input6
[  346.919055][ T8133] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  346.942103][ T8483] input: failed to attach handler leds to device input6, error: -6
[  347.004903][ T8486] loop5: detected capacity change from 0 to 1024
[  347.034038][ T2504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.050247][ T8401] chnl_net:caif_netlink_parms(): no params data found
[  347.118924][ T8133] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  347.139881][   T29] audit: type=1800 audit(1726621913.533:40): pid=8481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1021" name="bus" dev="loop1" ino=26 res=0 errno=0
[  347.164261][ T8481] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  347.173816][ T8481] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  347.182358][ T8133] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  347.200963][ T8481] hfsplus: inconsistency in B*Tree (1,0,1,0,1)
[  347.218432][ T8133] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  347.247201][ T5249] Bluetooth: hci0: command tx timeout
[  347.292247][ T1065] hfsplus: b-tree write err: -5, ino 4
[  347.361080][ T8492] loop5: detected capacity change from 0 to 16
[  347.458223][ T8492] erofs: (device loop5): mounted with root inode @ nid 36.
[  347.468840][ T8498] loop2: detected capacity change from 0 to 512
[  347.477292][ T8498] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  347.492619][ T8498] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  347.511220][ T8498] EXT4-fs (loop2): 1 truncate cleaned up
[  347.520932][ T8498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.588730][ T8498] syz.2.1027 (pid 8498) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  347.723575][ T5249] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 0] out[9000]
[  347.774866][ T8501] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192]
[  347.788181][ T8501] erofs: (device loop5): z_erofs_read_folio: read error -117 @ 0 of nid 89
[  347.798705][   T29] audit: type=1800 audit(1726621914.193:41): pid=8501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1025" name="file3" dev="loop5" ino=89 res=0 errno=0
[  347.858033][ T5951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.986636][ T5293] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  348.008350][ T2504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.148498][ T5293] usb 2-1: Using ep0 maxpacket: 8
[  348.158932][ T5293] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  348.176609][ T5293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  348.197972][ T8401] bridge0: port 1(bridge_slave_0) entered blocking state
[  348.206592][ T5293] usb 2-1: config 0 descriptor??
[  348.225942][ T8401] bridge0: port 1(bridge_slave_0) entered disabled state
[  348.248028][ T8401] bridge_slave_0: entered allmulticast mode
[  348.257674][ T8401] bridge_slave_0: entered promiscuous mode
[  348.379709][ T5229] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  348.400562][ T2504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.456573][ T8401] bridge0: port 2(bridge_slave_1) entered blocking state
[  348.464670][ T8401] bridge0: port 2(bridge_slave_1) entered disabled state
[  348.489900][ T8401] bridge_slave_1: entered allmulticast mode
[  348.522774][ T8401] bridge_slave_1: entered promiscuous mode
[  348.607616][ T5229] usb 3-1: Using ep0 maxpacket: 32
[  348.615496][ T5229] usb 3-1: config 0 has no interfaces?
[  348.618373][ T2504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.624328][ T5229] usb 3-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  348.666309][ T5229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.686359][ T5229] usb 3-1: Product: syz
[  348.690655][ T5229] usb 3-1: Manufacturer: syz
[  348.695312][ T5229] usb 3-1: SerialNumber: syz
[  348.722908][ T5229] usb 3-1: config 0 descriptor??
[  348.729242][ T8468] chnl_net:caif_netlink_parms(): no params data found
[  348.878747][ T2504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.992048][ T8508] loop2: detected capacity change from 0 to 8
[  348.998490][ T8401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  349.015466][ T8508] SQUASHFS error: lzo decompression failed, data probably corrupt
[  349.034117][ T8508] SQUASHFS error: Failed to read block 0x91: -5
[  349.059140][ T8508] SQUASHFS error: Unable to read metadata cache entry [8f]
[  349.078428][ T8508] SQUASHFS error: Unable to read inode 0x11f
[  349.231531][ T8401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  349.248812][ T5229] usb 3-1: USB disconnect, device number 10
[  349.327440][ T5249] Bluetooth: hci0: command tx timeout
[  349.439170][ T8401] team0: Port device team_slave_0 added
[  349.649379][ T8401] team0: Port device team_slave_1 added
[  349.693336][ T8468] bridge0: port 1(bridge_slave_0) entered blocking state
[  349.707472][ T8468] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.714812][ T8468] bridge_slave_0: entered allmulticast mode
[  349.959369][ T8468] bridge_slave_0: entered promiscuous mode
[  350.203905][ T8468] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.356134][ T8468] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.374898][ T8468] bridge_slave_1: entered allmulticast mode
[  350.391052][ T8468] bridge_slave_1: entered promiscuous mode
[  350.443320][ T8133] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.585348][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_0
[  350.604709][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.642719][ T8401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  350.725440][ T8401] batman_adv: batadv0: Adding interface: batadv_slave_1
[  350.742269][ T8401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  350.779568][ T8401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  350.799909][ T8468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  350.814960][ T8133] 8021q: adding VLAN 0 to HW filter on device team0
[  350.832855][ T2504] bridge_slave_1: left allmulticast mode
[  350.838897][ T2504] bridge_slave_1: left promiscuous mode
[  350.854846][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.878200][ T2504] bridge_slave_0: left allmulticast mode
[  350.890201][ T2504] bridge_slave_0: left promiscuous mode
[  350.896021][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.942811][ T2504] bridge_slave_1: left allmulticast mode
[  350.950146][ T5293] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71
[  350.961294][ T2504] bridge_slave_1: left promiscuous mode
[  350.969815][ T5293] asix 2-1:0.0: probe with driver asix failed with error -71
[  350.987042][ T5293] usb 2-1: USB disconnect, device number 10
[  351.008956][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.073626][ T2504] bridge_slave_0: left allmulticast mode
[  351.090291][ T2504] bridge_slave_0: left promiscuous mode
[  351.096083][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state
[  351.408001][ T5249] Bluetooth: hci0: command tx timeout
[  352.185495][ T8538] capability: warning: `syz.5.1037' uses deprecated v2 capabilities in a way that may be insecure
[  352.384787][ T8544] loop1: detected capacity change from 0 to 512
[  352.448101][ T8544] ext4: Unknown parameter 'context'
[  352.718674][ T8547] xt_hashlimit: overflow, try lower: 0/0
[  353.228259][ T8545] loop5: detected capacity change from 0 to 764
[  353.487073][ T5249] Bluetooth: hci0: command tx timeout
[  355.742893][ T8566] loop1: detected capacity change from 0 to 128
[  355.784129][ T8566] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.805388][ T8566] ext4 filesystem being mounted at /197/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  355.863188][ T5504] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  355.955157][ T8570] loop1: detected capacity change from 0 to 128
[  355.978309][ T8570] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  355.991062][ T8570] ext4 filesystem being mounted at /198/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  356.949497][ T5504] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.118894][ T8574] loop1: detected capacity change from 0 to 1024
