last executing test programs:

22.266437049s ago: executing program 3 (id=846):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
fchdir(r3)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000003c0)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
ioctl$PPPIOCSFLAGS1(r5, 0x40047459, 0x0)

20.380440946s ago: executing program 3 (id=850):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r2, &(0x7f0000000380), 0x20000000}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000000008c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000340)={'wg0\x00'})
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
socket$packet(0x11, 0x2, 0x300)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x25, 0x0, @val=@tracing}, 0x40)

16.092511225s ago: executing program 4 (id=861):
mount(0x0, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
prlimit64(r0, 0x2, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs$namespace(r0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000300)=0x6)
sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x64}}, 0x0)
r3 = socket$inet6(0xa, 0x80002, 0x0)
sendto$inet6(r3, 0x0, 0x0, 0x20088004, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c)
sendto$inet6(r3, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffd6, 0xc001, 0x0, 0xffffffffffffff0c)
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000, 0x0, 0x0)
setsockopt$inet6_mtu(r3, 0x29, 0x17, 0x0, 0x0)
setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000080), 0x4)

14.560760463s ago: executing program 4 (id=863):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000380)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x1000}}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@resuid}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r3, 0x400455c8, 0x40000000004)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r4, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x9, 0x40, 0x6, 0x8}, 0x48)

14.153590586s ago: executing program 1 (id=865):
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0)
close(r1)
openat$uhid(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r2 = gettid()
tkill(r2, 0x7)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300), 0x0, 0x0)
chdir(&(0x7f0000000140)='./file0\x00')
keyctl$assume_authority(0x10, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000d80), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x10000000000002a9, 0x0, 0x0)

12.996459484s ago: executing program 2 (id=868):
r0 = socket(0x2, 0x3, 0xff)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
syz_open_dev$vcsu(0x0, 0x10001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
sendmmsg$unix(r0, &(0x7f0000009e80)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="ed72a9a0830dc786a87caf77ed13e4647bd11a6f8e0e7d4ffe59d67b457acb8a199bba752098695eb36aeb3a17f87eb932609627", 0x34}], 0x1, &(0x7f00000009c0)=[@rights={{0x10}}], 0x10}}], 0x1, 0x0)

12.80433193s ago: executing program 1 (id=870):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000140), 0x4)
getsockopt$packet_int(r0, 0x107, 0x12, 0x0, &(0x7f00000000c0))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='kfree\x00'}, 0x3d)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
creat(&(0x7f0000000040)='./file0\x00', 0x144)
creat(&(0x7f00000000c0)='./file0\x00', 0x9)
socket$inet6(0xa, 0x2, 0x3a)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f9ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
getsockopt$MRT6(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r3 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x18, 0x4, &(0x7f0000001200)=ANY=[@ANYBLOB="18000000000000000000000000000000611228000000000095000000000000008e79bb255f166cad5ca9ecd4510e8f170b2fa3404ce3f2641c1c"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240), &(0x7f0000002200)=0xc)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_SUBMITURB(r5, 0x802c550a, &(0x7f0000000540)=@urb_type_iso={0x0, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11.95657325s ago: executing program 2 (id=871):
r0 = socket$unix(0x1, 0x1, 0x0)
inotify_init1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0}, 0xfffffffffffffed9)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r4 = openat$procfs(0xffffff9c, &(0x7f0000000200)='/proc/tty/ldiscs\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000001340)={0x2020}, 0x2020)
bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bind$unix(r0, 0x0, 0x0)

11.763590367s ago: executing program 1 (id=873):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0xfffffffffffffddf, &(0x7f0000000040)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x300)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r4 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x404481, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f00000002c0), &(0x7f0000000380)=0x14)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
getsockopt$bt_l2cap_L2CAP_OPTIONS(r5, 0x6, 0x1, 0x0, &(0x7f0000000080))

11.668014305s ago: executing program 4 (id=874):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)}, &(0x7f00000003c0)=0x10)
r1 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40c0}, 0x40)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
close(0xffffffffffffffff)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r6, 0x84, 0xa, 0x0, 0x0)
socket(0x10, 0x3, 0x0)
sendto$inet6(r6, &(0x7f0000847fff)='X', 0x1, 0x20002001, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r7 = dup(r5)
ioctl$KVM_SET_MSRS(r7, 0xc048aeca, &(0x7f0000000200)=ANY=[@ANYRES16=r1])
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)

11.612139619s ago: executing program 3 (id=875):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
dup(0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
timerfd_settime(0xffffffffffffffff, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{0x14}, {0x34, 0x0, 0x0, 0x7}, {0x6}]})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0)
ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r2, 0xc0305616, &(0x7f0000000000)={0x0, {0x3, 0x80000000}})
listen(r1, 0xfff)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x4, 0x0, @dev, @empty}}}})
r4 = socket(0x10, 0x802, 0x0)
write(r4, &(0x7f0000000140)="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", 0xfc)

10.235305924s ago: executing program 2 (id=877):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
splice(r0, &(0x7f0000000280), 0xffffffffffffffff, 0x0, 0x800, 0x0)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r1, &(0x7f0000000480)=[{&(0x7f0000019640)=""/102400, 0x19000}, {&(0x7f0000000100)=""/23, 0x17}, {0x0}, {&(0x7f0000032640)=""/208, 0xd0}], 0x4, 0x4, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000004c0)}], 0x1}}], 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={&(0x7f0000000940)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x1}]}]}, {0x0, [0x5f, 0x30, 0x15f68a878522e060]}}, 0x0, 0x35}, 0x20)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x26, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x6c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x4, 0x4, 0x4, 0x10000, 0x808, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)

8.600106571s ago: executing program 1 (id=878):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, <r1=>0x0}, &(0x7f0000000280)=0x5)
setuid(r1)
r2 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "09bc07784659fd4297882614266d0799292c045df88f5b6516fff2e3273452dc0f8029e605dd5deffd0276bc1fee2e283fcefd8b5c88c897e0505f05261f96f0"}, 0x48, 0xfffffffffffffffd)
keyctl$search(0xa, r2, &(0x7f00000026c0)='rxrpc\x00', &(0x7f0000000200)={'syz', 0x3}, 0xffffffffffffffff)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x3, &(0x7f00000002c0)=0x80000074, 0x4c)
getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, &(0x7f0000000000), &(0x7f0000000100)=0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000f50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x2009)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000002140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f0000000400)={[{@grpquota}, {@lazytime}, {@errors_continue}, {@noinit_itable}, {@nobh}, {@noinit_itable}, {@usrquota}, {@dax}]}, 0x1, 0x5fd, &(0x7f0000002300)="$eJzs3c9vVNUeAPDvnWlLS3mvhbw8xYU0MQYSpaUFDDEuYGtIgz/ixo2VFkQKNLRGiyaUBDcmxo0xJq5ciP+FEtmy0pULN64MCVHD0sQxM3Nv22nv9Hd7sffzSQbuuWcO59wZvnPPPXPOnQBKa6D+RyXiYERMJRF9ydx8XkekmQPN5z3686Pz9UcStdprvyeRpPuy5yfp371p4e6I+PGHJA5Ul9c7PXvj8tjk5MT1ND00c2VqaHr2xtFLV8YuTlycuDrywsipkydOnho+tqHjupmz7+ztd9/v+2T0zW+++isZ/vaX0SROx8vpExcfx1YZiIHGa5Isz+o9tdWVFaSa/j9Z/BYnHQU2iHXJ3r/OiHgi+qIaC29eX3z8SqGNA7ZVLYmoASWViH8oqawfkF3bL70OrhTSKwF2wsMzzQGA5fHf0RwbjO7G2MDeR0ksHtZJImJjI3Ot9kXE/Xujty/cG70d2zQOB+SbuxURT+bFf9KI//7ojv5G/FfS+F/4FDiX9g/qe17dYP1Lh4rFP+ycZvx3rxj/0RL/TfW4f2tR/L+9wfoHFjbf6WmJ/56NHhIAAAAAAACU1t0zEfF83vf/lfn5P5Ez/6c3Ik5vQf0DS9LLv/+vPNiCaoAcD89EvJQ7/7eSzf7tr6Zb/2nMB+hMLlyanDgWEf+NiCPRuaeeHl6hjqOfHviyXd5AOv8ve9Trv5/OBUzb8aBjT2uZ8bGZsc0eNxDx8FbEU7nzf5P583+Sc/6vfx5MrbGOA8/eOdcub/X4B7ZL7euIw7nn/4W7ViQr359jqNEfGMp6Bcs9/eFn37Wrf6Px7xYTsHn18//eleO/P1l8v57p9ddxfLaj1i6vJf670p1r6P93Ja83bjmTFflgbGbm+nBEV3K2Wt/bsn9k/W2G3SiLhyxe6vF/5JmVx//y+v89ETG35N9O/mhdU5z5/9+9v7Zrj/4/FKce/+PrOv+vf2PkTv/37epf2/jfica5/ki6x/gfNH2RhWlX6/6ccOzIy9rp9gIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAblCJiH2RVAbntyuVwcGI3oj4X+ytTF6bnnnuwrX3ro7X8xq//1/Jfum3r5lOst//71+UHlmSPh4R+yPi82pPIz14/trkeNEHDwAAAAAAAAAAAAAAAAAAAI+J3mz9f7WZztb/1/1WLbRpwE7oaJsAdruckP+piHYAO88pH8pL/EN5iX8oL/EP5SX+obzEP5SX+IfyEv8AAAAAALCr7D909+ckIuZe7Gk86rrSvM5Vyibb3jpgO1WKbgBQGLf4gfIy9QfKa7VrfGD3W20sr7ttoc2MAk6d30RhAAAAAAAAAAAAACidwwc3vv4f+Hez/h/Ky/p/KK9s/f+hgtsB7DzX+ECsspI/d/3/qqUAAAAAAAAAAAAAgK00PXvj8tjk5MT1x3YjuxvBttf1RtFHuvMbtVrtZv21Lbo9lYgo/tXY9EY2Ff5xac+SjWyt39pKFfN5BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPdPAAAA//9NFRqF")
bpf$ITER_CREATE(0x21, &(0x7f0000000280), 0x8)
clock_nanosleep(0xfffffff5, 0x0, &(0x7f0000000140)={0x77359400}, 0x0)

8.096611393s ago: executing program 4 (id=880):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x505}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200), &(0x7f00000002c0), 0xa79, r0}, 0x38)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', <r4=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="850000006b00000057000000000000009500040000000000"], &(0x7f0000000140)='GPL\x00', 0x1, 0xfc76, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffe77}, 0x48)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r6, &(0x7f0000000380)=ANY=[], 0xff2e)
ioctl$TCSETS(r6, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xeb6, 0x0, "85f94609000000000000000001000e00"})
r7 = syz_open_pts(r6, 0x0)
r8 = dup3(r7, r6, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfdno='])
r9 = dup(r5)
write$UHID_INPUT(r9, &(0x7f0000002080)={0x9b, {"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", 0x1000}}, 0x1006)
r10 = socket(0x10, 0x2, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r10)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

8.01147599s ago: executing program 0 (id=881):
socket$inet6(0xa, 0x2, 0x0)
r0 = socket(0xa, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x0, 0x0, {{0x15}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x40002022)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$binfmt_elf64(r6, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/5794], 0x1778)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r7 = openat$cgroup_devices(r5, &(0x7f0000000300)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r7, &(0x7f0000000180)=ANY=[@ANYBLOB='b '], 0xa)
sendmmsg(r6, &(0x7f0000000480), 0x0, 0x0)

7.995939492s ago: executing program 1 (id=882):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d0000006700000005"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x20081e, &(0x7f0000000040)={[{@nodelalloc}, {@grpid}, {@auto_da_alloc}]}, 0x1, 0x4ef, &(0x7f00000003c0)="$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")
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000240)="aefc00001a0025f01d85bc04fef7681d020b49ff708800008003280008021000ac0a1410bc71176a36ede498534108e58342fa94a235a2a441f9", 0xfcae)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x3, &(0x7f0000000280)=ANY=[@ANYRES16], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r3)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x9, 0x8, 0xb}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20)
sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0xc3ff}}, 0x0)
close(r3)

