last executing test programs:

14.450706348s ago: executing program 4 (id=1629):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x18000, &(0x7f0000000000), 0x80, 0x62d, &(0x7f0000000c40)="$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")
r0 = open(&(0x7f0000000400)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

13.740135696s ago: executing program 4 (id=1631):
unshare(0x20040600)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.stat\x00', 0x275a, 0x0)
utimensat(r1, 0x0, &(0x7f0000000080)={{}, {0x77359400}}, 0x0)

13.534816673s ago: executing program 4 (id=1632):
syz_mount_image$hfsplus(&(0x7f0000000a40), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2010410, &(0x7f0000000a80)=ANY=[], 0x3, 0x657, &(0x7f0000003180)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f00000000c0)=""/43, 0x60)
getdents(r0, 0xfffffffffffffffd, 0x58)

13.378484636s ago: executing program 4 (id=1633):
r0 = syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000006c0), 0xfe, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x400, &(0x7f0000000580)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=0x0, @ANYBLOB=',gid=forget,uid=forget,noadinicb,shortad,iocharset=ascii,lastblock=00000000000000000009,iocharset=cp950,fileset=00000000000000000001,undelete,anchor=00000000000000000006,partition=00000000000000000008,anchor=00000000000008421375,session=00000000000000000001,anchor=00000000000000000005,gid=', @ANYRESDEC=0x0, @ANYBLOB="83338f47e5f6c59d", @ANYRES8, @ANYRESDEC, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66736465663d233f9d1abf59c53229ddd780b162f44a0e44f3436d598025e596d23078a3e733e07b480ad2f41c3ccd7956530c3be5c0d1833ad4954140d857bb924e0f613fe32a0c1461263f77581d8ed8b341959c53a341493644534a4b27223d1faac6bf7df530d100a57452b6a3abc826bb0f0b82809ca1e13376959935f589115abe267b25f42757304b4d6c7ffaec13f3079a4658933152fe693cc762ce82776b4003c4ac3d9d3478da3da1f79ad788d3b25f59422ba668e32c00"], 0x9, 0xc1e, &(0x7f0000001240)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)

12.878666747s ago: executing program 4 (id=1638):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x20, r1, 0xd22800e99f4927f3, 0x0, 0x0, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x5}]}]}, 0x20}}, 0x0)

10.859215902s ago: executing program 4 (id=1644):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000080)="2f1537a8574fa7cd8f12f4f998fa5779cc714bbc0f9060a3211751eea5085f8b", 0x20}], 0x1}, 0x0)

9.872503903s ago: executing program 3 (id=1651):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0xfffffffd}, 0x48)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
bind$rxrpc(0xffffffffffffffff, &(0x7f0000000040)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x24)
socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000206010100000000140000000000000005000100070000000900020073797a30000000000c0007800800124000000000050005000a000000050004000000000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0)
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c000000040605000000000000000000030004000900020073797a3200000000090002000100000000000000050001000700000005000100070000000900020073797a310000000005000100070000000900020073797a30"], 0x5c}}, 0x0)

9.572276247s ago: executing program 3 (id=1653):
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_SEQ_OUTOFBAND(r0, 0x40085112, &(0x7f00000002c0)=@e={0xff, 0x9, 0xfd, 0x0, @generic})

9.458764477s ago: executing program 3 (id=1655):
r0 = socket$kcm(0x10, 0x7, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205649, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x0)
msgsnd(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02"], 0x8, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_HASH_OFFSET={0x8, 0x6, 0x1, 0x0, 0xff}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0x12}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)
gettid()
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)

8.547333141s ago: executing program 3 (id=1656):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='./file0\x00', 0x2000808)
open(0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = socket$packet(0x11, 0x2, 0x300)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newpolicy={0xfc, 0x13, 0x207, 0x0, 0x0, {{@in=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@tmpl={0x44, 0x5, [{{@in6=@mcast2}, 0x3, @in=@multicast1, 0x0, 0x4}]}]}, 0xfc}}, 0x0)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x30, 0x0, 0x0, 0xfffff018}, {0x6}]}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='mm_page_alloc\x00', r4}, 0x10)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x2, 0x4, 0x2300, 0x6}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000016c0)={0x0, &(0x7f0000000600)=""/41, &(0x7f0000000640), &(0x7f00000006c0), 0x1, r5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x90)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000340)={[{@errors_remount}, {@noblock_validity}, {@discard}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@resgid={'resgid', 0x3d, 0xee01}}, {@jqfmt_vfsold}, {@noacl}, {@noload, 0x32}]}, 0x0, 0x4c2, &(0x7f0000000ec0)="$eJzs3d9rW9cdAPDvla0sP5zZYXvIAsvCkmGHLZIdL4nZQ7bB2J4C27L3zLNlYyxbxpKT2ITNYX/AYJS20Kc+9aXQP6BQ8ieUQqB9L21pKW3SPvShjYqupPxwpNgmspRanw9c65yrK3/PV0JHOucedAPoW6ci4nREPKhWq2cjYrixP9PYRmuVzfpx9+/dmqltSVSrV79IIpL6vtohY4/9zyP1h8TBiPj7XyL+lTwdt7y+sThdLBZWG/V8ZWklX17fOLewND1fmC8sT05OXJy6NHVharwjeQ5FxOU/ffLy/9748+V3fnPjw2ufjf07aeyPeJRHp9VTz6bPRdNgRKzuRbAeGUwzBADgh6D5Pf+XEXE2hmMg/TYHAAAA7CfV3w/Ft0lEFQAAANi3Muka2CSTa6wDGIpMJperr+H9aRzOFEvlyq/nSmvLs/W1siORzcwtFAvjjbXCI5FNavWJtPyofn5LfTIijkXES8OH0npuplSc7fXkBwAAAPSJI1vG/18P18f/AAAAwD4z0usGAAAAAHvO+B8AAAD2P+N/AAAA2Nf+euVKbas2r389e319bbF0/dxsobyYW1qbyc2UVldy86XSfPqbfUvb/b9iqbTy21heu5mvFMqVfHl949pSaW25cm3hiUtgAwAAAF107Bd3PkgiYvN3h9Kt5kCvGwV0xeBuDv5479oBdN9ArxsA9MyuPv+BfSXb6wYAPZdsc3/bxTvvdr4tAADA3hj9Wevz/8m2cwObmS41Edgj5v+gfzn/D/3L+X/oX9kYCAN56G97f/6/Wt1VgwAAgI4bSrckk4tI5wGGIpPJ5SKOppcFyCZzC8XCeET8OCLeH87+qFafSB+ZbDtmAAAAAAAAAAAAAAAAAAAAAAAAAADqqtUkqgAAAMC+FpH5NGlc/2t0+MzQ1vmBA8k3w+ltRNx47eorN6crldWJ2v4vH+6vvNrYf74XMxgAAADAVs1xenMcDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACddP/erZnm1s24n/8xIkZaxR+Mg+ntwchGxOGvkhh87HFJRAx0IP7m7Yg43ip+UmtWjDRa0Sr+oR7HP9KB+NDP7tT6nz+0ev9l4lR62/r9dzHtoZ5f+/4v87D/G2jz/j+6wxgn7r6Vbxv/dsSJwdb9TzN+0ib+6R3G/+c/Njba3Vd9PWK05edP8kSsfGVpJV9e3zi3sDQ9X5gvLE9OTlycujR1YWo8P7dQLDT+tozx/5+//eBZ+R9uE39km/zP7DD/7+7evPeTejHbKv7Y6dav//E28TONz75fNcq1+0eb5c16+XEn33zv5LPyn22T/3av/9gO8z/7t/9+tMNDAYAuKK9vLE4Xi4XVvi4817NR+1r0QmShsNvCf16MZryQhd72SwAAQOc9PQYGAAAAAAAAAAAAAAAAAAAAuq2bv67XtNmbVAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnun7AAAA//+nY9Q0")
ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x4, 0x4}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sys_enter\x00', r6}, 0x10)
modify_ldt$read_default(0x2, 0x0, 0x17)

7.906766324s ago: executing program 3 (id=1658):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0x1, 0x2b6, &(0x7f00000000c0)="$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")
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$inet_int(r0, 0x0, 0x33, &(0x7f00000002c0), 0x4)
sendmmsg$inet(r0, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)

7.70956845s ago: executing program 3 (id=1661):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket(0x0, 0x0, 0x0)
unshare(0x0)
io_submit(0x0, 0x0, 0x0)
unshare(0x6a040000)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(r1, &(0x7f0000000340)={&(0x7f0000000240)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1200000000000000110000006700000020010000000000000009000000000000001ab6069c9e103e6603b255dd3aa9c6d988dc9070a7f4f227fdb4", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00'], 0x28}, 0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000840)=@mangle={'mangle\x00', 0x64, 0x6, 0x560, 0x100, 0x1d8, 0x100, 0x100, 0x2a8, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@ipv6={@empty, @loopback, [], [], 'gre0\x00', 'bond0\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@srh={{0x30}}]}, @common=@unspec=@CONNSECMARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3c0}}, {{@ipv6={@mcast2, @private1, [], [], 'pim6reg1\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@remote, @ipv6=@mcast1}}}, {{@ipv6={@private0, @remote, [], [], 'tunl0\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c0)
syz_emit_vhci(0x0, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0x5, 0x8, 0x7fff})
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r3, 0x1000f0000)

5.030764519s ago: executing program 2 (id=1668):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x2)
r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480), &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

4.921909948s ago: executing program 1 (id=1669):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd)
keyctl$revoke(0x3, r4)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)=ANY=[@ANYBLOB="4c0000004900010029bd7000000000000a00f8"], 0x4c}}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60)

4.810790637s ago: executing program 2 (id=1671):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x4888, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'cp932'}}, {@umask={'umask', 0x3d, 0x5}}, {@gid}, {@errors_continue}, {@umask={'umask', 0x3d, 0x418}}, {@errors_continue}, {@gid}, {@errors_remount}, {@errors_continue}, {@errors_continue}]}, 0x1, 0x1524, &(0x7f00000037c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

3.721652676s ago: executing program 1 (id=1672):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.582992858s ago: executing program 2 (id=1673):
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r3 = open_tree(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0)
symlinkat(&(0x7f0000000040)='./file0\x00', r3, &(0x7f0000000080)='./file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
creat(&(0x7f0000000000)='./bus\x00', 0x0)
open(&(0x7f0000000780)='./bus\x00', 0x0, 0x0)

3.234610726s ago: executing program 2 (id=1674):
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0xb, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x17, 0x1, 0x0, "9611e6d6ffc88885163200000080d2b4000000000008000029d3e9aa3fc5f414"})

2.933718131s ago: executing program 2 (id=1675):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x1268, &(0x7f0000002500)="$eJzs3U9rI2UcB/Bf2vTv2qbquroL4oNeFCFue/DkpcguiAWl2gUVhFmbamialCYUIuLWkyfBlyHq0ZsgvoFevHgWBJFePO5BHGmT1aZJu7ptU5HP5zIPzzzfeWYyzMCE+TF7L32+sb7WLK9lrRgpFKK4ORbFuylSjMRodOzEc7d+/OnJN956+9XFpaUbyyndXHxz/sWU0uxT373z0ddPf9+6dOub2W8nYnfu3b3fFn7evbJ7de+Pr6LaTNVmqjdaKUu3G41WdrtWSavV5no5pddrlaxZSdV6s7LVs36t1tjcbKesvjozvblVaTZTVm+n9Uo7tQqptdVO2ftZtZ7K5XKamQ5OY+XLu3meR+T5WIxHnuf5VEzHpXgoZmI2SjEXD8cj8WhcjsfiSjweT8TVg1EXvd8AAAAAAAAAAAAAAAAAAADw/3Kf+v+C+n8AAAAAAAAAAAAAAAAAAAA4f0fr/4sRvv8PAAAAAAAAAAAAAAAAAAAAQ3af7/8fqf9/Xv0/AAAAAAAAAAAAAAAAAAAAnIfJzmI5pcmIjU+3V7ZXOstO/+JaVKMWlbgepfg9Dqr/Ozrtm68s3bieDszFCxt3uvk72yujvfn5sVLMFQbm5zv51JufiOnD+YUoxeXB8y8MzE/Gs8/s5z/p5MtRih/ei0bUYjWi0D36g/zH8ym9/NrSVG/+2v64Y42e82kBAACAs1ROf+l/ft/pDhq4vrOq+3yeuiMLJ/w/cOT5vBjXihd11NzTbH+4ntVqla0HbIwfv53x0225r1GIiCwO98xO/7K8P/mZTfGgjdGhTjp28phTnNMo/gd+zDNo/PrFoZ7JGO7sI91LIqvt3z//WSp28vxcd2zgxThxUur4e0ZhCPclhuPvk37RewIAAAAAAAAAAMC/MfDtv6mI6Hsf8IO+nnuvh/fG+7d8/OyfDeEIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/mQHjgUAAAAAhPlbp9GxAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFcBAAD///ME0UM=")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x200)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000001a80)={0x2, 0x0, @ioapic={0x0, 0xfffffff4, 0x0, 0xeffffdff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {0x0, 0xd, 0x0, '\x00', 0xff}]}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r6=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCAN_SSIDS={0x20, 0x2d, 0x0, 0x1, [{0x4}, {0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ibss_ssid}]}]}, 0x3c}}, 0x0)
ftruncate(r3, 0x2007ff3)
copy_file_range(r3, 0x0, r2, 0x0, 0xffffffffa003e459, 0x700000000000000)
open_tree(r2, 0x0, 0x0)
r7 = getpid()
sched_setscheduler(r7, 0x0, &(0x7f0000000200))
r8 = fcntl$getown(r3, 0x9)
r9 = getpgrp(r7)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000000c0)=<r10=>0x0)
r11 = syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r11, 0x80045530, 0x0)
r12 = getpid()
syz_clone3(&(0x7f0000000180)={0x4000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x9}, &(0x7f0000000400)=""/129, 0x81, &(0x7f00000004c0)=""/189, &(0x7f0000000100)=[r7, r8, r9, r10, r12], 0x5, {r2}}, 0x58)
open$dir(&(0x7f00000003c0)='./file0\x00', 0x400004000011830a, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffffc, 0x0)
mount$cgroup(0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000240)='./file0\x00', 0x46c, 0x0, 0x0, 0x0, &(0x7f0000000080))