[  357.127195][ T8574] EXT4-fs: Ignoring removed oldalloc option
[  357.138343][ T8574] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  357.203115][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.215017][ T8574] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  357.215455][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.244766][ T2504] bond0 (unregistering): Released all slaves
[  357.677850][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  357.691788][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  357.704295][ T2504] bond0 (unregistering): Released all slaves
[  357.724040][ T8468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  358.040884][ T5504] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /199/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.104943][ T5504] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.191206][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  358.257155][ T5504] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /199/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.559332][ T8579] process 'syz.5.1052' launched './file1' with NULL argv: empty string added
[  358.566003][ T5504] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.593095][ T8468] team0: Port device team_slave_0 added
[  358.604420][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  358.617423][ T5504] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /199/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.643128][ T5504] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.693426][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  358.707524][ T5504] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /199/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.730294][ T5504] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.743124][ T8401] hsr_slave_0: entered promiscuous mode
[  358.755667][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  358.772983][ T8401] hsr_slave_1: entered promiscuous mode
[  358.773381][ T5504] EXT4-fs error (device loop1): ext4_readdir:261: inode #11: block 32: comm syz-executor: path /199/file2/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.800235][ T8401] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  358.807902][ T5504] EXT4-fs error (device loop1): ext4_empty_dir:3094: inode #11: block 32: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  358.827750][ T8401] Cannot create hsr debugfs directory
[  358.835072][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.842261][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  358.842276][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.846181][ T1065] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.868263][ T1065] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.964386][ T8133] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  358.982675][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  358.996608][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  359.014396][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  359.026668][ T8133] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  359.039511][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  359.068691][ T5504] EXT4-fs warning (device loop1): ext4_empty_dir:3096: inode #11: comm syz-executor: directory missing '.'
[  359.080000][ T8468] team0: Port device team_slave_1 added
[  361.215457][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_0
[  361.511179][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.579093][ T8468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  361.767203][ T1064] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2
[  361.777757][ T8468] batman_adv: batadv0: Adding interface: batadv_slave_1
[  361.815502][ T8468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  361.843350][ T8468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  361.951336][ T5504] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.063435][ T8622] loop2: detected capacity change from 0 to 128
[  362.129024][ T8468] hsr_slave_0: entered promiscuous mode
[  362.155577][ T8468] hsr_slave_1: entered promiscuous mode
[  362.186001][ T8468] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  362.216771][ T8468] Cannot create hsr debugfs directory
[  362.376518][ T2504] hsr_slave_0: left promiscuous mode
[  362.406361][ T8626] loop2: detected capacity change from 0 to 512
[  362.413151][ T2504] hsr_slave_1: left promiscuous mode
[  363.596887][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.604596][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  363.713852][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.756971][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  363.787920][ T2504] hsr_slave_0: left promiscuous mode
[  363.800265][ T2504] hsr_slave_1: left promiscuous mode
[  363.807224][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  363.814700][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  363.853959][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  363.893649][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  364.054845][ T2504] veth1_macvtap: left promiscuous mode
[  364.060780][ T2504] veth0_macvtap: left promiscuous mode
[  364.067268][ T2504] veth1_vlan: left promiscuous mode
[  364.072609][ T2504] veth0_vlan: left promiscuous mode
[  364.084460][ T5234] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  364.096521][ T2504] veth1_macvtap: left promiscuous mode
[  364.102422][ T5234] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  364.106489][ T2504] veth0_macvtap: left promiscuous mode
[  364.115195][ T5234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  364.124717][ T2504] veth1_vlan: left promiscuous mode
[  364.156911][ T2504] veth0_vlan: left promiscuous mode
[  364.381491][ T8643] loop2: detected capacity change from 0 to 128
[  364.637908][ T5234] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  364.658577][ T5234] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  364.687096][ T5234] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  366.395173][ T2504] team0 (unregistering): Port device team_slave_1 removed
[  366.492341][ T2504] team0 (unregistering): Port device team_slave_0 removed
[  367.181924][ T5249] Bluetooth: hci5: command tx timeout
[  368.615296][ T2504] team0 (unregistering): Port device team_slave_1 removed
[  368.731702][ T2504] team0 (unregistering): Port device team_slave_0 removed
[  369.277568][ T5249] Bluetooth: hci5: command tx timeout
[  369.920780][ T8133] 8021q: adding VLAN 0 to HW filter on device batadv0
[  370.189281][ T8659] loop2: detected capacity change from 0 to 8192
[  370.212760][ T8661] loop5: detected capacity change from 0 to 512
[  370.404620][ T8661] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  370.417298][ T8661] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1078: invalid indirect mapped block 2683928664 (level 1)
[  370.468865][ T8661] EXT4-fs (loop5): Remounting filesystem read-only
[  370.478452][ T8661] EXT4-fs (loop5): 1 truncate cleaned up
[  370.490928][ T8661] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  370.514078][ T8133] veth0_vlan: entered promiscuous mode
[  370.585161][ T8133] veth1_vlan: entered promiscuous mode
[  370.667432][ T8401] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  370.678271][ T6389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  370.734635][ T8401] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  370.940809][ T8401] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  371.009916][ T8401] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  371.152413][ T8638] chnl_net:caif_netlink_parms(): no params data found
[  371.357950][ T5249] Bluetooth: hci5: command tx timeout
[  372.034294][ T8133] veth0_macvtap: entered promiscuous mode
[  372.118273][ T8133] veth1_macvtap: entered promiscuous mode
[  372.254710][ T2504] IPVS: stop unused estimator thread 0...