7.842409304s ago: executing program 2 (id=883):
socket(0x2b, 0x6, 0x407ffc)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"})
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
ioctl$BLKPG(0xffffffffffffffff, 0x1269, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket(0x10, 0x2, 0x0)
recvfrom$unix(r4, 0x0, 0x0, 0x1, 0x0, 0x0)
r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0)
r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
fallocate(r6, 0x0, 0x0, 0x2000402)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file2\x00', 0x0, 0x0)
open_by_handle_at(r7, &(0x7f0000000000)=ANY=[@ANYBLOB='\f\x00\x00\x00'], 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000640)={0x3, &(0x7f0000000600)=[{0x0, 0x2, 0x80, 0x81}, {0x7, 0x40, 0x3f, 0x10001}, {0x1ff, 0x0, 0x9b, 0x4}]}, 0x10)
sendmsg$ETHTOOL_MSG_COALESCE_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x18, r5, 0xb39, 0x0, 0x0, {}, [@HEADER={0x4}]}, 0x18}}, 0x0)

7.713767715s ago: executing program 0 (id=884):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r3}, 0x10)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_open_procfs(0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000100), 0x75, 0x121301)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000001600)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x50)

6.486183658s ago: executing program 0 (id=885):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
syz_mount_image$udf(&(0x7f00000002c0), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc13, &(0x7f0000002140)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200))
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffffff)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xffffffffffffff05)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$unix(r3, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="03", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0)
recvmmsg(r4, &(0x7f0000001140), 0x700, 0x2, 0x0)

6.116483519s ago: executing program 3 (id=886):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48)
syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r5 = accept$alg(r0, 0x0, 0x0)
sendmsg$alg(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0xd4e5}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0)
write$binfmt_script(r5, &(0x7f0000000600), 0xfec8)

3.504665847s ago: executing program 4 (id=887):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
lseek(0xffffffffffffffff, 0x300000002, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_create1(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)
madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc)
r4 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r4, &(0x7f0000000000)='2\x00', 0x2)

2.27100976s ago: executing program 2 (id=888):
syz_emit_vhci(0x0, 0xa)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = gettid()
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r5 = dup(r4)
sendmsg$netlink(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000580)=ANY=[], 0x1f88}], 0x1}, 0x0)
tkill(r3, 0x7)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)

2.2679753s ago: executing program 4 (id=898):
userfaultfd(0x80801)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
r6 = socket$inet6(0xa, 0x2, 0x0)
fcntl$lock(r6, 0x7, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
sendmsg$key(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="020100090a0000000000200000000000020010000000000000e9000000000000030005000000000002000000ac1414000000000000000000030006000000000002"], 0x50}}, 0x0)

2.196520886s ago: executing program 3 (id=889):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
open(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r6}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
unshare(0x40020000)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.195965467s ago: executing program 1 (id=890):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
open(&(0x7f0000000100)='./bus\x00', 0x141040, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x0)
socket$inet6(0xa, 0x80001, 0x0)
r2 = open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0)
write$tcp_mem(r2, &(0x7f0000000100)={0x1ff, 0x2d, 0x0, 0xa, 0x0, 0x2c}, 0x48)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x201}], {0x14, 0x10}}, 0xc4}}, 0x0)
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000300)={'veth1\x00', &(0x7f0000001e00)=@ethtool_per_queue_op})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x0, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10)
syz_emit_ethernet(0xe, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@generic={0x88f5}}}, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)

2.062933828s ago: executing program 0 (id=891):
r0 = socket(0xa, 0x801, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x6, 0x1c, 0x0, 0x20000000)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
unshare(0xe020600)
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{r2}], 0x1, &(0x7f0000000100), 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000ffa200000000000007020000f8ffffffb703000008000000b70400000000005b93d8f1000100000095706bf46936401f319ba51ef39f106491ce7ab34466d5845de9d61bcbb0217b17c9bdc57ad9dd2814d58bb27a24c1ef64726f6bbc3daf41ec74c041d6eb3c0274"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
sendmmsg$inet6(r0, &(0x7f0000000200), 0x0, 0x4004004)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='ext4_journal_start\x00', r3}, 0x10)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r1, &(0x7f0000000040)="d0d5f16ff4144362b48177aae731b1a8a3057f471c6e1a1b52e7d9eac49dfcd38f7b36dacea5ee8cc187b5b57fc1fb711b6bb14c", &(0x7f0000000340)=""/170}, 0x20)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r1}, &(0x7f0000000780), &(0x7f00000007c0)='%ps    \x00'}, 0x20)
r4 = creat(0x0, 0x0)
write$binfmt_script(r4, 0x0, 0x0)
close(r4)
ioctl$USBDEVFS_REAPURB(0xffffffffffffffff, 0x4008550c, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000007500000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00', r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)

522.286827ms ago: executing program 3 (id=892):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
write$vga_arbiter(r3, &(0x7f0000000040)=@other={'unlock', ' ', 'none'}, 0xc)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000700)='./file1\x00')
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000c00)={{0x1, 0x1, 0x18, r4, {r4}}, './file0\x00'})

332.308252ms ago: executing program 0 (id=893):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0)
getpeername$packet(r0, &(0x7f0000000000), &(0x7f0000000080)=0x14)
mremap(&(0x7f0000ff2000/0xb000)=nil, 0xb000, 0x1000, 0x3, &(0x7f0000ffe000/0x1000)=nil)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7)
r3 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000200)='FREEZING\x00', 0x9)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
write$cgroup_pid(r3, &(0x7f0000000180), 0x12)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_FEATURES_GET(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_freezer_state(r2, &(0x7f0000000080)='THAWED\x00', 0x7)
syz_emit_ethernet(0x42, &(0x7f00000008c0)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast1, {[@end]}}, @redirect={0x12, 0x0, 0x0, @empty, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @local, @empty}}}}}}, 0x0)

319.001803ms ago: executing program 2 (id=894):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x73)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000200), &(0x7f0000000240)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18040000000000000000000000400000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x2}, 0x90)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x90)
syz_mount_image$udf(&(0x7f0000000240), &(0x7f00000001c0)='./file0\x00', 0x1000000, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00', @ANYRES16], 0x6, 0x58d, &(0x7f0000000d00)="$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")
sync()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='memory.events\x00', 0x275a, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000400)='kfree\x00', r1}, 0xf)
pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0)
readahead(r4, 0x0, 0x0)
ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000180)={{}, 'syz1\x00'})
ioctl$UI_DEV_CREATE(r3, 0x5501)

0s ago: executing program 0 (id=895):
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
fanotify_init(0x1, 0x800)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f00000000c0)={0x62, &(0x7f0000000100)=[{0xf001, 0x4, 0x90, 0x1ff}, {0x8, 0x5, 0x1}, {0x0, 0x1, 0x6f, 0x5}, {0x0, 0x0, 0x7}]})
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000001600)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x10000, 0x0, 0xffffffffffffffff, 0xffff5adb, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48)
setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x43, 0x0, 0x0)
getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0)
ioperm(0x0, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
sendmmsg$sock(r3, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040)

kernel console output (not intermixed with test programs):