2.794435082s ago: executing program 1 (id=1676):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000900)={&(0x7f0000000880)=[{0x0, 0x601, 0x2b, &(0x7f00000007c0)="0b206b378021eec030fbfd95ba8a6635e7e4727376e8c27da1a54168b1938b50b68063f4af169e695d3a8c"}, {0x0, 0x0, 0x0, 0x0}], 0x2})

2.582748599s ago: executing program 1 (id=1677):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c)
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f00000001c0)=0x8000, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', <r3=>0x0})
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000400), 0x4)

2.191521731s ago: executing program 1 (id=1678):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18)
connect$can_j1939(r0, &(0x7f0000000180)={0x1d, r2, 0x0, {}, 0xff}, 0x18)

1.981475378s ago: executing program 1 (id=1679):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x5, &(0x7f0000000140)={0x1, &(0x7f00000000c0)=[{0x6}]})

1.449636042s ago: executing program 0 (id=1680):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="400000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002000128008000100687372"], 0x40}}, 0x0)

1.35083564s ago: executing program 2 (id=1681):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000dfba7e109911a3687bd20102030109021200010000000009040b", @ANYRES64], 0x0)

1.036025966s ago: executing program 0 (id=1682):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@cgroup=r0, 0x26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
mount$cgroup(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000001400), 0x0, &(0x7f0000001440)={[{@name={'name', 0x3d, ',-.['}}]})
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x200000, &(0x7f0000000000)=ANY=[@ANYRES16=0x0], 0x1, 0x495, &(0x7f0000000a40)="$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")
mkdir(&(0x7f0000001200)='./control\x00', 0x0)
rename(&(0x7f0000000100)='./control\x00', &(0x7f0000000140)='./file0\x00')
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)
memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)

646.990418ms ago: executing program 0 (id=1683):
r0 = socket$inet6(0xa, 0x6, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@private0, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x0, 0x6c}, 0x0, @in6=@loopback}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)

386.836719ms ago: executing program 0 (id=1684):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'ip_vti0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="a800000010000100"/20, @ANYRES32=r1, @ANYBLOB="000000000000000088001a8054000a800500080000000000140007000000000000000000000000000000000005000800000000000500080002"], 0xa8}}, 0x0)

205.024724ms ago: executing program 0 (id=1685):
socket$nl_netfilter(0x10, 0x3, 0xc)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xe)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x10, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18}, '\x00'})
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$capi20_data(0xffffffffffffffff, &(0x7f0000002d00)=ANY=[], 0x68)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$PPPIOCGFLAGS1(r1, 0x40047452, &(0x7f0000000100))

0s ago: executing program 0 (id=1686):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
r1 = syz_io_uring_setup(0x231b, &(0x7f0000000440), &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f0000000340)=@rc={0x1f, @fixed, 0x5}})
socket$inet6(0xa, 0x0, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(&(0x7f00000001c0)='./bus\x00', 0x0)
io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