[  372.431122][ T8638] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.438942][ T8638] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.446637][ T8638] bridge_slave_0: entered allmulticast mode
[  372.454154][ T8638] bridge_slave_0: entered promiscuous mode
[  372.471356][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.498666][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.509159][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.526293][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.537335][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  372.548073][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  372.560589][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_0
[  372.573885][ T8638] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.592291][ T8638] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.601185][ T8638] bridge_slave_1: entered allmulticast mode
[  372.749037][ T8698] loop2: detected capacity change from 0 to 1024
[  372.779224][ T8698] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  372.797358][ T8698] JBD2: no valid journal superblock found
[  372.803981][ T8698] EXT4-fs (loop2): Could not load journal inode
[  372.925496][ T8638] bridge_slave_1: entered promiscuous mode
[  373.406708][ T5249] Bluetooth: hci5: command tx timeout
[  375.337930][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.361199][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.371339][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.382016][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.392275][ T8133] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  375.395463][ T8708] loop5: detected capacity change from 0 to 512
[  375.402952][ T8133] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  375.404600][ T8133] batman_adv: batadv0: Interface activated: batadv_slave_1
[  375.428064][ T8708] EXT4-fs: Ignoring removed bh option
[  375.475477][ T8708] EXT4-fs (loop5): orphan cleanup on readonly fs
[  375.492731][ T8708] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  375.515583][ T8708] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.1089: invalid indirect mapped block 8 (level 2)
[  375.736999][ T8708] EXT4-fs (loop5): Remounting filesystem read-only
[  375.793919][ T8638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.819418][ T8708] EXT4-fs (loop5): 1 truncate cleaned up
[  375.888583][ T8133] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  375.906665][ T8708] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  375.949552][ T8133] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  376.027937][ T8133] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  376.107282][ T8133] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  376.424019][ T6389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.541997][ T2504] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.607606][ T8638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.916568][ T8729] loop2: detected capacity change from 0 to 1024
[  376.934979][ T2504] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  376.980866][ T8468] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  377.001633][ T5234] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  377.016782][ T5234] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  377.045287][ T5234] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  377.087712][ T5234] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  377.104361][ T8638] team0: Port device team_slave_0 added
[  377.115357][ T5234] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  377.126489][ T5234] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  377.265417][ T2504] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.302160][ T8468] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  377.325773][ T8468] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  377.348097][ T8735] syz.2.1098[8735] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  377.348251][ T8735] syz.2.1098[8735] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  377.371741][ T8638] team0: Port device team_slave_1 added
[  377.490654][ T2504] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  377.522856][ T8468] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  377.695740][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_0
[  377.724814][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.768797][ T8638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  377.793006][ T8638] batman_adv: batadv0: Adding interface: batadv_slave_1
[  377.807550][ T8638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  377.841357][ T8638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  377.900591][ T8401] 8021q: adding VLAN 0 to HW filter on device bond0
[  377.981174][ T8638] hsr_slave_0: entered promiscuous mode
[  377.988771][ T8638] hsr_slave_1: entered promiscuous mode
[  378.006698][ T8638] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  378.014352][ T8638] Cannot create hsr debugfs directory
[  378.111458][ T8401] 8021q: adding VLAN 0 to HW filter on device team0
[  378.203879][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  378.211172][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  378.307611][ T1262] ieee802154 phy0 wpan0: encryption failed: -22
[  378.313990][ T1262] ieee802154 phy1 wpan1: encryption failed: -22
[  378.333186][ T2504] bridge_slave_1: left allmulticast mode
[  378.351025][ T2504] bridge_slave_1: left promiscuous mode
[  378.357957][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state
[  378.382650][ T2504] bridge_slave_0: left allmulticast mode
[  378.393317][ T2504] bridge_slave_0: left promiscuous mode
[  378.399806][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.206468][ T5249] Bluetooth: hci6: command tx timeout
[  379.349793][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  379.364677][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  379.378226][ T2504] bond0 (unregistering): Released all slaves
[  379.414555][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  379.421760][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  380.909013][ T8767] syzkaller0: entered promiscuous mode
[  380.914561][ T8767] syzkaller0: entered allmulticast mode
[  381.246594][ T5249] Bluetooth: hci6: command tx timeout
[  383.334728][ T5249] Bluetooth: hci6: command tx timeout
[  385.419317][ T5249] Bluetooth: hci6: command tx timeout
[  386.827346][ T2504] hsr_slave_0: left promiscuous mode
[  386.834368][ T2504] hsr_slave_1: left promiscuous mode
[  386.841825][ T8776] loop2: detected capacity change from 0 to 512
[  386.860629][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  386.862604][ T8776] EXT4-fs: Ignoring removed bh option
[  386.877570][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  386.883319][ T8776] EXT4-fs (loop2): orphan cleanup on readonly fs
[  386.892060][ T8776] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  386.892450][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  386.913630][ T8776] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1118: invalid indirect mapped block 8 (level 2)
[  386.914711][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  386.928183][ T8776] EXT4-fs (loop2): Remounting filesystem read-only
[  386.944826][ T8776] EXT4-fs (loop2): 1 truncate cleaned up
[  386.951796][ T8776] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  386.986995][ T2504] veth1_macvtap: left promiscuous mode
[  386.992624][ T2504] veth0_macvtap: left promiscuous mode
[  387.006961][ T2504] veth1_vlan: left promiscuous mode
[  387.047357][ T5951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  388.152967][ T2504] team0 (unregistering): Port device team_slave_1 removed
[  388.266601][ T2504] team0 (unregistering): Port device team_slave_0 removed
[  389.814142][ T8468] 8021q: adding VLAN 0 to HW filter on device bond0
[  389.835387][ T8730] chnl_net:caif_netlink_parms(): no params data found
[  390.545429][ T8793] loop2: detected capacity change from 0 to 4096
[  390.678032][ T8793] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  390.713675][ T8793] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  391.046146][ T8468] 8021q: adding VLAN 0 to HW filter on device team0
[  391.217906][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.225077][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  391.299346][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.306762][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  391.350696][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.367820][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.375597][ T8730] bridge_slave_0: entered allmulticast mode
[  391.405206][ T8730] bridge_slave_0: entered promiscuous mode
[  391.441519][ T2504] IPVS: stop unused estimator thread 0...