: Released all slaves
[  418.554623][ T6556] netlink: 116 bytes leftover after parsing attributes in process `syz.2.574'.
[  418.593506][ T6556] device batadv0 left promiscuous mode
[  418.599918][ T6556] bridge0: port 3(batadv0) entered disabled state
[  418.620828][ T6574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  418.632849][ T6556] device bridge_slave_1 left promiscuous mode
[  418.639917][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state
[  418.649465][ T6556] device bridge_slave_0 left promiscuous mode
[  418.656521][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.783398][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.800736][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.835075][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.4.579'.
[  418.851580][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  420.444996][   T52] block nbd1: Attempted send on invalid socket
[  420.451236][   T52] I/O error, dev nbd1, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  420.473038][   T52] block nbd1: Attempted send on invalid socket
[  420.479420][   T52] I/O error, dev nbd1, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1
[  423.544697][ T6618] xt_TPROXY: Can be used only with -p tcp or -p udp
[  423.734968][ T5829] EXT4-fs warning: 38 callbacks suppressed
[  423.734991][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.123572][ T4305] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.141204][ T4305] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.198915][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.281799][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.393606][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.472428][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.583409][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.638525][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.763283][ T3683] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  424.784362][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  424.992925][ T3650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  425.005240][ T3650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  425.021668][ T3650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  425.042509][ T3650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  425.054698][ T3683] usb 1-1: Using ep0 maxpacket: 32
[  425.078935][ T3650] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  425.090078][ T3650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  425.193350][ T3683] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  425.208907][ T3683] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  425.218857][ T3683] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  425.333182][ T3683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  425.383163][ T3683] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  425.396381][ T3683] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  425.409702][ T3683] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  425.419011][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  425.444169][ T3683] usb 1-1: config 0 descriptor??
[  425.809491][ T3683] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  425.909331][ T6658] loop3: detected capacity change from 0 to 128
[  425.930479][ T6658] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  425.941005][ T6658] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038 (0x7fffffff)
[  427.194949][ T3652] Bluetooth: hci2: command tx timeout
[  429.273295][ T3652] Bluetooth: hci2: command tx timeout
[  429.278426][ T4317] EXT4-fs warning: 65 callbacks suppressed
[  429.278449][ T4317] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  431.268259][  T155] usb 1-1: USB disconnect, device number 6
[  431.299366][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  431.353277][ T3650] Bluetooth: hci2: command tx timeout
[  431.364805][  T155] usblp0: removed
[  431.428715][ T4317] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  431.527088][ T6645] chnl_net:caif_netlink_parms(): no params data found
[  431.645844][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  433.602223][ T3650] Bluetooth: hci2: command tx timeout
[  433.629344][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  433.716163][ T6160] EXT4-fs (loop3): unmounting filesystem.
[  433.854583][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  433.885697][ T6688] binder: 6684:6688 ioctl 4018620d 0 returned -22
[  433.967651][ T6645] bridge0: port 1(bridge_slave_0) entered blocking state
[  433.993628][ T6645] bridge0: port 1(bridge_slave_0) entered disabled state
[  434.705434][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  434.723511][   T26] audit: type=1326 audit(1724875567.302:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6679 comm="syz.0.603" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe4cf179ef9 code=0x0
[  434.833306][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  434.863481][ T6645] device bridge_slave_0 entered promiscuous mode
[  434.891871][ T6645] bridge0: port 2(bridge_slave_1) entered blocking state
[  435.051807][ T6645] bridge0: port 2(bridge_slave_1) entered disabled state
[  435.083621][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  435.102766][ T6645] device bridge_slave_1 entered promiscuous mode
[  435.248599][ T6645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  435.274772][ T6645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  435.318086][ T6703] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  435.327485][ T6703] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  435.645197][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  435.821966][ T6645] team0: Port device team_slave_0 added
[  435.961391][ T6645] team0: Port device team_slave_1 added
[  436.003415][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  436.223554][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  436.353310][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_0
[  436.378717][ T6711] loop3: detected capacity change from 0 to 4096
[  436.394288][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.432319][ T6711] ntfs: volume version 3.1.
[  436.485272][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  436.512072][ T6645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  436.545383][ T6645] batman_adv: batadv0: Adding interface: batadv_slave_1
[  436.552385][ T6645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  436.581039][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  436.668199][ T6645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  436.717112][ T4285] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  436.853954][ T4285] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  436.941468][ T6645] device hsr_slave_0 entered promiscuous mode
[  436.996979][ T6645] device hsr_slave_1 entered promiscuous mode
[  437.175004][   T26] audit: type=1800 audit(1724875569.782:115): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.611" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  437.454916][  T155] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  437.814806][  T155] usb 2-1: Using ep0 maxpacket: 16
[  438.155345][  T155] usb 2-1: config 1 interface 0 has no altsetting 0
[  438.324159][  T155] usb 2-1: New USB device found, idVendor=056a, idProduct=0035, bcdDevice= 0.40
[  438.333575][  T155] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  438.341986][  T155] usb 2-1: Product: syz
[  438.346660][  T155] usb 2-1: Manufacturer: syz
[  438.351472][  T155] usb 2-1: SerialNumber: syz
[  440.025551][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  443.134390][ T5829] EXT4-fs warning: 19 callbacks suppressed
[  443.134415][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  443.345069][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  443.395043][  T155] usbhid 2-1:1.0: can't add hid device: -22
[  443.405243][  T155] usbhid: probe of 2-1:1.0 failed with error -22
[  443.417840][ T4315] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  443.436103][  T155] usb 2-1: USB disconnect, device number 8
[  443.513393][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  443.570719][ T6645] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.609624][ T6645] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.681014][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  443.721841][ T6750] loop1: detected capacity change from 0 to 256
[  443.723423][    T7] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  443.783439][ T6750] FAT-fs (loop1): Unrecognized mount option "fŮŇu:<ďnFĄBńshortname=mixed" or missing value
[  443.785154][ T6752] netlink: 'syz.0.618': attribute type 3 has an invalid length.
[  443.824130][ T4315] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  443.851787][ T6645] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  443.892696][ T6645] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  443.895340][ T6752] netlink: 8 bytes leftover after parsing attributes in process `syz.0.618'.
[  443.923226][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  443.939266][ T6753] netlink: 'syz.0.618': attribute type 4 has an invalid length.
[  443.942521][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  443.948228][ T6754] syz.1.617[6754] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  443.962069][ T6754] syz.1.617[6754] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  444.013754][    T7] usb 4-1: Using ep0 maxpacket: 16
[  444.073714][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  444.099789][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  444.153819][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  444.172565][    T7] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  444.182386][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.194475][    T7] usb 4-1: config 0 descriptor??
[  444.206201][ T6645] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.228357][ T6645] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.278516][ T6752] netlink: 'syz.0.618': attribute type 4 has an invalid length.
[  444.352660][ T6645] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  444.365439][ T6645] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  444.994974][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.047995][ T6759] netlink: 'syz.1.619': attribute type 2 has an invalid length.
[  445.158047][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.258344][ T6762] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  445.297140][ T6762] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  445.434382][    T7] hid (null): invalid report_size 234881024
[  445.446689][    T7] hid (null): report_id 0 is invalid
[  445.452533][    T7] hid (null): invalid report_size 1074798868
[  445.463352][    T7] hid (null): report_id 2838798905 is invalid
[  445.473312][    T7] hid (null): unknown global tag 0xc
[  445.478887][    T7] hid (null): unknown global tag 0xa5
[  445.503242][    T7] hid (null): unknown global tag 0xd
[  445.521635][    T7] hid (null): unknown global tag 0xc
[  445.534750][    T7] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1
[  445.542781][    T7] hid-generic 0003:0158:0100.000A: unexpected long global item
[  445.559660][    T7] hid-generic: probe of 0003:0158:0100.000A failed with error -22
[  446.276588][ T4642] usb 4-1: USB disconnect, device number 6
[  446.505322][ T6645] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  447.170841][ T6645] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  447.711969][ T6645] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  447.731542][ T6645] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  447.765871][ T6786] x_tables: unsorted entry at hook 2
[  448.145907][ T5829] EXT4-fs warning: 43 callbacks suppressed
[  448.145957][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  448.683324][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  448.734187][ T4225] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  448.801921][ T6645] 8021q: adding VLAN 0 to HW filter on device bond0
[  448.896903][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  448.913279][ T6795] xt_connbytes: Forcing CT accounting to be enabled
[  448.920493][ T6795] xt_time: invalid argument - start or stop time greater than 23:59:59
[  448.930488][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  448.967647][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  448.977106][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  448.989775][ T6645] 8021q: adding VLAN 0 to HW filter on device team0
[  449.024556][ T4317] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  449.045846][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  449.061874][ T4317] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  449.146565][ T4225] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  449.163498][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  449.231665][ T5829] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  449.248826][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.279632][ T4225] usb 4-1: config 0 descriptor??
[  449.299770][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  449.318981][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  449.325025][ T4225] cp210x 4-1:0.0: cp210x converter detected
[  449.333598][ T5825] EXT4-fs warning (device loop4): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 137792
[  449.349935][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state
[  449.357109][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  449.379384][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  449.478660][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  449.487170][ T5829] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:477: comm syz.4.433: Invalid block bitmap block 0 in block_group 0
[  449.502377][ T5829] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  449.516480][ T5829] EXT4-fs (loop4): This should not happen!! Data will be lost
[  449.516480][ T5829] 
[  449.523593][ T5825] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 63 with max blocks 65 with error 28
[  449.549516][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  449.561508][ T5825] EXT4-fs (loop4): This should not happen!! Data will be lost
[  449.561508][ T5825] 
[  449.564059][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state
[  449.572430][ T5825] EXT4-fs (loop4): Total free blocks count 0
[  449.578407][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state
[  449.622533][ T5825] EXT4-fs (loop4): Free/Dirty block details
[  449.632051][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  449.642555][ T5825] EXT4-fs (loop4): free_blocks=68719476736
[  449.678718][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  449.692041][ T5825] EXT4-fs (loop4): dirty_blocks=80
[  449.759831][ T5825] EXT4-fs (loop4): Block reservation details
[  449.781889][ T5825] EXT4-fs (loop4): i_reserved_data_blocks=5
[  449.818676][    C1] eth0: bad gso: type: 1, size: 1408
[  449.890041][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  449.906065][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  449.933828][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  449.963893][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  449.993413][ T4225] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71
[  450.047232][ T4225] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  450.113643][ T4225] usb 4-1: cp210x converter now attached to ttyUSB0
[  450.136557][ T4225] usb 4-1: USB disconnect, device number 7
[  450.175395][ T4225] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  450.211694][ T4225] cp210x 4-1:0.0: device disconnected
[  450.570880][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  450.596766][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  450.693685][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  450.750305][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  450.842966][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  450.918810][ T6645] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  451.173970][ T4305] device hsr_slave_0 left promiscuous mode
[  451.213285][ T4305] device hsr_slave_1 left promiscuous mode
[  451.253289][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  451.273501][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  451.303952][ T4305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  451.311588][ T4305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  451.478523][ T4305] device veth1_macvtap left promiscuous mode
[  451.485880][ T4305] device veth0_macvtap left promiscuous mode
[  451.492324][ T4305] device veth1_vlan left promiscuous mode
[  451.500255][ T4305] device veth0_vlan left promiscuous mode
[  452.081271][ T6814] loop3: detected capacity change from 0 to 40427
[  452.165566][ T6815] netlink: 'syz.4.634': attribute type 2 has an invalid length.
[  452.617496][ T6814] F2FS-fs (loop3): Found nat_bits in checkpoint
[  452.657357][ T6814] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  452.681463][ T6814] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  455.485671][ T6160] syz-executor: attempt to access beyond end of device
[  455.485671][ T6160] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  455.872330][ T6829] loop4: detected capacity change from 0 to 512
[  456.793308][ T6829] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.636: invalid indirect mapped block 10 (level 1)
[  456.860891][ T6829] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.636: invalid indirect mapped block 8 (level 1)
[  456.886457][ T6829] EXT4-fs (loop4): 1 truncate cleaned up
[  456.892414][ T6829] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  457.157567][ T6843] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5879: Corrupt filesystem
[  457.228837][ T6829] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 13: comm syz.4.636: lblock 0 mapped to illegal pblock 13 (length 1)