9012] exfat: Deprecated parameter 'utf8'
[  458.161775][ T9012] exfat: Deprecated parameter 'utf8'
[  458.189771][ T9012] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  458.216793][   T26] audit: type=1326 audit(1722862809.373:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9013 comm="syz.0.1268" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66f8b779f9 code=0x0
[  460.136454][ T3946] team0 (unregistering): Port device team_slave_1 removed
[  460.222159][ T9025] loop2: detected capacity change from 0 to 32768
[  460.244772][ T9033] loop3: detected capacity change from 0 to 1024
[  460.281433][ T9033] hfsplus: xattr searching failed
[  460.285262][ T9025] 
[  460.285262][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.285262][ T9025] 
[  460.297809][ T6375] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  460.310770][ T3946] team0 (unregistering): Port device team_slave_0 removed
[  460.435824][ T9025] 
[  460.435824][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.435824][ T9025] 
[  460.449823][ T9025] 
[  460.449823][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.449823][ T9025] 
[  460.473208][ T9025] 
[  460.473208][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.473208][ T9025] 
[  460.485443][ T9025] 
[  460.485443][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.485443][ T9025] 
[  460.506730][  T134] 
[  460.506730][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.506730][  T134] 
[  460.522468][ T3946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  460.550177][ T6375] usb 1-1: Using ep0 maxpacket: 32
[  460.558430][ T9025] 
[  460.558430][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.558430][ T9025] 
[  460.594694][ T9025] 
[  460.594694][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.594694][ T9025] 
[  460.628938][ T9025] 
[  460.628938][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.628938][ T9025] 
[  460.653680][ T3946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  460.662871][ T9025] 
[  460.662871][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.662871][ T9025] 
[  460.675343][ T6375] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  460.689987][ T6375] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  460.694233][ T9025] 
[  460.694233][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.694233][ T9025] 
[  460.723660][ T6375] usb 1-1: config 0 descriptor??
[  460.732034][  T134] 
[  460.732034][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.732034][  T134] 
[  460.751125][ T9025] 
[  460.751125][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.751125][ T9025] 
[  460.779530][ T6375] gspca_main: nw80x-2.14.0 probing 055f:d001
[  460.846133][ T9025] 
[  460.846133][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.846133][ T9025] 
[  460.864715][ T9025] 
[  460.864715][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.864715][ T9025] 
[  460.879523][ T3859] hfsplus: b-tree write err: -5, ino 4
[  460.901411][ T9025] 
[  460.901411][ T9025]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.901411][ T9025] 
[  460.925087][  T134] 
[  460.925087][  T134]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  460.925087][  T134] 
[  461.051478][ T6619] 
[  461.051478][ T6619]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  461.051478][ T6619] 
[  461.077951][ T6619] 
[  461.077951][ T6619]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  461.077951][ T6619] 
[  461.498763][   T26] audit: type=1400 audit(1722862812.673:330): apparmor="DENIED" operation="change_profile" info="label not found" error=-2 profile="unconfined" name=26260AE10CCA7C2B08C9DFF78977F306B457C51CCA93031D371D06D2E59E880583300E11E8 pid=9031 comm="syz.0.1275"
[  461.755171][ T6375] gspca_nw80x: reg_r err -32
[  461.760205][ T6375] nw80x: probe of 1-1:0.0 failed with error -32
[  461.956464][ T3946] bond0 (unregistering): Released all slaves
[  462.060098][ T8807] 8021q: adding VLAN 0 to HW filter on device bond0
[  462.185970][ T5307] usb 1-1: USB disconnect, device number 15
[  462.261204][ T8807] 8021q: adding VLAN 0 to HW filter on device team0
[  462.289580][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  462.302388][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  462.390824][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  462.400375][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  462.435508][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[  462.442661][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[  462.465548][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  462.505947][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  462.514573][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  462.521761][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  462.552620][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  462.622558][    C1] eth0: bad gso: type: 1, size: 1408
[  462.636876][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  462.646453][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  462.672006][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  462.683479][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  462.693438][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  462.703157][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  462.712383][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  462.721978][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  462.736704][ T8807] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  462.836525][ T8807] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  462.868869][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  462.928377][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  464.163108][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  465.197912][ T9078] loop0: detected capacity change from 0 to 128
[  465.253242][ T9078] VFS: Found a Xenix FS (block size = 512) on device loop0
[  465.254122][ T9078] sysv_free_block: trying to free block not in datazone
[  465.258281][ T9078] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  466.320558][ T9088] loop0: detected capacity change from 0 to 16
[  466.346174][ T9088] erofs: (device loop0): mounted with root inode @ nid 36.
[  466.532247][ T9091] loop1: detected capacity change from 0 to 1024
[  466.572345][ T9091] EXT4-fs: Ignoring removed nobh option
[  466.640341][ T9091] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  466.651411][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  466.651584][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  466.662893][ T8807] 8021q: adding VLAN 0 to HW filter on device batadv0
[  466.797410][ T7585] EXT4-fs (loop1): unmounting filesystem.
[  467.470506][ T9107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1296'.
[  467.636873][ T9109] loop2: detected capacity change from 0 to 64
[  467.889267][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  467.906522][ T9112] loop1: detected capacity change from 0 to 256
[  467.956568][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  468.426674][ T9097] loop0: detected capacity change from 0 to 32768
[  468.520012][ T8807] device veth0_vlan entered promiscuous mode
[  468.546021][ T9097] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1293 (9097)
[  468.573895][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  468.592955][ T5307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  468.682026][ T8807] device veth1_vlan entered promiscuous mode
[  468.723733][ T9097] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  468.762817][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  468.777321][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  468.811456][ T9097] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  468.852005][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  468.860504][ T9097] BTRFS info (device loop0): using free space tree
[  468.874051][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  468.880896][ T9122] loop2: detected capacity change from 0 to 256
[  468.937533][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  468.955590][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  468.961869][ T9122] FAT-fs (loop2): Directory bread(block 64) failed
[  468.982323][ T9122] FAT-fs (loop2): Directory bread(block 65) failed
[  468.990137][ T9122] FAT-fs (loop2): Directory bread(block 66) failed
[  469.005338][ T8807] device veth0_macvtap entered promiscuous mode
[  469.005864][ T9122] FAT-fs (loop2): Directory bread(block 67) failed
[  469.045497][ T8807] device veth1_macvtap entered promiscuous mode
[  469.058908][ T9122] FAT-fs (loop2): Directory bread(block 68) failed
[  469.069894][ T9097] BTRFS info (device loop0): enabling ssd optimizations
[  469.094423][ T9122] FAT-fs (loop2): Directory bread(block 69) failed
[  469.114141][ T9122] FAT-fs (loop2): Directory bread(block 70) failed
[  469.124264][ T9122] FAT-fs (loop2): Directory bread(block 71) failed
[  469.127860][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  469.144253][ T9122] FAT-fs (loop2): Directory bread(block 72) failed
[  469.182323][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.202138][ T9122] FAT-fs (loop2): Directory bread(block 73) failed
[  469.215213][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  469.246576][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.290341][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  469.312542][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.322856][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  469.341166][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.354556][ T7600] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  469.368006][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_0
[  469.415503][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  469.429041][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  469.492293][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  469.517109][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  469.535103][ T9143] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1304'.
[  469.554896][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.599385][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.611022][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.676280][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.711006][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.747725][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.747747][ T8807] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  469.747766][ T8807] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  469.771743][ T8807] batman_adv: batadv0: Interface activated: batadv_slave_1
[  469.881195][ T8807] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  469.908235][ T8807] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  469.933913][ T8807] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  469.969628][ T8807] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.244151][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  470.255980][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  470.471158][ T6574] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.555063][ T6574] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.578121][ T9166] loop2: detected capacity change from 0 to 256
[  470.601297][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  470.626599][ T9164] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  470.654445][ T9168] loop0: detected capacity change from 0 to 512
[  470.668461][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.684706][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.726624][ T9168] EXT4-fs: Ignoring removed oldalloc option
[  470.751088][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  470.861593][ T9168] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  470.910083][ T9168] ext4 filesystem being mounted at /58/bus supports timestamps until 2038 (0x7fffffff)
[  470.961092][ T9175] loop3: detected capacity change from 0 to 512
[  471.045717][ T9175] EXT4-fs: Ignoring removed nomblk_io_submit option
[  471.120747][ T9175] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.1315: corrupted in-inode xattr
[  471.168289][ T7600] EXT4-fs (loop0): unmounting filesystem.
[  471.201378][ T9175] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1315: couldn't read orphan inode 15 (err -117)
[  471.216479][   T26] audit: type=1326 audit(1722862822.393:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  471.262921][ T9175] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  471.272363][   T26] audit: type=1326 audit(1722862822.393:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  471.547019][ T8092] EXT4-fs (loop3): unmounting filesystem.
[  471.955064][   T26] audit: type=1326 audit(1722862823.083:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  472.402668][   T26] audit: type=1326 audit(1722862823.083:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  472.445133][   T26] audit: type=1326 audit(1722862823.083:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  472.538502][   T26] audit: type=1326 audit(1722862823.083:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  472.723325][   T26] audit: type=1326 audit(1722862823.093:337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  472.764555][   T26] audit: type=1326 audit(1722862823.093:338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  472.790293][   T26] audit: type=1326 audit(1722862823.093:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  472.790572][ T9204] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1318'.
[  472.832454][   T26] audit: type=1326 audit(1722862823.093:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9179 comm="syz.4.1210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x7fc00000
[  473.479552][ T9227] binder: 9226:9227 ioctl c00c620f 20000100 returned -22
[  474.186046][ T9234] loop3: detected capacity change from 0 to 128
[  474.860156][ T9234] VFS: Found a Xenix FS (block size = 512) on device loop3
[  474.869423][ T9234] sysv_free_block: trying to free block not in datazone
[  474.880353][ T9234] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  474.927690][ T3657] Bluetooth: hci4: command tx timeout
[  475.678318][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1337'.
[  475.711051][ T9244] program syz.4.1338 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  475.943007][ T9249] loop3: detected capacity change from 0 to 256
[  476.000355][ T9255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1343'.
[  476.012002][ T9249] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  476.053455][ T9255] nbd: couldn't find device at index -1
[  477.784201][   T26] kauditd_printk_skb: 17 callbacks suppressed
[  477.784219][   T26] audit: type=1326 audit(1722862828.953:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.627166][ T9252] loop1: detected capacity change from 0 to 32768
[  478.644738][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.692882][   T26] audit: type=1326 audit(1722862829.743:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.742991][   T26] audit: type=1326 audit(1722862829.743:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff57d579817 code=0x7fc00000
[  478.767304][ T9286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  478.774457][   T26] audit: type=1326 audit(1722862829.743:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.800599][   T26] audit: type=1326 audit(1722862829.743:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.824731][   T26] audit: type=1326 audit(1722862829.743:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.854035][   T26] audit: type=1326 audit(1722862829.743:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.863006][ T9252] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  478.876382][    C1] vkms_vblank_simulate: vblank timer overrun
[  478.878110][   T26] audit: type=1326 audit(1722862829.743:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.899211][ T9292] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1353'.
[  478.914120][   T26] audit: type=1326 audit(1722862829.743:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.946725][   T26] audit: type=1326 audit(1722862829.743:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9278 comm="syz.2.1351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff57d5779f9 code=0x7fc00000
[  478.950244][ T9300] netlink: 'syz.3.1357': attribute type 3 has an invalid length.
[  478.978191][ T3691] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  478.998574][ T9252] XFS (loop1): Mounting V5 Filesystem
[  479.032288][ T9252] XFS (loop1): log mount failed
[  479.227991][ T3691] usb 5-1: Using ep0 maxpacket: 8
[  479.345438][ T3691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  479.367003][ T3691] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  479.404015][ T3691] usb 5-1: New USB device found, idVendor=0810, idProduct=0002, bcdDevice= 0.00
[  479.445766][ T3691] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  479.481631][ T3691] usb 5-1: config 0 descriptor??
[  480.017953][ T3691] pantherlord 0003:0810:0002.0011: bogus close delimiter
[  480.038440][ T3691] pantherlord 0003:0810:0002.0011: item 0 4 2 10 parsing failed
[  480.064065][ T3691] pantherlord 0003:0810:0002.0011: parse failed
[  480.090100][ T3691] pantherlord: probe of 0003:0810:0002.0011 failed with error -22
[  480.244098][ T6842] usb 5-1: USB disconnect, device number 8
[  480.374795][   T22] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  480.747690][   T22] usb 1-1: Using ep0 maxpacket: 8
[  480.954321][   T22] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  481.225121][   T22] usb 1-1: config 246 descriptor has 1 excess byte, ignoring
[  481.276435][   T22] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42
[  481.345039][   T22] usb 1-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[  481.364367][   T22] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  481.400967][   T22] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  481.506242][   T22] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  481.555416][   T22] usb 1-1: config 246 descriptor has 1 excess byte, ignoring
[  481.592222][   T22] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42
[  481.615783][   T22] usb 1-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[  481.654859][   T22] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  481.694426][   T22] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  481.955080][ T3691] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  481.965774][   T22] usb 1-1: config 246 has too many interfaces: 42, using maximum allowed: 32
[  481.988222][   T22] usb 1-1: config 246 descriptor has 1 excess byte, ignoring
[  482.030991][ T9353] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1375'.
[  482.040070][ T9353] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1375'.
[  482.081455][ T9353] device gtp0 entered promiscuous mode
[  482.206527][   T22] usb 1-1: config 246 has 1 interface, different from the descriptor's value: 42
[  482.366386][   T22] usb 1-1: config 246 interface 0 altsetting 0 has an invalid endpoint with address 0x3F, skipping
[  482.664966][   T22] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  482.735132][   T22] usb 1-1: config 246 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  483.691581][ T9361] loop1: detected capacity change from 0 to 8
[  483.795203][ T9366] loop2: detected capacity change from 0 to 256
[  483.804776][ T9366] exfat: Deprecated parameter 'utf8'