[  391.464191][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.479653][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.483503][ T8804] loop2: detected capacity change from 0 to 8192
[  391.492959][ T8730] bridge_slave_1: entered allmulticast mode
[  391.497138][ T8804] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  391.500626][ T8730] bridge_slave_1: entered promiscuous mode
[  391.560346][ T8401] 8021q: adding VLAN 0 to HW filter on device batadv0
[  391.608861][ T8468] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  391.631148][ T8468] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  391.720367][ T8638] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  391.814219][ T8638] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  392.182662][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  392.360418][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  392.516937][ T8638] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  392.557694][ T8638] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  392.727531][ T2504] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  392.871343][ T8730] team0: Port device team_slave_0 added
[  392.900088][ T8730] team0: Port device team_slave_1 added
[  392.991697][ T2504] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.023485][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.030695][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.057056][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  393.074325][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1
[  393.088602][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  393.114914][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  393.159817][ T8730] hsr_slave_0: entered promiscuous mode
[  393.166928][ T8730] hsr_slave_1: entered promiscuous mode
[  393.176637][ T8730] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  393.184440][ T8730] Cannot create hsr debugfs directory
[  393.221499][ T2504] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.338915][ T2504] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  393.375921][ T8468] 8021q: adding VLAN 0 to HW filter on device batadv0
[  393.513369][ T8401] veth0_vlan: entered promiscuous mode
[  393.613000][ T8401] veth1_vlan: entered promiscuous mode
[  393.621188][ T2504] bridge_slave_1: left allmulticast mode
[  393.630633][ T2504] bridge_slave_1: left promiscuous mode
[  393.638717][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state
[  393.654249][ T2504] bridge_slave_0: left allmulticast mode
[  393.660536][ T2504] bridge_slave_0: left promiscuous mode
[  393.667010][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state
[  394.520318][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  394.532753][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  394.548931][ T2504] bond0 (unregistering): Released all slaves
[  394.633833][ T8638] 8021q: adding VLAN 0 to HW filter on device bond0
[  394.720776][ T2504] hsr_slave_0: left promiscuous mode
[  394.734811][ T2504] hsr_slave_1: left promiscuous mode
[  394.742493][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  394.750662][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  394.759132][ T2504] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  394.766820][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  394.791394][ T2504] veth1_macvtap: left promiscuous mode
[  394.798695][ T2504] veth0_macvtap: left promiscuous mode
[  394.804299][ T2504] veth1_vlan: left promiscuous mode
[  394.809885][ T2504] veth0_vlan: left promiscuous mode
[  395.847548][ T2504] team0 (unregistering): Port device team_slave_1 removed
[  395.947043][ T2504] team0 (unregistering): Port device team_slave_0 removed
[  396.849453][ T5234] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  396.860445][ T5234] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  396.882996][ T5234] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  396.925887][ T5234] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  396.933788][ T5234] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  396.941148][ T5234] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  397.222672][ T8468] veth0_vlan: entered promiscuous mode
[  397.257969][ T8638] 8021q: adding VLAN 0 to HW filter on device team0
[  397.434027][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  397.441303][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  397.458658][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  397.465863][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  397.579370][ T8468] veth1_vlan: entered promiscuous mode
[  397.808844][ T8638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  397.819694][ T8638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  397.909581][ T8468] veth0_macvtap: entered promiscuous mode
[  398.019169][ T8468] veth1_macvtap: entered promiscuous mode
[  398.086851][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.099714][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.109710][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  398.120236][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.132564][ T8468] batman_adv: batadv0: Interface activated: batadv_slave_0
[  398.141433][ T8730] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  398.152626][ T8730] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  398.175200][ T8730] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  398.255633][ T8730] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  398.296046][ T8638] 8021q: adding VLAN 0 to HW filter on device batadv0
[  398.308579][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.319559][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.329932][ T8468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  398.340680][ T8468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  398.352437][ T8468] batman_adv: batadv0: Interface activated: batadv_slave_1
[  398.360767][ T8828] chnl_net:caif_netlink_parms(): no params data found
[  398.418428][ T8468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  398.427647][ T8468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  398.436822][ T8468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  398.445558][ T8468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  398.679819][ T8828] bridge0: port 1(bridge_slave_0) entered blocking state
[  398.693326][ T8828] bridge0: port 1(bridge_slave_0) entered disabled state
[  398.710610][ T8828] bridge_slave_0: entered allmulticast mode
[  398.718540][ T8828] bridge_slave_0: entered promiscuous mode
[  398.727673][ T8828] bridge0: port 2(bridge_slave_1) entered blocking state
[  398.734810][ T8828] bridge0: port 2(bridge_slave_1) entered disabled state
[  398.742540][ T8828] bridge_slave_1: entered allmulticast mode
[  398.750785][ T8828] bridge_slave_1: entered promiscuous mode
[  398.806900][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.814792][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.874584][ T8828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  398.896875][ T8828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  398.916955][ T2476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  398.924991][ T2476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  398.977370][ T8828] team0: Port device team_slave_0 added
[  399.006584][ T5249] Bluetooth: hci4: command tx timeout
[  399.035092][ T8828] team0: Port device team_slave_1 added
[  399.080595][ T2504] bridge_slave_1: left allmulticast mode
[  399.094331][ T2504] bridge_slave_1: left promiscuous mode
[  399.100525][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.117689][ T2504] bridge_slave_0: left allmulticast mode
[  399.123411][ T2504] bridge_slave_0: left promiscuous mode
[  399.129281][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.903010][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  399.914819][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  399.926854][ T2504] bond0 (unregistering): Released all slaves
[  399.998803][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_0
[  400.006232][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.044242][ T8828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  400.057345][ T8828] batman_adv: batadv0: Adding interface: batadv_slave_1
[  400.064308][ T8828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  400.100921][ T8828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  400.125126][ T8638] veth0_vlan: entered promiscuous mode
[  400.198437][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.222055][ T2504] hsr_slave_0: left promiscuous mode
[  400.231066][ T2504] hsr_slave_1: left promiscuous mode