[  457.585232][ T6846] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 13: comm syz.4.636: lblock 0 mapped to illegal pblock 13 (length 1)
[  458.506190][ T6860] loop1: detected capacity change from 0 to 1024
[  458.513528][ T6860] hfsplus: unable to parse mount options
[  459.360508][ T5950] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[  459.522881][ T4305] team0 (unregistering): Port device team_slave_1 removed
[  459.549432][ T5950] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5879: Corrupt filesystem
[  459.643303][ T5950] EXT4-fs error (device loop4): ext4_dirty_inode:6083: inode #2: comm syz-executor: mark_inode_dirty error
[  459.826657][ T5950] EXT4-fs (loop4): unmounting filesystem.
[  460.195142][ T4305] team0 (unregistering): Port device team_slave_0 removed
[  460.503972][ T4305] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.630585][ T4305] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.820522][ T6870] loop1: detected capacity change from 0 to 40427
[  460.862758][ T6870] F2FS-fs (loop1): Found nat_bits in checkpoint
[  460.915345][ T6870] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  460.943526][ T6870] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  461.920650][ T6124] syz-executor: attempt to access beyond end of device
[  461.920650][ T6124] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  462.589449][ T4305] bond0 (unregistering): Released all slaves
[  463.106886][ T6881] loop1: detected capacity change from 0 to 4096
[  463.117039][ T6881] ntfs3: Unknown parameter ''
[  463.796660][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  463.811820][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  463.849714][ T6645] 8021q: adding VLAN 0 to HW filter on device batadv0
[  463.925264][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  463.944093][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  463.984721][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  464.004048][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  464.026280][ T6645] device veth0_vlan entered promiscuous mode
[  464.035334][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  464.051890][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  464.070392][ T6645] device veth1_vlan entered promiscuous mode
[  464.146818][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  464.155961][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  464.165838][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  464.175385][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  464.197729][ T6645] device veth0_macvtap entered promiscuous mode
[  464.218330][ T6645] device veth1_macvtap entered promiscuous mode
[  464.238885][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.250134][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.267372][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.282068][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.299724][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.310707][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.332462][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.350498][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.361041][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  464.378697][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.392100][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_0
[  464.413266][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  464.421506][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  464.444091][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  464.463631][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  464.474670][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.490879][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.501230][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.519401][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.530158][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.549626][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.561820][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.579460][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.590725][ T6645] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  464.609516][ T6645] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  464.622477][ T6645] batman_adv: batadv0: Interface activated: batadv_slave_1
[  464.643717][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  464.664668][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  464.695588][ T6645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  464.715122][ T6645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  464.733105][ T6645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  464.753164][ T6645] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  464.908037][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.935286][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.974240][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  464.996105][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  465.015427][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  465.040791][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  465.192020][ T6887] loop1: detected capacity change from 0 to 512
[  465.490740][ T6887] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  465.503483][ T6887] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff)
[  466.408239][ T6887] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.656: Directory hole found for htree leaf block 0
[  466.478433][ T6887] EXT4-fs error (device loop1): ext4_add_entry:2484: inode #2: comm syz.1.656: Directory hole found for htree leaf block 0
[  466.853821][ T6901] netlink: 'syz.2.647': attribute type 2 has an invalid length.
[  467.196519][ T6124] EXT4-fs (loop1): unmounting filesystem.
[  467.489328][ T3650] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  467.503082][ T3650] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  467.513117][ T3650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  467.524434][ T3650] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  467.532176][ T3650] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  467.619708][ T6910] netlink: 104 bytes leftover after parsing attributes in process `syz.2.648'.
[  467.643204][ T6909] xt_recent: hitcount (2147483648) is larger than allowed maximum (255)
[  467.877737][ T3650] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  470.132221][ T3652] Bluetooth: hci3: command tx timeout
[  470.534283][ T6930] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  470.611924][ T6936] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'.
[  471.686937][ T6903] chnl_net:caif_netlink_parms(): no params data found
[  472.260390][ T3652] Bluetooth: hci3: command tx timeout
[  474.249942][ T6967] netlink: 'syz.0.661': attribute type 2 has an invalid length.
[  474.313205][ T3650] Bluetooth: hci3: command tx timeout
[  474.413260][  T155] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  474.724298][  T155] usb 3-1: Using ep0 maxpacket: 16
[  474.862142][ T6903] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.869753][  T155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  474.892527][ T6903] bridge0: port 1(bridge_slave_0) entered disabled state
[  474.903417][  T155] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  474.921562][ T6903] device bridge_slave_0 entered promiscuous mode
[  474.933170][  T155] usb 3-1: New USB device found, idVendor=05ac, idProduct=027b, bcdDevice= 0.00
[  474.950328][ T6903] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.953188][  T155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.984358][ T6903] bridge0: port 2(bridge_slave_1) entered disabled state
[  474.985821][  T155] usb 3-1: config 0 descriptor??
[  475.021584][ T6903] device bridge_slave_1 entered promiscuous mode
[  475.186768][ T6903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  475.274808][ T6971] loop1: detected capacity change from 0 to 1024
[  475.282772][ T6971] hfsplus: unable to parse mount options
[  476.541557][  T155] apple 0003:05AC:027B.000B: hidraw0: USB HID v0.00 Device [HID 05ac:027b] on usb-dummy_hcd.2-1/input0
[  476.542011][ T3650] Bluetooth: hci3: command tx timeout
[  478.106422][ T6903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  478.128863][  T155] usb 3-1: USB disconnect, device number 14
[  478.370387][ T6903] team0: Port device team_slave_0 added
[  478.378428][ T6977] kvm: pic: non byte write
[  478.430161][ T6903] team0: Port device team_slave_1 added
[  478.576946][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_0
[  478.591972][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.696092][ T6903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  478.721156][ T6903] batman_adv: batadv0: Adding interface: batadv_slave_1
[  478.728750][ T6903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  478.772807][ T6903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  478.902647][ T3652] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  478.998593][ T3652] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  479.065317][ T3652] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  479.079854][ T3652] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  479.088274][ T3652] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  479.097999][ T3652] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  479.839711][ T4322] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.971433][ T6903] device hsr_slave_0 entered promiscuous mode
[  480.001486][ T6903] device hsr_slave_1 entered promiscuous mode
[  480.020118][ T6903] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  480.030534][ T6903] Cannot create hsr debugfs directory
[  480.068708][ T4322] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.184795][ T4322] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.282872][ T4322] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.878275][ T6986] chnl_net:caif_netlink_parms(): no params data found
[  481.113382][ T3652] Bluetooth: hci1: command tx timeout
[  483.332824][ T3650] Bluetooth: hci1: command tx timeout
[  483.801931][ T7030] netlink: 104 bytes leftover after parsing attributes in process `syz.0.675'.
[  484.930754][ T7037] loop1: detected capacity change from 0 to 256
[  484.978656][ T7037] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  485.021359][ T6986] bridge0: port 1(bridge_slave_0) entered blocking state
[  485.062280][ T6986] bridge0: port 1(bridge_slave_0) entered disabled state
[  485.084285][ T6986] device bridge_slave_0 entered promiscuous mode
[  485.454979][ T3650] Bluetooth: hci1: command tx timeout
[  486.191698][ T6986] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.209442][ T6986] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.231372][ T6986] device bridge_slave_1 entered promiscuous mode
[  486.407576][ T6986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  486.554938][ T6986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  486.645659][ T6986] team0: Port device team_slave_0 added
[  486.754499][ T6986] team0: Port device team_slave_1 added
[  486.896151][ T6986] batman_adv: batadv0: Adding interface: batadv_slave_0
[  486.911041][ T6986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  486.941391][ T6986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  487.026753][ T6986] batman_adv: batadv0: Adding interface: batadv_slave_1
[  487.042995][ T6986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  487.069973][ T6986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  487.160078][ T6903] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  487.174563][ T6903] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  487.195990][ T6903] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  487.391782][ T6903] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  487.418891][ T6986] device hsr_slave_0 entered promiscuous mode
[  487.439289][ T6986] device hsr_slave_1 entered promiscuous mode
[  487.463641][ T6986] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  487.471251][ T6986] Cannot create hsr debugfs directory
[  487.513216][ T3652] Bluetooth: hci1: command tx timeout
[  488.163866][ T3652] Bluetooth: hci5: command 0x0406 tx timeout
[  488.731218][ T7070] loop2: detected capacity change from 0 to 1024
[  488.739601][ T7070] hfsplus: unable to parse mount options
[  491.571068][ T6664] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  492.017770][ T7074] cannot load conntrack support for proto=3
[  493.507952][ T7084] fuse: Bad value for 'fd'
[  493.520372][ T7083] loop1: detected capacity change from 0 to 512
[  493.582408][ T7083] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  493.625636][ T7083] EXT4-fs (loop1): 1 truncate cleaned up
[  493.631705][ T7083] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  493.880673][ T6986] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  493.904428][ T6903] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.653151][ T6124] EXT4-fs (loop1): unmounting filesystem.
[  494.708845][ T6986] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  494.765393][ T4322] device hsr_slave_0 left promiscuous mode
[  494.771963][ T4322] device hsr_slave_1 left promiscuous mode
[  494.779242][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.786908][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.797115][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.804817][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.812532][ T4322] device bridge_slave_1 left promiscuous mode
[  494.819343][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.828975][ T4322] device bridge_slave_0 left promiscuous mode
[  494.835681][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.849710][ T4322] device hsr_slave_0 left promiscuous mode
[  494.856510][ T4322] device hsr_slave_1 left promiscuous mode
[  494.862999][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  494.871228][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  494.879899][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  494.887725][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  494.895952][ T4322] device bridge_slave_1 left promiscuous mode
[  494.902631][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[  494.913473][ T4322] device bridge_slave_0 left promiscuous mode
[  494.919759][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[  494.970876][ T4322] device veth1_macvtap left promiscuous mode
[  494.977072][ T4322] device veth0_macvtap left promiscuous mode
[  494.986265][ T4322] device veth1_vlan left promiscuous mode
[  494.992114][ T4322] device veth0_vlan left promiscuous mode
[  495.002064][ T4322] device veth1_macvtap left promiscuous mode
[  495.008554][ T4322] device veth0_macvtap left promiscuous mode
[  495.014890][ T4322] device veth1_vlan left promiscuous mode
[  495.020748][ T4322] device veth0_vlan left promiscuous mode
[  495.710389][ T4322] team0 (unregistering): Port device team_slave_1 removed
[  495.770743][ T4322] team0 (unregistering): Port device team_slave_0 removed
[  495.823888][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  495.877084][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  496.482906][ T4322] bond0 (unregistering): Released all slaves
[  497.069420][ T4322] team0 (unregistering): Port device team_slave_1 removed
[  497.119224][ T4322] team0 (unregistering): Port device team_slave_0 removed
[  497.178835][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  497.230600][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  497.847554][ T4322] bond0 (unregistering): Released all slaves
[  497.941357][ T6986] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  497.956631][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  497.965189][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  497.982847][ T6903] 8021q: adding VLAN 0 to HW filter on device team0
[  498.055817][ T6986] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  498.068428][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  498.078673][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  498.087688][ T4297] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.094827][ T4297] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.102589][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  498.112186][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  498.122606][ T4297] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.129783][ T4297] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.138366][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  498.147529][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  498.182618][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  498.195050][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  498.244186][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  498.262884][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  498.273909][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  498.284050][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  498.316942][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  498.331028][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  498.376689][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  498.393577][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  498.402732][ T6903] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  498.472039][ T6986] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  498.496161][ T6986] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  498.514820][ T6986] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  498.524370][ T6986] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  498.665870][ T6986] 8021q: adding VLAN 0 to HW filter on device bond0
[  498.707184][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  498.724128][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  498.736520][ T6986] 8021q: adding VLAN 0 to HW filter on device team0