[  483.935473][ T3691] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  483.982936][ T9366] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  484.061884][ T3691] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  484.209741][ T3691] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  484.295060][ T3691] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  484.466050][   T22] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  484.506312][   T22] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.514423][   T22] usb 1-1: Product: syz
[  484.635358][ T3691] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  484.727600][ T3691] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  484.958883][ T3691] usb 5-1: Product: syz
[  485.275091][ T3691] usb 5-1: Manufacturer: syz
[  485.345541][ T3691] usb 5-1: can't set config #1, error -71
[  485.416224][   T22] usb 1-1: can't set config #246, error -71
[  485.416835][ T3691] usb 5-1: USB disconnect, device number 9
[  485.426726][   T22] usb 1-1: USB disconnect, device number 16
[  485.797011][ T9387] loop0: detected capacity change from 0 to 1024
[  485.910948][ T9392] loop4: detected capacity change from 0 to 128
[  485.928145][ T9392] VFS: Found a Xenix FS (block size = 512) on device loop4
[  485.937436][ T9392] sysv_free_block: trying to free block not in datazone
[  485.949875][ T9392] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  486.621652][ T9396] loop2: detected capacity change from 0 to 1024
[  486.734078][ T9400] loop1: detected capacity change from 0 to 256
[  486.885534][ T9400] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  487.015346][ T6842] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  487.052217][ T9408] loop2: detected capacity change from 0 to 512
[  487.243550][ T9408] EXT4-fs (loop2): 1 orphan inode deleted
[  487.251469][ T9408] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  487.679240][ T9408] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038 (0x7fffffff)
[  487.751490][ T9418] loop3: detected capacity change from 0 to 2048
[  487.775628][ T6842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  487.794486][ T6842] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  487.813846][ T6842] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  487.816061][ T9418]  loop3: p1 < > p3 p4 < >
[  487.825514][ T6842] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  487.853434][ T6842] usb 1-1: config 0 descriptor??
[  487.859077][ T9418] loop3: p3 start 4284289 is beyond EOD, truncated
[  487.893119][ T3092]  loop3: p1 < > p3 p4 < >
[  487.897726][ T6842] gspca_main: spca561-2.14.0 probing abcd:cdee
[  487.914293][ T3092] loop3: p3 start 4284289 is beyond EOD, truncated
[  488.175993][ T6842] spca561: probe of 1-1:0.0 failed with error -22
[  488.184261][ T6842] usb 1-1: MIDIStreaming interface descriptor not found
[  488.236713][ T3952] udevd[3952]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  488.294183][ T5833] udevd[5833]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  488.347533][ T6842] usb 1-1: USB disconnect, device number 17
[  489.428033][ T7600] hfsplus: bad catalog entry type
[  489.433306][ T7600] hfsplus: bad catalog entry type
[  489.441532][ T6619] EXT4-fs (loop2): unmounting filesystem.
[  489.456797][    C1] eth0: bad gso: type: 1, size: 1408
[  489.550925][ T6574] hfsplus: b-tree write err: -5, ino 4
[  489.586376][ T9437] loop2: detected capacity change from 0 to 256
[  489.662062][ T9437] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  489.683093][ T9437] FAT-fs (loop2): Filesystem has been set read-only
[  489.690330][ T9437] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  489.707381][ T9437] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  489.722390][   T26] kauditd_printk_skb: 49 callbacks suppressed
[  489.722407][   T26] audit: type=1800 audit(1722862840.893:417): pid=9437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1404" name="file1" dev="loop2" ino=1048746 res=0 errno=0
[  490.125019][ T6842] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  490.262578][ T6574] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.291409][ T9443] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1408'.
[  490.368003][ T6842] usb 2-1: Using ep0 maxpacket: 8
[  490.432584][ T6574] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.487118][ T6842] usb 2-1: config 0 has an invalid interface number: 143 but max is 0
[  490.506900][ T6842] usb 2-1: config 0 has no interface number 0
[  490.569138][ T6574] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.585990][ T6842] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  490.605030][ T3691] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  490.614629][ T6842] usb 2-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0
[  490.635091][ T6842] usb 2-1: Product: syz
[  490.646722][ T6842] usb 2-1: config 0 descriptor??
[  490.737049][ T3657] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  490.754012][ T3657] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  490.763709][ T3657] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  490.773901][ T3657] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  490.776132][ T6574] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  490.797098][ T3657] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  490.804670][ T3657] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  490.804840][ T9453] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'.
[  490.845808][ T3691] usb 4-1: Using ep0 maxpacket: 8
[  490.855332][ T6842] viperboard 2-1:0.143: version 0.00 found at bus 002 address 014
[  490.925430][ T6842] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  490.945251][ T6842] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  490.955496][ T9459] bridge0: port 3(netdevsim0) entered blocking state
[  490.963197][ T9459] bridge0: port 3(netdevsim0) entered disabled state
[  490.970574][ T3691] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  490.987212][ T3691] usb 4-1: config 0 has no interface number 0
[  490.993590][ T3691] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  491.026276][ T6842] usb 2-1: USB disconnect, device number 14
[  491.037853][ T3691] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  491.063659][ T3691] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  491.125895][ T3691] usb 4-1: config 0 descriptor??
[  491.131300][ T9459] device netdevsim0 entered promiscuous mode
[  491.201304][ T3691] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  491.212429][ T9459] bridge0: port 3(netdevsim0) entered blocking state
[  491.220244][ T9459] bridge0: port 3(netdevsim0) entered forwarding state
[  491.372330][ T9463] loop2: detected capacity change from 0 to 8
[  491.415906][ T9463] SQUASHFS error: zlib decompression failed, data probably corrupt
[  491.424160][ T9463] SQUASHFS error: Failed to read block 0x9b: -5
[  491.430520][ T9463] SQUASHFS error: Unable to read metadata cache entry [99]
[  491.437817][ T9463] SQUASHFS error: Unable to read inode 0x127
[  491.792818][   T22] usb 4-1: USB disconnect, device number 14
[  491.814958][    C1] iowarrior 4-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  492.093674][   T22] iowarrior 4-1:0.1: I/O-Warror #0 now disconnected
[  492.408985][ T9475] loop1: detected capacity change from 0 to 128
[  492.559808][ T9475] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  492.593108][ T9475] ext4 filesystem being mounted at /98/file1 supports timestamps until 2038 (0x7fffffff)
[  492.619343][ T9485] loop2: detected capacity change from 0 to 256
[  492.691454][ T9485] FAT-fs (loop2): Directory bread(block 64) failed
[  492.712441][   T26] audit: type=1800 audit(1722862843.883:418): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1421" name="bus" dev="loop1" ino=12 res=0 errno=0
[  492.746019][ T9485] FAT-fs (loop2): Directory bread(block 65) failed
[  492.752687][ T9485] FAT-fs (loop2): Directory bread(block 66) failed
[  492.795374][   T26] audit: type=1800 audit(1722862843.883:419): pid=9475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1421" name="bus" dev="loop1" ino=12 res=0 errno=0
[  492.800213][ T9452] chnl_net:caif_netlink_parms(): no params data found
[  492.816730][ T9485] FAT-fs (loop2): Directory bread(block 67) failed
[  492.845137][ T9485] FAT-fs (loop2): Directory bread(block 68) failed
[  492.852808][ T9489] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa
[  492.865224][ T3658] Bluetooth: hci3: command tx timeout
[  492.885045][ T9485] FAT-fs (loop2): Directory bread(block 69) failed
[  492.891985][ T9485] FAT-fs (loop2): Directory bread(block 70) failed
[  492.895770][ T7585] EXT4-fs (loop1): unmounting filesystem.
[  492.900664][ T9485] FAT-fs (loop2): Directory bread(block 71) failed
[  492.911388][ T9485] FAT-fs (loop2): Directory bread(block 72) failed
[  492.918234][ T9485] FAT-fs (loop2): Directory bread(block 73) failed
[  493.031133][   T26] audit: type=1326 audit(1722862844.203:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9493 comm="syz.3.1426" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc4b6d779f9 code=0x0
[  493.375227][ T6842] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  493.402022][ T9452] bridge0: port 1(bridge_slave_0) entered blocking state
[  493.409325][ T9452] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.418442][ T9452] device bridge_slave_0 entered promiscuous mode
[  493.462895][ T5310] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  493.476556][ T9452] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.483712][ T9452] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.506345][ T9452] device bridge_slave_1 entered promiscuous mode
[  493.609457][ T9452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.618789][ T6842] usb 4-1: Using ep0 maxpacket: 8
[  493.707674][ T9452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  493.738578][ T6842] usb 4-1: config index 0 descriptor too short (expected 5924, got 36)
[  493.745065][ T5310] usb 3-1: Using ep0 maxpacket: 8
[  493.747849][ T6842] usb 4-1: config 250 has an invalid interface number: 228 but max is -1
[  493.774988][ T6842] usb 4-1: config 250 has 1 interface, different from the descriptor's value: 0
[  493.784088][ T6842] usb 4-1: config 250 has no interface number 0
[  493.806431][ T6842] usb 4-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  493.825422][ T6842] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  493.840603][    C1] eth0: bad gso: type: 1, size: 1408
[  493.855512][ T6842] usb 4-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  493.883639][ T6842] usb 4-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  493.903149][ T6842] usb 4-1: config 250 interface 228 has no altsetting 0
[  493.904361][ T9521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  493.922818][ T9502] loop4: detected capacity change from 0 to 32768
[  493.924061][ T5310] usb 3-1: config 0 has an invalid interface number: 143 but max is 0
[  493.944001][ T5310] usb 3-1: config 0 has no interface number 0
[  494.022408][ T9502] XFS (loop4): Mounting V5 Filesystem
[  494.028271][ T6842] usb 4-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  494.038465][ T6842] usb 4-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  494.048232][ T6842] usb 4-1: Product: syz
[  494.052459][ T6842] usb 4-1: SerialNumber: syz
[  494.058200][ T5310] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[  494.088362][ T5310] usb 3-1: New USB device strings: Mfr=0, Product=254, SerialNumber=0
[  494.096245][ T6842] hub 4-1:250.228: bad descriptor, ignoring hub
[  494.102866][ T6842] hub: probe of 4-1:250.228 failed with error -5
[  494.106048][ T5310] usb 3-1: Product: syz
[  494.122579][ T5310] usb 3-1: config 0 descriptor??
[  494.138458][ T9452] team0: Port device team_slave_0 added
[  494.159054][ T9452] team0: Port device team_slave_1 added
[  494.223292][ T9502] XFS (loop4): Ending clean mount
[  494.232530][ T9502] XFS (loop4): Quotacheck needed: Please wait.
[  494.240496][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_0
[  494.262722][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.290507][ T9452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  494.311401][ T6842] usblp 4-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  494.325316][ T5310] viperboard 3-1:0.143: version 0.00 found at bus 003 address 014
[  494.341241][ T9452] batman_adv: batadv0: Adding interface: batadv_slave_1
[  494.354854][ T9452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  494.373351][ T9502] XFS (loop4): Quotacheck: Done.
[  494.400442][ T5310] viperboard-i2c viperboard-i2c.2.auto: failure setting i2c_bus_freq to 100
[  494.421692][ T5310] viperboard-i2c: probe of viperboard-i2c.2.auto failed with error -5
[  494.450075][ T9452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  494.460765][ T5310] usb 3-1: USB disconnect, device number 14
[  494.664136][ T9452] device hsr_slave_0 entered promiscuous mode
[  494.694987][    C0] usblp0: nonzero read bulk status received: -71
[  494.709462][ T8807] XFS (loop4): Unmounting Filesystem
[  494.714833][ T9452] device hsr_slave_1 entered promiscuous mode
[  494.721471][ T9452] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.744769][ T9452] Cannot create hsr debugfs directory
[  494.931005][ T3987] usb 4-1: USB disconnect, device number 15
[  494.941524][ T3987] usblp0: removed
[  494.945210][ T3658] Bluetooth: hci3: command tx timeout
[  496.030011][ T9547] Bluetooth: Found 0 CAPI controller(s) on device 10:aa:aa:aa:aa:aa
[  496.155071][ T3631] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  496.445330][ T3631] usb 3-1: Using ep0 maxpacket: 8
[  496.576056][ T3631] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  496.622323][ T3631] usb 3-1: config 0 has no interface number 0
[  496.738848][ T3631] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  496.934961][ T3631] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  496.979291][    C1] eth0: bad gso: type: 1, size: 1408
[  497.016971][ T3631] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  497.035054][ T3657] Bluetooth: hci3: command tx timeout
[  497.083628][ T3631] usb 3-1: config 0 descriptor??
[  497.186506][ T3631] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  498.411011][ T6574] device hsr_slave_0 left promiscuous mode
[  498.418737][ T6574] device hsr_slave_1 left promiscuous mode
[  498.433785][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  498.451193][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_0
[  498.518334][ T9583] loop1: detected capacity change from 0 to 1764
[  498.562217][ T9583] iso9660: Corrupted directory entry in block 0 of inode 1792
[  498.587389][ T9583] iso9660: Corrupted directory entry in block 0 of inode 1792
[  498.607697][ T6574] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  498.622352][ T6574] batman_adv: batadv0: Removing interface: batadv_slave_1
[  498.657023][ T6574] device bridge_slave_1 left promiscuous mode
[  498.674090][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state
[  498.751810][ T6574] device bridge_slave_0 left promiscuous mode
[  498.791413][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state
[  499.015354][ T6574] device veth1_macvtap left promiscuous mode
[  499.095406][ T3657] Bluetooth: hci3: command tx timeout
[  499.207255][ T6574] device veth0_macvtap left promiscuous mode
[  499.213587][ T6574] device veth1_vlan left promiscuous mode
[  499.220043][ T6574] device veth0_vlan left promiscuous mode
[  500.333197][ T3990] usb 3-1: USB disconnect, device number 15
[  500.342118][ T3990] iowarrior 3-1:0.1: I/O-Warror #0 now disconnected
[  500.470702][ T9600] loop2: detected capacity change from 0 to 64
[  500.564767][ T9596] loop1: detected capacity change from 0 to 4096
[  500.627561][ T9590] loop4: detected capacity change from 0 to 32768
[  500.704733][ T9600] syz.2.1451: attempt to access beyond end of device
[  500.704733][ T9600] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  500.724790][ T9600] Buffer I/O error on dev loop2, logical block 134217734, lost async page write
[  501.396690][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  501.435753][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  502.446334][ T6574] team0 (unregistering): Port device team_slave_1 removed
[  502.515384][ T6574] team0 (unregistering): Port device team_slave_0 removed
[  502.576927][ T6574] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  502.644530][ T6574] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  503.485659][ T6574] bond0 (unregistering): Released all slaves
[  503.603065][ T9609] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1454'.
[  503.662136][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  503.684696][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  503.697800][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  503.821850][ T9614] infiniband syz2: set active
[  503.827312][ T9614] infiniband syz2: added ip6gretap0
[  503.841747][ T9614] rdma_rxe: unable to create cq
[  503.848127][ T9614] infiniband syz2: Couldn't create ib_mad CQ
[  503.855178][ T9614] infiniband syz2: Couldn't open port 1
[  503.934218][ T9623] loop3: detected capacity change from 0 to 128
[  504.040079][ T9614] RDS/IB: syz2: added
[  504.045375][ T9614] smc: adding ib device syz2 with port count 1
[  504.051982][ T9614] smc:    ib device syz2 port 1 has pnetid 
[  504.148957][ T6875] ip6gretap0 speed is unknown, defaulting to 1000
[  504.431834][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  504.959109][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  505.048258][ T3691] ip6gretap0 speed is unknown, defaulting to 1000
[  505.080392][ T9625] device syzkaller0 entered promiscuous mode
[  505.102298][ T9621] loop1: detected capacity change from 0 to 512
[  505.261316][ T9621] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.1464: casefold flag without casefold feature
[  505.280559][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  505.365686][ T9621] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.1464: invalid block
[  505.538955][ T9621] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.1464: error while reading EA inode 12 err=-117
[  505.577206][ T9621] EXT4-fs (loop1): 1 orphan inode deleted
[  505.591572][ T9621] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  505.691237][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  505.775190][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  505.861087][ T9614] ip6gretap0 speed is unknown, defaulting to 1000
[  506.105710][ T9639] loop2: detected capacity change from 0 to 4096
[  506.155730][ T7585] EXT4-fs (loop1): unmounting filesystem.
[  506.251489][ T9648] loop4: detected capacity change from 0 to 2048
[  506.362532][ T9648]  loop4: p1 < > p3 p4 < >
[  506.385890][ T9648] loop4: p3 start 4284289 is beyond EOD, truncated
[  506.896491][ T9452] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  507.244404][ T9452] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  507.704818][ T9452] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  507.818857][ T9452] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  507.965132][   T22] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  508.166730][ T9683] loop2: detected capacity change from 0 to 2048
[  509.045774][   T22] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  511.075077][   T22] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  511.082634][ T9683] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  511.151273][   T22] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  511.199146][   T22] usb 5-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  511.267221][   T22] usb 5-1: config 1 interface 1 has no altsetting 0
[  511.291385][ T9687] loop3: detected capacity change from 0 to 512
[  511.308936][   T22] usb 5-1: string descriptor 0 read error: -71
[  511.360765][   T22] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  511.389293][ T9452] 8021q: adding VLAN 0 to HW filter on device bond0