[  400.251223][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.267142][ T2504] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.341548][ T2504] veth1_vlan: left promiscuous mode
[  400.347450][ T2504] veth0_vlan: left promiscuous mode
[  400.602561][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  400.632520][ T5234] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  400.642539][ T5234] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  400.653350][ T5234] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  400.676068][ T5234] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  400.705002][ T5234] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  401.086574][ T5234] Bluetooth: hci4: command tx timeout
[  401.221902][ T2504] team0 (unregistering): Port device team_slave_1 removed
[  401.310762][ T2504] team0 (unregistering): Port device team_slave_0 removed
[  402.454051][ T8638] veth1_vlan: entered promiscuous mode
[  402.479979][ T8828] hsr_slave_0: entered promiscuous mode
[  402.492533][ T8828] hsr_slave_1: entered promiscuous mode
[  402.499298][ T8828] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  402.507382][ T8828] Cannot create hsr debugfs directory
[  402.532449][ T8730] 8021q: adding VLAN 0 to HW filter on device team0
[  402.718273][ T1065] bridge0: port 1(bridge_slave_0) entered blocking state
[  402.725438][ T1065] bridge0: port 1(bridge_slave_0) entered forwarding state
[  402.769833][ T8638] veth0_macvtap: entered promiscuous mode
[  402.877735][ T5234] Bluetooth: hci0: command tx timeout
[  402.926115][ T2476] bridge0: port 2(bridge_slave_1) entered blocking state
[  402.933505][ T2476] bridge0: port 2(bridge_slave_1) entered forwarding state
[  402.945759][ T8638] veth1_macvtap: entered promiscuous mode
[  403.062394][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.077045][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.088355][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.099018][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.110373][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  403.120881][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.135528][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_0
[  403.166540][ T5234] Bluetooth: hci4: command tx timeout
[  403.204500][ T8730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  403.215910][ T8730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  403.237044][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.249656][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.259589][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.270645][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.280602][ T8638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  403.291332][ T8638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  403.311045][ T8638] batman_adv: batadv0: Interface activated: batadv_slave_1
[  403.359775][ T8638] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  403.376320][ T8638] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  403.385097][ T8638] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  403.399251][ T8638] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  403.413809][ T8841] chnl_net:caif_netlink_parms(): no params data found
[  403.612347][ T2476] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.621389][ T2476] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.698349][ T8841] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.705607][ T8841] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.714043][ T8841] bridge_slave_0: entered allmulticast mode
[  403.721521][ T8841] bridge_slave_0: entered promiscuous mode
[  403.787756][ T2504] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.808209][ T1064] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  403.826353][ T1064] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  403.872341][ T2504] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  403.895253][ T8841] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.905005][ T8841] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.912555][ T8841] bridge_slave_1: entered allmulticast mode
[  403.919963][ T8841] bridge_slave_1: entered promiscuous mode
[  403.982538][ T8841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  404.165202][ T2504] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.229836][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0
[  404.241895][ T8858] loop1: detected capacity change from 0 to 2048
[  404.289876][ T8858] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  404.318798][ T8841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  404.381147][ T8858] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  404.387157][ T2504] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  404.400828][ T8858] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 15 with max blocks 1 with error 28
[  404.426343][ T8858] EXT4-fs (loop1): This should not happen!! Data will be lost
[  404.426343][ T8858] 
[  404.506425][ T8863] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1129'.
[  404.567632][ T8858] EXT4-fs (loop1): Total free blocks count 0
[  404.575634][ T8858] EXT4-fs (loop1): Free/Dirty block details
[  404.582419][ T8858] EXT4-fs (loop1): free_blocks=2415919104
[  404.589025][ T8858] EXT4-fs (loop1): dirty_blocks=16
[  404.594592][ T8858] EXT4-fs (loop1): Block reservation details
[  404.601100][ T8858] EXT4-fs (loop1): i_reserved_data_blocks=1
[  405.185200][ T5234] Bluetooth: hci0: command tx timeout
[  405.257133][ T5249] Bluetooth: hci4: command tx timeout
[  405.359792][ T6993] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  405.485887][ T8828] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  405.508697][ T8828] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  405.512573][ T8868] loop5: detected capacity change from 0 to 512
[  405.526925][ T8868] EXT4-fs: Ignoring removed mblk_io_submit option
[  405.535358][ T8868] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  405.565287][ T8868] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1131: corrupted in-inode xattr: e_value out of bounds
[  405.569777][ T8841] team0: Port device team_slave_0 added
[  405.589676][ T8841] team0: Port device team_slave_1 added
[  405.598249][ T8868] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1131: couldn't read orphan inode 15 (err -117)
[  405.627180][ T8868] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  405.635208][ T8828] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  405.672417][   T29] audit: type=1800 audit(1726621972.063:42): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1131" name="bus" dev="loop5" ino=18 res=0 errno=0
[  405.700778][   T29] audit: type=1800 audit(1726621972.063:43): pid=8868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1131" name="bus" dev="loop5" ino=18 res=0 errno=0
[  405.755437][ T8730] veth0_vlan: entered promiscuous mode
[  405.818848][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_0
[  405.832644][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  405.864926][ T8841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  405.877510][ T8828] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  405.922696][   T29] audit: type=1326 audit(1726621972.313:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8867 comm="syz.5.1131" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0a9557def9 code=0x0
[  405.963399][ T8730] veth1_vlan: entered promiscuous mode
[  405.974596][ T8841] batman_adv: batadv0: Adding interface: batadv_slave_1
[  405.982134][ T8841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  406.014459][ T8841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  406.304663][ T8878] syzkaller0: entered promiscuous mode
[  406.310946][ T8878] syzkaller0: entered allmulticast mode
[  406.515906][ T6389] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.885497][ T2504] bridge_slave_1: left allmulticast mode
[  406.909455][ T2504] bridge_slave_1: left promiscuous mode
[  406.925681][ T2504] bridge0: port 2(bridge_slave_1) entered disabled state
[  406.976075][ T2504] bridge_slave_0: left allmulticast mode
[  406.983717][ T2504] bridge_slave_0: left promiscuous mode
[  406.996811][ T2504] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.386291][ T8888] loop5: detected capacity change from 0 to 4096
[  407.454169][ T5249] Bluetooth: hci0: command tx timeout
[  407.538501][ T8888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  407.566694][ T8888] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  407.678057][ T8887] loop2: detected capacity change from 0 to 8192
[  407.759990][ T8887] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  408.921669][ T8900] loop2: detected capacity change from 0 to 128
[  409.775045][ T8910] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1133'.