[  498.749024][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  498.759445][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  498.768479][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state
[  498.775649][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  498.800254][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  498.826116][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  498.841539][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  498.854593][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state
[  498.861713][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state
[  498.880082][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  498.899202][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  498.919750][ T6903] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.934157][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  498.951747][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  498.984528][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  499.010683][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  499.047436][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  499.064639][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  499.083961][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  499.123777][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  499.132668][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  499.149561][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  499.161223][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  499.179861][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  499.506905][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  499.516799][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  499.549099][ T6903] device veth0_vlan entered promiscuous mode
[  499.558324][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  499.584996][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  499.594246][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  499.614576][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  499.628945][ T6903] device veth1_vlan entered promiscuous mode
[  499.647148][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  499.656631][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  499.667140][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  499.694915][ T6986] 8021q: adding VLAN 0 to HW filter on device batadv0
[  499.728802][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  499.744047][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  499.763650][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  499.785782][ T6903] device veth0_macvtap entered promiscuous mode
[  499.820877][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  499.845211][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  499.862178][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  499.880696][ T6986] device veth0_vlan entered promiscuous mode
[  499.890697][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  499.907398][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  499.924850][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  499.932873][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  499.949795][ T6903] device veth1_macvtap entered promiscuous mode
[  499.968551][ T6986] device veth1_vlan entered promiscuous mode
[  499.983474][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  499.991870][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  500.010085][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.021731][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.039733][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.050457][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.061194][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.071833][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.093194][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.120414][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.144721][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.158793][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  500.168114][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  500.187567][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.213293][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.242488][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.260234][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.270616][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.289240][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.300187][ T6903] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.318207][ T6903] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.339932][ T6903] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.362493][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  500.373590][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  500.405176][ T6903] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.415437][ T6903] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.424710][ T6903] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.435851][ T6903] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.451535][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  500.463247][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  500.474790][ T6986] device veth0_macvtap entered promiscuous mode
[  500.538479][ T6986] device veth1_macvtap entered promiscuous mode
[  500.584983][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.596184][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.606814][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.617995][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.627980][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.643430][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.655304][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.665943][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.677498][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  500.688427][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.700107][ T6986] batman_adv: batadv0: Interface activated: batadv_slave_0
[  500.722928][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.733713][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  500.739684][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.760717][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  500.774178][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  500.783523][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  500.796769][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  500.816654][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.843383][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.863090][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.877769][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.888196][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.902260][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.912291][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.922799][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.932874][ T6986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.944272][ T6986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.956694][ T6986] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.983422][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  500.992233][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  501.030353][ T6986] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  501.042846][ T6986] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  501.053869][ T6986] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  501.062621][ T6986] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  501.082207][ T4289] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.098805][ T4289] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.159787][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  501.228741][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.266183][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.343515][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  501.366156][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  501.401704][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.933951][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  502.019563][ T7114] loop2: detected capacity change from 0 to 256
[  503.479290][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  504.608965][ T7130] loop1: detected capacity change from 0 to 256
[  506.834515][ T7134] tipc: Failed to remove unknown binding: 66,1,1/0:891719932/891719934
[  506.894868][ T7134] tipc: Failed to remove unknown binding: 66,1,1/0:891719932/891719934
[  506.922526][ T7146] loop1: detected capacity change from 0 to 512
[  506.945460][ T7134] tipc: Failed to remove unknown binding: 66,1,1/0:891719932/891719934
[  507.006334][ T7146] EXT4-fs: Ignoring removed nomblk_io_submit option
[  507.112880][ T7146] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  507.299405][   T26] audit: type=1804 audit(1724875639.842:116): pid=7146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.686" name="/newroot/42/file0/bus" dev="loop1" ino=19 res=1 errno=0
[  507.410888][ T6124] EXT4-fs (loop1): unmounting filesystem.
[  510.506674][    C1] eth0: bad gso: type: 1, size: 1408
[  513.343216][  T153] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  515.023455][  T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  515.062770][  T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  515.149270][  T153] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  515.162463][  T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  515.174445][  T153] usb 3-1: config 0 descriptor??
[  515.778204][  T153] hid-multitouch 0003:1FD2:6007.000C: unknown main item tag 0x0
[  515.795811][  T153] hid-multitouch 0003:1FD2:6007.000C: item fetching failed at offset 1/5
[  516.321549][  T153] hid-multitouch: probe of 0003:1FD2:6007.000C failed with error -22
[  516.364396][  T153] usb 3-1: USB disconnect, device number 15
[  516.436889][ T7204] REISERFS warning (device nullb0):  reiserfs_fill_super: Cannot allocate commit workqueue
[  516.486997][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  516.563266][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  516.583544][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  516.594384][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  516.602481][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  516.610337][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  516.982448][ T7212] No such timeout policy "syz0"
[  517.816060][ T4322] device hsr_slave_0 left promiscuous mode
[  518.635575][ T3650] Bluetooth: hci0: command tx timeout
[  518.712138][ T4322] device hsr_slave_1 left promiscuous mode
[  518.886161][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  518.902423][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  519.083548][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  519.248375][ T7229] xt_cgroup: invalid path, errno=-2
[  519.488666][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  519.886618][ T4322] device bridge_slave_1 left promiscuous mode
[  519.909406][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[  519.980347][ T4322] device bridge_slave_0 left promiscuous mode
[  519.990047][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.145456][ T4322] device veth1_macvtap left promiscuous mode
[  520.161937][ T4322] device veth0_macvtap left promiscuous mode
[  520.199292][ T4322] device veth1_vlan left promiscuous mode
[  520.219555][ T4322] device veth0_vlan left promiscuous mode
[  520.384025][ T3650] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  520.396112][ T3650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  520.406127][ T3650] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  520.414265][ T3650] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  520.433968][ T3650] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  520.444737][ T3650] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  520.713201][ T3652] Bluetooth: hci0: command tx timeout
[  520.912923][   T26] audit: type=1326 audit(1724875653.522:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160f79ef9 code=0x7ffc0000
[  520.940690][ T7237] loop1: detected capacity change from 0 to 128
[  520.953379][   T26] audit: type=1326 audit(1724875653.522:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160f79ef9 code=0x7ffc0000
[  521.033146][   T26] audit: type=1326 audit(1724875653.552:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=226 compat=0 ip=0x7f0160f79ef9 code=0x7ffc0000
[  521.057625][   T26] audit: type=1326 audit(1724875653.552:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160f79ef9 code=0x7ffc0000
[  521.096574][   T26] audit: type=1326 audit(1724875653.552:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160f79ef9 code=0x7ffc0000
[  521.120846][   T26] audit: type=1326 audit(1724875653.552:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f0160f79ef9 code=0x7ffc0000
[  521.148183][   T26] audit: type=1326 audit(1724875653.552:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f0160f79f33 code=0x7ffc0000
[  521.176206][   T26] audit: type=1326 audit(1724875653.552:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0160f789df code=0x7ffc0000
[  521.201322][   T26] audit: type=1326 audit(1724875653.552:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f0160f79f87 code=0x7ffc0000
[  521.230077][   T26] audit: type=1326 audit(1724875653.552:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7236 comm="syz.1.710" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0160f78890 code=0x7ffc0000
[  522.189954][ T7242] loop1: detected capacity change from 0 to 1024
[  522.533213][ T3652] Bluetooth: hci4: command tx timeout
[  522.743069][ T3647] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  522.804093][ T3650] Bluetooth: hci0: command tx timeout
[  523.109816][ T4322] team0 (unregistering): Port device team_slave_1 removed
[  523.516126][ T4322] team0 (unregistering): Port device team_slave_0 removed
[  523.616765][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  523.666045][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  523.793280][ T3647] usb 2-1: Using ep0 maxpacket: 32
[  523.928137][ T3647] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 240, changing to 11
[  523.939478][ T3647] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 49918, setting to 1024
[  523.950779][ T3647] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  523.960156][ T3647] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  524.022875][ T3647] hub 2-1:4.0: USB hub found
[  524.244781][ T3647] hub 2-1:4.0: 2 ports detected
[  524.273270][ T4322] bond0 (unregistering): Released all slaves
[  524.374871][ T7206] chnl_net:caif_netlink_parms(): no params data found
[  524.463216][ T3647] hub 2-1:4.0: hub_hub_status failed (err = -71)
[  524.473650][ T3647] hub 2-1:4.0: config failed, can't get hub status (err -71)
[  524.583405][ T3652] Bluetooth: hci4: command tx timeout
[  524.590436][ T3647] usb 2-1: USB disconnect, device number 9
[  524.873144][ T3650] Bluetooth: hci0: command tx timeout
[  525.623687][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state
[  526.029559][ T7263] REISERFS warning (device nullb0):  reiserfs_fill_super: Cannot allocate commit workqueue
[  526.079695][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.160115][ T7206] device bridge_slave_0 entered promiscuous mode
[  526.260889][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state
[  526.268254][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.437268][ T7206] device bridge_slave_1 entered promiscuous mode
[  526.635237][ T3652] Bluetooth: hci4: command tx timeout
[  527.575890][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.753903][ T7284] loop1: detected capacity change from 0 to 512
[  528.597595][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  528.639193][ T7284] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix.
[  528.686746][ T7284] EXT4-fs (loop1): mount failed
[  528.717891][ T3652] Bluetooth: hci4: command tx timeout
[  528.912094][ T7206] team0: Port device team_slave_0 added
[  529.035203][ T7206] team0: Port device team_slave_1 added
[  529.196808][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.224974][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.319573][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  529.438031][ T7234] chnl_net:caif_netlink_parms(): no params data found
[  529.462907][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  529.487961][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.558777][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  529.699263][ T7206] device hsr_slave_0 entered promiscuous mode
[  529.714655][ T7206] device hsr_slave_1 entered promiscuous mode
[  529.731677][ T7206] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  529.751220][ T7206] Cannot create hsr debugfs directory
[  529.823197][   T41] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  529.916436][ T7234] bridge0: port 1(bridge_slave_0) entered blocking state
[  529.950551][ T7234] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.969249][ T7234] device bridge_slave_0 entered promiscuous mode
[  530.018997][ T7234] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.027686][ T7234] bridge0: port 2(bridge_slave_1) entered disabled state
[  530.044463][ T7234] device bridge_slave_1 entered promiscuous mode
[  530.196992][   T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  530.214803][ T7234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  530.228832][   T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  530.254182][ T7234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.270849][   T41] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.09
[  530.299696][   T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  530.340196][   T41] usb 2-1: config 0 descriptor??
[  530.450484][ T7206] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.514027][ T7234] team0: Port device team_slave_0 added
[  530.535382][ T7234] team0: Port device team_slave_1 added
[  530.634798][ T7206] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.675294][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.682481][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.720926][ T7234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.734505][ T7234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.742385][ T7234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.774575][ T7234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.816457][ T7206] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.946659][   T41] logitech-hidpp-device 0003:046D:C086.000D: unbalanced collection at end of report description
[  530.968218][   T41] logitech-hidpp-device 0003:046D:C086.000D: hidpp_probe:parse failed
[  530.977243][ T7206] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  530.977293][   T41] logitech-hidpp-device: probe of 0003:046D:C086.000D failed with error -22
[  531.150259][ T7234] device hsr_slave_0 entered promiscuous mode
[  531.190371][   T41] usb 2-1: USB disconnect, device number 10
[  531.231975][ T7234] device hsr_slave_1 entered promiscuous mode
[  531.312310][ T7320] Zero length message leads to an empty skb
[  531.343684][ T7320] loop4: detected capacity change from 0 to 256
[  531.509408][ T7234] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  531.545433][ T7234] Cannot create hsr debugfs directory
[  532.310985][ T7328] loop4: detected capacity change from 0 to 16
[  532.721132][ T7328] erofs: (device loop4): mounted with root inode @ nid 36.
[  533.232196][ T4322] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  533.915262][ T4322] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  534.235959][ T7206] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  534.254402][ T7206] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  534.272682][ T7206] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  534.354110][ T7206] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  534.624974][ T4322] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.921434][ T4322] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.969906][ T7348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  536.000342][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0
[  536.001936][ T7348] loop4: detected capacity change from 0 to 64
[  536.028793][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  536.052962][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  536.088830][ T7206] 8021q: adding VLAN 0 to HW filter on device team0
[  536.129996][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  536.142684][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  536.156668][ T4299] bridge0: port 1(bridge_slave_0) entered blocking state
[  536.163995][ T4299] bridge0: port 1(bridge_slave_0) entered forwarding state
[  536.181529][ T3652] Bluetooth: hci5: unexpected event for opcode 0x200f
[  536.181714][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  536.227361][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  536.250586][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  536.288073][ T4299] bridge0: port 2(bridge_slave_1) entered blocking state
[  536.295268][ T4299] bridge0: port 2(bridge_slave_1) entered forwarding state
[  536.333136][  T153] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  536.598879][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  536.609866][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  536.620027][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  537.296737][ T7369] loop4: detected capacity change from 0 to 128
[  537.873526][ T7369] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  537.960636][ T7369] syz.4.737: attempt to access beyond end of device
[  537.960636][ T7369] loop4: rw=3, sector=6950, nr_sectors = 2 limit=128
[  537.974783][ T7369] syz.4.737: attempt to access beyond end of device
[  537.974783][ T7369] loop4: rw=2051, sector=6952, nr_sectors = 942 limit=128
[  537.988498][  T153] usb 3-1: Using ep0 maxpacket: 16
[  538.009237][ T7366] FAT-fs (loop4): FAT read failed (blocknr 128)
[  538.054804][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  538.103403][  T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  538.135997][ T7206] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  538.146687][  T153] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  538.177380][  T153] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  538.202352][ T7206] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  538.261948][  T153] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  538.262525][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  538.288187][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  538.296692][  T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  538.303505][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  538.317535][  T153] usb 3-1: config 0 descriptor??
[  538.334985][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  538.353525][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  538.386075][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  538.422823][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  538.452333][ T7373] netlink: 44 bytes leftover after parsing attributes in process `syz.1.739'.
[  538.476475][ T7383] loop4: detected capacity change from 0 to 1024
[  538.494967][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  538.505055][ T7383] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  538.575385][ T7383] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  538.805314][  T153] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  538.833144][  T153] microsoft 0003:045E:07DA.000E: unknown main item tag 0x0
[  538.851216][  T153] microsoft 0003:045E:07DA.000E: item fetching failed at offset 30/34
[  538.868802][  T153] microsoft 0003:045E:07DA.000E: parse failed
[  538.899412][  T153] microsoft: probe of 0003:045E:07DA.000E failed with error -22
[  539.106273][ T7399] loop1: detected capacity change from 0 to 128
[  539.111892][ T6903] EXT4-fs (loop4): unmounting filesystem.
[  539.160280][   T41] usb 3-1: USB disconnect, device number 16
[  539.497361][ T7404] netlink: 6 bytes leftover after parsing attributes in process `syz.4.741'.
[  539.512298][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  539.523251][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  539.531391][ T7405]  loop1:
[  539.627830][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  539.636300][ T7406] netlink: 6 bytes leftover after parsing attributes in process `syz.4.741'.
[  539.647226][ T7406] netlink: 6 bytes leftover after parsing attributes in process `syz.4.741'.
[  539.707408][ T6124] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f)
[  539.736507][ T6124] FAT-fs (loop1): Filesystem has been set read-only
[  539.749907][ T6124] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000074f)
[  539.830970][ T7406] netlink: 6 bytes leftover after parsing attributes in process `syz.4.741'.
[  539.989965][ T7406] netlink: 6 bytes leftover after parsing attributes in process `syz.4.741'.
[  539.999746][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  540.030703][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  541.166279][ T7234] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  541.237216][ T7234] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  541.396686][ T7411] loop2: detected capacity change from 0 to 32768
[  541.657596][ T7206] device veth0_vlan entered promiscuous mode
[  541.665484][ T7234] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  541.681476][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  541.704120][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  541.738465][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  541.928857][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  542.052116][ T7234] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  542.234157][ T7206] device veth1_vlan entered promiscuous mode
[  542.423133][ T3682] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  542.444996][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  542.458443][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  542.482077][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  542.502249][ T7206] device veth0_macvtap entered promiscuous mode
[  542.519704][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  542.527491][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  542.540405][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  542.547342][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  542.614411][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  542.663252][ T3682] usb 5-1: Using ep0 maxpacket: 16
[  542.745585][ T7206] device veth1_macvtap entered promiscuous mode
[  542.763283][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  542.772365][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  542.795721][ T3682] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  542.820938][ T7435] loop2: detected capacity change from 0 to 2048
[  542.971188][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  542.983708][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  542.994144][ T3682] usb 5-1: New USB device found, idVendor=045e, idProduct=0721, bcdDevice=90.c4
[  542.994393][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.005806][ T7435] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  543.022805][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  543.031591][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.046263][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.057082][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.067587][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.073697][ T3682] usb 5-1: Product: syz
[  543.078279][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.082171][ T3682] usb 5-1: Manufacturer: syz
[  543.092291][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  543.092316][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.094275][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  543.148462][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  543.182589][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  543.214261][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.254123][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.284692][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.316577][ T3682] usb 5-1: SerialNumber: syz
[  543.323726][ T3682] usb 5-1: config 0 descriptor??
[  543.333903][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.350823][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.362254][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.372554][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.385686][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.551637][ T7206] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  543.763194][ T7206] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  543.998945][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  544.063610][ T6645] EXT4-fs (loop2): unmounting filesystem.
[  544.775460][ T3652] Bluetooth: hci1: command tx timeout
[  544.810420][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  544.839866][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  544.872429][ T7206] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  544.885872][ T7206] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  544.895723][ T7206] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  544.904915][ T7206] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  544.934159][ T7234] 8021q: adding VLAN 0 to HW filter on device bond0
[  545.067314][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  545.080127][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  545.106208][ T7234] 8021q: adding VLAN 0 to HW filter on device team0
[  545.320473][ T4322] device hsr_slave_0 left promiscuous mode
[  545.340038][ T4322] device hsr_slave_1 left promiscuous mode
[  545.352727][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  545.370323][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.379312][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  545.397130][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.409252][ T4322] device bridge_slave_1 left promiscuous mode
[  545.420801][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.439774][ T4322] device bridge_slave_0 left promiscuous mode
[  545.443306][ T7448] loop2: detected capacity change from 0 to 40427
[  545.452260][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.475233][ T7448] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  545.489022][ T7448] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  545.502332][ T4322] device hsr_slave_0 left promiscuous mode
[  545.510690][ T7448] F2FS-fs (loop2): Found nat_bits in checkpoint
[  545.517607][ T4322] device hsr_slave_1 left promiscuous mode
[  545.538719][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  545.550838][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  545.562209][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  545.578948][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  545.588070][ T4322] device bridge_slave_1 left promiscuous mode
[  545.589300][ T7448] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  545.594426][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[  545.613228][ T7448] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  545.620401][ T4322] device bridge_slave_0 left promiscuous mode
[  545.662377][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[  545.728358][ T4322] device veth1_macvtap left promiscuous mode
[  545.738235][ T4322] device veth0_macvtap left promiscuous mode
[  545.746316][ T4322] device veth1_vlan left promiscuous mode
[  545.772339][ T4322] device veth0_vlan left promiscuous mode
[  545.826999][ T4322] device veth1_macvtap left promiscuous mode
[  545.837402][ T4322] device veth0_macvtap left promiscuous mode
[  545.851958][ T4322] device veth1_vlan left promiscuous mode
[  545.895707][ T3107] usb 5-1: USB disconnect, device number 9
[  546.051241][ T7455] sctp: [Deprecated]: syz.4.753 (pid 7455) Use of int in max_burst socket option.
[  546.051241][ T7455] Use struct sctp_assoc_value instead
[  546.257201][ T7461] loop2: detected capacity change from 0 to 256
[  546.289106][ T7461] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010253, chksum : 0xa98551aa, utbl_chksum : 0xe619d30d)
[  546.794294][ T3652] Bluetooth: hci1: command tx timeout
[  547.606583][ T4322] team0 (unregistering): Port device team_slave_1 removed
[  547.659871][ T4322] team0 (unregistering): Port device team_slave_0 removed
[  547.712379][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  547.763546][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  548.289420][ T4322] bond0 (unregistering): Released all slaves
[  548.873570][ T3652] Bluetooth: hci1: command tx timeout
[  548.923386][ T4322] team0 (unregistering): Port device team_slave_1 removed
[  548.974689][ T4322] team0 (unregistering): Port device team_slave_0 removed
[  549.035600][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  549.094019][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  549.607282][ T3655] Bluetooth: hci2: command 0x0406 tx timeout
[  550.640038][ T4322] bond0 (unregistering): Released all slaves
[  550.833378][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  550.842141][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  550.851502][ T4292] bridge0: port 1(bridge_slave_0) entered blocking state
[  550.858687][ T4292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.902935][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  550.953167][ T3655] Bluetooth: hci1: command tx timeout
[  550.953515][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  551.018315][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  551.032086][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[  551.039321][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  552.103897][ T4278] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  552.112492][ T4278] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  552.136809][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  552.182255][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  552.373675][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  552.406820][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  552.467336][ T7480] syz.4.758[7480] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  552.467461][ T7480] syz.4.758[7480] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  553.200150][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  553.410452][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  553.444609][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  553.497959][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  553.512220][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  553.534196][ T7424] chnl_net:caif_netlink_parms(): no params data found
[  553.578803][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  553.591007][ T7234] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  553.595016][ T7482] loop4: detected capacity change from 0 to 1024
[  553.633898][ T7234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  553.646376][ T7482] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  553.658771][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  553.671406][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  553.697286][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  553.707430][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  553.719084][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  553.719864][ T7482] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  553.731146][ T4301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  553.767377][ T7487] loop2: detected capacity change from 0 to 256
[  553.998380][ T7482] EXT4-fs error (device loop4): ext4_expand_extra_isize_ea:2746: inode #2: comm syz.4.759: corrupted in-inode xattr
[  554.026828][ T7424] bridge0: port 1(bridge_slave_0) entered blocking state
[  554.069371][ T7424] bridge0: port 1(bridge_slave_0) entered disabled state
[  554.101953][ T7493] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #2: comm syz.4.759: corrupted in-inode xattr
[  554.129309][ T7424] device bridge_slave_0 entered promiscuous mode
[  554.151901][ T7424] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.182575][ T7424] bridge0: port 2(bridge_slave_1) entered disabled state
[  554.192346][ T6903] EXT4-fs (loop4): unmounting filesystem.
[  554.205033][ T7424] device bridge_slave_1 entered promiscuous mode
[  555.217607][ T7424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  555.324066][ T7424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  555.386987][ T7504] loop4: detected capacity change from 0 to 256
[  555.777277][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  555.810219][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  556.013284][ T7424] team0: Port device team_slave_0 added
[  556.444041][ T7234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  556.483539][ T7424] team0: Port device team_slave_1 added
[  557.155433][ T7518] loop4: detected capacity change from 0 to 128
[  557.180780][ T7234] device veth0_vlan entered promiscuous mode
[  557.315754][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_0
[  557.327350][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.380021][ T7424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  557.397477][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  557.414173][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  557.438385][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  557.467202][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  557.497210][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  557.516469][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  557.538648][ T7234] device veth1_vlan entered promiscuous mode
[  557.558353][ T7424] batman_adv: batadv0: Adding interface: batadv_slave_1
[  557.570950][ T7424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  557.644030][ T7424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  558.244497][ T7524] loop2: detected capacity change from 0 to 1024
[  558.541673][ T7424] device hsr_slave_0 entered promiscuous mode
[  558.587660][ T7424] device hsr_slave_1 entered promiscuous mode
[  558.605711][ T7424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  558.623069][ T7424] Cannot create hsr debugfs directory
[  558.636955][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  558.667570][ T3650] Bluetooth: hci2: unexpected event for opcode 0x0c47
[  558.680953][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  558.724132][ T7234] device veth0_macvtap entered promiscuous mode
[  559.325574][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.768'.
[  559.424488][ T7234] device veth1_macvtap entered promiscuous mode
[  559.496621][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  559.515123][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.532508][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  559.609152][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.648682][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  559.702047][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.720952][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  559.732573][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.752441][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  559.783934][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  559.794716][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  559.811618][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  559.839729][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.860022][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.870398][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.893504][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.933065][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.951037][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  559.971097][ T7234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  559.982790][ T7234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  560.012538][ T7234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  560.067540][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  560.087081][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  560.126809][ T4902] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  560.127681][ T7234] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  560.163850][ T7234] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  560.223315][ T7234] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  560.272377][ T7234] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  560.295364][ T7545] kvm [7542]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  560.337282][ T7545] kvm [7542]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  560.420836][ T7545] kvm [7542]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  560.461924][ T7545] kvm [7542]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc2 data 0x0
[  560.485688][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.522025][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.543493][ T4902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  560.558692][ T7545] kvm [7542]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x0
[  560.569277][ T4902] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  560.598949][ T4902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  560.628172][ T4902] usb 5-1: config 0 descriptor??
[  560.680327][ T7424] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.780375][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  560.887977][ T7424] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  560.928464][ T4303] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  560.941028][ T4303] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  560.982212][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  561.076349][ T7424] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.134625][ T4902] keytouch 0003:0926:3333.000F: fixing up Keytouch IEC report descriptor
[  561.174146][ T4902] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.000F/input/input13
[  561.289611][ T7424] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  561.479378][ T4902] keytouch 0003:0926:3333.000F: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[  562.186071][ T4902] usb 5-1: USB disconnect, device number 10
[  562.713295][ T3650] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  562.722810][ T3650] Bluetooth: hci2: Injecting HCI hardware error event
[  562.733427][ T3655] Bluetooth: hci2: hardware error 0x00
[  562.887398][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  563.056335][ T7424] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  563.272907][ T7424] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  563.489562][ T7424] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  563.580112][ T7424] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  564.043495][ T7576] loop3: detected capacity change from 0 to 256
[  564.078393][ T7576] FAT-fs (loop3): Unrecognized mount option "shortname=mixeîF¶dir" or missing value
[  564.221418][ T7576] syz.3.780[7576] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  564.221977][ T7576] syz.3.780[7576] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  564.273116][ T4902] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  564.311390][ T7424] 8021q: adding VLAN 0 to HW filter on device bond0
[  564.482758][ T7424] 8021q: adding VLAN 0 to HW filter on device team0
[  564.497941][ T7586] loop3: detected capacity change from 0 to 256
[  564.503704][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  564.511621][ T7586] exfat: Deprecated parameter 'utf8'
[  564.511663][ T7586] exfat: Deprecated parameter 'namecase'
[  564.511686][ T7586] exfat: Deprecated parameter 'utf8'
[  564.535491][ T7586] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  564.558977][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  564.611431][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  564.627690][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  564.648143][ T4303] bridge0: port 1(bridge_slave_0) entered blocking state
[  564.655319][ T4303] bridge0: port 1(bridge_slave_0) entered forwarding state
[  564.670840][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  564.681968][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  564.697998][ T4303] bridge0: port 2(bridge_slave_1) entered blocking state
[  564.705224][ T4303] bridge0: port 2(bridge_slave_1) entered forwarding state
[  564.745259][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  564.746187][ T7586] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[  564.758158][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  564.848021][ T4902] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  564.863236][  T153] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  564.921270][ T4902] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  564.973183][ T3655] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  565.154018][ T4902] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  565.272725][ T4902] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.501839][ T4902] usb 5-1: config 0 descriptor??
[  565.553397][  T153] usb 3-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice=94.10
[  565.576540][  T153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.605862][ T7586] exFAT-fs (loop3): hint_cluster is invalid (1)
[  565.612643][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  565.626430][ T7586] exFAT-fs (loop3): error, invalid access to exfat cache (entry 0x00000000)
[  565.656171][  T153] usb 3-1: Product: syz
[  565.660480][  T153] usb 3-1: Manufacturer: syz
[  565.663203][ T7586] exFAT-fs (loop3): error, failed to bmap (inode : ffff888058263560 iblock : 9, err : -5)
[  565.672421][  T153] usb 3-1: SerialNumber: syz
[  565.700925][  T153] usb 3-1: config 0 descriptor??
[  565.761877][  T153] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14
[  565.826128][ T7586] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[  565.847700][ T7424] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  565.880588][ T7586] exFAT-fs (loop3): error, tried to truncate zeroed cluster.
[  565.881064][ T7424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  565.913352][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  565.935609][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  565.950096][ T7584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  566.055229][ T4902] plantronics 0003:047F:FFFF.0010: unknown main item tag 0x0
[  566.125750][ T4902] plantronics 0003:047F:FFFF.0010: No inputs registered, leaving
[  566.140975][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  566.320101][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  566.389567][ T4902] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  566.490162][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  566.583767][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  566.602213][ T7584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  566.619751][ T7584] loop2: detected capacity change from 0 to 256
[  566.634498][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  566.705473][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  566.715875][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  566.724210][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  566.746275][ T7584] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  566.893239][ T3076] bcm5974 3-1:0.0: could not read from device
[  566.954629][  T153] usb 3-1: USB disconnect, device number 17
[  567.189483][ T6746] usb 5-1: USB disconnect, device number 11
[  567.459863][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  567.493970][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  567.502810][ T4292] kworker/u4:21: attempt to access beyond end of device
[  567.502810][ T4292] loop3: rw=1, sector=34359738488, nr_sectors = 8 limit=256
[  567.508413][ T7424] 8021q: adding VLAN 0 to HW filter on device batadv0
[  568.159950][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  568.184911][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  568.221161][ T7615] loop3: detected capacity change from 0 to 1024
[  568.278081][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  568.297578][ T7615] EXT4-fs: Ignoring removed nomblk_io_submit option
[  568.343848][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  568.369494][ T7615] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  568.428842][ T7615] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  568.553075][ T7424] device veth0_vlan entered promiscuous mode
[  568.582508][ T7615] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  568.815459][ T7424] device veth1_vlan entered promiscuous mode
[  569.238393][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  569.250221][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  569.311435][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  569.360395][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  569.411472][ T7630] loop2: detected capacity change from 0 to 512
[  569.505353][ T7630] EXT4-fs: Ignoring removed nobh option
[  569.764688][ T7234] EXT4-fs (loop3): unmounting filesystem.
[  569.900962][ T7630] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=a842c09c, mo2=0000]
[  569.923262][ T7630] System zones: 0-2, 18-18, 34-34
[  570.002085][ T7630] EXT4-fs (loop2): 1 orphan inode deleted
[  570.018722][ T7630] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  570.060374][ T7424] device veth0_macvtap entered promiscuous mode
[  570.069975][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  570.079994][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  570.084139][ T7630] ext4 filesystem being mounted at /39/file1 supports timestamps until 2038 (0x7fffffff)
[  570.090057][ T4299] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  570.110333][ T7424] device veth1_macvtap entered promiscuous mode
[  570.259254][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.318375][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.335253][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  570.354732][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.420157][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.459921][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.471438][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.514640][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.525178][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  570.560114][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.573313][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.583158][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  570.586427][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.605229][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.617412][ T7635] kvm [7634]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0xf7ff
[  570.618920][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.491431][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.534819][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.563438][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.579883][ T7649] i2c i2c-0: Invalid block write size 129
[  571.602822][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  571.623818][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  571.662309][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_0
[  571.719747][ T4322] device hsr_slave_0 left promiscuous mode
[  571.730501][ T4322] device hsr_slave_1 left promiscuous mode
[  571.745742][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  571.745802][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_0
[  571.746466][ T4322] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  571.746495][ T4322] batman_adv: batadv0: Removing interface: batadv_slave_1
[  571.747132][ T4322] device bridge_slave_1 left promiscuous mode
[  571.747283][ T4322] bridge0: port 2(bridge_slave_1) entered disabled state
[  571.749092][ T4322] device bridge_slave_0 left promiscuous mode
[  571.749233][ T4322] bridge0: port 1(bridge_slave_0) entered disabled state
[  571.829196][ T4322] device veth1_macvtap left promiscuous mode
[  571.829262][ T4322] device veth0_macvtap left promiscuous mode
[  571.829413][ T4322] device veth1_vlan left promiscuous mode
[  571.829524][ T4322] device veth0_vlan left promiscuous mode
[  572.982624][ T6645] EXT4-fs (loop2): unmounting filesystem.
[  573.102068][ T7659] loop2: detected capacity change from 0 to 512
[  573.180068][ T7149] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  573.232272][ T7659] loop2: detected capacity change from 0 to 256
[  573.281953][ T7659] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  573.349433][ T7659] exFAT-fs (loop2): hint_cluster is invalid (17)
[  573.371918][   T26] kauditd_printk_skb: 37 callbacks suppressed
[  573.371936][   T26] audit: type=1800 audit(1724875705.982:164): pid=7659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.799" name="file1" dev="loop2" ino=1048701 res=0 errno=0
[  573.431030][ T7659] exFAT-fs (loop2): error, broken FAT chain.
[  573.441170][ T7659] exFAT-fs (loop2): Filesystem has been set read-only
[  573.455645][ T7659] exFAT-fs (loop2): error, failed to bmap (inode : ffff8880581e3be0 iblock : 8, err : -5)