[  511.404873][ T9687] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  511.423598][   T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  511.472650][ T9687] EXT4-fs (loop3): warning: maximal mount count reached, running e2fsck is recommended
[  511.524073][ T9687] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.1483: inode #15: comm syz.3.1483: iget: illegal inode #
[  511.537301][   T22] usb 5-1: can't set config #1, error -71
[  511.561140][   T22] usb 5-1: USB disconnect, device number 10
[  511.606186][ T9452] 8021q: adding VLAN 0 to HW filter on device team0
[  511.636024][ T9687] EXT4-fs (loop3): Remounting filesystem read-only
[  511.648426][ T9687] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.1483: couldn't read orphan inode 15 (err -117)
[  511.666357][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  511.683655][ T9687] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  511.685030][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  511.758599][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  511.785848][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  511.815968][ T3689] bridge0: port 1(bridge_slave_0) entered blocking state
[  511.823171][ T3689] bridge0: port 1(bridge_slave_0) entered forwarding state
[  511.841755][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  511.862394][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  511.879252][ T8092] EXT4-fs (loop3): unmounting filesystem.
[  511.888257][ T3689] bridge0: port 2(bridge_slave_1) entered blocking state
[  511.895464][ T3689] bridge0: port 2(bridge_slave_1) entered forwarding state
[  511.953413][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  511.962934][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  511.993354][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  512.042594][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  512.083775][ T5310] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  512.150289][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  512.177018][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  512.203014][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  512.242845][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  512.290502][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  512.323561][ T9452] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  512.411268][ T9452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  512.447661][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  512.465894][ T3631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  512.882707][ T3946] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  512.925260][   T22] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  512.947547][ T3946] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  513.185391][   T22] usb 4-1: Using ep0 maxpacket: 8
[  513.222441][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  513.231966][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  513.282041][ T9452] 8021q: adding VLAN 0 to HW filter on device batadv0
[  513.315395][   T22] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  513.359617][   T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  513.400860][   T22] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  513.414560][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  513.449387][   T22] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  513.456095][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  513.511389][   T22] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  513.553609][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  513.569628][ T9742] netlink: 'syz.2.1487': attribute type 11 has an invalid length.
[  513.645175][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  513.666061][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  513.680381][ T9452] device veth0_vlan entered promiscuous mode
[  513.688876][ T9724] delete_channel: no stack
[  513.701234][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  513.722308][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  513.763851][ T9452] device veth1_vlan entered promiscuous mode
[  513.856335][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  513.885174][   T22] usb 4-1: usb_control_msg returned -32
[  513.890823][   T22] usbtmc 4-1:16.0: can't read capabilities
[  513.895318][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  513.915411][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  513.947311][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  514.001427][ T9452] device veth0_macvtap entered promiscuous mode
[  514.028531][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  514.053534][ T9746] tun0: tun_chr_ioctl cmd 1074025675
[  514.101376][ T9746] tun0: persist enabled
[  514.122085][ T9452] device veth1_macvtap entered promiscuous mode
[  514.146545][ T9749] tun0: tun_chr_ioctl cmd 1074025675
[  514.172374][ T9749] tun0: persist enabled
[  514.233129][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.260680][ T9748] loop4: detected capacity change from 0 to 8192
[  514.287545][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.308146][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.330771][ T9748] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  514.349651][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.386694][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.437810][ T9748] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  514.475183][ T9748] REISERFS (device loop4): using ordered data mode
[  514.481974][ T9748] reiserfs: using flush barriers
[  514.487508][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.505573][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  514.513466][ T9748] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  514.522171][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.546194][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_0
[  514.557479][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  514.569574][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  514.581295][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.593236][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.615453][ T9748] REISERFS (device loop4): checking transaction log (loop4)
[  514.643723][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.659353][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.673725][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.695062][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.714553][ T9452] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  514.738398][ T9452] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  514.766871][ T9452] batman_adv: batadv0: Interface activated: batadv_slave_1
[  514.801957][ T9452] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  514.824503][ T9452] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  514.858739][ T9748] REISERFS (device loop4): Using tea hash to sort names
[  514.878416][ T9452] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  514.895347][ T9748] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  514.914974][ T9452] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  514.940646][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  514.960427][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  515.202647][ T4091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.203737][ T9754] loop2: detected capacity change from 0 to 32768
[  515.225654][ T4091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.254062][ T9754] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1490 (9754)
[  515.309132][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  515.374260][ T4091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  515.411790][ T9754] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  515.436966][ T4091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  515.469971][ T9754] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  515.511693][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  515.522861][ T9754] BTRFS info (device loop2): setting nodatacow, compression disabled
[  515.584355][ T9754] BTRFS info (device loop2): setting datacow
[  515.622502][ T9754] BTRFS info (device loop2): doing ref verification
[  515.676089][ T9754] BTRFS info (device loop2): force clearing of disk cache
[  515.683287][ T9754] BTRFS info (device loop2): turning off barriers
[  515.735800][   T22] usb 4-1: USB disconnect, device number 16
[  515.776869][ T9754] BTRFS info (device loop2): enabling ssd optimizations
[  515.785222][ T9754] BTRFS info (device loop2): using spread ssd allocation scheme
[  515.792972][ T9754] BTRFS info (device loop2): not using ssd optimizations
[  515.819678][ T9754] BTRFS info (device loop2): not using spread ssd allocation scheme
[  515.848550][ T9754] BTRFS info (device loop2): using free space tree
[  515.883176][   T26] audit: type=1326 audit(1722862867.053:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9781 comm="syz.4.1493" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd0bb3779f9 code=0x0
[  516.051772][ T9754] BTRFS info (device loop2): rebuilding free space tree
[  516.107139][ T3990] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  516.234243][   T26] audit: type=1800 audit(1722862867.403:422): pid=9754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1490" name="bus" dev="loop2" ino=263 res=0 errno=0
[  516.265254][  T153] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  516.480286][ T6619] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  516.495184][ T3990] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  516.515251][  T153] usb 5-1: Using ep0 maxpacket: 8
[  516.541432][ T3990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 31, changing to 7
[  516.605168][ T3990] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  516.646979][  T153] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  516.675461][  T153] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  516.695368][  T153] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  516.741119][  T153] usb 5-1: config 250 has no interface number 0
[  516.795549][  T153] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  516.845304][  T153] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  516.865325][ T3990] usb 1-1: string descriptor 0 read error: -22
[  516.871641][ T3990] usb 1-1: New USB device found, idVendor=2013, idProduct=0251, bcdDevice=e8.6e
[  516.905074][  T153] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  516.925080][ T3990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.929931][ T9821] loop1: detected capacity change from 0 to 16
[  516.955033][  T153] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  516.976192][ T3990] usb 1-1: config 0 descriptor??
[  517.004294][  T153] usb 5-1: config 250 interface 228 has no altsetting 0
[  517.017703][ T3990] em28xx 1-1:0.0: New device   @ 480 Mbps (2013:0251, interface 0, class 0)
[  517.022092][ T9821] erofs: (device loop1): mounted with root inode @ nid 36.
[  517.055297][ T3990] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  517.175533][  T153] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  517.206499][  T153] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  517.260384][  T153] usb 5-1: Product: syz
[  517.272266][  T153] usb 5-1: SerialNumber: syz
[  517.337147][  T153] hub 5-1:250.228: bad descriptor, ignoring hub
[  517.345298][ T3990] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  517.362550][  T153] hub: probe of 5-1:250.228 failed with error -5
[  517.370276][ T3990] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  517.425585][ T3990] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  517.440608][ T3990] em28xx 1-1:0.0: No AC97 audio processor
[  518.015220][   T26] audit: type=1800 audit(1722862869.133:423): pid=9830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1500" name="file3" dev="loop1" ino=89 res=0 errno=0
[  518.044029][ T3657] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000]
[  518.220780][  T153] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 11 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  518.238208][ T3990] usb 1-1: USB disconnect, device number 18
[  518.244831][ T3990] em28xx 1-1:0.0: Disconnecting em28xx
[  518.265535][ T3990] em28xx 1-1:0.0: Freeing device
[  518.305957][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1502'.
[  518.469022][ T9837] loop1: detected capacity change from 0 to 64
[  518.614952][    C1] usblp0: nonzero read bulk status received: -71
[  518.643031][ T9844] netlink: 131740 bytes leftover after parsing attributes in process `syz.2.1496'.
[  518.715127][ T9844] netlink: zone id is out of range
[  518.720308][ T9844] netlink: zone id is out of range
[  518.755228][ T9844] netlink: zone id is out of range
[  518.755588][  T155] usb 5-1: USB disconnect, device number 11
[  518.760703][ T9844] netlink: del zone limit has 8 unknown bytes
[  518.808068][  T155] usblp0: removed
[  518.925712][ T9855] vivid-000: =================  START STATUS  =================
[  518.975510][ T9855] vivid-000: Generate PTS: true
[  518.995032][ T9855] vivid-000: Generate SCR: true
[  519.021400][ T9855] tpg source WxH: 320x180 (R'G'B)
[  519.046206][ T9855] tpg field: 1
[  519.057691][ T9855] tpg crop: 320x180@0x0
[  519.074245][ T9855] tpg compose: 320x180@0x0
[  519.104218][ T9855] tpg colorspace: 8
[  519.116871][ T9860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1509'.
[  519.123476][ T9855] tpg transfer function: 0/0
[  519.144830][ T9855] tpg quantization: 0/0
[  519.159632][ T9855] tpg RGB range: 0/2
[  519.172582][ T9855] vivid-000: ==================  END STATUS  ==================
[  519.243437][ T9858] loop2: detected capacity change from 0 to 4096
[  519.423274][ T9858] ntfs: volume version 3.1.
[  519.655705][ T9871] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  519.671187][ T9871] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  520.355852][ T9888] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1518'.
[  520.684999][ T3691] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  520.902929][ T9903] loop0: detected capacity change from 0 to 512
[  520.925020][ T3691] usb 4-1: Using ep0 maxpacket: 16
[  520.932086][ T9903] EXT4-fs (loop0): 1 truncate cleaned up
[  520.938088][ T9903] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  520.947027][ T9870] loop1: detected capacity change from 0 to 32768
[  520.965098][ T9903] EXT4-fs error (device loop0): ext4_add_entry:2484: inode #2: comm syz.0.1524: Directory hole found for htree leaf block 0
[  520.989608][ T9903] EXT4-fs (loop0): Remounting filesystem read-only
[  521.015425][ T9870] XFS: ikeep mount option is deprecated.
[  521.045406][ T3691] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  521.092627][ T3691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  521.147850][ T9902] device veth1_macvtap left promiscuous mode
[  521.153993][ T9902] device macsec0 entered promiscuous mode
[  521.170498][ T3691] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  521.200567][ T3691] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  521.225025][ T9870] XFS (loop1): Mounting V5 Filesystem
[  521.817533][ T9870] XFS (loop1): Ending clean mount
[  521.838403][ T9870] XFS (loop1): Quotacheck needed: Please wait.
[  521.845866][ T9906] ip6gretap0 speed is unknown, defaulting to 1000
[  521.953827][ T9452] EXT4-fs (loop0): unmounting filesystem.
[  522.051848][ T9870] XFS (loop1): Quotacheck: Done.
[  522.055102][ T3658] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  522.069749][ T3658] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  522.076727][ T3691] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=54.21
[  522.076763][ T3691] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.076785][ T3691] usb 4-1: Product: syz
[  522.076802][ T3691] usb 4-1: Manufacturer: syz
[  522.076819][ T3691] usb 4-1: SerialNumber: syz
[  522.078872][ T3691] usb 4-1: config 0 descriptor??
[  522.125556][ T3658] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  522.136834][ T3658] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  522.147469][ T3658] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  522.158399][ T3658] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  522.327311][ T3691] imon_raw 4-1:0.0: IR endpoint missing
[  522.367746][ T9918] ip6gretap0 speed is unknown, defaulting to 1000
[  522.557440][ T3987] usb 4-1: USB disconnect, device number 17
[  522.577533][ T7585] XFS (loop1): Unmounting Filesystem
[  522.956982][ T9921] loop0: detected capacity change from 0 to 32768
[  522.991645][ T9921] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1525 (9921)
[  523.091464][ T9921] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  523.115112][ T9921] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  523.123998][ T9921] BTRFS info (device loop0): using free space tree
[  523.365402][ T9921] BTRFS info (device loop0): enabling ssd optimizations
[  523.503091][ T9961] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1529'.
[  523.555089][ T9961] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1529'.
[  523.600653][ T9452] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  523.649784][   T26] audit: type=1326 audit(1722862874.823:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9962 comm="syz.1.1527" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8c169779f9 code=0x0
[  523.700972][ T9918] chnl_net:caif_netlink_parms(): no params data found
[  524.040917][ T9972] loop4: detected capacity change from 0 to 4096
[  524.060129][ T9972] ntfs3: Invalid value for fmask.
[  524.189853][ T3658] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  524.218335][ T3658] Bluetooth: hci5: command tx timeout
[  524.384975][ T3986] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  524.903012][ T9986] loop4: detected capacity change from 0 to 1024
[  524.944971][ T3986] usb 2-1: Using ep0 maxpacket: 8
[  524.989593][ T9985] loop0: detected capacity change from 0 to 256
[  525.036536][ T3732] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  525.075207][ T3986] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  525.088096][ T3986] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  525.107998][ T3986] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  525.118194][ T3986] usb 2-1: config 250 has no interface number 0
[  525.125306][ T3986] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  525.137124][ T3986] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  525.147879][ T3986] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  525.168918][ T3986] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  525.191454][ T3986] usb 2-1: config 250 interface 228 has no altsetting 0
[  525.274011][    C1] eth0: bad gso: type: 1, size: 1408
[  525.276191][ T9918] bridge0: port 1(bridge_slave_0) entered blocking state
[  525.315750][ T3986] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  525.350390][ T9918] bridge0: port 1(bridge_slave_0) entered disabled state
[  525.353385][T10000] loop3: detected capacity change from 0 to 128
[  525.364961][ T3986] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  525.373274][ T3986] usb 2-1: Product: syz
[  525.386137][ T9918] device bridge_slave_0 entered promiscuous mode
[  525.407942][ T3986] usb 2-1: SerialNumber: syz
[  525.473803][ T3986] hub 2-1:250.228: bad descriptor, ignoring hub
[  525.487405][ T3986] hub: probe of 2-1:250.228 failed with error -5
[  525.500292][ T9994] loop4: detected capacity change from 0 to 8192
[  525.582788][ T9994] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  525.624592][ T9918] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.652912][ T9994] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  525.669907][ T9918] bridge0: port 2(bridge_slave_1) entered disabled state
