last executing test programs:

9.921281327s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
sendmsg$NL80211_CMD_SET_QOS_MAP(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000900)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000014000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

8.902936524s ago: executing program 1:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x3e, 0x0, "cfaa02de0b42430606ba0a01e0d2669e8b9a9025903f0b05c311b240e623031da74b8ea6de52db9e0b56436ca0c8a9237bd3c12be9e2ebb6e829bfb5b928193e9db3fe74f8f5640f4016d64a50bcfba0"}, 0xd8)
setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r1, 0x0, 0x8000002b)

7.132421698s ago: executing program 1:
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz8GpAjEUBdAbJvNn/soW7MTWUppbi7AON0JkoqIVKMI5mzxuHjckfFW9HyVpj6SV591ILkuSdTps8zmZ9nXexulV8TcKWvKfeu3p/bgbSS2n8raRZaz1eby1fuZ7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPATbgEAAP//68IMIg==")
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
fchown(0xffffffffffffffff, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendfile(r2, r1, 0x0, 0x8000000d)

6.726106731s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=@ipv6_newrule={0x2c, 0x20, 0x401, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4, 0xffff}}]}, 0x2c}}, 0x0)

6.21470173s ago: executing program 1:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x9a}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@map=r2, r0, 0x5}, 0x10)

5.965025068s ago: executing program 1:
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x4098000, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
recvmmsg(r0, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="4783d83cb9889b4f107cd34aa36b17b40ba5408005bb215b2f620990e702ae1f9809466d14a2d5fa3dce973bcd5afc7cadbf3a5ec27ba2da5081ffb1a76fffed8c8d0828ec", 0x45}], 0x1, &(0x7f00000006c0)=ANY=[], 0x300}}], 0x1, 0x0)

4.911070791s ago: executing program 3:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=@ipv6_newrule={0x2c, 0x20, 0x401, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4, 0xffff}}]}, 0x2c}}, 0x0)

4.803109218s ago: executing program 3:
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e09d7040460a2196324f01020301090224000100000000090400000206d3450009050102100000000009058b0240"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001f00)={0x84, &(0x7f0000001ac0)=ANY=[@ANYBLOB="000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000a40)={0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="000001"], 0x0, 0x0, 0x0, 0x0, 0x0})

4.762315684s ago: executing program 2:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x9a}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)={@map=r2, r0, 0x5}, 0x10)

4.671438058s ago: executing program 2:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syncfs(0xffffffffffffffff)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000001dc0)=0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r3 = dup3(r2, r1, 0x0)
mlockall(0x1)
setuid(0xee01)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5452, &(0x7f0000000040))
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
fgetxattr(r3, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0)

4.264203411s ago: executing program 4:
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000440)={[{@check_relaxed}, {@map_off}, {@mode={'mode', 0x3d, 0x42}}, {@check_strict}, {@nocompress}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {}, {@block={'block', 0x3d, 0x200}}, {@map_normal}, {@sbsector}, {@map_normal}, {@map_normal}, {@cruft}, {@unhide}, {@check_strict}]}, 0x1, 0xa03, &(0x7f0000001680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x601c2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TCSETAW(0xffffffffffffffff, 0x5407, 0x0)
ftruncate(r0, 0x8800000)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000000)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x5}}, 0x1c)
write$P9_RGETLOCK(r5, &(0x7f0000000280)=ANY=[], 0xe6da)

3.452479607s ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000640)=@ipv6_newrule={0x2c, 0x20, 0x401, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}, @FIB_RULE_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4, 0xffff}}]}, 0x2c}}, 0x0)

3.36996588s ago: executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=""/25, 0x19}}], 0x1, 0x0, 0x0)
setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000140)=0x30, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x32, &(0x7f0000000080)={@local, @local, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@timestamp={0x44, 0x4, 0xc6}]}}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0)

3.253026278s ago: executing program 0:
r0 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x5412, &(0x7f00000006c0)=0x16)
r1 = dup(r0)
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xfffffffd, 0x0, 0x0, 0x6, 0x0, "8a278d80aa8e7c4dc6895e5b4d5c6639179d0f"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100))

3.134419826s ago: executing program 0:
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
sendmmsg$sock(r0, &(0x7f0000001700)=[{{&(0x7f0000000140)=@un=@abs, 0x26, &(0x7f0000000040)=[{&(0x7f0000000280)="9b8aff46cc0d8fbca92df27b563f02b562810024c238ebfc2f3a0142a47e037cf99a1a1a136636a8e541ebeec173d15ba5fdbd64a8164e8ab57768bade3c02e84aae10d2da2da98c48403b83fb3348e2e2c8026b92b6477af2cb083fa5333eb7598f8f3628b2c1c5033bfc351a1bc849efb74750d6bca30b243451ddc7278f829046bb54937f486473ab8f86a3fc68083104a2f7417dc1f7f28a3430acaa439e22a9029ebe98c4ac2f99a758a4275ab8f0f94b696227e5d1da9f49ac26ca7bf02edb090951a666bf45499f3c", 0xcc}, {&(0x7f0000001880)="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", 0x111d}], 0x2, &(0x7f0000001380)=[@timestamping={{0x51}}, @txtime={{0x18}}, @txtime={{0x18}}, @timestamping={{0x14}}, @mark={{0x14}}, @txtime={{0x18}}], 0x90}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001780)="d805b9877f4d64e501a4ec5dbce850970a0f5033440b21341b034affff95663df3d00a05a38e3dd80fd97e470b16b346da1e4647d67e7de6b63184351d2b32727fc4bd9adb761c139080eee3a89d0574d5559dd2335e52a750fa2915072656e925ac0f3cbfaa9835ece4465ee8de7863b61d65bad8eac326cffd3bce04ba9938f0a1fd002235d8f066061e721fdea336a0e37c5a143c640b58fd2f3e0d43fd2568c5ab6d1251d8ffef0f2d4e7d2a5649d7b549e4ebecd2bff0d046eaf2e24f0cc7630807308180c7bef24ccb8c74ceaae12fa2e0a05840871cf0daee7b1a70535a226d2387fe5a74d03f4acafbb11e6d8f8873dd1f", 0xf5}, {&(0x7f00000014c0)="baffa468183ae9044e72fed86ca914a16293343994a6b56f20f6e0a698daeccc1e81fc4df8a71380f4656f08ef5ea9edc5713b61a1a38d39be9c7c2d4976d153f775fc7b45bda1957120d051184d85a0dd9f70230ecb30694175ae5d7338501c0e3569ee70b47ca7e7d3516db5c4b630d3ffda6448cb19a506908d906d56b78ad8a00fdbad619db029cba0fbd05f303e44c158e2e46a2377750855b284a3a87876699e8f0506f7068b3014772f", 0xad}, {&(0x7f0000001580)="7240d004589ac3ae90885153c5c62e1e85acaba53bcb3c66a5791f488d1a0afe463eb634df1d50a61bf02bf3c59df1123b462d8ca538aaa326e94217590d31bf7ebdbae6c4c218c72cf1875bdaa72249302a7796c930e65bfc0daf5663666c9f7255bdabf21617926661f11cbdfc150f2db917ec6279ccafa655ad14c2e672883bd43f9c74ee801c3189b39bca963abc2f9f59024fe62494c669830558da62f0368563df864f0bb06f4a1b5446d36dac1591670b69fd6f91923686a5fd888d610960ce1e2cf28f56bfa58bb5043539ed29d2696ff7e78c6bb5baa667dbf75a51", 0xe0}], 0x3, &(0x7f0000001680)=[@timestamping={{0x14}}, @mark={{0x14}}, @txtime={{0x18}}, @txtime={{0x18}}, @mark={{0x14}}], 0x78}}], 0x2, 0x0)

3.034013961s ago: executing program 0:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
chown(0x0, 0x0, 0xee01)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000000f400850000008600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ftruncate(r0, 0x0)

2.880394755s ago: executing program 0:
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000ac42f0108c1059016420000000810902120001000000000904"], 0x0)

2.822772354s ago: executing program 2:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpgrp(0x0)
sched_setscheduler(r1, 0x2, &(0x7f00000005c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00')
openat2(r4, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000013c0)={0x0, 0x0, 0x10}, 0x18)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000001140)='net\x00')
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
fstat(r5, &(0x7f0000000140))
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r6 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_ENCAP(r6, 0x113, 0x1, 0x0, &(0x7f0000000040)=0xc)

2.65067401s ago: executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
sendmmsg(r0, &(0x7f0000000180), 0x400008a, 0x0)
sendmsg$key(r0, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x2, 0x9, 0x0, 0x0, 0x2}, 0x10}}, 0x0)

2.506452513s ago: executing program 4:
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x1, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_spirange={0x2, 0x10, 0x3000000, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x50}}, 0x0)

2.155041167s ago: executing program 4:
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
setsockopt$sock_int(r0, 0x1, 0x2b, &(0x7f00000001c0)=0x7fffffff, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'wg0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b030600e0ff020002004788aa96a13b", 0x10, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

1.735848682s ago: executing program 2:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0)

1.698839908s ago: executing program 4:
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x61db, &(0x7f0000007f00)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000f80)=""/4096, 0x1000)

1.68371202s ago: executing program 3:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
ioctl$UI_SET_ABSBIT(r2, 0x40045567, 0x5)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r3}, 0x10)
r4 = socket$inet(0x2, 0x1, 0x0)
setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4)
shutdown(r4, 0x0)
recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)

1.642476176s ago: executing program 2:
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[@ANYRES64=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0)
r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r2, 0x101, 0x3, &(0x7f0000000000), 0x4)

1.55300335s ago: executing program 3:
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, @empty, @empty}})
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'sit0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05030500d3fc030000004788031c09101128", 0xfcf1, 0x4, &(0x7f0000000140)={0x11, 0x6558, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

1.522012285s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdir(0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
unshare(0x64000600)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0x1}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r6}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x45}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r8}, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x5, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b700000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f000000ac00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_enter\x00', r10}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.48779669s ago: executing program 3:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x11, 0x4, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000500000095"], &(0x7f00000000c0)='GPL\x00', 0x4, 0xad, &(0x7f0000000180)=""/173}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r0, 0x0, 0xfffffffffffffe83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdb6, 0x0, 0x0}, 0x12)

831.170352ms ago: executing program 3:
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syncfs(0xffffffffffffffff)
openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000400), 0x8, 0x0)
close(r0)
socket$inet6_tcp(0xa, 0x1, 0x0)
getsockname(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000001dc0)=0x80)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r3 = dup3(r2, r1, 0x0)
mlockall(0x1)
setuid(0xee01)
ioctl$TIOCPKT(0xffffffffffffffff, 0x5452, &(0x7f0000000040))
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
fgetxattr(r3, &(0x7f0000000000)=@known='user.incfs.size\x00', 0x0, 0x0)

0s ago: executing program 4:
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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")
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_read_part_table(0x104b, &(0x7f0000001080)="$eJzsz8GpAjEUBdAbJvNn/soW7MTWUppbi7AON0JkoqIVKMI5mzxuHjckfFW9HyVpj6SV591ILkuSdTps8zmZ9nXexulV8TcKWvKfeu3p/bgbSS2n8raRZaz1eby1fuZ7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPATbgEAAP//68IMIg==")
fstat(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, <r0=>0x0})
fchown(0xffffffffffffffff, r0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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")
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r2 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0x0, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
sendfile(r2, r1, 0x0, 0x8000000d)

kernel console output (not intermixed with test programs):