[  573.838943][ T4322] team0 (unregistering): Port device team_slave_1 removed
[  574.370127][ T4322] team0 (unregistering): Port device team_slave_0 removed
[  574.684383][ T7671] loop2: detected capacity change from 0 to 128
[  574.688240][ T4322] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  574.705684][ T7671] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  574.789956][ T4322] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  575.905459][ T7675] loop2: detected capacity change from 0 to 2048
[  575.927150][ T7675] journal_path: Lookup failure for './file0'
[  575.938528][ T7675] EXT4-fs: error: could not find journal device path
[  576.389153][ T4322] bond0 (unregistering): Released all slaves
[  576.492674][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  576.501914][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  576.524425][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.543543][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.556730][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.570572][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.583878][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.619754][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.630611][ T7424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  576.641747][ T7424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  576.661077][ T7424] batman_adv: batadv0: Interface activated: batadv_slave_1
[  576.669249][ T7657] netlink: 24 bytes leftover after parsing attributes in process `syz.4.800'.
[  576.727467][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  576.767903][   T26] audit: type=1326 audit(1724875709.382:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  576.770533][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  576.867189][   T26] audit: type=1326 audit(1724875709.432:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  576.901276][ T7680] loop3: detected capacity change from 0 to 512
[  576.970615][ T7680] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.805: attempt to clear invalid blocks 1 len 1
[  577.003232][   T26] audit: type=1326 audit(1724875709.432:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  577.066357][ T7424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  577.075368][ T7424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  577.084145][ T7424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  577.103157][ T7424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  577.117065][ T7680] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.805: bg 0: block 343: padding at end of block bitmap is not set
[  577.139714][   T26] audit: type=1326 audit(1724875709.432:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  577.172713][   T26] audit: type=1326 audit(1724875709.432:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=280 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  577.205720][   T26] audit: type=1326 audit(1724875709.452:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  577.237656][ T7680] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6172: Corrupt filesystem
[  577.238224][   T26] audit: type=1326 audit(1724875709.452:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  577.272345][   T26] audit: type=1326 audit(1724875709.452:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  577.305063][   T26] audit: type=1326 audit(1724875709.462:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7679 comm="syz.3.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f3b3e579ef9 code=0x7ffc0000
[  577.381889][ T7680] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.805: invalid indirect mapped block 1819239214 (level 0)
[  577.434122][ T7680] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.805: invalid indirect mapped block 1819239214 (level 1)
[  577.481930][ T7680] EXT4-fs (loop3): 1 truncate cleaned up
[  577.509996][ T7680] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  577.611169][ T4289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  577.647117][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  577.660611][ T4289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.660670][ T7680] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.805: corrupted in-inode xattr
[  577.669797][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  577.735817][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  577.778878][ T4303] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  577.901636][ T7691] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.805: corrupted in-inode xattr
[  578.031543][ T7698] loop1: detected capacity change from 0 to 16
[  578.118739][ T7698] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  578.131428][ T7234] EXT4-fs (loop3): unmounting filesystem.
[  580.888020][ T7713] loop4: detected capacity change from 0 to 2048
[  580.921838][ T7713] EXT4-fs (loop4): #clusters per group too big: 20480
[  581.039657][ T7149] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  581.151667][ T7713] bad cache= option: nonw
[  581.151667][ T7713] 
[  581.172678][ T7713] CIFS: VFS: bad cache= option: nonw
[  581.208132][ T7722] loop4: detected capacity change from 0 to 128
[  581.225020][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.817'.
[  581.285213][ T7720] netlink: 20 bytes leftover after parsing attributes in process `syz.3.817'.
[  581.307490][ T7722] FAT-fs (loop4): Unrecognized mount option "cache=nonw" or missing value
[  582.697477][ T7736] xt_bpf: check failed: parse error
[  582.792296][ T7737] autofs4:pid:7737:autofs_fill_super: called with bogus options
[  583.830594][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.823'.
[  584.755741][ T7742] input: syz0 as /devices/virtual/input/input15
[  584.869843][ T7752] netlink: 'syz.1.824': attribute type 3 has an invalid length.
[  584.929850][ T7752] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'.
[  585.013924][ T7753] loop1: detected capacity change from 0 to 512
[  585.085640][ T7753] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  585.150987][ T7753] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended
[  585.176783][ T7753] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  585.323120][ T7753] System zones: 0-2, 18-18, 34-34
[  585.374861][ T7753] EXT4-fs error (device loop1): ext4_orphan_get:1422: comm syz.1.824: bad orphan inode 15
[  585.437056][ T7754] debugfs: Directory 'netdev:nicvf0' with parent 'phy29' already present!
[  585.449111][ T7753] ext4_test_bit(bit=14, block=18) = 1
[  585.457568][ T7753] is_bad_inode(inode)=0
[  585.471211][ T7753] NEXT_ORPHAN(inode)=2264924160
[  585.481846][ T7753] max_ino=32
[  585.488583][ T7753] i_nlink=0
[  585.495408][ T7753] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  585.564320][ T7753] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.824: bg 0: block 80: padding at end of block bitmap is not set
[  585.632904][ T7753] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6172: Corrupt filesystem
[  585.751882][ T7753] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  585.947325][ T7424] EXT4-fs (loop1): unmounting filesystem.
[  586.572746][  T153] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  586.655617][ T7770] overlayfs: statfs failed on './file0'
[  586.994358][  T153] usb 3-1: config 0 has an invalid interface descriptor of length 3, skipping
[  587.037842][  T153] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  587.103246][  T153] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  587.159778][  T153] usb 3-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  587.216001][  T153] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  587.292450][  T153] usb 3-1: config 0 descriptor??
[  589.705920][ T3685] usb 3-1: USB disconnect, device number 18
[  589.908239][  T153] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  589.916360][  T153] hid-generic 0000:0000:0000.0011: unknown main item tag 0x0
[  590.007198][  T153] hid-generic 0000:0000:0000.0011: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  591.303876][ T7809] loop3: detected capacity change from 0 to 512
[  591.575964][ T7819] input: syz0 as /devices/virtual/input/input16
[  592.354142][ T3655] Bluetooth: hci3: command 0x0406 tx timeout
[  592.508708][ T7825] loop2: detected capacity change from 0 to 256
[  592.699031][ T7820] loop1: detected capacity change from 0 to 4096
[  592.811261][ T7820] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  595.222919][ T7853] ptrace attach of "./syz-executor exec"[6903] was attempted by "./syz-executor exec"[7853]
[  596.484685][ T7857] netlink: 'syz.4.855': attribute type 11 has an invalid length.
[  600.295389][ T7884] loop2: detected capacity change from 0 to 190
[  600.353903][ T7884] __ntfs_warning: 27 callbacks suppressed
[  600.353921][ T7884] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  600.441201][ T7884] ntfs: (device loop2): ntfs_read_inode_mount(): Incorrect mft offset to the first attribute 65530 in superblock.
[  600.473534][ T7890] loop4: detected capacity change from 0 to 1024
[  600.492659][ T7884] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  600.502620][ T7890] EXT4-fs: Ignoring removed oldalloc option
[  600.514590][ T7884] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata.
[  600.523722][ T7890] EXT4-fs: Invalid want_extra_isize 4096
[  602.091973][ T7905] SET target dimension over the limit!
[  602.769985][ T7905] netlink: 40 bytes leftover after parsing attributes in process `syz.0.869'.
[  602.928668][ T7914] usb usb8: usbfs: process 7914 (syz.1.870) did not claim interface 0 before use
[  603.407646][ T7923] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xd
[  606.659271][   T26] audit: type=1326 audit(1724875739.272:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7928 comm="syz.3.875" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3b3e579ef9 code=0x0
[  607.015718][ T7953] loop1: detected capacity change from 0 to 512
[  607.044753][ T7954] 9pnet_fd: Insufficient options for proto=fd
[  607.115321][ T7953] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  607.115428][ T7953] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038 (0x7fffffff)
[  607.118572][ T7953] netlink: 'syz.1.882': attribute type 16 has an invalid length.
[  607.118594][ T7953] netlink: 28074 bytes leftover after parsing attributes in process `syz.1.882'.
[  607.213668][ T7960] netlink: 4 bytes leftover after parsing attributes in process `syz.4.880'.
[  612.642109][ T7424] EXT4-fs (loop1): unmounting filesystem.
[  614.774497][ T8008] loop2: detected capacity change from 0 to 512
[  614.783762][ T8008] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  614.791260][ T8008] UDF-fs: Scanning with blocksize 512 failed
[  614.798664][ T8008] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  614.827467][ T8008] UDF-fs: Scanning with blocksize 1024 failed
[  614.856818][ T8008] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  614.864980][ T8008] UDF-fs: Scanning with blocksize 2048 failed
[  614.882296][ T8008] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  614.920020][ T8008] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  617.729430][ T3650] Bluetooth: hci1: link tx timeout
[  617.735275][ T3650] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa
[  617.743418][ T3650] BUG: sleeping function called from invalid context at kernel/locking/mutex.c:580
[  617.752809][ T3650] in_atomic(): 0, irqs_disabled(): 0, non_block: 0, pid: 3650, name: kworker/u5:4
[  617.942772][ T3650] preempt_count: 0, expected: 0
[  617.947832][ T3650] RCU nest depth: 1, expected: 0
[  617.952796][ T3650] 3 locks held by kworker/u5:4/3650:
[  617.958187][ T3650]  #0: ffff8880631bb938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  617.968723][ T3650]  #1: ffffc9000404fd20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  617.993739][ T3650]  #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460
[  618.003399][ T3650] CPU: 0 PID: 3650 Comm: kworker/u5:4 Not tainted 6.1.106-syzkaller #0
[  618.011666][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  618.021748][ T3650] Workqueue: hci1 hci_tx_work
[  618.026468][ T3650] Call Trace:
[  618.029798][ T3650]  <TASK>
[  618.032766][ T3650]  dump_stack_lvl+0x1e3/0x2cb
[  618.037477][ T3650]  ? nf_tcp_handle_invalid+0x642/0x642
[  618.042954][ T3650]  ? panic+0x764/0x764
[  618.047064][ T3650]  __might_resched+0x5cb/0x780
[  618.051835][ T3650]  ? __wake_up_klogd+0x1c/0x100
[  618.056719][ T3650]  ? __might_sleep+0xb0/0xb0
[  618.061317][ T3650]  ? _printk+0xd1/0x111
[  618.065480][ T3650]  ? vprintk_emit+0x622/0x740
[  618.070180][ T3650]  ? printk_sprint+0x490/0x490
[  618.074958][ T3650]  ? mark_lock+0x9a/0x340
[  618.079317][ T3650]  __mutex_lock+0xbd/0xd80
[  618.083755][ T3650]  ? _printk+0xd1/0x111
[  618.087915][ T3650]  ? hci_cmd_sync_submit+0x3b/0x2e0
[  618.093130][ T3650]  ? mutex_lock_nested+0x10/0x10
[  618.098105][ T3650]  ? hci_conn_get_phy+0x370/0x370
[  618.103143][ T3650]  hci_cmd_sync_submit+0x3b/0x2e0
[  618.108181][ T3650]  hci_disconnect+0xe6/0x2c0
[  618.112775][ T3650]  ? hci_conn_hash_lookup_handle+0x240/0x240
[  618.118776][ T3650]  ? __lock_acquire+0x1f80/0x1f80
[  618.123821][ T3650]  __check_timeout+0x333/0x460
[  618.128587][ T3650]  ? __check_timeout+0x181/0x460
[  618.133534][ T3650]  hci_tx_work+0x138b/0x1ec0
[  618.138152][ T3650]  ? hci_cmd_work+0x660/0x660
[  618.143016][ T3650]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  618.148919][ T3650]  ? do_raw_spin_unlock+0x137/0x8a0
[  618.154218][ T3650]  ? process_one_work+0x7a9/0x11d0
[  618.159341][ T3650]  process_one_work+0x8a9/0x11d0
[  618.164305][ T3650]  ? worker_detach_from_pool+0x260/0x260
[  618.169948][ T3650]  ? _raw_spin_lock_irqsave+0x120/0x120
[  618.175499][ T3650]  ? kthread_data+0x4e/0xc0
[  618.180020][ T3650]  ? wq_worker_running+0x97/0x190
[  618.185060][ T3650]  worker_thread+0xa47/0x1200
[  618.189837][ T3650]  ? release_firmware_map_entry+0x186/0x186
[  618.195759][ T3650]  kthread+0x28d/0x320
[  618.199828][ T3650]  ? worker_clr_flags+0x190/0x190
[  618.204965][ T3650]  ? kthread_blkcg+0xd0/0xd0
[  618.209561][ T3650]  ret_from_fork+0x1f/0x30
[  618.214034][ T3650]  </TASK>
[  618.220374][ T3650] 
[  618.222727][ T3650] =============================
[  618.227579][ T3650] [ BUG: Invalid wait context ]
[  618.232444][ T3650] 6.1.106-syzkaller #0 Tainted: G        W         
[  618.239066][ T3650] -----------------------------
[  618.244377][ T3650] kworker/u5:4/3650 is trying to lock:
[  618.249838][ T3650] ffff888061aac9b0 (&hdev->unregister_lock){+.+.}-{3:3}, at: hci_cmd_sync_submit+0x3b/0x2e0
[  618.260048][ T3650] other info that might help us debug this:
[  618.266035][ T3650] context-{4:4}
[  618.269503][ T3650] 3 locks held by kworker/u5:4/3650:
[  618.274775][ T3650]  #0: ffff8880631bb938 ((wq_completion)hci1#2){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  618.285151][ T3650]  #1: ffffc9000404fd20 ((work_completion)(&hdev->tx_work)){+.+.}-{0:0}, at: process_one_work+0x7a9/0x11d0
[  618.296571][ T3650]  #2: ffffffff8d32afc0 (rcu_read_lock){....}-{1:2}, at: __check_timeout+0x181/0x460
[  618.306055][ T3650] stack backtrace:
[  618.309763][ T3650] CPU: 0 PID: 3650 Comm: kworker/u5:4 Tainted: G        W          6.1.106-syzkaller #0
[  618.319475][ T3650] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  618.329533][ T3650] Workqueue: hci1 hci_tx_work
[  618.334227][ T3650] Call Trace:
[  618.337501][ T3650]  <TASK>
[  618.340434][ T3650]  dump_stack_lvl+0x1e3/0x2cb
[  618.345121][ T3650]  ? nf_tcp_handle_invalid+0x642/0x642
[  618.350768][ T3650]  ? panic+0x764/0x764
[  618.354847][ T3650]  __lock_acquire+0x14b1/0x1f80
[  618.359714][ T3650]  lock_acquire+0x1f8/0x5a0
[  618.364224][ T3650]  ? hci_cmd_sync_submit+0x3b/0x2e0
[  618.369427][ T3650]  ? read_lock_is_recursive+0x10/0x10
[  618.374806][ T3650]  ? __wake_up_klogd+0x1c/0x100
[  618.379653][ T3650]  ? __might_sleep+0xb0/0xb0
[  618.384243][ T3650]  ? _printk+0xd1/0x111
[  618.388398][ T3650]  ? vprintk_emit+0x622/0x740
[  618.393093][ T3650]  ? printk_sprint+0x490/0x490
[  618.397861][ T3650]  ? mark_lock+0x9a/0x340
[  618.402198][ T3650]  __mutex_lock+0x132/0xd80
[  618.406707][ T3650]  ? hci_cmd_sync_submit+0x3b/0x2e0
[  618.411921][ T3650]  ? _printk+0xd1/0x111
[  618.416093][ T3650]  ? hci_cmd_sync_submit+0x3b/0x2e0
[  618.421290][ T3650]  ? mutex_lock_nested+0x10/0x10
[  618.426254][ T3650]  ? hci_conn_get_phy+0x370/0x370
[  618.431273][ T3650]  hci_cmd_sync_submit+0x3b/0x2e0
[  618.436298][ T3650]  hci_disconnect+0xe6/0x2c0
[  618.440886][ T3650]  ? hci_conn_hash_lookup_handle+0x240/0x240
[  618.446868][ T3650]  ? __lock_acquire+0x1f80/0x1f80
[  618.451904][ T3650]  __check_timeout+0x333/0x460
[  618.456669][ T3650]  ? __check_timeout+0x181/0x460
[  618.461695][ T3650]  hci_tx_work+0x138b/0x1ec0
[  618.466344][ T3650]  ? hci_cmd_work+0x660/0x660
[  618.471032][ T3650]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  618.477020][ T3650]  ? do_raw_spin_unlock+0x137/0x8a0
[  618.482220][ T3650]  ? process_one_work+0x7a9/0x11d0
[  618.487332][ T3650]  process_one_work+0x8a9/0x11d0
[  618.492272][ T3650]  ? worker_detach_from_pool+0x260/0x260
[  618.497910][ T3650]  ? _raw_spin_lock_irqsave+0x120/0x120
[  618.503460][ T3650]  ? kthread_data+0x4e/0xc0
[  618.507969][ T3650]  ? wq_worker_running+0x97/0x190
[  618.513011][ T3650]  worker_thread+0xa47/0x1200
[  618.517697][ T3650]  ? release_firmware_map_entry+0x186/0x186
[  618.523600][ T3650]  kthread+0x28d/0x320
[  618.527662][ T3650]  ? worker_clr_flags+0x190/0x190
[  618.532690][ T3650]  ? kthread_blkcg+0xd0/0xd0
[  618.537281][ T3650]  ret_from_fork+0x1f/0x30
[  618.541703][ T3650]  </TASK>
[  618.632896][ T8014] input: syz1 as /devices/virtual/input/input17
[  620.553118][ T3655] Bluetooth: hci1: command 0x0406 tx timeout
[  624.314562][ T1271] ieee802154 phy1 wpan1: encryption failed: -22