[  525.677255][ T9994] REISERFS (device loop4): using ordered data mode
[  525.681884][ T3986] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 15 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  525.685533][ T9994] reiserfs: using flush barriers
[  525.705312][ T9994] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  525.706754][ T9918] device bridge_slave_1 entered promiscuous mode
[  525.722304][ T9994] REISERFS (device loop4): checking transaction log (loop4)
[  525.749968][ T9994] REISERFS (device loop4): Using r5 hash to sort names
[  525.779927][ T9994] reiserfs: enabling write barrier flush mode
[  525.825654][ T9994] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  525.903640][ T9994] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  525.953015][ T9994] REISERFS (device loop4): Remounting filesystem read-only
[  525.969289][ T9994] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  525.995084][ T9994] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  526.057553][ T9994] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  526.074961][    C0] usblp0: nonzero read bulk status received: -71
[  526.125272][ T9994] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error
[  526.138375][ T9994] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  526.160058][T10018] loop3: detected capacity change from 0 to 1024
[  526.173693][ T9994] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  526.214030][ T9994] REISERFS error (device loop4): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 1 0x0 SD] stat data
[  526.239399][ T9994] REISERFS warning (device loop4): jdm-20006 create_privroot: xattrs/ACLs enabled and couldn't find/create .reiserfs_priv. Failing mount.
[  526.255388][ T3986] usb 2-1: USB disconnect, device number 15
[  526.274448][ T3986] usblp0: removed
[  526.277383][T10018] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  526.292090][T10018] ext4 filesystem being mounted at /111/file1 supports timestamps until 2038 (0x7fffffff)
[  526.306698][ T3658] Bluetooth: hci5: command tx timeout
[  526.315825][ T9918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  526.371374][ T9918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  526.376584][ T9994] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 3937, free_space(entry_count) 2
[  526.432218][ T9994] REISERFS error (device loop4): vs-5150 search_by_key: invalid format found in block 531. Fsck?
[  526.498595][ T9994] REISERFS (device loop4): Remounting filesystem read-only
[  526.525037][ T9994] REISERFS error (device loop4): zam-7001 reiserfs_find_entry: io error
[  526.653119][ T9918] team0: Port device team_slave_0 added
[  526.660129][ T8092] EXT4-fs (loop3): unmounting filesystem.
[  526.799339][ T9918] team0: Port device team_slave_1 added
[  526.873106][ T3946] device hsr_slave_0 left promiscuous mode
[  526.941327][ T3946] device hsr_slave_1 left promiscuous mode
[  526.953346][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  526.992536][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.009653][ T3946] device bridge_slave_1 left promiscuous mode
[  527.019475][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.043727][ T3946] device bridge_slave_0 left promiscuous mode
[  527.050662][ T3946] bridge0: port 1(bridge_slave_0) entered disabled state
[  529.117596][ T3658] Bluetooth: hci5: command tx timeout
[  529.357425][T10033] loop3: detected capacity change from 0 to 262144
[  529.377677][T10033] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.1548 (10033)
[  529.398926][T10033] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  529.409247][T10033] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  529.418611][T10033] BTRFS info (device loop3): using free space tree
[  529.447952][T10033] BTRFS info (device loop3): enabling ssd optimizations
[  529.452908][T10069] loop4: detected capacity change from 0 to 16
[  529.519539][T10069] erofs: (device loop4): mounted with root inode @ nid 36.
[  529.668265][T10048] loop1: detected capacity change from 0 to 32768
[  529.863718][ T8092] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  529.935005][ T3658] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000]
[  529.968248][T10071] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192]
[  530.035379][   T26] audit: type=1800 audit(1722862881.173:425): pid=10071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1556" name="file3" dev="loop4" ino=89 res=0 errno=0
[  530.993638][T10082] loop1: detected capacity change from 0 to 256
[  531.152165][T10082] FAT-fs (loop1): Directory bread(block 64) failed
[  531.164175][T10082] FAT-fs (loop1): Directory bread(block 65) failed
[  531.175026][ T3658] Bluetooth: hci5: command tx timeout
[  531.179873][T10082] FAT-fs (loop1): Directory bread(block 66) failed
[  531.215093][T10082] FAT-fs (loop1): Directory bread(block 67) failed
[  531.222755][T10082] FAT-fs (loop1): Directory bread(block 68) failed
[  531.263935][T10082] FAT-fs (loop1): Directory bread(block 69) failed
[  531.919449][ T3946] team0 (unregistering): Port device team_slave_1 removed
[  531.919596][T10082] FAT-fs (loop1): Directory bread(block 70) failed
[  531.919634][T10082] FAT-fs (loop1): Directory bread(block 71) failed
[  531.941490][T10082] FAT-fs (loop1): Directory bread(block 72) failed
[  531.948837][T10082] FAT-fs (loop1): Directory bread(block 73) failed
[  532.052502][ T6637] kworker/u4:17: attempt to access beyond end of device
[  532.052502][ T6637] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256
[  532.084003][ T3946] team0 (unregistering): Port device team_slave_0 removed
[  532.115009][ T6637] Buffer I/O error on dev loop1, logical block 306, lost async page write
[  532.146068][T10088] syz.1.1560: attempt to access beyond end of device
[  532.146068][T10088] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256
[  532.175123][T10088] Buffer I/O error on dev loop1, logical block 306, lost async page write
[  532.280985][ T3946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  532.401523][ T3946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  532.401753][ T4388] kworker/u4:13: attempt to access beyond end of device
[  532.401753][ T4388] loop1: rw=2049, sector=1224, nr_sectors = 4 limit=256
[  532.428868][ T4388] Buffer I/O error on dev loop1, logical block 306, lost async page write
[  532.690236][T10092] loop1: detected capacity change from 0 to 4096
[  532.699433][T10092] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  533.335483][T10104] loop1: detected capacity change from 0 to 512
[  533.424969][T10105] loop3: detected capacity change from 0 to 22
[  533.434724][T10105] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  533.464331][T10105] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  533.559877][T10104] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  534.014522][T10104] EXT4-fs warning (device loop1): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  534.038623][T10104] EXT4-fs (loop1): 1 truncate cleaned up
[  534.044424][T10104] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  534.294212][ T7585] EXT4-fs error (device loop1): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  534.409438][ T7585] EXT4-fs (loop1): unmounting filesystem.
[  534.416653][ T7585] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  534.746661][ T7585] EXT4-fs error (device loop1): ext4_quota_off:7066: inode #3: comm syz-executor: mark_inode_dirty error
[  535.208718][T10114] loop3: detected capacity change from 0 to 16
[  535.239092][T10114] erofs: (device loop3): mounted with root inode @ nid 36.
[  535.465709][ T3946] bond0 (unregistering): Released all slaves
[  535.599420][ T3657] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[9000]
[  535.677830][T10116] erofs: (device loop3): z_erofs_lz4_decompress_mem: failed to decompress -41 in[4096, 0] out[8192]
[  535.895862][   T26] audit: type=1800 audit(1722862886.923:426): pid=10116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1569" name="file3" dev="loop3" ino=89 res=0 errno=0
[  536.563086][T10123] loop4: detected capacity change from 0 to 16
[  536.658450][T10123] erofs: (device loop4): mounted with root inode @ nid 36.
[  536.734331][T10124] loop0: detected capacity change from 0 to 2048
[  536.783616][ T9918] batman_adv: batadv0: Adding interface: batadv_slave_0
[  536.838728][ T9918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.896707][ T9918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  536.919819][ T9918] batman_adv: batadv0: Adding interface: batadv_slave_1
[  536.935705][ T9918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  536.935939][T10124] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  537.025640][ T9918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  537.398426][ T9918] device hsr_slave_0 entered promiscuous mode
[  537.445549][ T9918] device hsr_slave_1 entered promiscuous mode
[  537.461665][ T9918] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  537.734972][ T9918] Cannot create hsr debugfs directory
[  537.961802][T10120] loop3: detected capacity change from 0 to 32768
[  538.015179][T10144] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1577'.
[  538.062944][T10120] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.1571 (10120)
[  538.103250][ T9452] EXT4-fs (loop0): unmounting filesystem.
[  538.235088][T10120] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  538.251415][T10120] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  538.305270][T10120] BTRFS info (device loop3): setting nodatacow, compression disabled
[  538.313543][T10120] BTRFS info (device loop3): enabling auto defrag
[  538.372933][T10120] BTRFS info (device loop3): max_inline at 0
[  538.392754][T10120] BTRFS info (device loop3): using free space tree
[  538.534341][T10155] loop0: detected capacity change from 0 to 1764
[  539.532081][T10166] loop4: detected capacity change from 0 to 2048
[  539.563919][T10120] BTRFS error (device loop3): open_ctree failed
[  539.655013][T10166] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  539.715689][ T3658] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  539.729463][ T3658] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  539.751784][ T3658] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  539.782835][ T3658] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  539.791148][ T3658] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  539.799063][ T3658] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  539.851764][   T26] audit: type=1800 audit(1722862891.023:427): pid=10166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1580" name="bus" dev="loop4" ino=1367 res=0 errno=0
[  539.974782][    C0] vkms_vblank_simulate: vblank timer overrun
[  540.268724][T10177] ip6gretap0 speed is unknown, defaulting to 1000
[  540.929374][T10197] nicvf0: tun_chr_ioctl cmd 35111
[  541.225697][ T9918] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  541.300706][ T9918] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  541.347615][ T9918] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  541.392237][ T9918] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  541.428222][T10177] chnl_net:caif_netlink_parms(): no params data found
[  541.815083][T10177] bridge0: port 1(bridge_slave_0) entered blocking state
[  541.826958][T10222] loop0: detected capacity change from 0 to 128
[  541.843571][T10177] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.870727][T10177] device bridge_slave_0 entered promiscuous mode
[  541.906734][ T3657] Bluetooth: hci1: command tx timeout
[  541.946041][T10177] bridge0: port 2(bridge_slave_1) entered blocking state
[  541.963109][T10177] bridge0: port 2(bridge_slave_1) entered disabled state
[  542.024291][T10177] device bridge_slave_1 entered promiscuous mode
[  542.155269][ T9918] 8021q: adding VLAN 0 to HW filter on device bond0
[  542.202212][T10229] loop3: detected capacity change from 0 to 1024
[  542.212393][T10177] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  542.265870][T10229] EXT4-fs: Ignoring removed orlov option
[  542.271934][T10229] EXT4-fs: Ignoring removed nomblk_io_submit option
[  542.274980][ T9918] 8021q: adding VLAN 0 to HW filter on device team0
[  542.329447][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  542.344194][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  542.370489][T10177] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  542.391740][T10229] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  542.558686][T10177] team0: Port device team_slave_0 added
[  542.588540][ T8092] EXT4-fs (loop3): unmounting filesystem.
[  542.638706][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  542.671596][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  542.687273][ T6875] bridge0: port 1(bridge_slave_0) entered blocking state
[  542.694451][ T6875] bridge0: port 1(bridge_slave_0) entered forwarding state
[  542.742126][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  542.767082][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  542.833506][ T6875] bridge0: port 2(bridge_slave_1) entered blocking state
[  542.840717][ T6875] bridge0: port 2(bridge_slave_1) entered forwarding state
[  542.858440][T10247] loop0: detected capacity change from 0 to 1024
[  542.877271][ T6875] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  542.910828][T10247] hfsplus: request for non-existent node -709361664 in B*Tree
[  542.928059][T10177] team0: Port device team_slave_1 added
[  542.974993][T10247] hfsplus: request for non-existent node -709361664 in B*Tree
[  542.996976][T10247] hfsplus: b-tree write err: -5, ino 8
[  543.040862][T10177] batman_adv: batadv0: Adding interface: batadv_slave_0
[  543.083811][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  543.122464][T10177] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  543.221749][T10247] loop0: detected capacity change from 0 to 1024
[  543.237386][T10247] ext4: Bad value for 'sb'
[  543.243917][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  543.258760][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  543.287474][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  543.306304][ T3732] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  543.335979][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  543.336046][T10259] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  543.382338][T10177] batman_adv: batadv0: Adding interface: batadv_slave_1
[  543.399544][T10177] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  543.507245][T10177] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  543.546184][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  543.554425][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  543.574169][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  543.626168][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  543.652701][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  543.675604][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  543.704671][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  543.729765][ T9918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  543.908989][T10177] device hsr_slave_0 entered promiscuous mode
[  543.938256][T10177] device hsr_slave_1 entered promiscuous mode
[  543.953952][T10273] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  543.975012][ T3657] Bluetooth: hci1: command tx timeout
[  544.000383][T10177] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  544.014598][T10177] Cannot create hsr debugfs directory
[  544.067558][T10276] usb usb7: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  544.682930][T10286] loop3: detected capacity change from 0 to 8192
[  544.739475][T10286] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  544.810149][T10177] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  544.840730][T10264] loop0: detected capacity change from 0 to 32768
[  544.851510][T10264] XFS: ikeep mount option is deprecated.
[  544.868514][T10264] XFS: ikeep mount option is deprecated.
[  545.039853][T10264] XFS (loop0): Mounting V5 Filesystem
[  545.168020][T10264] XFS (loop0): Ending clean mount
[  545.177457][T10177] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.279211][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  545.292593][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  545.461995][ T9918] 8021q: adding VLAN 0 to HW filter on device batadv0
[  545.487235][ T9452] XFS (loop0): Unmounting Filesystem
[  545.633941][T10177] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  545.794681][T10312] ceph: No source
[  545.864547][T10177] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  546.041930][T10320] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1610'.
[  546.055385][ T3657] Bluetooth: hci1: command tx timeout
[  546.067715][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  546.086254][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  546.281589][ T9918] device veth0_vlan entered promiscuous mode
[  546.331551][T10327] netlink: 'syz.4.1612': attribute type 1 has an invalid length.
[  546.340390][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  546.352113][T10330] loop3: detected capacity change from 0 to 512
[  546.366144][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  546.416622][ T9918] device veth1_vlan entered promiscuous mode
[  546.439196][T10330] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  546.505255][T10330] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038 (0x7fffffff)
[  546.533130][T10330] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.1611: bg 0: block 344: padding at end of block bitmap is not set
[  546.565808][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  546.565841][T10330] Quota error (device loop3): write_blk: dquota write failed
[  546.583416][T10330] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  546.594768][T10330] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  546.605655][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  546.626288][T10330] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz.3.1611: Failed to acquire dquot type 1
[  546.776401][ T8092] EXT4-fs (loop3): unmounting filesystem.
[  546.792860][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  546.813533][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  546.834701][ T9918] device veth0_macvtap entered promiscuous mode
[  547.046516][ T9918] device veth1_macvtap entered promiscuous mode
[  547.109277][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.122682][T10325] loop0: detected capacity change from 0 to 32768
[  547.129244][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.148440][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.163895][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.184549][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.186145][T10325] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.1606 (10325)
[  547.196868][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.223528][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.234764][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.245099][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  547.254187][T10345] loop4: detected capacity change from 0 to 4096
[  547.257608][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.274335][ T9918] batman_adv: batadv0: Interface activated: batadv_slave_0
[  547.289170][T10345] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  547.307326][T10325] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  547.341612][T10325] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  547.404822][T10325] BTRFS info (device loop0): using free space tree