[  409.786343][ T5234] Bluetooth: hci0: command tx timeout
[  410.631316][ T8912] loop2: detected capacity change from 0 to 512
[  410.642518][ T8912] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  410.684753][ T8912] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2862: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  410.701551][ T8912] EXT4-fs (loop2): 1 truncate cleaned up
[  410.708413][ T8912] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  411.732066][ T2504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  411.754792][ T2504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  411.783684][ T2504] bond0 (unregistering): Released all slaves
[  411.946533][ T5951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.123032][ T8922] loop2: detected capacity change from 0 to 8192
[  412.154038][ T8922] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  413.079729][ T8925] loop2: detected capacity change from 0 to 512
[  413.221861][ T8925] EXT4-fs (loop2): Test dummy encryption mode enabled
[  413.273478][ T8925] EXT4-fs error (device loop2): __ext4_iget:4982: inode #11: block 1: comm syz.2.1138: invalid block
[  413.285110][ T8925] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1138: couldn't read orphan inode 11 (err -117)
[  413.302605][ T8925] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  414.612788][ T8931] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  414.665203][ T8931] EXT4-fs error (device loop2): ext4_add_entry:2435: inode #2: comm syz.2.1138: Directory hole found for htree leaf block 0
[  415.018889][ T5951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.113908][ T8936] loop2: detected capacity change from 0 to 512
[  415.177985][ T8936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  415.191111][ T8936] ext4 filesystem being mounted at /209/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  415.243704][ T5951] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  415.397724][ T8940] loop2: detected capacity change from 0 to 512
[  415.423859][ T8940] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  415.462287][ T8940] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  415.470578][ T8940] System zones: 1-12
[  415.545622][ T8940] EXT4-fs (loop2): 1 truncate cleaned up
[  415.552926][ T8940] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  416.249253][ T8943] ==================================================================
[  416.257438][ T8943] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8ce/0x1f60
[  416.265255][ T8943] Read of size 18446744073709551572 at addr ffff88802966e050 by task syz.2.1140/8943
[  416.274783][ T8943] 
[  416.277139][ T8943] CPU: 0 UID: 0 PID: 8943 Comm: syz.2.1140 Not tainted 6.11.0-syzkaller-04003-gfc1dc0d50780 #0
[  416.287491][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  416.297597][ T8943] Call Trace:
[  416.300904][ T8943]  <TASK>
[  416.303858][ T8943]  dump_stack_lvl+0x241/0x360
[  416.308587][ T8943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  416.313846][ T8943]  ? __pfx__printk+0x10/0x10
[  416.318487][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.324178][ T8943]  ? _printk+0xd5/0x120
[  416.328436][ T8943]  ? __virt_addr_valid+0x183/0x530
[  416.333586][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.339266][ T8943]  print_report+0x169/0x550
[  416.343793][ T8943]  ? __virt_addr_valid+0x183/0x530
[  416.348932][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.354633][ T8943]  ? __virt_addr_valid+0x45f/0x530
[  416.359795][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.365508][ T8943]  ? __phys_addr+0xba/0x170
[  416.370061][ T8943]  ? ext4_xattr_set_entry+0x8ce/0x1f60
[  416.375576][ T8943]  kasan_report+0x143/0x180
[  416.380131][ T8943]  ? __x64_sys_unlink+0x47/0x50
[  416.385039][ T8943]  ? ext4_xattr_set_entry+0x8ce/0x1f60
[  416.390546][ T8943]  ? ext4_xattr_set_entry+0x8ce/0x1f60
[  416.396048][ T8943]  kasan_check_range+0x282/0x290
[  416.401024][ T8943]  ? ext4_xattr_set_entry+0x8ce/0x1f60
[  416.406546][ T8943]  __asan_memmove+0x29/0x70
[  416.411108][ T8943]  ext4_xattr_set_entry+0x8ce/0x1f60
[  416.416466][ T8943]  ? __pfx_ext4_xattr_set_entry+0x10/0x10
[  416.422248][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.427932][ T8943]  ? kmemdup_noprof+0x45/0x60
[  416.432640][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.438317][ T8943]  ? __asan_memcpy+0x40/0x70
[  416.442948][ T8943]  ext4_xattr_block_set+0xa39/0x3980
[  416.448292][ T8943]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  416.454052][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.459742][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.465430][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.471112][ T8943]  ? ext4_xattr_block_find+0x479/0x520
[  416.476646][ T8943]  ext4_expand_extra_isize_ea+0x12d7/0x1cf0
[  416.482632][ T8943]  ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10
[  416.488957][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.494684][ T8943]  ? down_write_trylock+0x209/0x3b0
[  416.499974][ T8943]  ? __ext4_mark_inode_dirty+0x491/0x880
[  416.505664][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.511856][ T8943]  ? dquot_initialize_needed+0x130/0x320
[  416.517526][ T8943]  __ext4_expand_extra_isize+0x2fb/0x3e0
[  416.523304][ T8943]  __ext4_mark_inode_dirty+0x524/0x880
[  416.528826][ T8943]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  416.534849][ T8943]  ? ext4_journal_check_start+0x175/0x250
[  416.540609][ T8943]  __ext4_unlink+0x6c2/0xb50
[  416.545291][ T8943]  ? __pfx___ext4_unlink+0x10/0x10
[  416.550490][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.556158][ T8943]  ? down_write+0x1de/0x220
[  416.560786][ T8943]  ? __pfx_down_write+0x10/0x10
[  416.565680][ T8943]  ext4_unlink+0x1bf/0x5a0
[  416.570131][ T8943]  vfs_unlink+0x367/0x650
[  416.574493][ T8943]  do_unlinkat+0x4ae/0x830
[  416.578955][ T8943]  ? __pfx_do_unlinkat+0x10/0x10
[  416.583917][ T8943]  ? __check_object_size+0x49c/0x900
[  416.589228][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.594905][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.600653][ T8943]  ? getname_flags+0x1e3/0x540
[  416.605440][ T8943]  __x64_sys_unlink+0x47/0x50
[  416.610146][ T8943]  do_syscall_64+0xf3/0x230
[  416.614681][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  416.620346][ T8943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.626278][ T8943] RIP: 0033:0x7f7d4817def9
[  416.630720][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  416.650357][ T8943] RSP: 002b:00007f7d48f8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  416.658801][ T8943] RAX: ffffffffffffffda RBX: 00007f7d48336130 RCX: 00007f7d4817def9
[  416.666802][ T8943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[  416.674880][ T8943] RBP: 00007f7d481f0b76 R08: 0000000000000000 R09: 0000000000000000
[  416.682957][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  416.690956][ T8943] R13: 0000000000000000 R14: 00007f7d48336130 R15: 00007ffc420ae128
[  416.698970][ T8943]  </TASK>
[  416.701997][ T8943] 
[  416.704321][ T8943] Allocated by task 8943:
[  416.708704][ T8943]  kasan_save_track+0x3f/0x80
[  416.713417][ T8943]  __kasan_kmalloc+0x98/0xb0
[  416.718041][ T8943]  __kmalloc_node_track_caller_noprof+0x225/0x440
[  416.724485][ T8943]  kmemdup_noprof+0x2a/0x60
[  416.729025][ T8943]  ext4_xattr_block_set+0x88b/0x3980
[  416.734348][ T8943]  ext4_expand_extra_isize_ea+0x12d7/0x1cf0
[  416.740276][ T8943]  __ext4_expand_extra_isize+0x2fb/0x3e0
[  416.745924][ T8943]  __ext4_mark_inode_dirty+0x524/0x880
[  416.751409][ T8943]  __ext4_unlink+0x6c2/0xb50
[  416.756028][ T8943]  ext4_unlink+0x1bf/0x5a0
[  416.760471][ T8943]  vfs_unlink+0x367/0x650
[  416.764824][ T8943]  do_unlinkat+0x4ae/0x830
[  416.769261][ T8943]  __x64_sys_unlink+0x47/0x50
[  416.773966][ T8943]  do_syscall_64+0xf3/0x230
[  416.778498][ T8943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  416.784432][ T8943] 
[  416.786765][ T8943] The buggy address belongs to the object at ffff88802966e000
[  416.786765][ T8943]  which belongs to the cache kmalloc-1k of size 1024
[  416.800842][ T8943] The buggy address is located 80 bytes inside of
[  416.800842][ T8943]  1024-byte region [ffff88802966e000, ffff88802966e400)
[  416.814324][ T8943] 
[  416.816666][ T8943] The buggy address belongs to the physical page:
[  416.823079][ T8943] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x29668
[  416.831859][ T8943] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  416.840377][ T8943] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  416.848428][ T8943] page_type: 0xfdffffff(slab)
[  416.853127][ T8943] raw: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
[  416.861734][ T8943] raw: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000
[  416.870361][ T8943] head: 00fff00000000040 ffff88801ac41dc0 0000000000000000 dead000000000001
[  416.879053][ T8943] head: 0000000000000000 0000000080100010 00000001fdffffff 0000000000000000
[  416.887746][ T8943] head: 00fff00000000003 ffffea0000a59a01 ffffffffffffffff 0000000000000000
[  416.896457][ T8943] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  416.905151][ T8943] page dumped because: kasan: bad access detected
[  416.911570][ T8943] page_owner tracks the page as allocated
[  416.917287][ T8943] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 35, tgid 35 (kworker/u8:2), ts 87288900582, free_ts 87112610040
[  416.937648][ T8943]  post_alloc_hook+0x1f3/0x230
[  416.942455][ T8943]  get_page_from_freelist+0x2e4c/0x2f10
[  416.948023][ T8943]  __alloc_pages_noprof+0x256/0x6c0
[  416.953246][ T8943]  alloc_slab_page+0x5f/0x120
[  416.958094][ T8943]  allocate_slab+0x5a/0x2f0
[  416.962648][ T8943]  ___slab_alloc+0xcd1/0x14b0
[  416.967350][ T8943]  __slab_alloc+0x58/0xa0
[  416.971701][ T8943]  __kmalloc_noprof+0x25a/0x400
[  416.976570][ T8943]  ___neigh_create+0x691/0x2470
[  416.981533][ T8943]  ip6_finish_output2+0x1700/0x1730
[  416.986756][ T8943]  ip6_finish_output+0x41e/0x810
[  416.991712][ T8943]  ndisc_send_skb+0xab2/0x1380
[  416.996589][ T8943]  ndisc_send_ns+0xcc/0x160
[  417.001110][ T8943]  addrconf_dad_work+0xb45/0x16f0
[  417.006237][ T8943]  process_scheduled_works+0xa2e/0x1830
[  417.011853][ T8943]  worker_thread+0x870/0xd30
[  417.016580][ T8943] page last free pid 5229 tgid 5229 stack trace:
[  417.022919][ T8943]  free_unref_page+0xd22/0xea0
[  417.027750][ T8943]  __slab_free+0x31b/0x3d0
[  417.032207][ T8943]  qlist_free_all+0x9e/0x140
[  417.036860][ T8943]  kasan_quarantine_reduce+0x14f/0x170
[  417.042395][ T8943]  __kasan_slab_alloc+0x23/0x80
[  417.047282][ T8943]  __kmalloc_cache_noprof+0x132/0x2c0
[  417.052688][ T8943]  nsim_fib_event_work+0x19c5/0x4130
[  417.058012][ T8943]  process_scheduled_works+0xa2e/0x1830
[  417.063584][ T8943]  worker_thread+0x870/0xd30
[  417.068196][ T8943]  kthread+0x2f2/0x390
[  417.072271][ T8943]  ret_from_fork+0x4d/0x80
[  417.076760][ T8943]  ret_from_fork_asm+0x1a/0x30
[  417.081596][ T8943] 
[  417.083919][ T8943] Memory state around the buggy address:
[  417.089587][ T8943]  ffff88802966df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  417.097678][ T8943]  ffff88802966df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  417.105749][ T8943] >ffff88802966e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  417.113849][ T8943]                                                  ^
[  417.120559][ T8943]  ffff88802966e080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  417.128668][ T8943]  ffff88802966e100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  417.136758][ T8943] ==================================================================
[  417.146507][ T8943] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  417.153757][ T8943] CPU: 0 UID: 0 PID: 8943 Comm: syz.2.1140 Not tainted 6.11.0-syzkaller-04003-gfc1dc0d50780 #0
[  417.164141][ T8943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  417.174247][ T8943] Call Trace:
[  417.177563][ T8943]  <TASK>
[  417.180520][ T8943]  dump_stack_lvl+0x241/0x360
[  417.185262][ T8943]  ? __pfx_dump_stack_lvl+0x10/0x10
[  417.190522][ T8943]  ? __pfx__printk+0x10/0x10
[  417.195164][ T8943]  ? preempt_schedule+0xe1/0xf0
[  417.200085][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.205789][ T8943]  ? vscnprintf+0x5d/0x90
[  417.210192][ T8943]  panic+0x349/0x870
[  417.214150][ T8943]  ? check_panic_on_warn+0x21/0xb0
[  417.219298][ T8943]  ? __pfx_panic+0x10/0x10
[  417.223750][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.229450][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.235138][ T8943]  ? _raw_spin_unlock_irqrestore+0x130/0x140
[  417.241183][ T8943]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  417.247570][ T8943]  ? print_report+0x502/0x550
[  417.252297][ T8943]  check_panic_on_warn+0x86/0xb0
[  417.257277][ T8943]  ? ext4_xattr_set_entry+0x8ce/0x1f60
[  417.262792][ T8943]  end_report+0x77/0x160
[  417.267082][ T8943]  kasan_report+0x154/0x180
[  417.271621][ T8943]  ? __x64_sys_unlink+0x47/0x50
[  417.276532][ T8943]  ? ext4_xattr_set_entry+0x8ce/0x1f60
[  417.282061][ T8943]  ? ext4_xattr_set_entry+0x8ce/0x1f60
[  417.287602][ T8943]  kasan_check_range+0x282/0x290
[  417.292608][ T8943]  ? ext4_xattr_set_entry+0x8ce/0x1f60
[  417.298142][ T8943]  __asan_memmove+0x29/0x70
[  417.302702][ T8943]  ext4_xattr_set_entry+0x8ce/0x1f60
[  417.308058][ T8943]  ? __pfx_ext4_xattr_set_entry+0x10/0x10
[  417.313831][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.319516][ T8943]  ? kmemdup_noprof+0x45/0x60
[  417.324232][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.329914][ T8943]  ? __asan_memcpy+0x40/0x70
[  417.334559][ T8943]  ext4_xattr_block_set+0xa39/0x3980
[  417.339909][ T8943]  ? __pfx_ext4_xattr_block_set+0x10/0x10
[  417.345678][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.351363][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.357050][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.362764][ T8943]  ? ext4_xattr_block_find+0x479/0x520
[  417.368304][ T8943]  ext4_expand_extra_isize_ea+0x12d7/0x1cf0
[  417.374310][ T8943]  ? __pfx_ext4_expand_extra_isize_ea+0x10/0x10
[  417.380626][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.386341][ T8943]  ? down_write_trylock+0x209/0x3b0
[  417.391611][ T8943]  ? __ext4_mark_inode_dirty+0x491/0x880
[  417.397384][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.403143][ T8943]  ? dquot_initialize_needed+0x130/0x320
[  417.409228][ T8943]  __ext4_expand_extra_isize+0x2fb/0x3e0
[  417.414921][ T8943]  __ext4_mark_inode_dirty+0x524/0x880
[  417.420473][ T8943]  ? __pfx___ext4_mark_inode_dirty+0x10/0x10
[  417.426690][ T8943]  ? ext4_journal_check_start+0x175/0x250
[  417.432478][ T8943]  __ext4_unlink+0x6c2/0xb50
[  417.437145][ T8943]  ? __pfx___ext4_unlink+0x10/0x10
[  417.442328][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.448028][ T8943]  ? down_write+0x1de/0x220
[  417.452590][ T8943]  ? __pfx_down_write+0x10/0x10
[  417.457509][ T8943]  ext4_unlink+0x1bf/0x5a0
[  417.461986][ T8943]  vfs_unlink+0x367/0x650
[  417.466371][ T8943]  do_unlinkat+0x4ae/0x830
[  417.470868][ T8943]  ? __pfx_do_unlinkat+0x10/0x10
[  417.475870][ T8943]  ? __check_object_size+0x49c/0x900
[  417.481224][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.486934][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.492615][ T8943]  ? getname_flags+0x1e3/0x540
[  417.497449][ T8943]  __x64_sys_unlink+0x47/0x50
[  417.502198][ T8943]  do_syscall_64+0xf3/0x230
[  417.506819][ T8943]  ? srso_alias_return_thunk+0x5/0xfbef5
[  417.512528][ T8943]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  417.518509][ T8943] RIP: 0033:0x7f7d4817def9
[  417.522981][ T8943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  417.542649][ T8943] RSP: 002b:00007f7d48f8c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  417.551126][ T8943] RAX: ffffffffffffffda RBX: 00007f7d48336130 RCX: 00007f7d4817def9
[  417.559141][ T8943] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000180
[  417.567154][ T8943] RBP: 00007f7d481f0b76 R08: 0000000000000000 R09: 0000000000000000
[  417.575164][ T8943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  417.583178][ T8943] R13: 0000000000000000 R14: 00007f7d48336130 R15: 00007ffc420ae128
[  417.591195][ T8943]  </TASK>
[  417.594654][ T8943] Kernel Offset: disabled
[  417.598990][ T8943] Rebooting in 86400 seconds..