, ignoring interface number: 255
[  244.281356][ T8047] device dummy0 left promiscuous mode
[  244.298813][ T5928] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.337884][ T5928] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  244.378848][ T5928] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  244.401591][ T5928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.421977][ T5928] usb 1-1: config 0 descriptor??
[  244.953370][ T5928] usb-storage 1-1:0.0: USB Mass Storage device detected
[  245.032699][ T5928] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  245.145239][   T46] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.210403][ T3581] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  245.264214][ T3581] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  245.272832][ T3581] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  245.282653][ T3581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  245.291605][ T3581] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  245.299147][ T3581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  245.341849][   T46] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.369106][ T8066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  245.385961][ T8070] loop4: detected capacity change from 0 to 2048
[  245.404360][ T8070] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  245.416069][ T8068] loop3: detected capacity change from 0 to 2048
[  245.443260][   T46] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.509702][   T46] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.550072][ T8072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  245.628708][ T8061] chnl_net:caif_netlink_parms(): no params data found
[  245.721668][ T6289] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  245.824813][ T8061] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.847744][ T8061] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.872266][ T8061] device bridge_slave_0 entered promiscuous mode
[  245.889029][ T8086] capability: warning: `syz-executor.3' uses 32-bit capabilities (legacy support in use)
[  245.922954][ T8061] bridge0: port 2(bridge_slave_1) entered blocking state
[  245.936167][ T8061] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.948002][ T8061] device bridge_slave_1 entered promiscuous mode
[  246.020467][ T8061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.047015][ T8061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.096673][ T8061] team0: Port device team_slave_0 added
[  246.126436][ T8061] team0: Port device team_slave_1 added
[  246.149764][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.159810][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.178526][ T8099] loop4: detected capacity change from 0 to 16
[  246.186243][ T8061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.420330][ T8099] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  246.426431][ T4481] usb 1-1: USB disconnect, device number 8
[  246.482290][ T6289] usb 2-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24
[  246.524820][ T6289] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.624899][ T6289] usb 2-1: Product: syz
[  246.675524][ T6289] usb 2-1: Manufacturer: syz
[  246.727438][ T6289] usb 2-1: SerialNumber: syz
[  246.816049][ T6289] usb 2-1: config 0 descriptor??
[  247.059514][ T8061] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.062528][ T6289] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  247.090662][ T8061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.121608][ T6289] usb 2-1: USB disconnect, device number 9
[  247.134234][ T8061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.248993][ T8061] device hsr_slave_0 entered promiscuous mode
[  247.266464][ T8061] device hsr_slave_1 entered promiscuous mode
[  247.288086][ T8061] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.296496][ T8061] Cannot create hsr debugfs directory
[  247.357621][ T8113] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  247.391908][ T3581] Bluetooth: hci0: command tx timeout
[  247.590705][ T8130] device macvlan2 entered promiscuous mode
[  247.618227][ T8130] device bridge0 entered promiscuous mode
[  247.694497][ T8130] team0: Port device macvlan2 added
[  247.756528][ T8131] bridge0: port 3(macsec0) entered blocking state
[  247.782078][ T8131] bridge0: port 3(macsec0) entered disabled state
[  247.831363][ T8131] device macsec0 entered promiscuous mode
[  247.839118][ T8141] loop1: detected capacity change from 0 to 16
[  247.848586][ T8131] bridge0: port 3(macsec0) entered blocking state
[  247.855501][ T8131] bridge0: port 3(macsec0) entered forwarding state
[  247.865766][ T8141] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  248.022030][   T46] device hsr_slave_0 left promiscuous mode
[  248.026912][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  248.045253][   T46] device hsr_slave_1 left promiscuous mode
[  248.067241][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  248.098485][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  248.133557][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  248.141019][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  248.176642][   T46] device bridge_slave_1 left promiscuous mode
[  248.208717][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.233406][   T46] device bridge_slave_0 left promiscuous mode
[  248.239732][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.285985][   T46] device veth1_macvtap left promiscuous mode
[  248.302400][   T46] device veth0_macvtap left promiscuous mode
[  248.308533][   T46] device veth1_vlan left promiscuous mode
[  248.339774][   T46] device veth0_vlan left promiscuous mode
[  248.613312][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  248.651637][ T5929] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  248.707869][   T46] team0 (unregistering): Port device team_slave_1 removed
[  248.730009][   T46] team0 (unregistering): Port device team_slave_0 removed
[  248.744727][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  248.762668][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  248.904639][   T46] bond0 (unregistering): Released all slaves
[  248.960317][ T8177] loop4: detected capacity change from 0 to 32768
[  248.980631][ T8177] XFS (loop4): Mounting V5 Filesystem
[  248.997892][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  249.015367][ T8173] device dummy0 entered promiscuous mode
[  249.021081][ T8173] device macsec1 entered promiscuous mode
[  249.053169][ T8173] device dummy0 left promiscuous mode
[  249.077199][ T8177] XFS (loop4): Ending clean mount
[  249.162088][ T8177] XFS (loop4): Quotacheck needed: Please wait.
[  249.207399][ T8177] XFS (loop4): Quotacheck: Done.
[  249.251822][   T26] audit: type=1800 audit(1718295779.360:752): pid=8177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=5766 res=0 errno=0
[  249.281887][ T5929] usb 2-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24
[  249.290958][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.309675][ T8061] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  249.317450][ T5929] usb 2-1: Product: syz
[  249.321766][ T5929] usb 2-1: Manufacturer: syz
[  249.323668][ T6981] XFS (loop4): Unmounting Filesystem
[  249.326350][ T5929] usb 2-1: SerialNumber: syz
[  249.328111][ T5929] usb 2-1: config 0 descriptor??
[  249.348056][ T8061] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  249.379546][ T8061] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  249.400680][   T26] audit: type=1804 audit(1718295779.510:753): pid=8191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2977822824/syzkaller.ABhxqY/78/bus" dev="sda1" ino=1957 res=1 errno=0
[  249.403405][ T5929] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  249.468599][ T8061] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  249.475637][ T3581] Bluetooth: hci0: command tx timeout
[  249.618093][   T22] usb 2-1: USB disconnect, device number 10
[  249.781039][ T8061] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.818562][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  249.828084][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  249.865646][ T8061] 8021q: adding VLAN 0 to HW filter on device team0
[  249.885326][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  249.896338][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  249.922085][ T3609] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.929231][ T3609] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.959468][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  249.980027][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  250.002239][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  250.010743][ T3609] bridge0: port 2(bridge_slave_1) entered blocking state
[  250.017889][ T3609] bridge0: port 2(bridge_slave_1) entered forwarding state
[  250.051855][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  250.070860][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  250.122867][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  250.135334][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  250.172312][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  250.181086][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  250.203478][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  250.233861][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  250.261624][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  250.270072][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  250.301575][ T8061] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  250.324937][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  250.628423][ T8224] syz-executor.4 (8224): /proc/8223/oom_adj is deprecated, please use /proc/8223/oom_score_adj instead.
[  250.886504][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.911677][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.938031][ T8061] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.034094][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  251.072293][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  251.111798][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  251.120210][ T4481] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  251.153282][ T8061] device veth0_vlan entered promiscuous mode
[  251.166116][ T3581] Bluetooth: hci4: Malformed HCI Event: 0x22
[  251.180881][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  251.185584][ T8217] loop1: detected capacity change from 0 to 32768
[  251.215574][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  251.259326][ T8061] device veth1_vlan entered promiscuous mode
[  251.278133][ T8217] XFS (loop1): Mounting V5 Filesystem
[  251.400689][ T8217] XFS (loop1): Ending clean mount
[  251.414944][ T8217] XFS (loop1): Quotacheck needed: Please wait.
[  251.459857][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  251.477497][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  251.536590][ T8061] device veth0_macvtap entered promiscuous mode
[  251.551767][ T3581] Bluetooth: hci0: command tx timeout
[  251.570601][ T8217] XFS (loop1): Quotacheck: Done.
[  251.603908][ T8061] device veth1_macvtap entered promiscuous mode
[  251.616383][   T26] audit: type=1800 audit(1718295781.730:754): pid=8217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=5766 res=0 errno=0
[  251.702139][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.743066][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.781446][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.816553][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.841522][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.876718][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.896860][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.948329][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.988123][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_0
[  252.012368][ T4393] XFS (loop1): Unmounting Filesystem
[  252.042991][   T26] audit: type=1804 audit(1718295782.160:755): pid=8237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2977822824/syzkaller.ABhxqY/82/bus" dev="sda1" ino=1958 res=1 errno=0
[  252.077308][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  252.103973][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  252.171926][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  252.210162][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  252.233721][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.274679][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.308661][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.336028][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.381554][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.401451][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.411295][ T8061] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.440254][ T8061] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.473523][ T8061] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.494060][ T8061] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.512386][ T8061] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.541706][ T8061] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.568829][ T8061] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.599172][ T8263] device macvlan2 entered promiscuous mode
[  252.627203][ T8263] device bridge0 entered promiscuous mode
[  252.667455][ T8263] team0: Port device macvlan2 added
[  252.687943][ T6289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  252.697927][ T6289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  252.854121][ T8264] bridge0: port 3(macsec0) entered blocking state
[  252.890791][ T8264] bridge0: port 3(macsec0) entered disabled state
[  252.916182][ T8264] device macsec0 entered promiscuous mode
[  252.953133][ T8264] bridge0: port 3(macsec0) entered blocking state
[  252.959682][ T8264] bridge0: port 3(macsec0) entered forwarding state
[  253.106716][ T8274] loop3: detected capacity change from 0 to 256
[  253.451744][ T4481] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  253.631956][ T3581] Bluetooth: hci0: command tx timeout
[  253.841836][ T4481] usb 4-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  253.872809][ T4481] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.911482][ T4481] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  253.951553][ T4481] usb 4-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  253.960630][ T4481] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.983654][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  253.999758][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.022369][ T4481] usb 4-1: config 0 descriptor??
[  254.059524][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  254.068005][ T4481] usb-storage 4-1:0.0: USB Mass Storage device detected
[  254.093247][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.118623][ T4481] usb-storage 4-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  254.155341][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.180367][ T3609] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  254.778199][ T8309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  254.841720][ T3581] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  254.851881][ T3581] Bluetooth: hci4: Injecting HCI hardware error event
[  254.861594][ T3574] Bluetooth: hci4: hardware error 0x00
[  254.962656][ T8311] device macvlan2 entered promiscuous mode
[  254.972484][ T8311] device bridge0 entered promiscuous mode
[  255.006456][ T8311] team0: Port device macvlan2 added
[  255.013597][ T8312] bridge0: port 3(macsec0) entered blocking state
[  255.049919][ T8312] bridge0: port 3(macsec0) entered disabled state
[  255.072390][ T5929] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  255.118734][ T8312] device macsec0 entered promiscuous mode
[  255.182583][ T8312] bridge0: port 3(macsec0) entered blocking state
[  255.189127][ T8312] bridge0: port 3(macsec0) entered forwarding state
[  255.262767][ T8306] loop4: detected capacity change from 0 to 32768
[  255.273008][ T8306] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8306)
[  255.295804][ T8306] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  255.308871][ T8306] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  255.321651][ T8306] BTRFS info (device loop4): using free space tree
[  255.511312][ T8306] BTRFS info (device loop4): enabling ssd optimizations
[  255.553548][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  255.560917][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  255.757098][   T26] audit: type=1800 audit(1718295785.820:756): pid=8306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  255.777570][ T8339] loop1: detected capacity change from 0 to 256
[  255.814783][   T26] audit: type=1800 audit(1718295785.820:757): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  255.814880][ T5929] usb 3-1: New USB device found, idVendor=0582, idProduct=0023, bcdDevice=53.24
[  255.845382][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.019540][ T5929] usb 3-1: Product: syz
[  256.099054][ T5929] usb 3-1: Manufacturer: syz
[  256.145424][ T5929] usb 3-1: SerialNumber: syz
[  256.216357][ T5929] usb 3-1: config 0 descriptor??
[  256.302833][ T3609] usb 4-1: USB disconnect, device number 9
[  256.309340][   T26] audit: type=1804 audit(1718295786.220:758): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3826135976/syzkaller.UqRsOm/123/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  256.384571][ T5929] snd-usb-audio: probe of 3-1:0.0 failed with error -2
[  256.533497][ T3609] usb 3-1: USB disconnect, device number 10
[  256.596312][   T26] audit: type=1800 audit(1718295786.500:759): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  256.620431][ T6981] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.911566][ T3574] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[  257.406614][ T8372] loop2: detected capacity change from 0 to 2048
[  257.887321][ T8372] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.961516][ T3619] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  258.202708][ T8372] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 69120 lbcount: 69632 extent 6+1024
[  258.286671][ T8387] loop3: detected capacity change from 0 to 512
[  258.334027][ T8389] loop4: detected capacity change from 0 to 256
[  258.346864][ T3619] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  258.375320][ T8387] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  258.381561][ T3619] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.401882][ T3619] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  258.415443][ T8387] EXT4-fs (loop3): 1 truncate cleaned up
[  258.421094][ T8387] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  258.425803][ T8389] FAT-fs (loop4): Directory bread(block 64) failed
[  258.442606][ T8389] FAT-fs (loop4): Directory bread(block 65) failed
[  258.449200][ T8389] FAT-fs (loop4): Directory bread(block 66) failed
[  258.457616][ T8389] FAT-fs (loop4): Directory bread(block 67) failed
[  258.471519][ T3619] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  258.480565][ T3619] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.488677][ T8389] FAT-fs (loop4): Directory bread(block 68) failed
[  258.501633][ T8389] FAT-fs (loop4): Directory bread(block 69) failed
[  258.513958][ T8389] FAT-fs (loop4): Directory bread(block 70) failed
[  258.520746][ T8389] FAT-fs (loop4): Directory bread(block 71) failed
[  258.532680][ T8389] FAT-fs (loop4): Directory bread(block 72) failed
[  258.539304][ T8389] FAT-fs (loop4): Directory bread(block 73) failed
[  258.670864][ T3619] usb 1-1: config 0 descriptor??
[  258.715043][ T3619] usb-storage 1-1:0.0: USB Mass Storage device detected
[  258.716347][ T8367] loop1: detected capacity change from 0 to 32768
[  258.744105][ T3619] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  259.129874][ T8367] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8367)
[  259.427641][ T8367] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.487766][ T8367] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  259.501587][ T8367] BTRFS info (device loop1): using free space tree
[  259.610663][ T8367] BTRFS info (device loop1): enabling ssd optimizations
[  259.649881][   T26] audit: type=1800 audit(1718295789.760:760): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  259.671896][   T26] audit: type=1800 audit(1718295789.780:761): pid=8367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  259.707730][ T8428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  259.805663][ T7070] EXT4-fs (loop3): unmounting filesystem.
[  259.869693][   T26] audit: type=1804 audit(1718295789.980:762): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1056670297/syzkaller.Wv9JDh/288/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  260.018683][ T3665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.203904][ T3619] usb 1-1: USB disconnect, device number 9
[  260.220582][ T3665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.280221][ T8367] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  260.297442][   T26] audit: type=1800 audit(1718295790.410:763): pid=8429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  260.348535][   T26] audit: type=1400 audit(1718295790.420:764): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=8439 comm="syz-executor.0"
[  260.375629][ T3665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.386098][ T8367] File: /root/syzkaller-testdir1056670297/syzkaller.Wv9JDh/288/file0/bus PID: 8367 Comm: syz-executor.1
[  260.510670][ T3665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  260.569209][ T3582] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  260.582164][ T3582] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  260.590356][ T3582] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  260.601256][ T3582] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  260.622173][ T3582] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  260.629457][ T3582] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  260.766415][ T8454] loop2: detected capacity change from 0 to 2048
[  260.786215][ T4393] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  260.812693][ T8454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.145327][ T8453] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 69120 lbcount: 69632 extent 6+1024
[  261.420641][ T8446] chnl_net:caif_netlink_parms(): no params data found
[  261.581918][ T8464] loop2: detected capacity change from 0 to 2048
[  261.705193][ T8446] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.733746][ T8446] bridge0: port 1(bridge_slave_0) entered disabled state
[  261.770038][ T8446] device bridge_slave_0 entered promiscuous mode
[  261.805129][ T8446] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.812814][ T8446] bridge0: port 2(bridge_slave_1) entered disabled state
[  261.832448][ T8446] device bridge_slave_1 entered promiscuous mode
[  261.928359][ T8446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  261.975404][ T8446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.083051][ T8446] team0: Port device team_slave_0 added
[  262.129143][ T3665] device hsr_slave_0 left promiscuous mode
[  262.137082][ T3665] device hsr_slave_1 left promiscuous mode
[  262.168544][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  262.184654][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  262.195827][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  262.203800][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  262.241761][ T3665] device macsec0 left promiscuous mode
[  262.249975][ T3665] bridge0: port 3(macsec0) entered disabled state
[  262.262553][ T3665] device bridge_slave_1 left promiscuous mode
[  262.269801][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.298332][ T3665] device bridge_slave_0 left promiscuous mode
[  262.305165][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.328276][ T3665] device bridge0 left promiscuous mode
[  262.354451][ T3665] device veth1_macvtap left promiscuous mode
[  262.378865][ T3665] device veth0_macvtap left promiscuous mode
[  262.386698][ T3665] device veth1_vlan left promiscuous mode
[  262.394969][ T3665] device veth0_vlan left promiscuous mode
[  262.672837][ T3582] Bluetooth: hci2: command tx timeout
[  262.690384][ T3665] team0 (unregistering): Port device macvlan2 removed
[  263.296111][ T8489] loop4: detected capacity change from 0 to 1024
[  263.438037][ T8489] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  263.470100][ T3665] team0 (unregistering): Port device team_slave_1 removed
[  263.500968][ T3665] team0 (unregistering): Port device team_slave_0 removed
[  263.542556][ T3665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  263.567810][ T3665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  263.664396][ T3665] bond0 (unregistering): Released all slaves
[  263.708465][ T8446] team0: Port device team_slave_1 added
[  263.825664][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_0
[  263.853080][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  263.865313][ T8508] loop2: detected capacity change from 0 to 2048
[  263.907774][ T6981] EXT4-fs (loop4): unmounting filesystem.
[  263.913815][ T8446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  263.958656][ T8446] batman_adv: batadv0: Adding interface: batadv_slave_1
[  263.994766][ T8446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  264.051515][ T8446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  264.143327][ T8446] device hsr_slave_0 entered promiscuous mode
[  264.161747][ T8446] device hsr_slave_1 entered promiscuous mode
[  264.181995][ T8446] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  264.186929][ T8518] loop2: detected capacity change from 0 to 256
[  264.189551][ T8446] Cannot create hsr debugfs directory
[  264.245543][ T8518] FAT-fs (loop2): Directory bread(block 64) failed
[  264.269516][ T8518] FAT-fs (loop2): Directory bread(block 65) failed
[  264.283739][ T8518] FAT-fs (loop2): Directory bread(block 66) failed
[  264.304591][ T8518] FAT-fs (loop2): Directory bread(block 67) failed
[  264.326641][ T8518] FAT-fs (loop2): Directory bread(block 68) failed
[  264.359335][ T8518] FAT-fs (loop2): Directory bread(block 69) failed
[  264.383528][ T8518] FAT-fs (loop2): Directory bread(block 70) failed
[  264.405039][ T8518] FAT-fs (loop2): Directory bread(block 71) failed
[  264.427538][ T8518] FAT-fs (loop2): Directory bread(block 72) failed
[  264.450141][ T8518] FAT-fs (loop2): Directory bread(block 73) failed
[  264.726792][ T4785] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  264.751624][ T3582] Bluetooth: hci2: command tx timeout
[  265.091568][ T4785] usb 2-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  265.100639][ T4785] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.123737][ T4785] usb 2-1: config 0 descriptor??
[  265.339469][ T8446] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  265.366378][ T8446] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  265.408814][ T8446] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  265.429706][ T8446] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  265.441801][ T4785] pegasus: probe of 2-1:0.0 failed with error -71
[  265.456001][ T4785] usb 2-1: USB disconnect, device number 11
[  265.899311][ T8556] loop4: detected capacity change from 0 to 256
[  266.060460][ T8446] 8021q: adding VLAN 0 to HW filter on device bond0
[  266.251787][ T6287] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  266.442386][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  266.453754][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  266.504919][ T8446] 8021q: adding VLAN 0 to HW filter on device team0
[  266.523654][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  266.533535][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  266.562037][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.569188][ T5927] bridge0: port 1(bridge_slave_0) entered forwarding state
[  266.607647][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  266.621844][ T6287] usb 5-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  266.642498][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  266.650705][ T6287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.671885][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  266.680364][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.687511][ T5927] bridge0: port 2(bridge_slave_1) entered forwarding state
[  266.695100][ T6287] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  266.718232][ T6287] usb 5-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  266.738745][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  266.747469][ T6287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.766939][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  266.776933][ T6287] usb 5-1: config 0 descriptor??
[  266.812807][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  266.823257][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  266.831566][ T3582] Bluetooth: hci2: command tx timeout
[  266.832324][ T6287] usb-storage 5-1:0.0: USB Mass Storage device detected
[  266.852508][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  266.871304][ T6287] usb-storage 5-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  266.880123][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  266.898933][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  266.919085][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  266.942439][ T8446] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  266.953161][ T4482] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  266.983908][ T8446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  267.013843][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  267.022416][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  267.051784][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  267.136256][ T8567] loop1: detected capacity change from 0 to 1024
[  267.181756][ T8567] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  267.201512][ T4482] usb 1-1: Using ep0 maxpacket: 16
[  267.268264][ T4393] EXT4-fs (loop1): unmounting filesystem.
[  267.481713][ T4482] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  267.497429][ T4482] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.505789][ T4482] usb 1-1: Product: syz
[  267.511141][ T4482] usb 1-1: Manufacturer: syz
[  267.515968][ T4482] usb 1-1: SerialNumber: syz
[  267.522154][ T4482] r8152-cfgselector 1-1: config 0 descriptor??
[  267.539487][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  267.563576][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  267.597812][ T8446] 8021q: adding VLAN 0 to HW filter on device batadv0
[  267.683908][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  267.700386][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  267.748360][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  267.776720][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  267.803603][ T8446] device veth0_vlan entered promiscuous mode
[  267.818737][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  267.832803][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  267.851781][ T8446] device veth1_vlan entered promiscuous mode
[  267.865062][ T8592] loop2: detected capacity change from 0 to 1024
[  267.891353][ T8592] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  267.901383][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  267.911308][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  267.919175][   T26] audit: type=1800 audit(1718295798.030:765): pid=8592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0
[  267.940849][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  267.949214][   T26] audit: type=1800 audit(1718295798.030:766): pid=8592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0
[  267.971010][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  267.981942][ T8446] device veth0_macvtap entered promiscuous mode
[  267.995222][ T8446] device veth1_macvtap entered promiscuous mode
[  268.002038][   T26] audit: type=1800 audit(1718295798.060:767): pid=8592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0
[  268.002154][ T4482] r8152-cfgselector 1-1: Unknown version 0x0000
[  268.036749][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.048838][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.060393][ T4482] r8152-cfgselector 1-1: USB disconnect, device number 10
[  268.068407][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.085498][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.097608][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.114266][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.126261][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  268.136771][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.150084][ T8061] EXT4-fs (loop2): unmounting filesystem.
[  268.159089][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_0
[  268.171224][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  268.185623][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  268.197216][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  268.208263][ T5929] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  268.239160][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.259498][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.271223][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.282042][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.291998][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.302842][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.357931][ T8446] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  268.388450][ T8446] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  268.426577][ T8446] batman_adv: batadv0: Interface activated: batadv_slave_1
[  268.508703][ T6074] usb 5-1: USB disconnect, device number 8
[  268.523075][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  268.913588][ T3574] Bluetooth: hci2: command tx timeout
[  269.186140][ T4482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  269.204420][ T8446] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  269.267045][ T8446] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  269.312091][ T8446] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  269.320830][ T8446] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  269.578459][ T8602] loop1: detected capacity change from 0 to 32768
[  269.592605][ T8602] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8602)
[  269.613871][ T8602] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  269.646806][ T8602] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  269.680185][ T3657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.704336][ T8602] BTRFS info (device loop1): using free space tree
[  269.712876][ T3657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.744747][ T6289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  269.771570][ T3657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.789571][ T3657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.839409][ T6289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  270.011855][ T8602] BTRFS info (device loop1): enabling ssd optimizations
[  270.116141][   T26] audit: type=1800 audit(1718295800.230:768): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  270.185087][   T26] audit: type=1800 audit(1718295800.240:769): pid=8602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  270.301282][ T8602] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  270.324075][   T26] audit: type=1804 audit(1718295800.340:770): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1056670297/syzkaller.Wv9JDh/306/file0/bus" dev="loop1" ino=263 res=1 errno=0
[  270.365010][ T8602] File: /root/syzkaller-testdir1056670297/syzkaller.Wv9JDh/306/file0/bus PID: 8602 Comm: syz-executor.1
[  270.420513][ T8670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  270.636827][ T3582] Bluetooth: hci2: Malformed HCI Event: 0x22
[  270.657494][   T26] audit: type=1800 audit(1718295800.770:771): pid=8661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0
[  270.658045][ T8670] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'.
[  270.820662][ T4393] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  270.874818][ T8685] xt_CT: You must specify a L4 protocol and not use inversions on it
[  271.754680][ T8718] loop3: detected capacity change from 0 to 256
[  271.774096][ T8721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  271.786449][ T8718] FAT-fs (loop3): Directory bread(block 64) failed
[  271.801235][ T8718] FAT-fs (loop3): Directory bread(block 65) failed
[  271.808449][ T8718] FAT-fs (loop3): Directory bread(block 66) failed
[  271.834631][ T8718] FAT-fs (loop3): Directory bread(block 67) failed
[  271.854809][ T8718] FAT-fs (loop3): Directory bread(block 68) failed
[  271.874759][ T8718] FAT-fs (loop3): Directory bread(block 69) failed
[  271.884848][ T8718] FAT-fs (loop3): Directory bread(block 70) failed
[  271.895461][ T8718] FAT-fs (loop3): Directory bread(block 71) failed
[  271.904278][ T8718] FAT-fs (loop3): Directory bread(block 72) failed
[  271.921112][ T8718] FAT-fs (loop3): Directory bread(block 73) failed
[  271.959810][ T8721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'.
[  272.215351][ T8743] loop1: detected capacity change from 0 to 1024
[  272.244941][ T8743] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  272.268629][   T26] audit: type=1800 audit(1718295802.380:772): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  272.326028][ T4393] EXT4-fs (loop1): unmounting filesystem.
[  272.345870][   T26] audit: type=1800 audit(1718295802.380:773): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  272.381843][   T26] audit: type=1800 audit(1718295802.380:774): pid=8743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=18 res=0 errno=0
[  272.587003][ T8762] No such timeout policy "syz0"
[  272.587027][ T8758] device syzkaller0 entered promiscuous mode
[  272.800970][ T8767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  272.992536][ T8752] loop3: detected capacity change from 0 to 40427
[  273.005226][ T8752] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  273.029684][ T8767] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  273.034805][ T8752] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  273.079726][ T8752] F2FS-fs (loop3): invalid crc value
[  273.139427][ T8752] F2FS-fs (loop3): Found nat_bits in checkpoint
[  273.309036][ T8752] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  273.330645][ T8752] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  273.367803][ T8796] No such timeout policy "syz0"
[  273.497914][  T102] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  273.506508][ T8799] loop2: detected capacity change from 0 to 512
[  273.517247][  T102] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  273.517343][ T3582] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  273.537205][ T3582] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  273.725825][ T3582] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  273.739040][ T3582] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  273.749017][ T3582] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  273.757967][ T3582] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  273.809969][ T3574] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  273.852809][ T8799] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #15: comm syz-executor.2: casefold flag without casefold feature
[  273.867710][ T3574] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  273.877264][ T3574] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  273.900065][ T3574] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  273.911706][ T3574] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  273.922636][ T3574] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  274.131932][ T8799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.2: missing EA_INODE flag
[  274.177585][ T3665] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.197336][ T8799] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz-executor.2: error while reading EA inode 2 err=-117
[  274.235673][ T8799] EXT4-fs (loop2): 1 orphan inode deleted
[  274.247882][ T8799] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  274.419310][ T3665] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.497271][ T8811] overlayfs: failed to resolve './file0': -2
[  274.583304][ T3665] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.606687][ T8813] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  274.620466][ T8813] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'.
[  274.753890][ T8061] EXT4-fs (loop2): unmounting filesystem.
[  274.831153][ T3665] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.853503][ T8818] overlayfs: unrecognized mount option "32
[  274.853503][ T8818] time
[  274.853503][ T8818] string
[  274.853503][ T8818] statistic
[  274.853503][ T8818] state
[  274.853503][ T8818] realm
[  274.853503][ T8818] rateest
[  274.853503][ T8818] quota
[  274.853503][ T8818] pkttype
[  274.853503][ T8818] physdev
[  274.853503][ T8818] cgroup
[  274.853503][ T8818] cgroup
[  274.853503][ T8818] cgroup
[  274.853503][ T8818] owner
[  274.853503][ T8818] nfacct
[  274.853503][ T8818] nfacct
[  274.853503][ T8818] mac
[  274.853503][ T8818] limit
[  274.853503][ T8818] ipvs
[  274.853503][ T8818] helper
[  274.853503][ T8818] devgroup
[  274.853503][ T8818] cpu
[  274.853503][ T8818] conntrack
[  274.853503][ T8818] conntrack
[  274.853503][ T8818] conntrack
[  274.853503][ T8818] connlimit
[  274.853503][ T8818] connlabel
[  274.853503][ T8818] connbytes
[  274.853503][ T8818] comment
[  274.853503][ T8818] cluster
[  274.853503][ T8818] bpf
[  274.853503][ T8818] bpf
[  275.042846][ T8797] chnl_net:caif_netlink_parms(): no params data found
[  275.176727][ T8808] loop4: detected capacity change from 0 to 32768
[  275.247089][ T8797] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.258382][ T8797] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.270479][ T8808] XFS (loop4): Mounting V5 Filesystem
[  275.306713][ T8797] device bridge_slave_0 entered promiscuous mode
[  275.386554][ T8797] bridge0: port 2(bridge_slave_1) entered blocking state
[  275.389681][ T8808] XFS (loop4): Ending clean mount
[  275.395419][ T8797] bridge0: port 2(bridge_slave_1) entered disabled state
[  275.407511][ T8797] device bridge_slave_1 entered promiscuous mode
[  275.457766][ T8797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  275.474771][ T8797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  275.490333][ T8808] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'.
[  275.543103][ T6981] XFS (loop4): Unmounting Filesystem
[  275.648440][ T8797] team0: Port device team_slave_0 added
[  275.681086][ T8857] loop3: detected capacity change from 0 to 256
[  275.704211][ T8797] team0: Port device team_slave_1 added
[  275.733528][ T8857] FAT-fs (loop3): Directory bread(block 64) failed
[  275.747240][ T8857] FAT-fs (loop3): Directory bread(block 65) failed
[  275.769736][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_0
[  275.777959][ T8857] FAT-fs (loop3): Directory bread(block 66) failed
[  275.784994][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.816103][ T8857] FAT-fs (loop3): Directory bread(block 67) failed
[  275.824597][ T8857] FAT-fs (loop3): Directory bread(block 68) failed
[  275.833949][ T8857] FAT-fs (loop3): Directory bread(block 69) failed
[  275.840563][ T8857] FAT-fs (loop3): Directory bread(block 70) failed
[  275.847552][ T8797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  275.858629][ T8857] FAT-fs (loop3): Directory bread(block 71) failed
[  275.867054][ T8857] FAT-fs (loop3): Directory bread(block 72) failed
[  275.880051][ T8797] batman_adv: batadv0: Adding interface: batadv_slave_1
[  275.887203][ T8797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  275.916514][ T8857] FAT-fs (loop3): Directory bread(block 73) failed
[  275.951617][ T3582] Bluetooth: hci1: command tx timeout
[  275.966049][ T8797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  276.036462][ T8865] overlayfs: unrecognized mount option "32
[  276.036462][ T8865] time
[  276.036462][ T8865] string
[  276.036462][ T8865] statistic
[  276.036462][ T8865] state
[  276.036462][ T8865] realm
[  276.036462][ T8865] rateest
[  276.036462][ T8865] quota
[  276.036462][ T8865] pkttype
[  276.036462][ T8865] physdev
[  276.036462][ T8865] cgroup
[  276.036462][ T8865] cgroup
[  276.036462][ T8865] cgroup
[  276.036462][ T8865] owner
[  276.036462][ T8865] nfacct
[  276.036462][ T8865] nfacct
[  276.036462][ T8865] mac
[  276.036462][ T8865] limit
[  276.036462][ T8865] ipvs
[  276.036462][ T8865] helper
[  276.036462][ T8865] devgroup
[  276.036462][ T8865] cpu
[  276.036462][ T8865] conntrack
[  276.036462][ T8865] conntrack
[  276.036462][ T8865] conntrack
[  276.036462][ T8865] connlimit
[  276.036462][ T8865] connlabel
[  276.036462][ T8865] connbytes
[  276.036462][ T8865] comment
[  276.036462][ T8865] cluster
[  276.036462][ T8865] bpf
[  276.036462][ T8865] bpf
[  276.200761][ T8797] device hsr_slave_0 entered promiscuous mode
[  276.208779][ T8873] xt_CT: You must specify a L4 protocol and not use inversions on it
[  276.218188][ T8797] device hsr_slave_1 entered promiscuous mode
[  276.233312][ T8797] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  276.251606][ T8797] Cannot create hsr debugfs directory
[  276.478055][ T8884] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  276.552348][ T8884] serio: Serial port ptm0
[  276.812539][ T8875] loop2: detected capacity change from 0 to 32768
[  276.848592][ T8900] loop4: detected capacity change from 0 to 256
[  276.884756][ T3665] device hsr_slave_0 left promiscuous mode
[  276.887270][ T8875] XFS (loop2): Mounting V5 Filesystem
[  276.896046][ T8900] FAT-fs (loop4): Directory bread(block 64) failed
[  276.896081][ T8900] FAT-fs (loop4): Directory bread(block 65) failed
[  276.896148][ T8900] FAT-fs (loop4): Directory bread(block 66) failed
[  276.896175][ T8900] FAT-fs (loop4): Directory bread(block 67) failed
[  276.924702][ T3665] device hsr_slave_1 left promiscuous mode
[  276.931143][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  276.938754][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_0
[  276.948128][ T3665] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  276.951519][ T8900] FAT-fs (loop4): Directory bread(block 68) failed
[  276.955568][ T3665] batman_adv: batadv0: Removing interface: batadv_slave_1
[  276.975233][ T3665] device macsec0 left promiscuous mode
[  276.981029][ T3665] bridge0: port 3(macsec0) entered disabled state
[  276.982554][ T8875] XFS (loop2): Ending clean mount
[  276.991632][ T8900] FAT-fs (loop4): Directory bread(block 69) failed
[  277.001679][ T8900] FAT-fs (loop4): Directory bread(block 70) failed
[  277.009517][ T3665] device bridge_slave_1 left promiscuous mode
[  277.009516][ T8900] FAT-fs (loop4): Directory bread(block 71) failed
[  277.009607][ T8900] FAT-fs (loop4): Directory bread(block 72) failed
[  277.016939][ T3665] bridge0: port 2(bridge_slave_1) entered disabled state
[  277.030285][ T8900] FAT-fs (loop4): Directory bread(block 73) failed
[  277.049570][ T8875] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  277.060277][ T3665] device bridge_slave_0 left promiscuous mode
[  277.066845][ T3665] bridge0: port 1(bridge_slave_0) entered disabled state
[  277.093506][ T3665] device bridge0 left promiscuous mode
[  277.104408][ T3665] device veth1_macvtap left promiscuous mode
[  277.116185][ T8061] XFS (loop2): Unmounting Filesystem
[  277.117030][ T3665] device veth0_macvtap left promiscuous mode
[  277.137868][ T3665] device veth1_vlan left promiscuous mode
[  277.144434][ T3665] device veth0_vlan left promiscuous mode
[  277.368758][ T3665] team0 (unregistering): Port device macvlan2 removed
[  277.466621][ T8915] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  277.526917][ T3665] team0 (unregistering): Port device team_slave_1 removed
[  277.538448][ T3665] team0 (unregistering): Port device team_slave_0 removed
[  277.549794][ T3665] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  277.574641][ T3665] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  277.652969][ T3665] bond0 (unregistering): Released all slaves
[  277.821166][ T8919] device syzkaller0 entered promiscuous mode
[  277.824061][ T8926] loop2: detected capacity change from 0 to 1024
[  277.900147][ T8926] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002]
[  277.915873][ T8926] System zones: 0-1, 3-12
[  277.928656][ T8926] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  278.014823][ T8934] sp0: Synchronizing with TNC
[  278.031619][ T3582] Bluetooth: hci1: command tx timeout
[  278.064258][ T8938] overlayfs: failed to resolve './file0': -2
[  278.093206][ T8797] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  278.142247][ T8797] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  278.164711][ T8941] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  278.177232][ T8941] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'.
[  278.234570][ T8942] binder: Unknown parameter '��cf��a:���k\l%�4���g�'
[  278.884683][ T8797] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  278.923730][ T8797] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  278.983519][ T8061] EXT4-fs (loop2): unmounting filesystem.
[  279.041157][ T8950] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[  279.128945][ T8946] serio: Serial port ptm0
[  279.140575][ T8956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  279.200403][ T8797] 8021q: adding VLAN 0 to HW filter on device bond0
[  279.226136][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  279.235754][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  279.248988][ T8797] 8021q: adding VLAN 0 to HW filter on device team0
[  279.273965][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  279.293192][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  279.318579][ T3289] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.325723][ T3289] bridge0: port 1(bridge_slave_0) entered forwarding state
[  279.367479][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  279.376948][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  279.386499][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  279.395479][ T6088] bridge0: port 2(bridge_slave_1) entered blocking state
[  279.402649][ T6088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  279.418096][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  279.427213][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  279.446889][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  279.456710][ T8965] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  279.468089][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  279.476367][ T8965] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'.
[  279.486614][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  279.494770][ T8965] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  279.505853][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  279.530711][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  279.549049][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  279.558279][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  279.566986][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  279.597549][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  279.610173][ T8797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  279.929880][ T8979] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  279.978752][ T8979] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'.
[  279.980809][ T8952] loop4: detected capacity change from 0 to 40427
[  280.018560][ T8952] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  280.021299][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  280.029587][ T8952] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  280.048336][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  280.051144][ T8952] F2FS-fs (loop4): invalid crc value
[  280.084935][ T8797] 8021q: adding VLAN 0 to HW filter on device batadv0
[  280.094154][ T8952] F2FS-fs (loop4): Found nat_bits in checkpoint
[  280.111938][ T3582] Bluetooth: hci1: command tx timeout
[  280.152456][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  280.171959][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  280.205254][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  280.214249][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  280.233785][ T8797] device veth0_vlan entered promiscuous mode
[  280.243444][ T8988] sp0: Synchronizing with TNC
[  280.244536][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  280.262247][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  280.267125][ T8952] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  280.280232][ T8952] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  280.289134][ T8797] device veth1_vlan entered promiscuous mode
[  280.349280][   T35] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  280.355457][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  280.366509][   T35] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  280.376865][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  280.401179][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  280.425427][ T6088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  280.453012][ T8797] device veth0_macvtap entered promiscuous mode
[  280.476471][ T8992] loop2: detected capacity change from 0 to 8192
[  280.479989][ T8797] device veth1_macvtap entered promiscuous mode
[  280.525354][ T8992]  loop2: p2
[  280.528629][ T8992] loop2: partition table partially beyond EOD, truncated
[  280.545227][ T8992] loop2: p2 start 4278194190 is beyond EOD, truncated
[  280.563645][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.612538][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.629507][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.661540][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.671377][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.731654][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.754365][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  280.787240][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  280.825985][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_0
[  280.861694][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  280.874551][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  280.901885][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  280.920763][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  280.974008][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.009757][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.051549][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.051571][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.051587][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.051599][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.051614][ T8797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  281.051625][ T8797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  281.055236][ T8797] batman_adv: batadv0: Interface activated: batadv_slave_1
[  281.058781][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  281.059456][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  281.072644][ T8797] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  281.175939][ T8797] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  281.191154][ T8797] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  281.200998][ T8797] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  281.281895][ T9019] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  281.287204][ T9015] device syzkaller0 entered promiscuous mode
[  281.341219][ T9021] loop4: detected capacity change from 0 to 512
[  281.376481][ T9021] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  281.415447][ T9021] EXT4-fs (loop4): 1 truncate cleaned up
[  281.421150][ T9021] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  281.484971][ T9021] EXT4-fs warning (device loop4): ext4_group_add:1743: No reserved GDT blocks, can't resize
[  281.608274][ T9029] sp0: Synchronizing with TNC
[  281.702034][ T6981] EXT4-fs (loop4): unmounting filesystem.
[  281.724877][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.761608][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.805230][ T6289] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  281.829637][  T102] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  281.847562][  T102] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  281.865072][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  282.180855][ T9053] loop1: detected capacity change from 0 to 1024
[  282.192439][ T3582] Bluetooth: hci1: command tx timeout
[  282.214884][ T9057] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  282.404236][ T9059] serio: Serial port ptm0
[  282.561485][ T9066] binder: Unknown parameter '��cf��a:���k\l%�4���g�'
[  283.577996][ T9090] sp0: Synchronizing with TNC
[  283.660336][ T9096] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  283.732224][ T9100] loop3: detected capacity change from 0 to 1024
[  284.019544][ T9102] binder: Unknown parameter '��cf��a:���k\l%�4���g�'
[  284.392241][   T26] audit: type=1804 audit(1718295814.500:775): pid=9087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3826135976/syzkaller.UqRsOm/169/file0" dev="sda1" ino=1957 res=1 errno=0
[  284.845384][ T9110] sp0: Synchronizing with TNC
[  285.219660][ T9131] loop1: detected capacity change from 0 to 4096
[  285.243888][ T9131] ntfs: (device loop1): parse_options(): Unrecognized mount option �0x0000000000000000.
[  285.653864][ T9167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  286.247860][ T9207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  286.533106][ T9222] loop3: detected capacity change from 0 to 128
[  286.655163][ T9233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  286.662203][ T9234] loop4: detected capacity change from 0 to 128
[  286.925365][ T9234] loop4: detected capacity change from 0 to 8192
[  287.011203][ T9254] loop1: detected capacity change from 0 to 128
[  287.014306][ T9256] loop2: detected capacity change from 0 to 512
[  287.107850][ T9256] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  287.141771][ T9256] ext4 filesystem being mounted at /root/syzkaller-testdir916831927/syzkaller.QYqVYr/79/file0 supports timestamps until 2038 (0x7fffffff)
[  287.316207][ T9278] loop4: detected capacity change from 0 to 1024
[  287.634471][ T9278] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002]
[  287.744069][ T9278] System zones: 0-1, 3-12
[  287.872043][ T9278] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  288.358351][ T9296] binder: Unknown parameter '��cf��a:���k\l%�4���g�'
[  288.405833][ T8061] EXT4-fs (loop2): unmounting filesystem.
[  289.110594][ T6981] EXT4-fs (loop4): unmounting filesystem.
[  289.299497][ T9320] loop2: detected capacity change from 0 to 512
[  289.368042][ T9320] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  289.380749][ T9330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  289.386683][ T9320] ext4 filesystem being mounted at /root/syzkaller-testdir916831927/syzkaller.QYqVYr/81/file0 supports timestamps until 2038 (0x7fffffff)
[  289.436610][   T26] audit: type=1326 audit(1718295819.550:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6d47cea9 code=0x7ffc0000
[  289.483051][ T9333] loop1: detected capacity change from 0 to 1024
[  289.489965][   T26] audit: type=1326 audit(1718295819.550:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6d47cea9 code=0x7ffc0000
[  289.520596][   T26] audit: type=1326 audit(1718295819.550:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6d47cea9 code=0x7ffc0000
[  289.546206][   T26] audit: type=1326 audit(1718295819.550:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7efd6d47cea9 code=0x7ffc0000
[  289.586109][ T9333] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e000e01c, mo2=0002]
[  289.595366][ T9333] System zones: 0-1, 3-12
[  289.614900][ T9333] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  289.631487][   T26] audit: type=1326 audit(1718295819.580:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efd6d47cea9 code=0x7ffc0000
[  289.686401][   T26] audit: type=1326 audit(1718295819.600:781): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd6d47a627 code=0x7ffc0000
[  289.710059][   T26] audit: type=1326 audit(1718295819.600:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd6d440309 code=0x7ffc0000
[  289.734233][   T26] audit: type=1326 audit(1718295819.600:783): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd6d47a627 code=0x7ffc0000
[  289.757939][   T26] audit: type=1326 audit(1718295819.600:784): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7efd6d440309 code=0x7ffc0000
[  289.887416][   T26] audit: type=1326 audit(1718295819.600:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9334 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efd6d47a627 code=0x7ffc0000
[  290.102491][ T9354] hub 9-0:1.0: USB hub found
[  290.109285][ T9354] hub 9-0:1.0: 8 ports detected
[  290.140663][ T9354] loop3: detected capacity change from 0 to 1764
[  290.167373][ T9356] binder: Unknown parameter '��cf��a:���k\l%�4���g�'
[  290.655158][ T9354] ISOFS: Logical zone size(2) < hardware blocksize(1024)
[  290.777934][ T9350] loop3: detected capacity change from 0 to 2048
[  290.799047][ T8061] EXT4-fs (loop2): unmounting filesystem.
[  290.848098][ T9350] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  290.848195][ T9350] ext4 filesystem being mounted at /root/syzkaller-testdir265167249/syzkaller.AqtF2v/61/bus supports timestamps until 2038 (0x7fffffff)
[  290.857653][ T9350] fs-verity: sha512 using implementation "sha512-avx2"
[  290.916072][ T8797] EXT4-fs (loop1): unmounting filesystem.
[  290.925309][ T9369] input: syz0 as /devices/virtual/input/input7
[  291.094546][ T9371] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  291.137183][ T8446] EXT4-fs (loop3): unmounting filesystem.
[  291.326314][ T9391] loop3: detected capacity change from 0 to 2048
[  291.361047][ T9391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  291.550255][ T9404] input: syz0 as /devices/virtual/input/input8
[  291.884608][ T9419] loop3: detected capacity change from 0 to 1024
[  292.038176][   T35] hfsplus: b-tree write err: -5, ino 4
[  292.088325][ T9433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  292.266690][ T9441] input: syz0 as /devices/virtual/input/input9
[  292.518550][ T9451] loop2: detected capacity change from 0 to 256
[  292.692573][ T9463] Bluetooth: MGMT ver 1.22
[  294.533774][ T9494] loop1: detected capacity change from 0 to 64
[  295.252368][ T9513] loop4: detected capacity change from 0 to 512
[  295.504322][ T9513] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  295.542867][ T9513] ext4 filesystem being mounted at /root/syzkaller-testdir3826135976/syzkaller.UqRsOm/195/file0 supports timestamps until 2038 (0x7fffffff)
[  295.795703][ T3574] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  295.815742][ T3574] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  295.827857][ T3574] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  295.836230][ T3574] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  295.843868][ T3574] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  295.851293][ T3574] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  296.024503][ T6981] EXT4-fs (loop4): unmounting filesystem.
[  296.191859][ T6287] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  296.243299][ T9539] loop4: detected capacity change from 0 to 1024
[  296.306689][   T35] hfsplus: b-tree write err: -5, ino 4
[  296.335492][    T9] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.397208][ T9527] chnl_net:caif_netlink_parms(): no params data found
[  296.457473][    T9] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.468011][ T6287] usb 2-1: Using ep0 maxpacket: 32
[  296.543902][    T9] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.567178][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  296.567193][   T26] audit: type=1800 audit(1718295826.680:842): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1958 res=0 errno=0
[  296.594332][    C1] vkms_vblank_simulate: vblank timer overrun
[  296.614939][ T9527] bridge0: port 1(bridge_slave_0) entered blocking state
[  296.626715][ T6287] usb 2-1: New USB device found, idVendor=057c, idProduct=8403, bcdDevice=72.02
[  296.636256][ T6287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.637864][ T9527] bridge0: port 1(bridge_slave_0) entered disabled state
[  296.657711][ T6287] usb 2-1: config 0 descriptor??
[  296.672815][ T9527] device bridge_slave_0 entered promiscuous mode
[  296.689096][ T9551] "syz-executor.0" (9551) uses obsolete ecb(arc4) skcipher
[  296.700111][    T9] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  296.711117][ T6287] usb 2-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  296.735708][ T9527] bridge0: port 2(bridge_slave_1) entered blocking state
[  296.747232][ T9527] bridge0: port 2(bridge_slave_1) entered disabled state
[  296.759976][ T9527] device bridge_slave_1 entered promiscuous mode
[  296.859793][ T9527] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.915732][ T9527] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.929737][ T6287] usb 2-1: USB disconnect, device number 12
[  297.056622][ T9527] team0: Port device team_slave_0 added
[  297.109759][ T9527] team0: Port device team_slave_1 added
[  297.215484][ T9527] batman_adv: batadv0: Adding interface: batadv_slave_0
[  297.265338][ T9527] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.358530][ T9527] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  297.406004][ T9527] batman_adv: batadv0: Adding interface: batadv_slave_1
[  297.427836][ T9527] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  297.461042][ T9527] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  297.958174][ T3582] Bluetooth: hci6: command tx timeout
[  298.030380][ T9572] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  298.042425][ T9572] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  298.075627][ T9572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  298.191798][ T9527] device hsr_slave_0 entered promiscuous mode
[  298.204518][ T9527] device hsr_slave_1 entered promiscuous mode
[  298.333149][   T26] audit: type=1800 audit(1718295828.450:843): pid=9591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1958 res=0 errno=0
[  298.437913][ T9592] "syz-executor.3" (9592) uses obsolete ecb(arc4) skcipher
[  298.740948][ T9608] loop4: detected capacity change from 0 to 1024
[  298.792153][ T9608] EXT4-fs: Ignoring removed oldalloc option
[  298.834332][    T9] device hsr_slave_0 left promiscuous mode
[  298.850531][    T9] device hsr_slave_1 left promiscuous mode
[  298.850608][ T9608] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  298.890252][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  298.922653][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  298.953773][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  298.961262][   T26] audit: type=1800 audit(1718295829.070:844): pid=9608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0
[  298.998652][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.022779][    T9] device bridge_slave_1 left promiscuous mode
[  299.030081][   T26] audit: type=1800 audit(1718295829.080:845): pid=9608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0
[  299.036193][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.072706][   T26] audit: type=1800 audit(1718295829.080:846): pid=9608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0
[  299.093472][    C1] vkms_vblank_simulate: vblank timer overrun
[  299.144395][    T9] device bridge_slave_0 left promiscuous mode
[  299.168762][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.219979][    T9] device veth1_macvtap left promiscuous mode
[  299.283916][    T9] device veth0_macvtap left promiscuous mode
[  299.312088][    T9] device veth1_vlan left promiscuous mode
[  299.335835][    T9] device veth0_vlan left promiscuous mode
[  300.031521][ T3582] Bluetooth: hci6: command tx timeout
[  300.079701][ T6981] EXT4-fs (loop4): unmounting filesystem.
[  300.623506][    T9] team0 (unregistering): Port device team_slave_1 removed
[  300.646730][    T9] team0 (unregistering): Port device team_slave_0 removed
[  300.687383][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  300.720701][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  300.845208][    T9] bond0 (unregistering): Released all slaves
[  300.898186][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  300.908441][ T9616] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  300.919588][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  302.119725][ T3582] Bluetooth: hci6: command tx timeout
[  302.177407][ T9527] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  302.191250][ T9527] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  302.202102][ T9527] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  302.213256][ T9527] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  302.553522][ T9674] binder: Unknown parameter '��cf��a:���k\l%�4���g�'
[  302.803115][    C0] vxcan0: j1939_tp_rxtimer: 0xffff888057c06800: rx timeout, send abort
[  302.815958][    C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888057c06800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  303.365432][ T9527] 8021q: adding VLAN 0 to HW filter on device bond0
[  303.445378][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.452290][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  303.475547][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.481967][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  303.505334][ T9527] 8021q: adding VLAN 0 to HW filter on device team0
[  303.511708][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.531248][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  303.547219][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.552133][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  303.568121][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.596344][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.614068][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.631463][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.649370][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.656858][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.685376][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.721522][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.742026][  T152] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.749154][  T152] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.756704][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.773690][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  303.783355][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  303.792600][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  303.800920][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.801080][ T3289] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.815463][ T3289] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.821495][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  303.833657][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  303.876546][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  304.013897][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  304.156201][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.163780][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.171281][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.178738][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.186184][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.193853][ T3574] Bluetooth: hci6: command tx timeout
[  304.199919][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.207387][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.216861][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  304.230946][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  304.235376][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.239922][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  304.258661][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.271684][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.279098][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.291093][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.301032][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.310384][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.318011][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.325520][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.333051][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.340502][ T6287] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  304.356322][ T6287] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  304.508312][ T9527] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  304.551180][ T9527] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  304.586523][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  304.597413][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  304.637763][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  304.652314][ T6287] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  304.657112][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  304.689634][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  304.719377][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  305.744436][ T9713] loop4: detected capacity change from 0 to 1024
[  305.761863][ T9713] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  305.783454][ T6287] usb 2-1: config 0 has no interfaces?
[  305.789170][ T6287] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  305.813282][ T9713] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  305.829312][ T6287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.847143][ T9713] EXT4-fs (loop4): barriers disabled
[  305.862074][ T9713] JBD2: no valid journal superblock found
[  305.869696][ T6287] usb 2-1: config 0 descriptor??
[  305.874852][ T9713] EXT4-fs (loop4): error loading journal
[  305.973680][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  305.985414][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  306.004975][ T9527] 8021q: adding VLAN 0 to HW filter on device batadv0
[  306.038791][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  306.052991][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  306.095833][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  306.101077][ T9713] loop4: detected capacity change from 0 to 2048
[  306.105242][ T6287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  306.156010][ T9527] device veth0_vlan entered promiscuous mode
[  306.187979][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  306.203227][ T6288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  306.234475][ T9527] device veth1_vlan entered promiscuous mode
[  306.315677][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  306.332303][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  306.380416][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  306.402409][ T3289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  306.433620][ T9527] device veth0_macvtap entered promiscuous mode
[  306.464180][ T9527] device veth1_macvtap entered promiscuous mode
[  306.503802][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.551611][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.612263][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.637786][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.678277][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.913955][ T6287] usb 2-1: USB disconnect, device number 13
[  307.213649][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.268518][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  307.279069][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.315683][ T9527] batman_adv: batadv0: Interface activated: batadv_slave_0
[  307.355589][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  307.364791][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  307.397279][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  307.462734][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  307.490126][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.512462][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.534775][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.556502][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.577704][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.580622][ T9745] loop3: detected capacity change from 0 to 256
[  307.589514][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.627468][ T9527] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  307.638416][ T9527] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  307.656851][ T9527] batman_adv: batadv0: Interface activated: batadv_slave_1
[  307.672781][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  307.701202][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  307.765832][ T9527] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  307.793813][ T9527] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  307.822697][ T9527] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  307.851583][ T9527] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.960129][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  307.987400][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.016358][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.039287][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.064388][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.080388][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.088884][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.113515][ T3715] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.128325][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.155532][ T3715] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.169895][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.178448][ T3826] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  308.205739][ T3826] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  308.230122][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.253257][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.270075][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.278125][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.325452][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.382495][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.413440][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.436964][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.458657][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.471048][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.484031][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.493902][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.505728][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.516538][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.527389][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.537580][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.548484][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.578577][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.634247][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.674054][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.690201][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.698879][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  308.713463][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  309.394196][ T6287] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  309.403263][ T9774] openvswitch: netlink: Duplicate key (type 6).
[  309.412682][ T6287] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  309.497890][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  309.516739][ T5927] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  309.585655][ T9778] loop1: detected capacity change from 0 to 256
[  309.721522][ T6287] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  310.112055][ T6287] usb 4-1: config 0 has no interfaces?
[  310.117547][ T6287] usb 4-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00
[  310.145961][ T6287] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  310.165699][ T6287] usb 4-1: config 0 descriptor??
[  311.019501][ T3289] usb 4-1: USB disconnect, device number 10
[  311.102619][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880535bc800: rx timeout, send abort
[  311.111139][    C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880535bc800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  311.158244][   T26] audit: type=1804 audit(1718295841.270:847): pid=9804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2977822824/syzkaller.ABhxqY/217/bus" dev="sda1" ino=1965 res=1 errno=0
[  311.186616][ T9804] Invalid ELF header type: 0 != 1
[  311.335211][ T9808] loop3: detected capacity change from 0 to 512
[  311.347715][ T9808] EXT4-fs: Ignoring removed nomblk_io_submit option
[  311.374527][ T9808] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  311.404725][ T9808] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  311.627331][ T9810] tipc: Started in network mode
[  311.643009][ T9810] tipc: Node identity ffffffff, cluster identity 4711
[  311.649819][ T9810] tipc: Node number set to 4294967295
[  312.101381][ T9797] loop4: detected capacity change from 0 to 40427
[  312.120229][ T9797] F2FS-fs (loop4): invalid crc value
[  312.151346][ T9797] F2FS-fs (loop4): Found nat_bits in checkpoint
[  312.235368][ T9797] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  312.249533][ T9797] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  312.281545][ T3289] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  312.283190][ T9807] loop2: detected capacity change from 0 to 40427
[  312.305018][ T9797] syz-executor.4 (9797): drop_caches: 2
[  312.311217][ T9797] syz-executor.4 (9797): drop_caches: 2
[  312.325498][   T26] audit: type=1800 audit(1718295842.440:848): pid=9797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0
[  312.366919][ T9807] F2FS-fs (loop2): Found nat_bits in checkpoint
[  312.383298][ T6981] syz-executor.4: attempt to access beyond end of device
[  312.383298][ T6981] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  312.460709][ T9807] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  312.493377][ T9527] syz-executor.2: attempt to access beyond end of device
[  312.493377][ T9527] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  312.641756][ T3289] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[  312.651163][ T3289] usb 1-1: config 0 has no interface number 0
[  312.657614][ T3289] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[  312.674043][ T3289] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  312.687572][ T3289] usb 1-1: config 0 interface 48 has no altsetting 0
[  312.694918][ T3289] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  312.709525][ T3289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.727689][ T3289] usb 1-1: config 0 descriptor??
[  313.194767][ T3289] usb 1-1: string descriptor 0 read error: -32
[  313.304387][    C1] vxcan0: j1939_tp_rxtimer: 0xffff8880615e1c00: rx timeout, send abort
[  313.312904][    C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880615e1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  313.331776][ T3289] usb 1-1: Cannot read MAC address
[  313.337096][ T3289] MOSCHIP usb-ethernet driver: probe of 1-1:0.48 failed with error -71
[  313.374581][ T3289] usb 1-1: USB disconnect, device number 11
[  313.400436][   T26] audit: type=1804 audit(1718295843.510:849): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2366385470/syzkaller.o0D5RW/5/bus" dev="sda1" ino=1934 res=1 errno=0
[  313.427148][ T9858] Invalid ELF header type: 0 != 1
[  313.669078][ T9868] Zero length message leads to an empty skb
[  313.909993][   T26] audit: type=1326 audit(1718295844.020:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  314.361544][   T26] audit: type=1326 audit(1718295844.060:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  314.392137][   T26] audit: type=1326 audit(1718295844.080:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  314.415320][   T26] audit: type=1326 audit(1718295844.150:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  314.440274][   T26] audit: type=1326 audit(1718295844.180:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  314.518640][   T26] audit: type=1326 audit(1718295844.190:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  314.545187][   T26] audit: type=1326 audit(1718295844.330:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9876 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  314.800285][ T9900] loop2: detected capacity change from 0 to 4096
[  314.848512][ T9910] Invalid ELF header type: 0 != 1
[  314.873190][ T9900] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  314.948306][ T9878] loop4: detected capacity change from 0 to 32768
[  314.969422][ T9878] XFS (loop4): Mounting V5 Filesystem
[  315.054767][ T9878] XFS (loop4): Ending clean mount
[  315.065205][ T9527] EXT4-fs (loop2): unmounting filesystem.
[  315.065530][ T9878] XFS (loop4): Quotacheck needed: Please wait.
[  315.134212][ T9924] loop1: detected capacity change from 0 to 512
[  315.161390][ T9878] XFS (loop4): Quotacheck: Done.
[  315.161888][ T9924] EXT4-fs: Ignoring removed nomblk_io_submit option
[  315.176125][ T9924] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  315.201834][ T9924] EXT4-fs (loop1): couldn't mount as ext2 due to feature incompatibilities
[  315.233918][ T9930] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  315.269572][ T9930] 8021q: adding VLAN 0 to HW filter on device team0
[  315.287534][ T9930] bond0: (slave team0): Enslaving as an active interface with an up link
[  315.335586][ T9932] device bond_slave_0 entered promiscuous mode
[  315.342428][ T9932] device bond_slave_1 entered promiscuous mode
[  315.348840][ T9932] device team_slave_0 entered promiscuous mode
[  315.355565][ T9932] device team_slave_1 entered promiscuous mode
[  315.394793][ T6981] XFS (loop4): Unmounting Filesystem
[  315.444573][ T9930] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  315.469071][ T9930] bond0: (slave team0): Releasing backup interface
[  315.483862][ T9930] device team_slave_0 left promiscuous mode
[  315.496259][ T9930] device team_slave_1 left promiscuous mode
[  315.521975][ T9930] bridge0: port 3(team0) entered blocking state
[  315.528445][ T9930] bridge0: port 3(team0) entered disabled state
[  315.536322][ T9930] device team0 entered promiscuous mode
[  315.561118][ T9930] device team_slave_0 entered promiscuous mode
[  315.580837][ T9930] device team_slave_1 entered promiscuous mode
[  315.603364][ T9929] device bond_slave_0 left promiscuous mode
[  315.611676][ T9929] device bond_slave_1 left promiscuous mode
[  315.841770][ T6287] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  316.134918][ T6287] usb 2-1: Using ep0 maxpacket: 32
[  316.251846][ T6287] usb 2-1: config 0 has no interfaces?
[  316.261602][ T6287] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  316.288530][ T6287] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.352527][ T6287] usb 2-1: config 0 descriptor??
[  316.525551][ T9945] loop3: detected capacity change from 0 to 40427
[  316.561841][ T9945] F2FS-fs (loop3): invalid crc value
[  316.603753][ T9945] F2FS-fs (loop3): Found nat_bits in checkpoint
[  316.715830][ T9945] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  316.739040][ T9945] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  316.843202][ T6289] usb 2-1: USB disconnect, device number 14
[  316.963171][   T26] kauditd_printk_skb: 20 callbacks suppressed
[  316.963185][   T26] audit: type=1800 audit(1718295847.080:877): pid=9980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0
[  317.004455][ T1252] ieee802154 phy0 wpan0: encryption failed: -22
[  317.010798][ T1252] ieee802154 phy1 wpan1: encryption failed: -22
[  317.029551][ T9982] Invalid ELF header type: 0 != 1
[  317.072222][ T9957] syz-executor.2 (9957) used greatest stack depth: 18488 bytes left
[  317.090181][   T26] audit: type=1804 audit(1718295847.140:878): pid=9982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3826135976/syzkaller.UqRsOm/232/bus" dev="sda1" ino=1966 res=1 errno=0
[  317.187527][ T9986] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  317.213126][ T9945] syz-executor.3 (9945): drop_caches: 2
[  317.268796][ T9986] 8021q: adding VLAN 0 to HW filter on device team0
[  317.281118][ T9986] bond0: (slave team0): Enslaving as an active interface with an up link
[  317.290773][ T8446] syz-executor.3: attempt to access beyond end of device
[  317.290773][ T8446] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  317.308392][ T9987] device bond_slave_0 entered promiscuous mode
[  317.315305][ T9987] device bond_slave_1 entered promiscuous mode
[  317.321806][ T9987] device team_slave_0 entered promiscuous mode
[  317.329032][ T9987] device team_slave_1 entered promiscuous mode
[  317.425283][ T9986] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  317.459294][ T9986] bond0: (slave team0): Releasing backup interface
[  317.502280][ T9986] device team_slave_0 left promiscuous mode
[  317.508946][ T9986] device team_slave_1 left promiscuous mode
[  317.555625][ T9986] bridge0: port 4(team0) entered blocking state
[  317.588881][ T9986] bridge0: port 4(team0) entered disabled state
[  317.629732][ T9985] device bond_slave_0 left promiscuous mode
[  317.635733][ T9985] device bond_slave_1 left promiscuous mode
[  317.721741][ T9997] xt_SECMARK: invalid mode: 0
[  318.157251][T10017] tipc: Started in network mode
[  318.172626][T10017] tipc: Node identity ffffffff, cluster identity 4711
[  318.179421][T10017] tipc: Node number set to 4294967295
[  318.337957][T10028] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  318.360749][T10028] device team0 left promiscuous mode
[  318.366626][ T6289] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  318.387995][T10028] device team_slave_0 left promiscuous mode
[  318.396258][T10028] device team_slave_1 left promiscuous mode
[  318.406349][T10028] bridge0: port 3(team0) entered disabled state
[  318.465152][T10028] 8021q: adding VLAN 0 to HW filter on device team0
[  318.507983][T10028] bond0: (slave team0): Enslaving as an active interface with an up link
[  318.543940][T10029] device bond_slave_0 entered promiscuous mode
[  318.550221][T10029] device bond_slave_1 entered promiscuous mode
[  318.556428][T10029] device team_slave_0 entered promiscuous mode
[  318.562637][T10029] device team_slave_1 entered promiscuous mode
[  318.611615][T10033] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  318.660943][T10033] bond0: (slave team0): Releasing backup interface
[  318.725372][T10033] device team_slave_0 left promiscuous mode
[  318.733308][T10033] device team_slave_1 left promiscuous mode
[  318.740879][ T6289] usb 1-1: config 0 has an invalid interface number: 48 but max is 0
[  318.760229][ T6289] usb 1-1: config 0 has no interface number 0
[  318.761096][T10019] loop4: detected capacity change from 0 to 40427
[  318.770357][ T6289] usb 1-1: too many endpoints for config 0 interface 48 altsetting 120: 48, using maximum allowed: 30
[  318.796938][ T6289] usb 1-1: config 0 interface 48 altsetting 120 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  318.796952][T10033] bridge0: port 3(team0) entered blocking state
[  318.796972][ T6289] usb 1-1: config 0 interface 48 has no altsetting 0
[  318.823631][ T6289] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  318.833277][ T6289] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  318.845606][ T6289] usb 1-1: config 0 descriptor??
[  318.856900][T10019] F2FS-fs (loop4): invalid crc value
[  318.881978][T10033] bridge0: port 3(team0) entered disabled state
[  318.889370][T10033] device team0 entered promiscuous mode
[  318.901741][T10033] device team_slave_0 entered promiscuous mode
[  318.908040][T10033] device team_slave_1 entered promiscuous mode
[  318.927855][T10019] F2FS-fs (loop4): Wrong journal entry on segno 65538
[  318.960867][T10019] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-117)
[  318.987221][T10027] device bond_slave_0 left promiscuous mode
[  318.993228][T10027] device bond_slave_1 left promiscuous mode
[  319.097267][T10048] xt_SECMARK: invalid mode: 0
[  319.351753][ T6289] usb 1-1: string descriptor 0 read error: -32
[  319.386771][T10062] IPv6: NLM_F_CREATE should be specified when creating new route
[  319.410170][T10062] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  319.418249][T10062] IPv6: NLM_F_CREATE should be set when creating new route
[  319.425524][T10062] IPv6: NLM_F_CREATE should be set when creating new route
[  319.491650][ T6289] usb 1-1: Cannot read MAC address
[  319.496911][ T6289] MOSCHIP usb-ethernet driver: probe of 1-1:0.48 failed with error -71
[  319.531945][ T6289] usb 1-1: USB disconnect, device number 12
[  320.128108][T10091] IPv6: NLM_F_CREATE should be specified when creating new route
[  320.162402][T10091] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  320.169679][T10091] IPv6: NLM_F_CREATE should be set when creating new route
[  320.176969][T10091] IPv6: NLM_F_CREATE should be set when creating new route
[  320.457583][   T26] audit: type=1326 audit(1718295850.570:879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10107 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efd6d47cea9 code=0x0
[  320.481648][ T6289] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  320.520097][T10084] loop3: detected capacity change from 0 to 40427
[  320.542979][T10084] F2FS-fs (loop3): invalid crc value
[  320.579751][T10084] F2FS-fs (loop3): Wrong journal entry on segno 65538
[  320.592120][T10084] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-117)
[  321.048520][T10131] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  321.065463][ T6289] usb 3-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  321.079228][ T6289] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.099646][ T6289] usb 3-1: Product: syz
[  321.123642][ T6289] usb 3-1: Manufacturer: syz
[  321.140618][ T6289] usb 3-1: SerialNumber: syz
[  321.161323][ T6289] usb 3-1: config 0 descriptor??
[  321.415993][T10135] loop3: detected capacity change from 0 to 1764
[  321.465861][T10135] iso9660: Corrupted directory entry in block 2 of inode 1920
[  321.641508][ T5927] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  322.414172][ T6289] dm9601: No valid MAC address in EEPROM, using b6:8c:7f:f5:af:3e
[  322.578130][T10146] loop1: detected capacity change from 0 to 2048
[  322.596248][T10146] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  322.842814][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  322.863161][ T8797] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  322.877671][ T5927] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  322.882360][ T8797] UDF-fs: error (device loop1): udf_read_inode: (ino 1317) failed !bh
[  322.889388][ T5927] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  322.915993][ T5927] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  322.926381][ T5927] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  322.943395][ T5927] usb 5-1: config 0 descriptor??
[  322.967789][T10137] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  323.147647][ T6289] dm9601 3-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  323.189251][ T6289] dm9601 3-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet, b6:8c:7f:f5:af:3e
[  323.217549][ T6289] usb 3-1: USB disconnect, device number 11
[  323.234305][ T6289] dm9601 3-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.2-1, Davicom DM96xx USB 10/100 Ethernet
[  323.399681][ T3826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.464807][ T5927] plantronics 0003:047F:FFFF.0007: unknown main item tag 0xd
[  323.493139][ T5927] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  323.554168][ T5927] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  323.600950][ T3826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.655231][T10164] loop3: detected capacity change from 0 to 1764
[  323.686226][   T26] audit: type=1326 audit(1718295853.800:880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10168 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fad44c7cea9 code=0x0
[  323.686320][ T3826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.733847][T10164] iso9660: Corrupted directory entry in block 2 of inode 1920
[  323.784586][ T3826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  323.833643][ T5927] usb 5-1: USB disconnect, device number 9
[  323.986634][ T3582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  323.999380][ T3582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  324.090931][ T3582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  324.104046][ T3582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  324.119668][ T3582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  324.129915][ T3582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  324.708229][ T3826] tipc: Left network mode
[  325.086361][T10176] chnl_net:caif_netlink_parms(): no params data found
[  325.101688][ T3289] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  325.240874][T10176] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.248302][T10176] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.256472][T10176] device bridge_slave_0 entered promiscuous mode
[  325.265371][T10176] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.272686][T10176] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.281920][T10176] device bridge_slave_1 entered promiscuous mode
[  325.311066][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  325.335839][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  325.424891][T10213] loop4: detected capacity change from 0 to 1764
[  325.464116][T10213] iso9660: Corrupted directory entry in block 2 of inode 1920
[  325.491306][T10176] team0: Port device team_slave_0 added
[  325.511226][T10176] team0: Port device team_slave_1 added
[  325.761603][ T3289] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  325.770682][ T3289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  325.809583][ T3289] usb 4-1: Product: syz
[  325.821508][ T3289] usb 4-1: Manufacturer: syz
[  325.826147][ T3289] usb 4-1: SerialNumber: syz
[  325.860091][ T3289] usb 4-1: config 0 descriptor??
[  325.887620][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.904570][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.976881][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  326.048864][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  326.065697][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  326.136899][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  326.192696][ T3582] Bluetooth: hci0: command tx timeout
[  326.211045][ T3826] device hsr_slave_0 left promiscuous mode
[  326.238254][ T3826] device hsr_slave_1 left promiscuous mode
[  326.260041][ T3826] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  326.288239][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_0
[  326.321123][ T3826] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  326.351911][ T3826] batman_adv: batadv0: Removing interface: batadv_slave_1
[  326.361080][ T3826] device bridge_slave_1 left promiscuous mode
[  326.381648][ T3826] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.390409][ T3826] device bridge_slave_0 left promiscuous mode
[  326.411613][ T3826] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.443108][ T3826] device veth1_macvtap left promiscuous mode
[  326.449184][ T3826] device veth0_macvtap left promiscuous mode
[  326.472006][ T3826] device veth1_vlan left promiscuous mode
[  326.473636][T10229] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it!
[  326.477832][ T3826] device veth0_vlan left promiscuous mode
[  326.559883][   T26] audit: type=1326 audit(1718295856.670:881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  326.583607][ T3289] dm9601: No valid MAC address in EEPROM, using b6:8c:7f:f5:af:3e
[  326.618632][   T26] audit: type=1326 audit(1718295856.670:882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  326.687821][   T26] audit: type=1326 audit(1718295856.670:883): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  326.724212][   T26] audit: type=1326 audit(1718295856.670:884): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  326.775829][   T26] audit: type=1326 audit(1718295856.670:885): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  326.812664][   T26] audit: type=1326 audit(1718295856.670:886): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  327.003950][   T26] audit: type=1326 audit(1718295856.670:887): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  327.027169][   T26] audit: type=1326 audit(1718295856.670:888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  327.050871][   T26] audit: type=1326 audit(1718295856.670:889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10230 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc8c27cea9 code=0x7ffc0000
[  327.151112][ T4480] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  327.318370][ T3826] team0 (unregistering): Port device team_slave_1 removed
[  327.412104][ T3289] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  327.441984][ T4480] usb 1-1: Using ep0 maxpacket: 16
[  327.488471][ T4480] usb 1-1: too many configurations: 129, using maximum allowed: 8
[  327.590676][ T3826] team0 (unregistering): Port device team_slave_0 removed
[  327.819644][ T3826] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  327.873255][ T3826] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  328.018741][ T3826] bond0 (unregistering): Released all slaves
[  328.140257][T10176] device hsr_slave_0 entered promiscuous mode
[  328.147224][T10176] device hsr_slave_1 entered promiscuous mode
[  328.167516][T10176] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  328.181590][T10176] Cannot create hsr debugfs directory
[  328.271608][ T3582] Bluetooth: hci0: command tx timeout
[  328.288618][ T3289] dm9601 4-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, b6:8c:7f:f5:af:3e
[  328.320305][ T3289] usb 4-1: USB disconnect, device number 11
[  328.333725][ T3289] dm9601 4-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet
[  328.792463][ T4480] usb 1-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=20.64
[  328.839848][ T4480] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.020833][ T4480] usb 1-1: config 0 descriptor??
[  329.217407][T10251] loop4: detected capacity change from 0 to 32768
[  329.278585][ T4480] usb 1-1: USB disconnect, device number 13
[  329.288820][T10251] 
[  329.288820][T10251]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.288820][T10251] 
[  329.354223][T10251] 
[  329.354223][T10251]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.354223][T10251] 
[  329.380103][T10251] 
[  329.380103][T10251]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.380103][T10251] 
[  329.397447][T10251] 
[  329.397447][T10251]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.397447][T10251] 
[  329.408136][T10251] 
[  329.408136][T10251]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.408136][T10251] 
[  329.426066][T10251] 
[  329.426066][T10251]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.426066][T10251] 
[  329.440181][T10251] 
[  329.440181][T10251]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.440181][T10251] 
[  329.481223][T10266] non-latin1 character 0x3ff found in JFS file name
[  329.484131][  T133] 
[  329.484131][  T133]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.484131][  T133] 
[  329.507924][T10266] mount with iocharset=utf8 to access
[  329.555846][ T3715] 
[  329.555846][ T3715]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.555846][ T3715] 
[  329.577236][ T3715] 
[  329.577236][ T3715]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.577236][ T3715] 
[  329.618128][ T6981] 
[  329.618128][ T6981]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.618128][ T6981] 
[  329.646149][ T6981] 
[  329.646149][ T6981]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.646149][ T6981] 
[  329.682628][  T132] 
[  329.682628][  T132]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  329.682628][  T132] 
[  329.728321][  T132] ==================================================================
[  329.736403][  T132] BUG: KASAN: use-after-free in txEnd+0x350/0x560
[  329.742828][  T132] Write of size 8 at addr ffff888075310040 by task jfsCommit/132
[  329.750536][  T132] 
[  329.752858][  T132] CPU: 0 PID: 132 Comm: jfsCommit Not tainted 6.1.93-syzkaller #0
[  329.760652][  T132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  329.770729][  T132] Call Trace:
[  329.774011][  T132]  <TASK>
[  329.776938][  T132]  dump_stack_lvl+0x1e3/0x2cb
[  329.781642][  T132]  ? nf_tcp_handle_invalid+0x642/0x642
[  329.787119][  T132]  ? panic+0x764/0x764
[  329.791194][  T132]  ? _printk+0xd1/0x111
[  329.795355][  T132]  ? __virt_addr_valid+0x17f/0x520
[  329.800470][  T132]  ? __virt_addr_valid+0x17f/0x520
[  329.805583][  T132]  print_report+0x15f/0x4f0
[  329.810087][  T132]  ? __virt_addr_valid+0x17f/0x520
[  329.815202][  T132]  ? __virt_addr_valid+0x17f/0x520
[  329.820313][  T132]  ? __virt_addr_valid+0x44a/0x520
[  329.825426][  T132]  ? __phys_addr+0xb6/0x170
[  329.829943][  T132]  ? txEnd+0x350/0x560
[  329.834030][  T132]  kasan_report+0x136/0x160
[  329.838535][  T132]  ? txEnd+0x350/0x560
[  329.842599][  T132]  kasan_check_range+0x27f/0x290
[  329.847536][  T132]  txEnd+0x350/0x560
[  329.851425][  T132]  jfs_lazycommit+0x610/0xb60
[  329.856100][  T132]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  329.862005][  T132]  ? lockdep_hardirqs_on+0x94/0x130
[  329.867205][  T132]  ? txFreelock+0x580/0x580
[  329.871706][  T132]  ? do_task_dead+0xd0/0xd0
[  329.876210][  T132]  ? _raw_spin_unlock+0x40/0x40
[  329.881062][  T132]  ? __kthread_parkme+0x168/0x1c0
[  329.886092][  T132]  kthread+0x28d/0x320
[  329.890154][  T132]  ? txFreelock+0x580/0x580
[  329.894650][  T132]  ? kthread_blkcg+0xd0/0xd0
[  329.899239][  T132]  ret_from_fork+0x1f/0x30
[  329.903664][  T132]  </TASK>
[  329.906689][  T132] 
[  329.909008][  T132] Allocated by task 10251:
[  329.913409][  T132]  kasan_set_track+0x4b/0x70
[  329.918004][  T132]  __kasan_kmalloc+0x97/0xb0
[  329.922587][  T132]  lmLogOpen+0x314/0x1030
[  329.926915][  T132]  jfs_mount_rw+0xe3/0x640
[  329.931324][  T132]  jfs_fill_super+0x67d/0xc40
[  329.935998][  T132]  mount_bdev+0x2c9/0x3f0
[  329.940324][  T132]  legacy_get_tree+0xeb/0x180
[  329.945006][  T132]  vfs_get_tree+0x88/0x270
[  329.949419][  T132]  do_new_mount+0x2ba/0xb40
[  329.953916][  T132]  __se_sys_mount+0x2d5/0x3c0
[  329.958594][  T132]  do_syscall_64+0x3b/0xb0
[  329.963011][  T132]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  329.968906][  T132] 
[  329.971219][  T132] Freed by task 6981:
[  329.975186][  T132]  kasan_set_track+0x4b/0x70
[  329.979780][  T132]  kasan_save_free_info+0x27/0x40
[  329.984806][  T132]  ____kasan_slab_free+0xd6/0x120
[  329.989831][  T132]  __kmem_cache_free+0x25c/0x3c0
[  329.994763][  T132]  lmLogClose+0x29d/0x530
[  329.999090][  T132]  jfs_umount+0x298/0x370
[  330.003414][  T132]  jfs_put_super+0x86/0x180
[  330.007910][  T132]  generic_shutdown_super+0x130/0x340
[  330.013280][  T132]  kill_block_super+0x7a/0xe0
[  330.017956][  T132]  deactivate_locked_super+0xa0/0x110
[  330.023322][  T132]  cleanup_mnt+0x490/0x520
[  330.027742][  T132]  task_work_run+0x246/0x300
[  330.032331][  T132]  exit_to_user_mode_loop+0xde/0x100
[  330.037613][  T132]  exit_to_user_mode_prepare+0xb1/0x140
[  330.043152][  T132]  syscall_exit_to_user_mode+0x60/0x270
[  330.048691][  T132]  do_syscall_64+0x47/0xb0
[  330.053130][  T132]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.059020][  T132] 
[  330.061336][  T132] Last potentially related work creation:
[  330.067036][  T132]  kasan_save_stack+0x3b/0x60
[  330.071714][  T132]  __kasan_record_aux_stack+0xb0/0xc0
[  330.077083][  T132]  call_rcu+0x163/0xa10
[  330.081230][  T132]  sctp_association_free+0x664/0x7b0
[  330.086511][  T132]  sctp_do_sm+0x3c58/0x5c80
[  330.091005][  T132]  sctp_assoc_bh_rcv+0x3ed/0x640
[  330.095939][  T132]  sctp_backlog_rcv+0x16f/0x3e0
[  330.100781][  T132]  __release_sock+0x198/0x4b0
[  330.105456][  T132]  release_sock+0x5d/0x1c0
[  330.109866][  T132]  sctp_wait_for_connect+0x3c9/0x6e0
[  330.115148][  T132]  __sctp_connect+0xb50/0xe10
[  330.119820][  T132]  sctp_getsockopt_connectx3+0x467/0x720
[  330.125450][  T132]  sctp_getsockopt+0x3a0/0x7f0
[  330.130207][  T132]  __sys_getsockopt+0x2b2/0x5d0
[  330.135048][  T132]  __x64_sys_getsockopt+0xb1/0xc0
[  330.140064][  T132]  do_syscall_64+0x3b/0xb0
[  330.144480][  T132]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.150369][  T132] 
[  330.152684][  T132] The buggy address belongs to the object at ffff888075310000
[  330.152684][  T132]  which belongs to the cache kmalloc-1k of size 1024
[  330.166733][  T132] The buggy address is located 64 bytes inside of
[  330.166733][  T132]  1024-byte region [ffff888075310000, ffff888075310400)
[  330.180000][  T132] 
[  330.182315][  T132] The buggy address belongs to the physical page:
[  330.188727][  T132] page:ffffea0001d4c400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x75310
[  330.198872][  T132] head:ffffea0001d4c400 order:3 compound_mapcount:0 compound_pincount:0
[  330.207187][  T132] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  330.215175][  T132] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888012441dc0
[  330.223752][  T132] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[  330.232323][  T132] page dumped because: kasan: bad access detected
[  330.238733][  T132] page_owner tracks the page as allocated
[  330.244434][  T132] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2991, tgid 2991 (klogd), ts 58158081425, free_ts 58009133804
[  330.265179][  T132]  post_alloc_hook+0x18d/0x1b0
[  330.269937][  T132]  get_page_from_freelist+0x31a1/0x3320
[  330.275476][  T132]  __alloc_pages+0x28d/0x770
[  330.280055][  T132]  alloc_slab_page+0x6a/0x150
[  330.284728][  T132]  new_slab+0x84/0x2d0
[  330.288796][  T132]  ___slab_alloc+0xc20/0x1270
[  330.293469][  T132]  __kmem_cache_alloc_node+0x19f/0x260
[  330.298923][  T132]  kmalloc_trace+0x26/0xe0
[  330.303335][  T132]  syslog_print+0x11d/0x9b0
[  330.307842][  T132]  do_syslog+0x819/0x910
[  330.312084][  T132]  __x64_sys_syslog+0x78/0x90
[  330.316760][  T132]  do_syscall_64+0x3b/0xb0
[  330.321176][  T132]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  330.327068][  T132] page last free stack trace:
[  330.331728][  T132]  free_unref_page_prepare+0xf63/0x1120
[  330.337272][  T132]  free_unref_page+0x33/0x3e0
[  330.341948][  T132]  qlist_free_all+0x76/0xe0
[  330.346444][  T132]  kasan_quarantine_reduce+0x156/0x170
[  330.351898][  T132]  __kasan_slab_alloc+0x1f/0x70
[  330.356739][  T132]  slab_post_alloc_hook+0x52/0x3a0
[  330.361851][  T132]  __kmem_cache_alloc_node+0x137/0x260
[  330.367303][  T132]  __kmalloc_node_track_caller+0xa0/0x220
[  330.373019][  T132]  __alloc_skb+0x135/0x670
[  330.377436][  T132]  rtmsg_ifa+0x1e7/0x3a0
[  330.381679][  T132]  __inet_insert_ifa+0x9b7/0xbd0
[  330.386409][ T3582] Bluetooth: hci0: command tx timeout
[  330.386620][  T132]  inet_rtm_newaddr+0x8d3/0x18e0
[  330.396910][  T132]  rtnetlink_rcv_msg+0x818/0xff0
[  330.401848][  T132]  netlink_rcv_skb+0x1cd/0x410
[  330.406619][  T132]  netlink_unicast+0x7d8/0x970
[  330.411388][  T132]  netlink_sendmsg+0xa26/0xd60
[  330.416145][  T132] 
[  330.418462][  T132] Memory state around the buggy address:
2024/06/13 16:24:20 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  330.424081][  T132]  ffff88807530ff00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  330.432137][  T132]  ffff88807530ff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  330.440192][  T132] >ffff888075310000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  330.448244][  T132]                                            ^
[  330.454386][  T132]  ffff888075310080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  330.462442][  T132]  ffff888075310100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  330.470496][  T132] ==================================================================