[  547.424814][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  547.446579][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  547.456810][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  547.467710][ T5309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  547.480770][T10177] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  547.527012][T10177] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  547.537012][ T8807] ntfs3: loop4: ntfs_sync_fs r=1a failed, -22.
[  547.556715][T10177] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  547.566347][ T8807] ntfs3: loop4: ntfs_evict_inode r=1a failed, -22.
[  547.572918][ T8807] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  547.655966][T10325] BTRFS info (device loop0): enabling ssd optimizations
[  547.727326][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.744949][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.764950][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.794978][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.820215][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.859427][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.890710][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.915073][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.926910][ T9918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  547.943322][ T9918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  547.955434][ T9452] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  547.980792][ T9918] batman_adv: batadv0: Interface activated: batadv_slave_1
[  547.997547][T10177] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  548.065993][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  548.108739][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  548.141270][ T3657] Bluetooth: hci1: command tx timeout
[  548.632077][ T9918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  548.652721][T10346] loop3: detected capacity change from 0 to 65536
[  548.742674][ T9918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  548.782180][ T9918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  548.812645][ T9918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  548.848214][T10346] XFS (loop3): Mounting V5 Filesystem
[  548.956968][T10384] loop4: detected capacity change from 0 to 256
[  549.084728][T10346] XFS (loop3): Ending clean mount
[  549.122230][T10346] XFS (loop3): Quotacheck needed: Please wait.
[  549.337514][T10346] XFS (loop3): Quotacheck: Done.
[  549.459975][ T7442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.471376][ T8092] XFS (loop3): Unmounting Filesystem
[  549.477117][ T7442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.497208][ T3658] Bluetooth: hci0: command 0x0406 tx timeout
[  549.504560][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  549.602893][T10372] loop0: detected capacity change from 0 to 40427
[  549.612239][T10177] 8021q: adding VLAN 0 to HW filter on device bond0
[  549.784233][ T6637] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  549.785967][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  549.822484][T10372] F2FS-fs (loop0): Found nat_bits in checkpoint
[  549.829962][ T3986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  549.843724][T10177] 8021q: adding VLAN 0 to HW filter on device team0
[  549.863350][ T6637] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  549.918246][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  549.946956][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  549.963728][ T3987] bridge0: port 1(bridge_slave_0) entered blocking state
[  549.970936][ T3987] bridge0: port 1(bridge_slave_0) entered forwarding state
[  550.015485][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  550.023726][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  550.067523][T10372] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  550.174542][ T3946] device hsr_slave_0 left promiscuous mode
[  550.186612][ T9452] syz-executor: attempt to access beyond end of device
[  550.186612][ T9452] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  550.211448][ T3946] device hsr_slave_1 left promiscuous mode
[  550.262180][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  550.278847][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_0
[  550.296162][ T3946] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  550.313928][ T3946] batman_adv: batadv0: Removing interface: batadv_slave_1
[  550.324759][ T3946] device bridge_slave_1 left promiscuous mode
[  550.355270][ T3946] bridge0: port 2(bridge_slave_1) entered disabled state
[  550.417497][ T3946] device bridge_slave_0 left promiscuous mode
[  550.423760][ T3946] bridge0: port 1(bridge_slave_0) entered disabled state
[  550.564600][ T3946] device veth1_macvtap left promiscuous mode
[  550.599442][ T3946] device veth0_macvtap left promiscuous mode
[  550.620736][ T3946] device veth1_vlan left promiscuous mode
[  550.641469][ T3946] device veth0_vlan left promiscuous mode
[  551.076867][T10399] loop4: detected capacity change from 0 to 1024
[  551.114247][T10399] JBD2: no valid journal superblock found
[  551.147929][T10399] EXT4-fs (loop4): error loading journal
[  551.450854][T10392] loop2: detected capacity change from 0 to 32768
[  551.572315][T10392] XFS (loop2): Mounting V5 Filesystem
[  551.574003][T10410] loop4: detected capacity change from 0 to 1024
[  551.637463][T10410] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  551.660944][T10392] XFS (loop2): Ending clean mount
[  551.661243][T10410] EXT4-fs (loop4): orphan cleanup on readonly fs
[  551.676809][T10410] EXT4-fs error (device loop4): ext4_free_blocks:6213: comm syz.4.1629: Freeing blocks not in datazone - block = 0, count = 4096
[  551.689735][T10392] XFS (loop2): Quotacheck needed: Please wait.
[  551.724418][T10410] EXT4-fs (loop4): 1 orphan inode deleted
[  551.762644][T10410] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  551.809191][T10392] XFS (loop2): Quotacheck: Done.
[  551.852476][T10410] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz.4.1629: path /69/file1: bad entry in directory: inode out of bounds - offset=44, inode=40, rec_len=16, size=1024 fake=0
[  551.877764][ T9918] XFS (loop2): Unmounting Filesystem
[  551.880572][T10410] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 17: comm syz.4.1629: path /69/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  551.942418][T10410] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 18: comm syz.4.1629: path /69/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  551.992466][T10410] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 19: comm syz.4.1629: path /69/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  552.037877][T10410] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 20: comm syz.4.1629: path /69/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  552.087035][T10410] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 21: comm syz.4.1629: path /69/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  552.122088][T10410] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 22: comm syz.4.1629: path /69/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  552.149899][T10410] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 23: comm syz.4.1629: path /69/file1: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  552.236753][ T8807] EXT4-fs (loop4): unmounting filesystem.
[  552.470796][T10420] loop4: detected capacity change from 0 to 1024
[  552.703273][T10424] loop4: detected capacity change from 0 to 128
[  552.752073][T10424] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  552.834047][T10424] ext4 filesystem being mounted at /72/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  552.997287][T10424] EXT4-fs warning (device loop4): ext4_dirblock_csum_set:427: inode #2: comm syz.4.1633: No space for directory leaf checksum. Please run e2fsck -D.
[  553.068961][ T8807] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=1012, inode=3723865156, rec_len=48061, size=1024 fake=0
[  553.090397][    C1] eth0: bad gso: type: 1, size: 1408
[  553.098785][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.118270][ T3946] team0 (unregistering): Port device team_slave_1 removed
[  553.118736][ T8807] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0
[  553.160374][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.178084][ T8807] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  553.192990][ T8807] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048
[  553.208070][ T8807] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  553.223078][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.239183][ T8807] EXT4-fs error (device loop4): ext4_empty_dir:3137: inode #11: comm syz-executor: Directory block failed checksum
[  553.274766][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.277829][T10434] loop2: detected capacity change from 0 to 4096
[  553.300984][ T8807] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 0
[  553.316825][ T3946] team0 (unregistering): Port device team_slave_0 removed
[  553.330911][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.369485][ T8807] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  553.390705][ T8807] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 2048
[  553.411837][ T8807] EXT4-fs error (device loop4): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  553.435057][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.453149][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.469315][ T3946] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  553.491108][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.553012][ T8807] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #11: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  553.651428][ T3946] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  554.598445][ T3946] bond0 (unregistering): Released all slaves
[  554.704972][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  554.713766][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  554.723486][ T3987] bridge0: port 2(bridge_slave_1) entered blocking state
[  554.730642][ T3987] bridge0: port 2(bridge_slave_1) entered forwarding state
[  554.738511][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  554.747518][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  554.756571][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  554.766500][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  554.775367][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  554.784540][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  554.794127][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  554.802923][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  554.812757][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  554.822736][T10436] netlink: 2 bytes leftover after parsing attributes in process `syz.2.1639'.
[  555.046209][ T8807] EXT4-fs (loop4): unmounting filesystem.
[  555.051836][T10177] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  555.124139][T10177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  555.157698][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  555.176971][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  555.569770][T10450] loop3: detected capacity change from 0 to 256
[  555.657934][T10450] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  555.947982][T10177] 8021q: adding VLAN 0 to HW filter on device batadv0
[  555.976805][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  555.994831][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  556.053660][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  556.064270][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  556.140971][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  556.170164][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  556.199433][T10177] device veth0_vlan entered promiscuous mode
[  556.223978][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  556.249670][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  556.277143][T10439] loop0: detected capacity change from 0 to 40427
[  556.291879][T10439] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  556.326012][ T3658] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  556.336408][T10177] device veth1_vlan entered promiscuous mode
[  556.342165][ T3658] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  556.375891][ T3658] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  556.387281][T10439] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  556.403207][ T3658] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  556.410916][ T3658] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  556.419287][ T3658] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  556.437052][T10439] F2FS-fs (loop0): invalid crc value
[  556.466531][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  556.500450][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  556.532883][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  556.562658][T10439] F2FS-fs (loop0): Found nat_bits in checkpoint
[  556.580381][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  556.680503][T10464] ip6gretap0 speed is unknown, defaulting to 1000
[  556.689832][T10177] device veth0_macvtap entered promiscuous mode
[  556.735214][ T3990] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  556.753534][T10177] device veth1_macvtap entered promiscuous mode
[  556.926925][T10477] hub 6-0:1.0: USB hub found
[  556.936192][T10477] hub 6-0:1.0: 1 port detected
[  557.068596][T10477] Invalid ELF header magic: != ELF
[  557.515707][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.538004][T10439] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  557.555030][T10439] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  557.585119][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.596691][   T26] audit: type=1804 audit(1722862908.763:428): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1640" name="/newroot/30/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  557.618098][    C0] vkms_vblank_simulate: vblank timer overrun
[  557.657380][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.670752][T10439] syz.0.1640: attempt to access beyond end of device
[  557.670752][T10439] loop0: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  557.691492][T10481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1657'.
[  557.701311][   T26] audit: type=1804 audit(1722862908.773:429): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1640" name="/newroot/30/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  557.712640][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.772861][T10482] loop3: detected capacity change from 0 to 512
[  557.774427][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.782831][   T26] audit: type=1804 audit(1722862908.813:430): pid=10439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1640" name="/newroot/30/bus/bus" dev="loop0" ino=10 res=1 errno=0
[  557.822996][T10482] ext4: Unknown parameter 'noacl'
[  557.823251][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.865079][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.886701][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.907010][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  557.927808][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  557.947507][T10177] batman_adv: batadv0: Interface activated: batadv_slave_0
[  557.979591][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  557.995921][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  558.029157][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.074915][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.084793][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.129736][T10486] loop3: detected capacity change from 0 to 256
[  558.136238][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.171956][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.185236][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.214372][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.234923][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.260500][T10177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  558.271574][T10177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  558.318926][T10177] batman_adv: batadv0: Interface activated: batadv_slave_1
[  558.347794][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  558.359009][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  558.372745][T10487] loop2: detected capacity change from 0 to 4096
[  558.395983][T10487] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  558.423525][T10177] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  558.437614][T10177] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  558.453310][T10177] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  558.472948][T10487] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  558.486719][ T4091] kworker/u4:11: attempt to access beyond end of device
[  558.486719][ T4091] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  558.491301][T10177] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  558.524799][T10487] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovering invalid primary boot sector from backup copy.
[  558.537454][ T3658] Bluetooth: hci4: command tx timeout
[  558.575668][T10487] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 2) do not match.  Run ntfsfix or chkdsk.
[  558.634458][T10487] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  558.857883][T10487] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  558.922023][T10487] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  558.963035][T10487] ntfs: volume version 3.1.
[  559.124233][ T7442] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.141119][T10492] ip6gretap0 speed is unknown, defaulting to 1000
[  559.162158][ T7442] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.298840][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  559.338621][T10489] xt_CONNSECMARK: invalid mode: 0
[  559.400887][ T3845] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  559.425866][T10464] chnl_net:caif_netlink_parms(): no params data found
[  559.441813][ T3845] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  559.484803][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  560.473850][T10506] loop0: detected capacity change from 0 to 16
[  560.516845][T10506] erofs: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿ01777777777777777777777ü«´Ò´Ã9ú¢žç/kD'
[  560.549549][T10464] bridge0: port 1(bridge_slave_0) entered blocking state
[  560.577168][T10464] bridge0: port 1(bridge_slave_0) entered disabled state
[  560.603868][T10464] device bridge_slave_0 entered promiscuous mode
[  560.625296][ T3658] Bluetooth: hci4: command tx timeout
[  560.686869][T10464] bridge0: port 2(bridge_slave_1) entered blocking state
[  560.707616][T10464] bridge0: port 2(bridge_slave_1) entered disabled state
[  560.758545][T10464] device bridge_slave_1 entered promiscuous mode
[  560.820766][T10514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1666'.
[  560.838949][T10514] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1666'.
[  561.016946][T10464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  561.103830][T10464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  561.245793][T10526] loop2: detected capacity change from 0 to 256
[  561.314285][T10529] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1669'.
[  561.737768][T10526] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  562.161823][T10464] team0: Port device team_slave_0 added
[  562.199238][T10464] team0: Port device team_slave_1 added
[  562.300588][T10464] batman_adv: batadv0: Adding interface: batadv_slave_0
[  562.328120][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.402699][T10464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  562.445207][  T153] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  562.504500][T10464] batman_adv: batadv0: Adding interface: batadv_slave_1
[  562.512317][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  562.539903][T10464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  562.695270][ T3658] Bluetooth: hci4: command tx timeout
[  562.778867][ T1267] ieee802154 phy0 wpan0: encryption failed: -22
[  562.803658][ T1267] ieee802154 phy1 wpan1: encryption failed: -22
[  562.819619][  T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  562.875098][  T153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  562.912228][  T153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  562.934364][  T153] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  562.944206][  T153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  562.973746][  T153] usb 1-1: config 0 descriptor??
[  563.005601][T10527] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  563.166106][T10464] device hsr_slave_0 entered promiscuous mode
[  563.211385][T10540] loop2: detected capacity change from 0 to 8192
[  563.219874][T10464] device hsr_slave_1 entered promiscuous mode
[  563.236150][T10464] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  563.243914][T10464] Cannot create hsr debugfs directory
[  563.477358][  T153] plantronics 0003:047F:FFFF.0012: unknown main item tag 0x0
[  563.496343][  T153] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  563.650679][  T153] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  563.853994][   T22] usb 1-1: USB disconnect, device number 19
[  563.950257][T10464] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.079694][T10464] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.093132][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  564.093162][   T26] audit: type=1326 audit(1722862915.263:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.1.1679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdfc2f779f9 code=0x0
[  564.190678][   T26] audit: type=1326 audit(1722862915.313:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10552 comm="syz.1.1679" exe="/root/syz-executor" sig=31 arch=c000003e syscall=436 compat=0 ip=0x7fdfc2f779f9 code=0x0
[  564.272547][T10540] FAT-fs (loop2): error, corrupted directory (invalid entries)
[  564.316135][T10540] FAT-fs (loop2): Filesystem has been set read-only
[  564.338723][T10547] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  564.353765][T10464] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.464125][T10464] bridge0: port 3(netdevsim0) entered disabled state
[  564.678813][T10464] device netdevsim0 left promiscuous mode
[  564.688205][T10464] bridge0: port 3(netdevsim0) entered disabled state
[  564.770713][T10464] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  564.783731][ T3658] Bluetooth: hci4: command tx timeout
[  564.884553][T10555] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1680'.
[  565.000521][T10559] cgroup: Bad value for 'name'
[  565.008683][T10559] loop0: detected capacity change from 0 to 128
[  565.056252][T10559] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  565.100496][T10559] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  565.125013][ T5311] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  565.323946][T10464] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  565.413352][T10464] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  565.425171][ T5311] usb 3-1: Using ep0 maxpacket: 16
[  565.465826][T10464] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  565.531301][T10464] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  565.565452][ T5311] usb 3-1: config 0 has an invalid interface number: 11 but max is 0
[  565.573692][ T5311] usb 3-1: config 0 has no interface number 0
[  565.618396][ T5311] usb 3-1: too many endpoints for config 0 interface 11 altsetting 255: 255, using maximum allowed: 30
[  565.665595][ T5311] usb 3-1: config 0 interface 11 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  565.690396][ T5311] usb 3-1: config 0 interface 11 has no altsetting 0
[  565.697852][T10563] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1684'.
[  565.868285][T10464] 8021q: adding VLAN 0 to HW filter on device bond0
[  565.885364][ T5311] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice=d2.7b
[  565.911451][ T5311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  565.920727][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  565.939373][ T5311] usb 3-1: Product: syz
[  565.945514][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  565.957618][ T5311] usb 3-1: Manufacturer: syz
[  565.962281][ T5311] usb 3-1: SerialNumber: syz
[  565.986634][ T5311] usb 3-1: config 0 descriptor??
[  566.002417][T10464] 8021q: adding VLAN 0 to HW filter on device team0
[  566.071619][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  566.081334][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  566.115957][ T6842] bridge0: port 1(bridge_slave_0) entered blocking state
[  566.123250][ T6842] bridge0: port 1(bridge_slave_0) entered forwarding state
[  566.174570][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  566.214029][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  566.259035][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  566.288679][ T6842] bridge0: port 2(bridge_slave_1) entered blocking state
[  566.295999][ T6842] bridge0: port 2(bridge_slave_1) entered forwarding state
[  566.306828][ T5311] usb 3-1: Expected 3 endpoints, found: 0
[  566.343374][ T5311] usb 3-1: USB disconnect, device number 16
[  566.355431][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  566.410756][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  566.428875][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  566.467121][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  566.501805][T10569] 
[  566.504250][T10569] ======================================================
[  566.511286][T10569] WARNING: possible circular locking dependency detected
[  566.518319][T10569] 6.1.103-syzkaller #0 Not tainted
[  566.523457][T10569] ------------------------------------------------------
[  566.523733][T10464] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  566.530474][T10569] syz.0.1686/10569 is trying to acquire lock:
[  566.530487][T10569] ffff8880591f9130 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}, at: rfcomm_sk_state_change+0x57/0x300
[  566.530546][T10569] 
[  566.530546][T10569] but task is already holding lock:
[  566.530553][T10569] ffff8880596ce128 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0
[  566.574693][T10569] 
[  566.574693][T10569] which lock already depends on the new lock.
[  566.574693][T10569] 
[  566.585113][T10569] 
[  566.585113][T10569] the existing dependency chain (in reverse order) is:
[  566.594128][T10569] 
[  566.594128][T10569] -> #2 (&d->lock){+.+.}-{3:3}:
[  566.601362][T10569]        lock_acquire+0x1f8/0x5a0
[  566.606407][T10569]        __mutex_lock+0x132/0xd80
[  566.611441][T10569]        rfcomm_dev_ioctl+0x14f8/0x2180
[  566.616994][T10569]        rfcomm_sock_ioctl+0x82/0xc0
[  566.622285][T10569]        sock_do_ioctl+0x152/0x450
[  566.627482][T10569]        sock_ioctl+0x47f/0x770
[  566.632340][T10569]        __se_sys_ioctl+0xf1/0x160
[  566.637463][T10569]        do_syscall_64+0x3b/0xb0
[  566.642430][T10569]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  566.648962][T10569] 
[  566.648962][T10569] -> #1 (rfcomm_dev_lock){+.+.}-{3:3}:
[  566.656719][T10569]        lock_acquire+0x1f8/0x5a0
[  566.661768][T10569]        __mutex_lock+0x132/0xd80
[  566.666813][T10569]        rfcomm_dev_ioctl+0x556/0x2180
[  566.672284][T10569]        rfcomm_sock_ioctl+0x82/0xc0
[  566.677602][T10569]        sock_do_ioctl+0x152/0x450
[  566.682810][T10569]        sock_ioctl+0x47f/0x770
[  566.687846][T10569]        __se_sys_ioctl+0xf1/0x160
[  566.692966][T10569]        do_syscall_64+0x3b/0xb0
[  566.697911][T10569]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  566.704333][T10569] 
[  566.704333][T10569] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM){+.+.}-{0:0}:
[  566.713731][T10569]        validate_chain+0x1661/0x5950
[  566.719108][T10569]        __lock_acquire+0x125b/0x1f80
[  566.724491][T10569]        lock_acquire+0x1f8/0x5a0
[  566.729523][T10569]        lock_sock_nested+0x44/0x100
[  566.734817][T10569]        rfcomm_sk_state_change+0x57/0x300
[  566.740652][T10569]        __rfcomm_dlc_close+0x2b2/0x6d0
[  566.746290][T10569]        rfcomm_dlc_close+0xed/0x180
[  566.751578][T10569]        __rfcomm_sock_close+0x104/0x220
[  566.757274][T10569]        rfcomm_sock_shutdown+0xb4/0x230
[  566.762917][T10569]        rfcomm_sock_release+0x55/0x110
[  566.768560][T10569]        sock_close+0xcd/0x230
[  566.773348][T10569]        __fput+0x3f6/0x8d0
[  566.777853][T10569]        task_work_run+0x246/0x300
[  566.782968][T10569]        do_exit+0xa73/0x26a0
[  566.787923][T10569]        do_group_exit+0x202/0x2b0
[  566.793065][T10569]        get_signal+0x16f7/0x17d0
[  566.798187][T10569]        arch_do_signal_or_restart+0xb0/0x1a10
[  566.804346][T10569]        exit_to_user_mode_loop+0x6a/0x100
[  566.810157][T10569]        exit_to_user_mode_prepare+0xb1/0x140
[  566.816339][T10569]        syscall_exit_to_user_mode+0x60/0x270
[  566.822757][T10569]        do_syscall_64+0x47/0xb0
[  566.827702][T10569]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  566.834229][T10569] 
[  566.834229][T10569] other info that might help us debug this:
[  566.834229][T10569] 
[  566.844479][T10569] Chain exists of:
[  566.844479][T10569]   sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM --> rfcomm_dev_lock --> &d->lock
[  566.844479][T10569] 
[  566.858662][T10569]  Possible unsafe locking scenario:
[  566.858662][T10569] 
[  566.866112][T10569]        CPU0                    CPU1
[  566.871475][T10569]        ----                    ----
[  566.876835][T10569]   lock(&d->lock);
[  566.880647][T10569]                                lock(rfcomm_dev_lock);
[  566.887763][T10569]                                lock(&d->lock);
[  566.894094][T10569]   lock(sk_lock-AF_BLUETOOTH-BTPROTO_RFCOMM);
[  566.900253][T10569] 
[  566.900253][T10569]  *** DEADLOCK ***
[  566.900253][T10569] 
[  566.908428][T10569] 3 locks held by syz.0.1686/10569:
[  566.913627][T10569]  #0: ffff8880524bbe10 (&sb->s_type->i_mutex_key#10){+.+.}-{3:3}, at: sock_close+0x98/0x230
[  566.923836][T10569]  #1: ffffffff8e6733a8 (rfcomm_mutex){+.+.}-{3:3}, at: rfcomm_dlc_close+0x37/0x180
[  566.933252][T10569]  #2: ffff8880596ce128 (&d->lock){+.+.}-{3:3}, at: __rfcomm_dlc_close+0x259/0x6d0
[  566.942572][T10569] 
[  566.942572][T10569] stack backtrace:
[  566.948459][T10569] CPU: 1 PID: 10569 Comm: syz.0.1686 Not tainted 6.1.103-syzkaller #0
[  566.956613][T10569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  566.966670][T10569] Call Trace:
[  566.969953][T10569]  <TASK>
[  566.972889][T10569]  dump_stack_lvl+0x1e3/0x2cb
[  566.977591][T10569]  ? nf_tcp_handle_invalid+0x642/0x642
[  566.983065][T10569]  ? print_circular_bug+0x12b/0x1a0
[  566.988269][T10569]  check_noncircular+0x2fa/0x3b0
[  566.993227][T10569]  ? add_lock_to_list+0x1de/0x2e0
[  566.998257][T10569]  ? add_chain_block+0x850/0x850
[  567.003284][T10569]  ? lockdep_lock+0x11f/0x2a0
[  567.008003][T10569]  ? _find_first_zero_bit+0xd0/0x100
[  567.013300][T10569]  validate_chain+0x1661/0x5950
[  567.018165][T10569]  ? register_lock_class+0x100/0x990
[  567.023548][T10569]  ? reacquire_held_locks+0x660/0x660
[  567.028940][T10569]  ? is_dynamic_key+0x260/0x260
[  567.033804][T10569]  ? mark_lock+0x9a/0x340
[  567.038152][T10569]  ? __lock_acquire+0x125b/0x1f80
[  567.043205][T10569]  ? mark_lock+0x9a/0x340
[  567.047569][T10569]  __lock_acquire+0x125b/0x1f80
[  567.052454][T10569]  lock_acquire+0x1f8/0x5a0
[  567.057318][T10569]  ? rfcomm_sk_state_change+0x57/0x300
[  567.062796][T10569]  ? read_lock_is_recursive+0x10/0x10
[  567.068184][T10569]  ? __mutex_lock+0x2f7/0xd80
[  567.072880][T10569]  ? rcu_is_watching+0x11/0xb0
[  567.077656][T10569]  ? detach_timer+0x17d/0x380
[  567.082343][T10569]  ? __rfcomm_dlc_close+0x259/0x6d0
[  567.087549][T10569]  ? mutex_lock_nested+0x10/0x10
[  567.092503][T10569]  lock_sock_nested+0x44/0x100
[  567.097283][T10569]  ? rfcomm_sk_state_change+0x57/0x300
[  567.102754][T10569]  rfcomm_sk_state_change+0x57/0x300
[  567.108052][T10569]  __rfcomm_dlc_close+0x2b2/0x6d0
[  567.113086][T10569]  rfcomm_dlc_close+0xed/0x180
[  567.117862][T10569]  __rfcomm_sock_close+0x104/0x220
[  567.123006][T10569]  rfcomm_sock_shutdown+0xb4/0x230
[  567.128132][T10569]  rfcomm_sock_release+0x55/0x110
[  567.133172][T10569]  sock_close+0xcd/0x230
[  567.137533][T10569]  ? sock_mmap+0x90/0x90
[  567.141791][T10569]  __fput+0x3f6/0x8d0
[  567.145797][T10569]  task_work_run+0x246/0x300
[  567.150418][T10569]  ? task_work_cancel+0x2e0/0x2e0
[  567.155549][T10569]  ? exit_task_namespaces+0xdd/0xf0
[  567.160758][T10569]  do_exit+0xa73/0x26a0
[  567.165103][T10569]  ? put_task_struct+0x80/0x80
[  567.169935][T10569]  ? get_signal+0x137e/0x17d0
[  567.174630][T10569]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  567.180625][T10569]  ? print_irqtrace_events+0x210/0x210
[  567.186206][T10569]  ? _raw_spin_lock_irq+0xdb/0x110
[  567.191332][T10569]  do_group_exit+0x202/0x2b0
[  567.195936][T10569]  ? _raw_spin_unlock_irq+0x1f/0x40
[  567.201144][T10569]  ? lockdep_hardirqs_on+0x94/0x130
[  567.206454][T10569]  get_signal+0x16f7/0x17d0
[  567.211012][T10569]  ? ptrace_notify+0x370/0x370
[  567.215790][T10569]  ? futex_wake+0x4bd/0x590
[  567.220308][T10569]  arch_do_signal_or_restart+0xb0/0x1a10
[  567.225957][T10569]  ? kmem_cache_free+0x292/0x510
[  567.230910][T10569]  ? do_futex+0x3b5/0x490
[  567.235247][T10569]  ? get_sigframe_size+0x10/0x10
[  567.240284][T10569]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  567.246286][T10569]  ? exit_to_user_mode_loop+0x39/0x100
[  567.251750][T10569]  exit_to_user_mode_loop+0x6a/0x100
[  567.257045][T10569]  exit_to_user_mode_prepare+0xb1/0x140
[  567.262597][T10569]  syscall_exit_to_user_mode+0x60/0x270
[  567.268240][T10569]  do_syscall_64+0x47/0xb0
[  567.272668][T10569]  ? clear_bhb_loop+0x45/0xa0
[  567.277356][T10569]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  567.283352][T10569] RIP: 0033:0x7f69d19779f9
[  567.287769][T10569] Code: Unable to access opcode bytes at 0x7f69d19779cf.
[  567.294827][T10569] RSP: 002b:00007f69d26e10f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  567.303260][T10569] RAX: fffffffffffffe00 RBX: 00007f69d1b06060 RCX: 00007f69d19779f9
[  567.311249][T10569] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f69d1b06060
[  567.319244][T10569] RBP: 00007f69d1b06058 R08: 00007f69d26e16c0 R09: 00007f69d26e16c0
[  567.327224][T10569] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f69d1b06064
[  567.335200][T10569] R13: 000000000000006e R14: 00007fff10da5bf0 R15: 00007fff10da5cd8
[  567.343278][T10569]  </TASK>
[  567.364656][T10464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  567.383216][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  567.398036][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  567.413783][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  567.423890][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  567.438906][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  567.447689][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  567.459037][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  567.477000][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  567.731122][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  567.743767][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  567.754374][T10464] 8021q: adding VLAN 0 to HW filter on device batadv0
[  567.955304][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  567.964070][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  567.973621][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  567.982486][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  567.992794][T10464] device veth0_vlan entered promiscuous mode
[  568.000536][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  568.009070][ T6842] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  568.020136][T10464] device veth1_vlan entered promiscuous mode
[  568.040925][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  568.050020][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  568.058714][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  568.068014][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  568.079217][T10464] device veth0_macvtap entered promiscuous mode
[  568.089638][T10464] device veth1_macvtap entered promiscuous mode
[  568.103090][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.114231][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.124776][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.136781][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.146671][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.157270][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.167152][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.177619][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.187485][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.199377][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.209253][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  568.219847][ T3658] Bluetooth: hci4: command tx timeout
[  568.225421][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.236607][T10464] batman_adv: batadv0: Interface activated: batadv_slave_0
[  568.244396][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  568.253112][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  568.261649][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  568.270305][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  568.280720][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.292701][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.303722][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.314672][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.324559][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.335088][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.345009][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.355475][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.365377][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.379519][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.389456][T10464] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  568.401746][T10464] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  568.412731][T10464] batman_adv: batadv0: Interface activated: batadv_slave_1
[  568.421445][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  568.430567][ T5311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  568.440836][T10464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  568.450565][T10464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  568.459614][T10464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  568.468706][T10464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  568.493697][T10464] ieee80211 phy55: Selected rate control algorithm 'minstrel_ht'
[  568.518613][ T4388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.519396][T10464] ieee80211 phy56: Selected rate control algorithm 'minstrel_ht'
[  568.532051][ T4388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.550578][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  568.560764][ T3755] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  568.572620][ T3755] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  568.580774][ T3987] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready