last executing test programs:

7.571560918s ago: executing program 4 (id=498):
syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f0000000280)='./file0\x00', 0x2000090, &(0x7f00000002c0), 0x1, 0x1108, &(0x7f0000001440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0xfea7)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x4c, 0x1, 0x1, 0x301, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3e}}, {0x8, 0x2, @loopback}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x18}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)
ftruncate(r1, 0xf88)
syz_mount_image$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000028bd7000feffffff1800000005000500000000000500060000000000050006000000000008000700000000004000018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="14000200766c616e31000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="05588a5e30a69e27224bd044da27b8d8e06e106ca738886c07edb5a1f2050a506460e22863ba6d89b74f1a7184baf6e8cfe439e1433f47bbca4a2964d109754b79d59cf6c589f252fa047b3e2d950a45322361bbe1bdd21fe915012777a0090364bafa9bf3d9cadb9215134814ad65c8b494c4ad3d81eae0fae103295c2148a6f3ce2845caa46c473b4b6af900a8e2152ea975e13d4fc914a9d0b1fb2e08ad0b5ca857bf331a1fe479f7398e4411aa11813f64cf1bdd0ccb33734e12676ada2f2fb0e5dc6f79e443da719ce69aecf71861243eef09121766c15f0e9544a02a4001c5868513e5d8be470a6d08b1d3684d4632a1b8ac341903"], 0x74}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100006d00010000000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350064756d6d793000000000000000000000cc003480140035"], 0x100}}, 0x0)
r4 = eventfd2(0x0, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = fcntl$dupfd(r4, 0x0, r5)
writev(r6, &(0x7f0000000880)=[{&(0x7f0000000480)="1eb6b2116a7a4aea", 0x8}], 0x1)
write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0}}, 0xfffffffffffffe8d)
write$RDMA_USER_CM_CMD_NOTIFY(r6, &(0x7f0000000540)={0xf, 0x8}, 0x10)
ftruncate(r0, 0x1fa0000)
mkdirat(0xffffffffffffffff, &(0x7f0000000300)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r8 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x40}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x32}, 0x2, @in=@private, 0x0, 0x4, 0x0, 0x0, 0x0, 0x100}}, 0xe8)
sendmmsg$inet6(r8, &(0x7f0000000300)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @dev}, 0x1c, 0x0}}], 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f93024fc60040f10", 0x17}], 0x1}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000b70800006bdf1ef198ed00000000dbaaf8"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$kcm(0x10, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000720000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$cgroup_subtree(r9, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33)

6.77076261s ago: executing program 1 (id=507):
r0 = socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x1e)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
fstat(r1, &(0x7f0000000180))
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x8100, 0x70)
symlinkat(&(0x7f0000000100)='./file1\x00', r2, &(0x7f0000000240)='./file1\x00')
r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r3, 0x402, 0x8000003d)
fcntl$setsig(r3, 0xa, 0x21)
io_setup(0x8, &(0x7f00000002c0))
setreuid(0xffffffffffffffff, 0xee00)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r6=>0x0})
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r6}, [@MDBA_SET_ENTRY={0x20, 0x1, {r6, 0x0, 0x0, 0x0, {@ip4=@broadcast, 0x86dd}}}]}, 0x38}}, 0x0)
open(&(0x7f0000000380)='./file1\x00', 0x147042, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r7=>0x0})
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001800010000000000000000000a0000000000000000000000280016002400010000000000000000000002100100000000ff02000000000000000000000000000108000400", @ANYRES32=r7, @ANYBLOB="1600150005000008"], 0x54}}, 0x0)

6.658766484s ago: executing program 3 (id=508):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a438f420890b070064ef0000000109021a0001000000000904"], 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x29)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000180)={0x1000, 0x40, 0x400, 0x2, 0x4, 0x10001}, &(0x7f00000001c0)={0x7fffffffffffffff, 0x7, 0x100, 0x100000000000, 0x2, 0x2, 0x4800000000000000, 0x4}, &(0x7f0000000240)={0xffff, 0x9, 0x5, 0x27da, 0xd382, 0x400, 0x4, 0x7fffffffffffffff}, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000500)={[0x99]}, 0x8})
clock_gettime(0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000080)=@overlay={0x5, 0x3, 0x4, 0x800, 0x53, {r2, r3/1000+10000}, {0x3, 0xc, 0x0, 0x7f, 0x3, 0x4, "2bb338bc"}, 0x3, 0x3, {}, 0x7})
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000580)={0x1, "1ee5bca355bde856510b1adbe5e6b9a5b8e450ea9d1dcf99f9e41d25993599ad", 0x1})
r6 = dup2(r5, r4)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r8 = accept$alg(r7, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="e5", 0x1}], 0x1}], 0x1, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
r12 = dup(r11)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000b7000040"])
mount(0x0, &(0x7f0000009a80)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2000a2, &(0x7f00000006c0)={[{@mode={'mode', 0x3d, 0x1000000000000}}]})
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x58, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x1f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xb3, 0x2, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x9}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000080)={0xfe02, 0x6, 0x310, 0x6, 0x8, 0x1, 0xff, 0xaa}, 0x2e, &(0x7f00000000c0)={0x5, 0xf, 0x2e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x3f, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x4, 0xfff9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0135fe98a352f74, 0x1f, 0x7, 0x1000, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0x8, 0x3}, @ptm_cap={0x3}]}, 0x0, [{0x0, &(0x7f00000005c0)=@string={0x0, 0x3, "b3c5fd65835673ecd96273ec63a3e205aa2bc352a8110520dd967ae79962ccd851883721c7c710727204741f8bbe95a5bc11a78a04dd691e66dc9e0674493458170f577b70aad1ed66bc14ca0253ed1aeaa7d3ccdc25c766e6e97ffbf1d7abfbc9ccec2f6d910a6d9eff8b5d3cbc3d8b87b76b84cb93f6f7456c57a5cb67c6bea40469d005d34182e45d6b84b5561c06424f88e7e7185c0c0eb44c3bcfd7d7fb0de78c830a60594c9ae14c01e28b755b6d73b5457e21bd9c26ffb596074ba59b972b715a5c52e93cc390da90c881ddb157f47cf928"}}, {0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="000356c78cf04c77479a2578b5534486bab6d3947b50fcb0f655bb6646f7375a51f9a9c0f6f60789cee863d5cea2764d675661a0df194097bcc287568ffa9a0970943369cc5b9212cb364230629ce790fc23f94a56264f0b65252bad768aa3453c510000000000000000"]}, {0x0, &(0x7f0000000780)=@lang_id={0x0, 0x3, 0x459}}, {0x0, &(0x7f0000000140)=@lang_id={0x0, 0x3, 0x424}}]})

6.158178944s ago: executing program 4 (id=509):
socket$inet_udp(0x2, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x224}, 0x1, 0x0, 0x0, 0x1}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x23, 0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000000))
r4 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r7=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x7b, &(0x7f0000000340)={r7}, 0x8)
r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r3)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x14, r8, 0xc99752fbd6bf8f05, 0x0, 0x0, {0x4e}}, 0x14}}, 0x0)
ioctl$sock_SIOCETHTOOL(r3, 0x8914, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)})
sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000006c0)={&(0x7f0000000480)={0x34, 0x4, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000000)
close(r3)
socket$netlink(0x10, 0x3, 0x0)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a00)={0x2fc, r10, 0xc11, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_WANTED={0x2d0, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0xd6, 0x4, "85f3a0a612a35d8aae58a55d7d4702aaf8733be2364750c218042d801ccc01015ad474362c2e68a3d2c46ed81886c19cab769d4327cfc6570923d829750a902ac6e9f6b8276a120ced57781f2c558ecadc85e6c3fd399e5a421591760ab56c448be77fb87b2febcd7ea1147d8e80803b00ee7bb95100edb563bc17a46a017dd1f6b9bdc49999e9e3c437cce42eaaa3b6302bef1d04ee1567345e32a9a298b2b48406399efa429b6f0af45a9ed9fef12a23b9f94c6d7f8190ae8b02bda9ad654ec8e689b428812085490c16b46d6ada1ac5cb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xa27c}, @ETHTOOL_A_BITSET_MASK={0xcc, 0x5, "77b48a61c45f4c0fa068e3b11f646b89e526445c8dfb6a07e3f1f2f3fd7f4383dc62aed7ba0afbd4acb70f7402f9c816f1409d47b57c12ff1e724e757cf67b7a872cb7bc10b24e90c38a326bcdace2c36c0c8351d33090434a5953f12a5b951d6e4a611e7c470bf0c8828252268aeccbb47b799d335633a790553c53191366e8ff030d48d524fee194a3d91d53ec46d4ffd9d210f8ca9fa371f0ed9c0334f1a4de4c0008027351f4f2871145a4a7961433ccb74271638e0fcc2ff8e7c86b240b8fd580900799e98c"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'bridge0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '\'\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffe0}, @ETHTOOL_A_BITSET_VALUE={0xd4, 0x4, "97d3a04b6fd0b9e89678565895f740d1127cd6c59a4da7c57025f095c695ee0745eedabc4d91af61a5657cd97e9f821260abc87602831cda6f35d36065d9ff6e12500cdc11f6ca22a012bf89f27c24b046b8d7d97888b13dfdee18a148fe39550846c730ff6e110527f6d8b3b0ee92ff35c655f59c3050c6264d03a51bad96a434f1c8237303687da4d566a3b82a328c9913a1781974a5a4092cdb9cc6ff83b1d72e9b60be7e45d8a499ea83bb645af9d46cae2f21452e30c2a59910f44259b60108ae93a66d27447ea1821e192a32d7"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}]}, {0x4, 0x2}]}]}]}, 0x2fc}}, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r9)
sendmsg$DEVLINK_CMD_SB_POOL_GET(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB='DZ+\x00', @ANYRES16=r8, @ANYBLOB="000829bd7000fedbdf250f0000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008000b000600000006001100ff7f0000"], 0x44}, 0x1, 0x0, 0x0, 0x40044}, 0x40)
r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r11, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r11, 0x0, 0x8000002b)

5.994379901s ago: executing program 1 (id=510):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000180)={&(0x7f0000001a00)=@newtfilter={0x104, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x7ff3}, {}, {0xc}}, [@filter_kind_options=@f_basic={{0xa}, {0xd4, 0x2, [@TCA_BASIC_ACT={0xd0, 0x3, [@m_simple={0x68, 0x0, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x5}}, @TCA_DEF_DATA={0x8, 0x3, 'sfq\x00'}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_connmark={0x64, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}]}, {0x15, 0x6, "7826d46da4a074d155472663ebb03c3d36"}, {0xc}, {0xc}}}]}]}}]}, 0x104}}, 0x80)

5.866530866s ago: executing program 1 (id=513):
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a438f420890b070064ef0000000109021a0001000000000904"], 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x29)
r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2)
socket$inet6_mptcp(0xa, 0x1, 0x106)
pselect6(0x40, &(0x7f0000000180)={0x1000, 0x40, 0x400, 0x2, 0x4, 0x10001}, &(0x7f00000001c0)={0x7fffffffffffffff, 0x7, 0x100, 0x100000000000, 0x2, 0x2, 0x4800000000000000, 0x4}, &(0x7f0000000240)={0xffff, 0x9, 0x5, 0x27da, 0xd382, 0x400, 0x4, 0x7fffffffffffffff}, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000500)={[0x99]}, 0x8})
clock_gettime(0x0, &(0x7f0000000340)={<r2=>0x0, <r3=>0x0})
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058560f, &(0x7f0000000080)=@overlay={0x5, 0x3, 0x4, 0x800, 0x53, {r2, r3/1000+10000}, {0x3, 0x0, 0x7, 0x7f, 0x3, 0x4, "2bb338bc"}, 0x3, 0x3, {}, 0x7})
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$VIDIOC_S_AUDOUT(r1, 0x40345632, &(0x7f0000000580)={0x1, "1ee5bca355bde856510b1adbe5e6b9a5b8e450ea9d1dcf99f9e41d25993599ad", 0x1})
r6 = dup2(r5, r4)
r7 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160-generic\x00'}, 0x58)
r8 = accept$alg(r7, 0x0, 0x0)
sendmmsg$alg(r8, &(0x7f0000000440)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="e5", 0x1}], 0x1}], 0x1, 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
r12 = dup(r11)
ioctl$KVM_SET_MSRS(r12, 0x4008ae89, &(0x7f00000007c0)=ANY=[@ANYBLOB="3b00000000000000b7000040"])
mount(0x0, &(0x7f0000009a80)='./file0\x00', &(0x7f0000000100)='ramfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x2000a2, &(0x7f00000006c0)={[{@mode={'mode', 0x3d, 0x1000000000000}}]})
syz_usb_connect$printer(0x6, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x58, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x7, 0x1, 0x3, 0x1f, "", {{{0x9, 0x5, 0x1, 0x2, 0x200, 0xb3, 0x2, 0xff}}, [{{0x9, 0x5, 0x82, 0x2, 0x400, 0x0, 0x2, 0x9}}]}}}]}}]}}, &(0x7f0000000800)={0xa, &(0x7f0000000080)={0xfe02, 0x6, 0x310, 0x6, 0x8, 0x1, 0xff, 0xaa}, 0x2e, &(0x7f00000000c0)={0x5, 0xf, 0x2e, 0x5, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0xf, 0x3f, 0x1, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x4, 0x4, 0xfff9}, @wireless={0xb, 0x10, 0x1, 0xc, 0xc0135fe98a352f74, 0x1f, 0x7, 0x1000, 0x7}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xa, 0x8, 0x8, 0x3}, @ptm_cap={0x3}]}, 0x0, [{0x0, &(0x7f00000005c0)=@string={0x0, 0x3, "b3c5fd65835673ecd96273ec63a3e205aa2bc352a8110520dd967ae79962ccd851883721c7c710727204741f8bbe95a5bc11a78a04dd691e66dc9e0674493458170f577b70aad1ed66bc14ca0253ed1aeaa7d3ccdc25c766e6e97ffbf1d7abfbc9ccec2f6d910a6d9eff8b5d3cbc3d8b87b76b84cb93f6f7456c57a5cb67c6bea40469d005d34182e45d6b84b5561c06424f88e7e7185c0c0eb44c3bcfd7d7fb0de78c830a60594c9ae14c01e28b755b6d73b5457e21bd9c26ffb596074ba59b972b715a5c52e93cc390da90c881ddb157f47cf928"}}, {0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="000356c78cf04c77479a2578b5534486bab6d3947b50fcb0f655bb6646f7375a51f9a9c0f6f60789cee863d5cea2764d675661a0df194097bcc287568ffa9a0970943369cc5b9212cb364230629ce790fc23f94a56264f0b65252bad768aa3453c510000000000000000"]}, {0x0, &(0x7f0000000780)=@lang_id={0x0, 0x3, 0x459}}, {0x0, &(0x7f0000000140)=@lang_id={0x0, 0x3, 0x424}}]})

4.930361794s ago: executing program 4 (id=515):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000000)=0x800, 0x4)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x200000000004e23, @local}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000001900)=[{{0x0, 0x700, 0x0}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000006c0)="40f046d8f9a9dbf24a5ce201181b432492dd47fe7a6c360f8d2feff508a0974b0b1a0fc02ff0e41b672a4c6b68831453a85123040f825f4f3bd1", 0x3a}, {&(0x7f0000000900)="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", 0x7bb}], 0x2}}], 0x2, 0x0)

4.75762647s ago: executing program 4 (id=516):
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff}, 0x6)
pipe2(&(0x7f0000000040), 0x80)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="1802000000000000000000007a000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000001"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = open(0x0, 0x0, 0x0)
fcntl$setlease(r3, 0x400, 0x0)
ioperm(0x0, 0x9, 0x5)
r4 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r4, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0xfa, 0x0, {r5}}, 0x2c)
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
setgroups(0x1, &(0x7f0000000a80)=[0xffffffffffffffff])
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400"], 0x0)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
close(0x4)
io_setup(0x202, &(0x7f0000000200))
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @random="50a245d5cde0", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x32, 0x0, @empty, @broadcast}, @timestamp_reply={0x11}}}}}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f0000000080)=@nl=@unspec, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000100)=""/230, 0xe6}, {0x0}, {&(0x7f0000000400)=""/53, 0x35}, {&(0x7f0000000440)=""/119, 0x77}], 0x4}}], 0x1, 0x0, 0x0)

4.635733505s ago: executing program 3 (id=517):
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0)
syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x1, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000) (async)
write(r1, &(0x7f0000000340), 0x11000)
io_setup(0x3ff, &(0x7f0000000500)) (async)
io_setup(0x3ff, &(0x7f0000000500)=<r2=>0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="4e8fc38e71", 0x5}]) (async)
io_submit(r2, 0x1, &(0x7f0000000140)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000080)="4e8fc38e71", 0x5}])
r3 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCINQ(r3, 0x89e0, 0xfffffffffffffffc)
pipe2$watch_queue(&(0x7f0000000540), 0x80)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) (async)
syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
pselect6(0x40, &(0x7f0000000000)={0xfc}, 0x0, 0x0, 0x0, 0x0)

4.467215922s ago: executing program 3 (id=520):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000405707000a0000000000010902240001000000000904000001030000000921000000012205000905810300000000008d6ec932c7ca18058a420cea114e9f7b98075db1ac9cec3468"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000006c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\"\b'], 0x0}, 0x0)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
splice(r1, 0x0, r2, 0x0, 0xffffffe1, 0x0)
ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x6)

4.215358692s ago: executing program 2 (id=523):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x14, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001a00011e000000000000000002"], 0x24}}, 0x0)

4.177264973s ago: executing program 2 (id=524):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000001140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f00000014c0)=ANY=[], 0x1, 0xc4e, &(0x7f00000015c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x81000)
renameat2(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', r1, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0xfff7)

3.711462082s ago: executing program 2 (id=528):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0)
write$cgroup_int(r1, &(0x7f00000000c0)=0x100, 0x27)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000000)=0x81)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000d80)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_BPF={0xc, 0x8, 0x0, 0x1, @SEG6_LOCAL_BPF_PROG={0x8}}}]}, 0x34}}, 0x0)

3.383134385s ago: executing program 2 (id=529):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000e80)={0x24, 0x1418, 0x1, 0x9, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x24}}, 0x0)

3.269643899s ago: executing program 2 (id=531):
r0 = syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x48c4, &(0x7f0000000200)=ANY=[], 0x1, 0x6209, &(0x7f0000000a00)="$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")
sync()
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f2)
r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r2, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0xa0, &(0x7f0000000180)={[{@max={'max', 0x3d, 0xffffffffffffffff}}]})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='westwood\x00', 0x9)
syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x18, 0x0, 0x0, @private2, @local, {[@routing={0x0, 0x2, 0x1, 0x9, 0x0, [@loopback]}]}}}}}, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$packet_fanout(r3, 0x107, 0x11, &(0x7f0000000000), 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x63, 0x11, 0x34}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0xac, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x70)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYRES32=r0], 0x0)
syz_usb_control_io$printer(r4, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="2011bf"], 0x0, 0x0, 0x0, 0x0, 0x0})
lchown(&(0x7f0000006000)='./file0\x00', 0x0, 0x0)

2.334548887s ago: executing program 3 (id=536):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0)
quotactl_fd$Q_QUOTAOFF(r1, 0xffffffff80000300, 0x0, 0x7000000)

2.135342715s ago: executing program 3 (id=538):
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000040))
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f00002d7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000a88000/0x2000)=nil, 0x3)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = dup(r2)
ioctl$KVM_CAP_MANUAL_DIRTY_LOG_PROTECT2(r1, 0x4068aea3, &(0x7f0000000180)={0xa8, 0x0, 0x1})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000040))
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f000059e000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000200)=[@flags={0x3, 0x41292}], 0x1)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000001880)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f000047b000)={0xa, 0x0, 0x0, @empty}, 0x1c)
madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x64}, [@ldst={0x6, 0x0, 0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)

2.052252858s ago: executing program 0 (id=540):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454da, &(0x7f0000000080)={'batadv0\x00'})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x12, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x0, 0x0)
r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
writev(r4, &(0x7f0000000780)=[{&(0x7f00000003c0)="0e000000", 0x4}, {&(0x7f00000006c0), 0x1000000}], 0x2)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[], 0x34}}, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x103)
openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb01001800000000000005000000000000000004000000002e5f00"], &(0x7f0000000240)=""/218, 0x1c, 0xda, 0x1}, 0x20)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x803, 0x0)

1.805130198s ago: executing program 1 (id=541):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r3, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0)
link(0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
lstat(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$udf(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000240)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc2d, &(0x7f0000001900)="$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")
mkdir(&(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r4 = open(&(0x7f0000000300)='.\x00', 0x400040, 0x0)
r5 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f0000000000)='./file0\x00', r5, &(0x7f00000004c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0)
rename(&(0x7f0000000440)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f0000000f00)='./file0\x00')

566.894937ms ago: executing program 0 (id=542):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET_DEF(r0, 0x5425, &(0x7f0000000400)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0})

403.407884ms ago: executing program 4 (id=543):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000000)={'ip6gre0\x00', 0x0, 0x0, 0x80, 0x3, 0x0, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}, @empty, 0x40, 0x1, 0x4, 0x4}})
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYRES16=r0, @ANYBLOB="86d7bcbb58dc69087a28ec52e2e4fc2a704c4df1c49edc67e41d286e333da9388541753f679f", @ANYBLOB="7b1300000000b109de74a6ccc81701006272836467650000240002800c002000000000000000000005001900880000000c002100e902000000000e00"], 0x54}}, 0x8001)

403.135384ms ago: executing program 0 (id=544):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x30a}) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
flistxattr(0xffffffffffffffff, 0x0, 0x0) (async)
ioctl$SNDCTL_DSP_GETIPTR(0xffffffffffffffff, 0x800c5011, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r1 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
close(r1) (async)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0) (async)
mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})
sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={0x0}}, 0x20000004) (async)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) (async)
getpid() (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) (async)
syz_read_part_table(0x637, &(0x7f0000000000)="$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") (async)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r5 = open(&(0x7f0000000400)='./bus\x00', 0x4003e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x11, r5, 0x0) (async)
r6 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r6, 0x4, 0x6000) (async)
io_setup(0x200, &(0x7f0000000140)=<r7=>0x0)
io_submit(r7, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x2, 0x1, 0x0, r6, &(0x7f0000000000), 0x4000}]) (async)
recvmmsg(r3, &(0x7f0000001d40)=[{{&(0x7f0000000640)=@un=@abs, 0x80, &(0x7f00000016c0)=[{&(0x7f00000006c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001e00)=""/134, 0x86}, 0x80000000}, {{&(0x7f0000001780)=@nfc, 0x80, &(0x7f0000001840)=[{&(0x7f0000001800)=""/49, 0x31}], 0x1}, 0x193}, {{&(0x7f0000001880)=@l2tp={0x2, 0x0, @multicast2}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000001c40)=""/80, 0x50}, {&(0x7f0000001980)=""/145, 0x91}, {&(0x7f0000001b40)=""/219, 0xdb}, {&(0x7f0000001a40)=""/219, 0xdb}, {&(0x7f0000001ec0)=""/211, 0xd3}], 0x5, &(0x7f0000001700)=""/125, 0x7d}, 0xffffffff}], 0x3, 0x22000, 0x0) (async)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$unix(0x1, 0x2, 0x0)

378.957825ms ago: executing program 4 (id=545):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x441, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000004)
ioctl$USBDEVFS_GET_CAPABILITIES(r1, 0x8004551a, &(0x7f0000000040))
ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000000))
bind$l2tp6(r0, &(0x7f00000024c0)={0xa, 0x7, 0x0, @dev={0xfe, 0x80, '\x00', 0x40}, 0x7}, 0xfffffffffffffdc7)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x73, 0x101201)
ioctl$USBDEVFS_FREE_STREAMS(r2, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="020023031c0008ff6000000002000020d3"])
stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r3=>0x0})
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xc2, 0xbd, 0x2, 0x8, 0xd46, 0x78, 0x88c6, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1c, 0xbc, 0x6, 0x0, [], [{{0x9, 0x5, 0x2, 0x7}}, {}]}}]}}]}}, 0x0)
quotactl_fd$Q_SETQUOTA(r1, 0xffffffff80000802, r3, &(0x7f0000000180)={0x9, 0xffffffffffffffff, 0x3ff, 0x7, 0x7fffffffffffffff, 0x5378, 0x4dca, 0x4b, 0xa7c})

372.145615ms ago: executing program 0 (id=546):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = dup(r0)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$BTRFS_IOC_SNAP_DESTROY(r0, 0x5000940f, &(0x7f0000000340)={{r0}, "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"})
setsockopt$inet_buf(r2, 0x0, 0x8008000000010, &(0x7f0000000000)="170000000200020000ffbe8c5ee17688a2003c000301000a000002a257fc5ad90200bb6a880000d6c8db0000dba67e06020000e28900000200df01800a000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2", 0xb8)
sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCGISO7816(r1, 0x80285442, &(0x7f0000000000))
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180200000000000000000000000000008500000027000000850000002a000000950000d500000000d152b85f0c263c93a7"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc0, &(0x7f0000000140)=""/192}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
ioctl$LOOP_CLR_FD(r1, 0x4c01)

223.37485ms ago: executing program 1 (id=547):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x0, @val=@tcx}, 0x40)
syz_emit_ethernet(0x4e, &(0x7f0000000540)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x3}, @void, {@ipv6={0x86dd, @dccp_packet={0x6, 0x6, "0bb341", 0x18, 0x21, 0x0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {[@hopopts], {{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "c35b2a", 0x3, "acac0a"}}}}}}}, 0x0)

216.255241ms ago: executing program 2 (id=548):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = dup(r0)
sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x2000000, &(0x7f00000001c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x5, 0x0, 0xf0ffff, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x3c}}, 0x0)

148.202604ms ago: executing program 0 (id=549):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x3, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0xffffff1f, @raw_data="a73fb05f3771f0835956313288b6187916c7b0e5f1f7db307caa2c90fecaedfe56d521966c6f5ca1b46d182c443a5768c217df3ba1230934abad2e2bbd4401b182c34574db7554585d1f3cba9fc707f79a3bcec280417bb482e91562b2636266e3723b788e6010e21136df8b20e1238dc853276ba78cd4db1f7fd4cb738992e1ced9df4e9a31f534c3762ab0e345ab618406c9dcad18a65e2c9a80f2948809584a15bbf3956250db0cf5e948127560856c6d030334ab6166678f69df4dbc6af73f6eacdd4b6e23b1"})

55.218148ms ago: executing program 3 (id=550):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000027c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0xc0}}, 0x0)
openat$cgroup_ro(r2, &(0x7f0000000040)='freezer.parent_freezing\x00', 0x0, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$inet6_int(r3, 0x29, 0x13, &(0x7f0000000000), 0x4)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x74, 0xc, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x48, 0x3, 0x0, 0x1, [{0x44, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x38, 0xb, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x100000000}, @NFTA_LIMIT_UNIT={0xc}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xf8}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r9 = socket$inet_udplite(0x2, 0x2, 0x88)
statx(r4, &(0x7f0000000200)='./file0\x00', 0x400, 0x800, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r10=>0x0})
r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
fstat(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r12=>0x0, <r13=>0x0})
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file1\x00', 0x1000801, &(0x7f0000000e40)=ANY=[@ANYRES32=r13, @ANYRES8=0x0, @ANYBLOB="1cbb7569170ccaf80475b25edebf8d398c90a03f9e6821bb4b6ebb8b0d0221f80beacf5925a394d8899e18a7fdd770de2123327cfa21ddff73f2fc74bcbf6b14a07efd74b0eb8bcf21f27b611344e6830552f92eee6874fb62521d98b6adc448c58e9e213ecf7c9e046601d39c2ab438dec0e709571bfa28dd33f28758fbf5cc90b009621f140acdbaa6254d0ba47c417b51ca06b8b4e1ed02884d42a32d8a58c7ec5da1fd4804732cee9cf6c498f0d1cc859b720daed8277884ffd0bb933c9a673a9c043b", @ANYBLOB="b0ed086982ae288c0ded88b546ef1c1e703d8f9c10354ca909cb45bfc2f978a7aedaae1ce91bb7cea3a037dd1cffbea6890ea96b05173bb55c37129d8a1763fb7c5ae6e47efff4f65eaa937effbb44a202528799b7421ce9c6a23ed76fce3919300aa25e9cd22ce700114242a870e3a1", @ANYRESHEX, @ANYRES16, @ANYBLOB="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", @ANYRESOCT, @ANYRES32=r11, @ANYRESHEX=r13, @ANYBLOB="67f5da103353c8ef38b5b38e5b904e7c50624d0355647a0fb6fc8b71c4f25a5e0b98c9af789957e9299343aad54047ccdc965110151195a0e8a06c7a9c0ade0e1242e7cbe79f18945363747a0430f424df8627c34f11df7504aae464d007de8d880719f3772e12d4528bbe0815188ede3b25b6bf34869699bd226a11298f53ade3d97636d4b0112ea833d44628c612506ced2d2c226cdf90f647c2f988941081193ae81aa168a1028b", @ANYRES32=r12], 0x2, 0x1d3, &(0x7f00000008c0)="$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")
statx(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x2000, 0x100, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, <r14=>0x0})
statx(r7, &(0x7f0000000340)='./file0\x00', 0x4000, 0x2, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000c00)=ANY=[@ANYBLOB="f001000000000000", @ANYRES64=0x0, @ANYBLOB="050000000000000002000000000000001f00000000000000e4b6000000000000cd0d00000700000003000000000000000101000000000000ffffff7f0000000001000000010000000000000000000000040000000000000000000000f8ffffff000001000020000002000000", @ANYRES32=0x0, @ANYRES32=r10, @ANYBLOB="6407000002000000000000000200000000000000060000000000000006000000a9c9000071756f7461000000050000000000000002000000000000000800000000000000070000000000000000000000060000000600000000000000090000000000000000000000000000000300000000000000010000000000000006000000000000000100000069cc0000ff00000000f0000080000000", @ANYRES32=0x0, @ANYRES32=r13, @ANYBLOB="09000000800000000000000002000000000000000700000000000000010000007f0000002600000000000000040000000000000003000000000000000600000000000000030000000000000001000000feffffff0200000000000000000000000100000004000000000000001d00000000000000fffffeffffffffff060000000000000020000000080000001a7d00000060000006000000", @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="08000000010000000000000004000000008a05000071756f7461000000"], 0x1f0)
ioctl$sock_inet_SIOCADDRT(r9, 0x890b, &(0x7f0000000000)={0x0, {0x2, 0x0, @local}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x2, 0x0, @private}, 0x7e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r8}, 0x10)
write$cgroup_type(r7, &(0x7f0000000180), 0x2000)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000440)=ANY=[@ANYBLOB="03000000", @ANYRES16=r1, @ANYBLOB="0100"/14], 0x14}}, 0x0)

243.76µs ago: executing program 1 (id=551):
r0 = epoll_create1(0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x1000000, 0x0, 0x0)

0s ago: executing program 0 (id=552):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'})
r1 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r1, &(0x7f0000005240), 0x4000095, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'veth1_macvtap\x00', 0x1000})
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
write$tun(0xffffffffffffffff, 0x0, 0x4e)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))
prlimit64(0x0, 0x4, &(0x7f0000000100)={0x8000000000000001, 0x7f}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x40000)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f00000000c0)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0xbcc99000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000080)=0x7fffffff)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
unshare(0x22000600)
write$UHID_CREATE2(r5, &(0x7f0000000040)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r4, 0x2275, &(0x7f0000000040))
sched_setscheduler(0x0, 0x0, &(0x7f0000000200)=0x4)
r6 = socket$rxrpc(0x21, 0x2, 0x2)
sendto$rxrpc(r6, 0x0, 0x0, 0x0, 0x0, 0x0)
setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f0000000080), 0x4)

kernel console output (not intermixed with test programs):

 ready
[  134.763216][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.772357][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  134.781182][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  134.832774][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  134.878151][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  134.895878][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.948335][ T4673] device veth0_macvtap entered promiscuous mode
[  134.979711][ T1065] usbhid 4-1:0.0: can't add hid device: -71
[  134.986000][ T1065] usbhid: probe of 4-1:0.0 failed with error -71
[  135.011769][ T1065] usb 4-1: USB disconnect, device number 3
[  135.014168][ T4673] device veth1_macvtap entered promiscuous mode
[  135.060052][ T3619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.103656][ T3619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.168375][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  135.180592][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  135.189042][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  135.214260][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.215211][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.247836][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.254801][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.266084][ T4830] Bluetooth: hci2: command 0x0419 tx timeout
[  135.281712][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.297094][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.310287][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.321456][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.334370][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.371127][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.399852][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.455145][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.481563][ T4858] capability: warning: `syz.2.314' uses 32-bit capabilities (legacy support in use)
[  135.509532][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.528130][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.542632][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.591299][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  135.600667][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  135.630142][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  135.656343][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.678053][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.701332][ T4750] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.786341][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.806721][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.823401][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.844995][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.865385][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.893663][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.910662][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.939200][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.952639][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.974749][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.996064][ T4673] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.011810][ T4673] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.021813][ T3549] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  136.031603][ T4673] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.044150][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  136.054283][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  136.077860][ T4673] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.090765][ T4673] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.100834][ T4673] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.109888][ T4673] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.150070][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  136.158872][ T3582] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.259323][ T3549] usb 2-1: Using ep0 maxpacket: 32
[  136.313768][ T3696] device hsr_slave_0 left promiscuous mode
[  136.331096][ T4858] loop2: detected capacity change from 0 to 32768
[  136.337972][ T3696] device hsr_slave_1 left promiscuous mode
[  136.359516][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.374754][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.383974][ T3549] usb 2-1: config index 0 descriptor too short (expected 26, got 18)
[  136.393580][ T3549] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  136.404860][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.441049][ T3549] usb 2-1: config 0 descriptor??
[  136.470812][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.478491][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.522577][ T3549] as10x_usb: device has been detected
[  136.528370][ T3549] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  136.568565][ T3696] device bridge_slave_1 left promiscuous mode
[  136.580559][ T3549] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  136.591882][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.611326][ T3549] as10x_usb: error during firmware upload part1
[  136.617976][ T3549] Registered device nBox DVB-T Dongle
[  136.649777][ T3696] device bridge_slave_0 left promiscuous mode
[  136.664711][ T4884] loop3: detected capacity change from 0 to 512
[  136.671774][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.687852][ T3696] device hsr_slave_0 left promiscuous mode
[  136.698146][ T3696] device hsr_slave_1 left promiscuous mode
[  136.706336][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  136.734525][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  136.739260][ T4884] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  136.771674][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.809645][ T4884] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  136.810943][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.842173][ T4884] EXT4-fs (loop3): 1 truncate cleaned up
[  136.848276][ T4884] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  136.862774][ T3696] device bridge_slave_1 left promiscuous mode
[  136.919391][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.931940][   T21] usb 2-1: USB disconnect, device number 3
[  136.977882][   T21] Unregistered device nBox DVB-T Dongle
[  136.998848][   T21] as10x_usb: device has been disconnected
[  137.027423][ T4884] XFS (nullb0): Invalid superblock magic number
[  137.063201][ T4893] vcan0: tx drop: invalid sa for name 0x0000000000000003
[  137.081194][ T3696] device bridge_slave_0 left promiscuous mode
[  137.082665][ T4885] ramfs: Bad value for 'mode'
[  137.106175][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.132764][ T3696] device veth1_macvtap left promiscuous mode
[  137.138875][ T3696] device veth0_macvtap left promiscuous mode
[  137.147879][ T3696] device veth1_vlan left promiscuous mode
[  137.153931][ T3696] device veth0_vlan left promiscuous mode
[  137.168934][ T3696] device veth1_macvtap left promiscuous mode
[  137.182069][ T3696] device veth0_macvtap left promiscuous mode
[  137.195991][ T3696] device veth1_vlan left promiscuous mode
[  137.208784][ T3696] device veth0_vlan left promiscuous mode
[  137.414665][ T4899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.319'.
[  137.828731][ T4897] loop3: detected capacity change from 0 to 32768
[  137.838372][ T3696] team0 (unregistering): Port device team_slave_1 removed
[  137.861056][ T3696] team0 (unregistering): Port device team_slave_0 removed
[  137.876014][ T3696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.969605][ T3696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.999274][ T3546] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x3c0/0x4e0, xfs_sb_quiet block 0x0 
[  138.019220][ T3546] XFS (loop3): Unmount and run xfs_repair
[  138.039600][ T3546] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  138.047024][ T3546] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00  XFSB............
[  138.079353][ T3546] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  138.088251][ T3546] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 47 a7 4b ab  ..*.w.B.....G.K.
[  138.098715][ T3546] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 04 20  ............... 
[  138.107674][ T3546] 00000040: 00 00 00 00 00 00 04 21 00 00 00 00 00 00 04 22  .......!......."
[  138.116584][ T3546] 00000050: 00 00 00 0f 00 00 10 00 00 00 00 01 00 00 00 00  ................
[  138.118214][ T3696] bond0 (unregistering): Released all slaves
[  138.125528][ T3546] 00000060: 00 00 02 04 b4 b5 02 00 08 00 00 02 00 00 00 00  ................
[  138.125572][ T3546] 00000070: 00 00 00 00 00 00 00 00 0c 09 0b 01 0c 00 00 64  ...............d
[  138.590385][ T3696] team0 (unregistering): Port device team_slave_1 removed
[  138.621454][ T3696] team0 (unregistering): Port device team_slave_0 removed
[  138.698041][ T3696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.730794][ T3696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.758001][   T26] audit: type=1800 audit(1719735277.570:33): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.321" name="bus" dev="sda1" ino=1994 res=0 errno=0
[  138.808855][   T26] audit: type=1800 audit(1719735277.600:34): pid=4908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.321" name="bus" dev="sda1" ino=1994 res=0 errno=0
[  138.952406][ T3696] bond0 (unregistering): Released all slaves
[  139.029673][ T4750] device veth0_vlan entered promiscuous mode
[  139.048290][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  139.058842][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.079363][ T4750] device veth1_vlan entered promiscuous mode
[  139.119216][ T3546] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  139.151783][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.161224][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.189810][ T3619] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.198032][ T3619] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.292049][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  139.310554][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.325868][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.347755][ T4750] device veth0_macvtap entered promiscuous mode
[  139.364237][ T4750] device veth1_macvtap entered promiscuous mode
[  139.373289][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  139.384323][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  139.406874][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.424204][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.435405][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.446095][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.456487][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.479403][ T3546] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  139.486382][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.507278][ T3546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.529856][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.539028][ T3546] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.549117][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.559176][ T3546] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  139.569725][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.583583][ T3546] usb 4-1: New USB device found, idVendor=044f, idProduct=b653, bcdDevice= 0.00
[  139.583623][ T3546] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.594894][ T3546] usb 4-1: config 0 descriptor??
[  139.617370][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.642005][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.668809][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  139.690085][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  139.721567][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  139.751125][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  139.767576][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  139.799328][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.840058][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.869762][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.890420][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.912087][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.930385][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.944843][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.957722][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.968494][ T4750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  139.985028][ T4750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.997182][ T4750] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.006567][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.018162][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.033602][ T4750] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.045410][ T4750] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.057081][ T4750] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.069184][ T4750] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.171232][ T3546] thrustmaster 0003:044F:B653.0002: unknown main item tag 0x0
[  140.181314][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.198146][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.211755][ T3546] thrustmaster 0003:044F:B653.0002: unknown main item tag 0x0
[  140.237034][ T3546] thrustmaster 0003:044F:B653.0002: unknown main item tag 0x0
[  140.261209][ T3546] thrustmaster 0003:044F:B653.0002: unknown main item tag 0x0
[  140.273678][ T3618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.290561][ T3546] thrustmaster 0003:044F:B653.0002: unknown main item tag 0x0
[  140.316140][ T3618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.332774][ T3546] thrustmaster 0003:044F:B653.0002: hidraw0: USB HID v0.00 Device [HID 044f:b653] on usb-dummy_hcd.3-1/input0
[  140.357544][ T3546] thrustmaster 0003:044F:B653.0002: no inputs found
[  140.423102][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  140.431546][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  140.516399][ T4911] loop2: detected capacity change from 0 to 40427
[  140.571678][ T4950] loop0: detected capacity change from 0 to 512
[  140.777717][ T4911] F2FS-fs (loop2): Found nat_bits in checkpoint
[  141.607950][ T4911] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.823536][   T26] audit: type=1800 audit(1719735280.640:35): pid=4965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.327" name="file2" dev="sda1" ino=2001 res=0 errno=0
[  141.886376][ T3510] attempt to access beyond end of device
[  141.886376][ T3510] loop2: rw=2049, want=45104, limit=40427
[  141.929735][ T4966] loop0: detected capacity change from 0 to 1024
[  141.940307][ T4830] usb 4-1: USB disconnect, device number 4
[  142.016285][ T4966] hfsplus: bad catalog entry type
[  142.157534][ T4970] loop4: detected capacity change from 0 to 256
[  142.780816][ T4973] loop3: detected capacity change from 0 to 32768
[  142.824997][ T4970] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  142.871422][ T4973] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.329 (4973)
[  142.963212][ T4973] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  142.972329][ T4973] BTRFS info (device loop3): using free space tree
[  142.979557][ T4973] BTRFS info (device loop3): has skinny extents
[  143.025147][ T4977] loop0: detected capacity change from 0 to 256
[  143.165969][ T4979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.332'.
[  143.445586][ T4973] BTRFS info (device loop3): enabling ssd optimizations
[  144.370143][ T5008] loop4: detected capacity change from 0 to 2048
[  144.727754][ T5016] netlink: 16 bytes leftover after parsing attributes in process `syz.2.338'.
[  144.828238][ T5008] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsdgroups,,errors=continue. Quota mode: none.
[  144.849849][ T5008] ext4 filesystem being mounted at /root/syzkaller.8qegqr/6/file0 supports timestamps until 2038 (0x7fffffff)
[  144.886187][ T5008] fs-verity: sha512 using implementation "sha512-avx2"
[  145.012370][ T5009] loop1: detected capacity change from 0 to 8192
[  145.136645][   T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.213832][ T4977] cgroup: name respecified
[  145.259346][   T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.319332][   T23] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.327889][ T5033] x_tables: duplicate underflow at hook 1
[  145.421349][ T5033] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[  145.439437][   T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.499853][   T23] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  145.518943][ T5033] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  145.559411][   T21] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.593693][ T3546] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.629371][ T3549] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  145.689500][ T3546] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.769490][ T3546] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.849425][ T3546] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.860462][   T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[  145.872035][ T3549] usb 4-1: Using ep0 maxpacket: 32
[  145.912664][   T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 255, changing to 11
[  145.989263][ T3549] usb 4-1: config index 0 descriptor too short (expected 26, got 18)
[  146.004955][ T3549] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  146.019295][   T23] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 59391, setting to 1024
[  146.099126][ T3549] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.107426][   T23] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  146.160935][ T3549] usb 4-1: config 0 descriptor??
[  146.169201][   T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.231119][ T3549] as10x_usb: device has been detected
[  146.236998][ T3549] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  146.259514][ T5009] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.420813][ T3549] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  146.487988][ T3549] as10x_usb: error during firmware upload part1
[  146.566495][ T5034] ramfs: Bad value for 'mode'
[  146.590332][ T3549] Registered device nBox DVB-T Dongle
[  146.591835][ T3549] usb 4-1: USB disconnect, device number 5
[  146.694307][ T3549] Unregistered device nBox DVB-T Dongle
[  146.710984][ T3549] as10x_usb: device has been disconnected
[  146.829573][ T3546] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  147.133536][ T5040] syz.0.342[5040] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.133683][ T5040] syz.0.342[5040] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.162774][ T5030] loop4: detected capacity change from 0 to 40427
[  147.181215][ T5041] syz.0.342[5041] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.181366][ T5041] syz.0.342[5041] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  147.260675][ T5030] F2FS-fs (loop4): Invalid log sectorsize (2)
[  147.297046][ T5030] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  147.361152][ T5030] F2FS-fs (loop4): Found nat_bits in checkpoint
[  147.509146][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  147.518368][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  147.527450][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  147.536569][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[  147.545570][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!!
[  147.554683][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  147.563687][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  147.572869][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  147.581886][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  147.591010][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!!
[  147.665600][ T5030] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  147.689728][ T5030] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  147.698837][ T5030] F2FS-fs (loop4): switch extent_cache option is not allowed
[  148.676292][ T5058] loop3: detected capacity change from 0 to 32768
[  148.722984][ T5058] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.346 (5058)
[  148.786166][ T5058] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  148.798401][ T5058] BTRFS info (device loop3): using free space tree
[  148.805031][ T5058] BTRFS info (device loop3): has skinny extents
[  148.822778][ T5061] autofs4:pid:5061:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.13), cmd(0xc0189374)
[  148.836833][ T5061] autofs4:pid:5061:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  148.884181][ T5065] netlink: 40 bytes leftover after parsing attributes in process `syz.0.347'.
[  148.889692][ T3549] usb 2-1: USB disconnect, device number 4
[  148.894877][ T5065] netlink: 16 bytes leftover after parsing attributes in process `syz.0.347'.
[  149.003713][ T5066] loop2: detected capacity change from 0 to 4096
[  149.166596][ T5066] ntfs: volume version 3.1.
[  149.235040][ T5058] BTRFS info (device loop3): enabling ssd optimizations
[  149.904415][ T5091] loop1: detected capacity change from 0 to 65536
[  150.188305][ T5091] XFS (loop1): Mounting V5 Filesystem
[  150.435328][ T5091] XFS (loop1): Ending clean mount
[  150.471443][ T5091] XFS (loop1): Quotacheck needed: Please wait.
[  150.536646][ T5091] XFS (loop1): Quotacheck: Done.
[  150.597186][ T5095] loop2: detected capacity change from 0 to 32768
[  150.731704][ T5095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.355 (5095)
[  150.820285][ T5081] loop0: detected capacity change from 0 to 40427
[  150.834940][ T5095] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  150.851111][ T5095] BTRFS error (device loop2): unrecognized thread_pool value 0x0000006000000038
[  150.881167][ T5095] BTRFS error (device loop2): open_ctree failed
[  150.917216][ T5081] F2FS-fs (loop0): invalid crc value
[  151.031123][ T5081] F2FS-fs (loop0): Found nat_bits in checkpoint
[  151.069302][ T4647] XFS (loop1): Unmounting Filesystem
[  151.119219][ T4834] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  151.269618][ T5081] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  151.359199][ T1281] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  151.375416][ T4750] attempt to access beyond end of device
[  151.375416][ T4750] loop0: rw=2049, want=45104, limit=40427
[  151.409390][ T4834] usb 4-1: Using ep0 maxpacket: 32
[  151.569690][ T4834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.599343][ T1281] usb 3-1: Using ep0 maxpacket: 8
[  151.711753][ T5113] vxcan0: tx drop: invalid da for name 0x0000000000000002
[  151.746496][ T1281] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  151.777792][ T1281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.789517][ T1281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.800147][ T4834] usb 4-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e
[  151.813267][ T4834] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.821977][ T1281] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  151.839255][ T4834] usb 4-1: Product: syz
[  151.843451][ T4834] usb 4-1: Manufacturer: syz
[  151.856204][ T4834] usb 4-1: SerialNumber: syz
[  151.861561][ T1281] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  151.872833][ T4834] usb 4-1: config 0 descriptor??
[  151.877961][ T1281] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.894381][ T1281] usb 3-1: config 0 descriptor??
[  151.974775][ T5123] loop1: detected capacity change from 0 to 2048
[  152.072706][ T5123] EXT4-fs (loop1): mounted filesystem without journal. Opts: block_validity,bsdgroups,resgid=0x0000000000000000,nodelalloc,abort,,errors=continue. Quota mode: none.
[  152.089664][ T5123] ext4 filesystem being mounted at /root/syzkaller.cMq3LB/9/file0 supports timestamps until 2038 (0x7fffffff)
[  152.114281][ T5123] fs-verity: sha256 using implementation "sha256-avx2"
[  152.128379][ T5123] fs-verity (loop1, inode 13): ext4_end_enable_verity() failed with err -30
[  152.142835][ T5104] udc-core: couldn't find an available UDC or it's busy
[  152.150144][ T5104] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  152.272529][ T5132] loop1: detected capacity change from 0 to 128
[  152.288025][ T5132] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  152.299214][ T5132] ext4 filesystem being mounted at /root/syzkaller.cMq3LB/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  152.332814][ T4834] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  152.352343][ T5132] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:426: inode #2: comm syz.1.362: No space for directory leaf checksum. Please run e2fsck -D.
[  152.385766][ T4647] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  152.405776][ T4647] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  152.420940][ T4647] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  152.438328][ T4647] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  152.455163][ T4647] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  152.469674][ T1281] usbhid 3-1:0.0: can't add hid device: -71
[  152.475365][ T4647] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  152.475679][ T1281] usbhid: probe of 3-1:0.0 failed with error -71
[  152.499781][ T4647] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  152.507910][ T1281] usb 3-1: USB disconnect, device number 4
[  152.521932][ T4647] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192
[  152.537017][ T4647] EXT4-fs error (device loop1): ext4_empty_dir:3120: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  152.551550][ T4647] EXT4-fs error (device loop1): ext4_readdir:220: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024
[  152.683238][   T23] usb 4-1: USB disconnect, device number 6
[  152.778121][ T4834] usb 1-1: config 0 has an invalid interface number: 34 but max is 0
[  152.797265][ T4834] usb 1-1: config 0 has no interface number 0
[  152.989496][ T4834] usb 1-1: New USB device found, idVendor=1a0a, idProduct=0102, bcdDevice=56.f7
[  152.998786][ T4834] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.014564][ T4834] usb 1-1: Product: syz
[  153.018768][ T4834] usb 1-1: Manufacturer: syz
[  153.023938][ T4834] usb 1-1: SerialNumber: syz
[  153.039834][ T4834] usb 1-1: config 0 descriptor??
[  153.088356][ T4834] usb_ehset_test: probe of 1-1:0.34 failed with error -32
[  153.143763][ T5135] loop3: detected capacity change from 0 to 32768
[  153.170430][ T3696] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.247362][ T3696] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.333516][ T3696] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.444888][ T3696] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.743884][ T3546] usb 1-1: USB disconnect, device number 6
[  153.943217][ T3696] tipc: Left network mode
[  153.952427][ T5140] chnl_net:caif_netlink_parms(): no params data found
[  154.637794][ T5140] bridge0: port 1(bridge_slave_0) entered blocking state
[  154.641206][ T5175] loop0: detected capacity change from 0 to 4096
[  154.658402][ T5140] bridge0: port 1(bridge_slave_0) entered disabled state
[  154.676467][ T5140] device bridge_slave_0 entered promiscuous mode
[  154.695543][ T5142] chnl_net:caif_netlink_parms(): no params data found
[  154.723643][ T5140] bridge0: port 2(bridge_slave_1) entered blocking state
[  154.735714][ T5140] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.759886][ T5140] device bridge_slave_1 entered promiscuous mode
[  154.777238][ T5175] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  154.905772][ T5175] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  154.994247][ T5169] loop4: detected capacity change from 0 to 32768
[  155.005481][ T5140] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.066244][ T5186] loop3: detected capacity change from 0 to 1024
[  155.069472][ T5140] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.087405][ T5187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.374'.
[  155.111180][ T5169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.371 (5169)
[  155.168081][ T5169] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  155.237918][ T5169] BTRFS info (device loop4): using free space tree
[  155.288699][ T5140] team0: Port device team_slave_0 added
[  155.295088][ T5169] BTRFS info (device loop4): has skinny extents
[  155.362132][ T5140] team0: Port device team_slave_1 added
[  155.378145][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.449361][ T5142] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.494803][ T5142] device bridge_slave_0 entered promiscuous mode
[  155.579396][ T3597] Bluetooth: hci3: command 0x0409 tx timeout
[  155.603282][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.624090][ T5142] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.702069][ T5142] device bridge_slave_1 entered promiscuous mode
[  155.773260][ T5169] BTRFS info (device loop4): enabling ssd optimizations
[  155.810393][ T5140] batman_adv: batadv0: Adding interface: batadv_slave_0
[  155.823073][ T5140] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.849106][    C1] vkms_vblank_simulate: vblank timer overrun
[  155.899466][ T5140] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  155.916580][ T1281] Bluetooth: hci4: command 0x0409 tx timeout
[  155.934163][ T5140] batman_adv: batadv0: Adding interface: batadv_slave_1
[  155.941545][ T3597] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  155.957010][ T5140] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  155.993338][ T5140] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.024772][ T5169] autofs4:pid:5169:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374)
[  156.038223][ T5169] autofs4:pid:5169:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374)
[  156.200391][ T5142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.240654][ T5142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.345822][ T4267] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 10 /dev/loop4 scanned by udevd (4267)
[  156.369615][ T3597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.395075][ T3597] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.431272][ T3597] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  156.449228][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.477484][ T3597] usb 1-1: config 0 descriptor??
[  156.592000][ T5140] device hsr_slave_0 entered promiscuous mode
[  156.619890][ T5140] device hsr_slave_1 entered promiscuous mode
[  156.659401][ T5140] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.668265][ T5140] Cannot create hsr debugfs directory
[  156.784213][ T5142] team0: Port device team_slave_0 added
[  156.858790][ T3696] device hsr_slave_0 left promiscuous mode
[  156.880282][ T3696] device hsr_slave_1 left promiscuous mode
[  156.897221][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.925659][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.957862][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.986773][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  157.012889][ T5249] loop4: detected capacity change from 0 to 4096
[  157.029709][ T3696] device bridge_slave_1 left promiscuous mode
[  157.035964][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.061425][ T3696] device bridge_slave_0 left promiscuous mode
[  157.066775][ T5231] loop3: detected capacity change from 0 to 32768
[  157.075647][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.103259][ T5231] gfs2: Unknown parameter 'tockproto'
[  157.108945][ T5249] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  157.116357][ T4267] udevd[4267]: incorrect nilfs2 checksum on /dev/loop4
[  157.128145][ T5249] NILFS (loop4): mounting unchecked fs
[  157.142327][ T3696] device veth1_macvtap left promiscuous mode
[  157.148404][ T3696] device veth0_macvtap left promiscuous mode
[  157.174786][ T4267] udevd[4267]: incorrect nilfs2 checksum on /dev/loop4
[  157.182215][ T3696] device veth1_vlan left promiscuous mode
[  157.224912][ T3696] device veth0_vlan left promiscuous mode
[  157.236207][ T4267] udevd[4267]: incorrect nilfs2 checksum on /dev/loop4
[  157.269235][ T3597] usbhid 1-1:0.0: can't add hid device: -71
[  157.278720][ T3597] usbhid: probe of 1-1:0.0 failed with error -71
[  157.288056][ T4267] udevd[4267]: incorrect nilfs2 checksum on /dev/loop4
[  157.299998][ T5249] NILFS (loop4): recovery complete
[  157.306362][ T3597] usb 1-1: USB disconnect, device number 7
[  157.354145][ T4267] udevd[4267]: incorrect nilfs2 checksum on /dev/loop4
[  157.389674][ T5259] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.660318][ T1065] Bluetooth: hci3: command 0x041b tx timeout
[  157.786529][ T5269] loop4: detected capacity change from 0 to 2048
[  157.864644][ T5269] EXT4-fs (loop4): Unrecognized mount option "fsuuid=f3792d40-ddb3-ea3c-4b3e-0bc91959" or missing value
[  157.934691][ T5276] Cannot find add_set index 0 as target
[  157.984072][ T1065] Bluetooth: hci4: command 0x041b tx timeout
[  158.137345][ T3696] team0 (unregistering): Port device team_slave_1 removed
[  158.186829][ T3696] team0 (unregistering): Port device team_slave_0 removed
[  158.215748][ T3696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.250927][ T3696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.257531][ T5282] loop4: detected capacity change from 0 to 1024
[  158.369240][ T1065] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  158.378024][ T5282] attempt to access beyond end of device
[  158.378024][ T5282] loop4: rw=0, want=5780, limit=1024
[  158.419729][ T5282] Buffer I/O error on dev loop4, logical block 2889, async page read
[  158.428892][ T3696] bond0 (unregistering): Released all slaves
[  158.462144][ T5282] attempt to access beyond end of device
[  158.462144][ T5282] loop4: rw=0, want=5780, limit=1024
[  158.478376][ T5282] Buffer I/O error on dev loop4, logical block 2889, async page read
[  158.495859][   T26] audit: type=1800 audit(1719735297.310:36): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.382" name="file1" dev="loop4" ino=20 res=0 errno=0
[  158.556981][ T5142] team0: Port device team_slave_1 added
[  158.574228][ T5282] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  158.587879][ T5276] netlink: 32 bytes leftover after parsing attributes in process `syz.0.387'.
[  158.622823][ T5282] hfsplus: inconsistency in B*Tree (1,0,1,0,2)
[  158.702743][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_0
[  158.717305][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.758422][ T5142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  158.816983][ T5142] batman_adv: batadv0: Adding interface: batadv_slave_1
[  158.839346][ T5142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  158.840807][ T1065] usb 1-1: config index 0 descriptor too short (expected 1307, got 27)
[  158.885104][ T1065] usb 1-1: config 0 has an invalid interface number: 0 but max is -1
[  158.896056][ T1065] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 0
[  158.912286][ T1065] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  158.916673][ T5142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  158.951615][ T1065] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  158.984626][ T1065] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246
[  159.167251][ T5142] device hsr_slave_0 entered promiscuous mode
[  159.168863][ T5296] loop4: detected capacity change from 0 to 1024
[  159.195178][ T5142] device hsr_slave_1 entered promiscuous mode
[  159.206386][ T5142] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.214620][ T5142] Cannot create hsr debugfs directory
[  159.309631][ T1065] usb 1-1: string descriptor 0 read error: -22
[  159.315907][ T1065] usb 1-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  159.338465][ T1065] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.377005][ T1065] usb 1-1: config 0 descriptor??
[  159.420456][ T5279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  159.439943][ T1065] hub 1-1:0.0: bad descriptor, ignoring hub
[  159.449560][ T1065] hub: probe of 1-1:0.0 failed with error -5
[  159.489589][ T1065] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input6
[  159.749540][ T1065] Bluetooth: hci3: command 0x040f tx timeout
[  159.920462][   T26] audit: type=1800 audit(1719735298.740:37): pid=5318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.394" name="bus" dev="sda1" ino=2004 res=0 errno=0
[  160.069487][ T1065] Bluetooth: hci4: command 0x040f tx timeout
[  160.205920][ T5142] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.296474][ T5142] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.453620][ T5142] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.520140][ T3597] usb 1-1: USB disconnect, device number 8
[  160.568443][ T5142] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.805810][ T5140] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  160.835070][ T5140] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  160.858856][ T5140] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  160.901512][ T5140] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  160.944485][ T5142] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  161.004121][ T5142] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  161.049716][ T5142] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  161.081188][ T5142] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  161.324723][ T5140] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.378942][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.407415][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.418873][ T5321] loop3: detected capacity change from 0 to 32768
[  161.453216][ T5140] 8021q: adding VLAN 0 to HW filter on device team0
[  161.495333][ T5321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.395 (5321)
[  161.528476][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0
[  161.560072][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  161.573348][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  161.585273][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.592453][ T5237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  161.664203][ T5321] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  161.691838][ T5142] 8021q: adding VLAN 0 to HW filter on device team0
[  161.699252][ T5321] BTRFS info (device loop3): using free space tree
[  161.724877][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  161.733227][ T5321] BTRFS info (device loop3): has skinny extents
[  161.744666][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  161.784985][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  161.818373][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.825617][ T5236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  161.829688][ T3597] Bluetooth: hci3: command 0x0419 tx timeout
[  161.854138][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  161.863540][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  161.902594][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  161.996836][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.020546][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.059529][ T5321] BTRFS info (device loop3): enabling ssd optimizations
[  162.071000][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.120292][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.157811][ T1281] Bluetooth: hci4: command 0x0419 tx timeout
[  162.164441][ T3597] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  162.173406][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.203719][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.259663][ T5237] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.268909][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.276205][ T5237] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.353338][ T5140] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.374013][ T5140] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.434421][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  162.439577][ T3597] usb 1-1: Using ep0 maxpacket: 32
[  162.448485][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.489816][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.510203][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.519691][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.526792][ T5236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.535338][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.544913][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.554229][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.563846][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.569699][ T3597] usb 1-1: config index 0 descriptor too short (expected 26, got 18)
[  162.593417][ T3597] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  162.605733][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.613110][ T3597] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.634205][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.644145][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.648586][ T3597] usb 1-1: config 0 descriptor??
[  162.664682][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.730492][ T5142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  162.763134][ T3597] as10x_usb: device has been detected
[  162.768936][ T3597] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  162.808010][ T5142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  162.867834][ T3597] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  162.922869][ T3597] as10x_usb: error during firmware upload part1
[  162.959783][ T3597] Registered device nBox DVB-T Dongle
[  162.961741][ T3597] usb 1-1: USB disconnect, device number 9
[  163.073346][ T3597] Unregistered device nBox DVB-T Dongle
[  163.093995][ T3597] as10x_usb: device has been disconnected
[  163.118256][ T5366] ramfs: Bad value for 'mode'
[  163.133897][ T5404] loop4: detected capacity change from 0 to 2048
[  163.138497][ T5140] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.168710][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.188144][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  163.218119][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  163.235112][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  163.251804][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  163.267961][ T5404] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.279215][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  163.288073][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  163.308234][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  163.328938][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  163.348777][ T5407] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  163.565773][ T5140] device veth0_vlan entered promiscuous mode
[  163.831752][ T5140] device veth1_vlan entered promiscuous mode
[  163.880775][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  163.888725][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  163.913080][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.948401][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  163.967026][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.987962][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.010132][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  164.018841][ T3546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  164.047548][ T5142] 8021q: adding VLAN 0 to HW filter on device batadv0
[  164.055657][ T5427] loop0: detected capacity change from 0 to 4096
[  164.145755][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.168070][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.221719][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.304789][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.330861][ T4832] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.377351][ T5140] device veth0_macvtap entered promiscuous mode
[  164.414378][ T5140] device veth1_macvtap entered promiscuous mode
[  164.466292][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  164.481087][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  164.526829][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  164.550976][ T5408] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  164.594274][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.609339][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.619978][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.631154][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.641689][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.653914][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.686846][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.700941][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.720489][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.744382][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.768953][ T5140] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.787225][ T5454] netlink: 'syz.4.409': attribute type 10 has an invalid length.
[  164.851711][ T5454] team0: Port device dummy0 added
[  164.885328][ T5142] device veth0_vlan entered promiscuous mode
[  164.914190][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  164.933373][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  164.984160][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  165.005245][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  165.048664][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.087283][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.127953][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.148942][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.178247][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.214044][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.249121][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.277923][ T5441] loop3: detected capacity change from 0 to 32768
[  165.280748][ T5450] loop0: detected capacity change from 0 to 32768
[  165.284639][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.311572][ T5140] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  165.328453][ T5140] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  165.343718][ T5140] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.368657][ T5142] device veth1_vlan entered promiscuous mode
[  165.381086][ T5441] XFS: ikeep mount option is deprecated.
[  165.407295][ T5441] XFS: ikeep mount option is deprecated.
[  165.427280][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  165.478912][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  165.522630][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  165.560639][ T5441] XFS (loop3): Mounting V5 Filesystem
[  165.579557][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.606837][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  165.608901][ T5464] loop4: detected capacity change from 0 to 32768
[  165.631677][ T5140] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  165.650649][ T5140] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  165.663995][ T5441] XFS (loop3): Ending clean mount
[  165.669620][ T5140] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  165.679895][ T5140] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  165.708570][ T5441] XFS (loop3): Quotacheck needed: Please wait.
[  165.745019][ T5464] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.410 (5464)
[  165.906782][ T5464] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  165.909873][ T3618] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  165.949932][ T5441] XFS (loop3): Quotacheck: Done.
[  165.972158][ T5142] device veth0_macvtap entered promiscuous mode
[  165.989173][ T5464] BTRFS info (device loop4): using free space tree
[  165.995746][ T5464] BTRFS info (device loop4): has skinny extents
[  166.019172][ T3618] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.027321][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  166.047927][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  166.114279][ T5142] device veth1_macvtap entered promiscuous mode
[  166.131310][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  166.149750][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  166.158098][ T4835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  166.262422][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.273146][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.279897][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.286268][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.303836][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.316051][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.324239][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.336663][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.348061][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.358974][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.365848][ T5464] BTRFS info (device loop4): enabling ssd optimizations
[  166.369635][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.386563][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.397799][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.409329][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.424467][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.574759][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.589649][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  166.601274][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.618404][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.650329][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.665738][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.681246][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.692147][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.707043][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.717077][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.728304][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.738286][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.748898][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.759480][ T5142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.770295][ T5142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.785702][ T5142] batman_adv: batadv0: Interface activated: batadv_slave_1
[  166.886448][ T5505] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[  167.159525][ T5503] netlink: 16 bytes leftover after parsing attributes in process `syz.0.411'.
[  167.178456][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  167.200217][ T5414] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  168.171612][ T5142] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.201386][ T5512] loop2: detected capacity change from 0 to 32768
[  168.229128][ T5142] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.247036][ T5142] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.256511][ T5515] syz.4.413 uses obsolete (PF_INET,SOCK_PACKET)
[  168.266943][ T5142] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.297781][ T4625] XFS (loop3): Unmounting Filesystem
[  168.304302][ T5512] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.365 (5512)
[  168.390682][ T5512] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  168.399511][ T5512] BTRFS info (device loop2): using free space tree
[  168.406039][ T5512] BTRFS info (device loop2): has skinny extents
[  168.529835][ T5408] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  168.623768][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.659179][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.688328][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  168.723556][ T5528] loop4: detected capacity change from 0 to 8192
[  168.782401][ T5408] usb 1-1: Using ep0 maxpacket: 32
[  168.789827][ T3616] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.798054][ T3616] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.845920][ T4834] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.854033][ T5528] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  168.898239][ T5528] REISERFS (device loop4): using ordered data mode
[  168.900078][ T5408] usb 1-1: config index 0 descriptor too short (expected 26, got 18)
[  168.910100][ T5528] reiserfs: using flush barriers
[  168.929189][ T5528] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  168.952797][ T5528] REISERFS (device loop4): checking transaction log (loop4)
[  168.965491][ T5528] REISERFS (device loop4): Using r5 hash to sort names
[  168.985711][ T5512] BTRFS info (device loop2): enabling ssd optimizations
[  168.993427][ T5408] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  168.994456][ T5528] REISERFS (device loop4): using 3.5.x disk format
[  169.012025][ T5528] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  169.043601][ T5408] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.091902][ T5408] usb 1-1: config 0 descriptor??
[  169.173419][ T5408] as10x_usb: device has been detected
[  169.211977][ T5408] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  169.277546][ T5408] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  169.343570][ T5408] as10x_usb: error during firmware upload part1
[  169.379926][ T5408] Registered device nBox DVB-T Dongle
[  169.728400][ T4834] usb 1-1: USB disconnect, device number 10
[  169.747066][ T5562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.419'.
[  169.790183][ T4834] Unregistered device nBox DVB-T Dongle
[  169.799847][ T4834] as10x_usb: device has been disconnected
[  169.837991][ T5562] loop4: detected capacity change from 0 to 512
[  169.883873][ T3696] device hsr_slave_0 left promiscuous mode
[  169.891260][ T5516] ramfs: Bad value for 'mode'
[  169.896354][ T3696] device hsr_slave_1 left promiscuous mode
[  169.920973][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  169.930100][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  169.956249][ T5562] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.419: iget: bad extended attribute block 1
[  170.001299][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.008748][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.025783][ T5562] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.419: couldn't read orphan inode 15 (err -117)
[  170.027909][ T3696] device bridge_slave_1 left promiscuous mode
[  170.052118][ T5562] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,resgid=0x0000000000000000,auto_da_alloc=0x000000000000007e,noload,inode_readahead_blks=0x0000000000000000,nombcache,,errors=continue. Quota mode: none.
[  170.065453][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.083531][ T3696] device bridge_slave_0 left promiscuous mode
[  170.093102][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.130687][ T3696] device veth1_macvtap left promiscuous mode
[  170.139736][ T3696] device veth0_macvtap left promiscuous mode
[  170.154883][ T3696] device veth1_vlan left promiscuous mode
[  170.163602][ T3696] device veth0_vlan left promiscuous mode
[  170.205325][ T5562] EXT4-fs error (device loop4): ext4_map_blocks:601: inode #2: block 13: comm syz.4.419: lblock 0 mapped to illegal pblock 13 (length 1)
[  170.312786][ T5562] EXT4-fs (loop4): Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ184467440737095516150000000000000000000001777777777777777777777ÿÿÿÿÿÿÿÿÿ" or missing value
[  170.317444][ T5567] loop1: detected capacity change from 0 to 4096
[  170.443823][ T5567] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  170.463727][ T5567] ntfs: (device loop1): read_ntfs_boot_sector(): Mount option errors=recover not used. Aborting without trying to recover.
[  170.515253][ T5567] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume.
[  170.837314][ T3696] team0 (unregistering): Port device team_slave_1 removed
[  170.869210][ T3545] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  170.883130][ T3696] team0 (unregistering): Port device team_slave_0 removed
[  170.908421][ T3696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.935964][ T3696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.981444][ T5574] loop4: detected capacity change from 0 to 32768
[  171.025663][ T5574] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.422 (5574)
[  171.071649][ T3696] bond0 (unregistering): Released all slaves
[  171.096028][ T5574] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  171.109233][ T3545] usb 1-1: Using ep0 maxpacket: 32
[  171.111398][ T5574] BTRFS info (device loop4): enabling disk space caching
[  171.122305][ T5574] BTRFS info (device loop4): enabling free space tree
[  171.131983][ T5574] BTRFS info (device loop4): disabling tree log
[  171.138354][ T5574] BTRFS info (device loop4): setting nodatasum
[  171.145094][ T5574] BTRFS info (device loop4): turning on sync discard
[  171.153050][ T5574] BTRFS info (device loop4): using free space tree
[  171.165237][ T5574] BTRFS info (device loop4): has skinny extents
[  171.220355][ T5581] netlink: 4 bytes leftover after parsing attributes in process `syz.1.424'.
[  171.229343][ T3545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  171.249635][ T3545] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  171.269473][ T3545] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00
[  171.279150][ T3545] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.374188][ T3545] usb 1-1: config 0 descriptor??
[  171.423135][ T5598] loop2: detected capacity change from 0 to 1024
[  171.457783][ T5559] chnl_net:caif_netlink_parms(): no params data found
[  171.459670][ T5601] loop1: detected capacity change from 0 to 512
[  171.516562][ T5574] BTRFS info (device loop4): enabling ssd optimizations
[  171.533704][ T5601] EXT4-fs (loop1): Invalid want_extra_isize 16855
[  171.552435][ T5598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  171.580256][   T23] Bluetooth: hci0: command 0x0409 tx timeout
[  171.729407][ T5601] tipc: Enabling of bearer <–dp:s> rejected, media not registered
[  171.779331][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.786419][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state
[  171.817871][ T5559] device bridge_slave_0 entered promiscuous mode
[  171.838395][ T5601] loop1: detected capacity change from 0 to 1024
[  171.862410][ T3545] wacom 0003:056A:0063.0003: unknown main item tag 0x0
[  171.871050][ T3545] wacom 0003:056A:0063.0003: Unknown device_type for 'HID 056a:0063'. Assuming pen.
[  171.881753][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.911654][ T3545] wacom 0003:056A:0063.0003: hidraw0: USB HID v0.00 Device [HID 056a:0063] on usb-dummy_hcd.0-1/input0
[  171.914364][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.933413][ T3545] input: Wacom Volito2 2x3 Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:056A:0063.0003/input/input7
[  171.965920][ T5601] hfsplus: uid requires an argument
[  171.980522][ T5559] device bridge_slave_1 entered promiscuous mode
[  171.986607][ T5601] hfsplus: unable to parse mount options
[  172.063366][ T3597] usb 1-1: USB disconnect, device number 11
[  172.120542][ T5601] dccp_invalid_packet: P.Data Offset(68) too large
[  172.141581][ T5619] loop2: detected capacity change from 0 to 4096
[  172.181866][ T5559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  172.257699][ T5619] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid end of sector marker.
[  172.323622][ T5559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  172.336607][ T5619] ntfs: (device loop2): ntfs_read_inode_mount(): Device read failed.
[  172.372029][ T5619] ntfs: (device loop2): ntfs_read_inode_mount(): Failed. Marking inode as bad.
[  172.398349][ T5619] ntfs: (device loop2): ntfs_fill_super(): Failed to load essential metadata.
[  173.028582][ T5559] team0: Port device team_slave_0 added
[  173.381441][ T5559] team0: Port device team_slave_1 added
[  173.407009][ T5625] loop2: detected capacity change from 0 to 1024
[  173.577177][ T5625] attempt to access beyond end of device
[  173.577177][ T5625] loop2: rw=2057, want=65536, limit=1024
[  173.622622][ T5625] attempt to access beyond end of device
[  173.622622][ T5625] loop2: rw=1, want=2310, limit=1024
[  173.651581][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.658564][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  173.674264][ T5625] attempt to access beyond end of device
[  173.674264][ T5625] loop2: rw=1, want=4358, limit=1024
[  173.696173][ T5020] Bluetooth: hci0: command 0x041b tx timeout
[  173.725660][ T5625] attempt to access beyond end of device
[  173.725660][ T5625] loop2: rw=1, want=6406, limit=1024
[  173.753081][ T5559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.770950][ T5625] attempt to access beyond end of device
[  173.770950][ T5625] loop2: rw=1, want=8454, limit=1024
[  173.790412][ T5634] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check.
[  173.809382][ T5625] attempt to access beyond end of device
[  173.809382][ T5625] loop2: rw=1, want=10502, limit=1024
[  173.836646][ T5637] netlink: 12 bytes leftover after parsing attributes in process `syz.0.432'.
[  173.838236][ T5625] attempt to access beyond end of device
[  173.838236][ T5625] loop2: rw=1, want=12550, limit=1024
[  173.866349][ T5638] netlink: 8 bytes leftover after parsing attributes in process `syz.4.428'.
[  173.890361][ T5632] loop1: detected capacity change from 0 to 8192
[  173.929170][ T5625] attempt to access beyond end of device
[  173.929170][ T5625] loop2: rw=1, want=14598, limit=1024
[  173.948365][   T26] audit: type=1804 audit(1719735312.760:38): pid=5641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.434" name="/root/syzkaller.veTpn3/28/file0" dev="sda1" ino=2014 res=1 errno=0
[  173.976361][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.985843][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.017093][ T5625] attempt to access beyond end of device
[  174.017093][ T5625] loop2: rw=1, want=16646, limit=1024
[  174.050804][ T5632] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  174.057473][ T5625] attempt to access beyond end of device
[  174.057473][ T5625] loop2: rw=1, want=18694, limit=1024
[  174.071401][ T5632] REISERFS (device loop1): using ordered data mode
[  174.077942][ T5632] reiserfs: using flush barriers
[  174.133326][ T5632] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  174.159491][ T5559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.207056][ T5632] REISERFS (device loop1): checking transaction log (loop1)
[  174.257394][ T5632] REISERFS (device loop1): Using r5 hash to sort names
[  174.284179][ T5646] loop4: detected capacity change from 0 to 64
[  174.299492][ T5632] REISERFS (device loop1): using 3.5.x disk format
[  174.306256][ T5632] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  174.364738][ T5559] device hsr_slave_0 entered promiscuous mode
[  174.450443][ T5559] device hsr_slave_1 entered promiscuous mode
[  174.524201][ T5646] hfs: request for non-existent node 1280 in B*Tree
[  174.533998][ T5646] hfs: request for non-existent node 1280 in B*Tree
[  174.544604][ T5559] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.570761][ T5559] Cannot create hsr debugfs directory
[  174.778074][ T5652] REISERFS warning (device loop1): super-6502 reiserfs_getopt: unknown mount option "ÿÿÿÿî§<< G4š¶mÿ±â½ÆuÆÌëê0º‰wÆ2ÝK×]<ýÌàÈŒ«öWgéÛ½{XA¨Î>´LqQÞ·¸ùχ
[  174.778074][ T5652] ðOÉQ±•Çý6ÿÛÐb"
[  174.938200][ T5644] loop0: detected capacity change from 0 to 40427
[  175.009444][ T5559] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.183024][ T5559] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.326448][ T5559] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.433422][ T5559] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.467335][ T5644] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[  175.509202][ T3549] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  175.522127][ T5644] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  175.636584][ T5559] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  175.646690][ T5559] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  175.671766][ T5559] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  175.700489][ T5559] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  175.749281][ T4831] Bluetooth: hci0: command 0x040f tx timeout
[  175.879389][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.883043][ T5559] 8021q: adding VLAN 0 to HW filter on device bond0
[  175.908999][ T3549] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.924628][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  175.927097][ T5660] loop2: detected capacity change from 0 to 32768
[  175.939923][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  175.959158][ T3549] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  175.961495][ T5559] 8021q: adding VLAN 0 to HW filter on device team0
[  175.968231][ T3549] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.999675][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  176.018617][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  176.030408][ T5660] XFS: ikeep mount option is deprecated.
[  176.036094][ T5660] XFS: ikeep mount option is deprecated.
[  176.043584][ T3549] usb 2-1: config 0 descriptor??
[  176.049705][ T3597] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.056952][ T3597] bridge0: port 1(bridge_slave_0) entered forwarding state
[  176.091148][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  176.125954][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  176.166936][ T5660] XFS (loop2): Mounting V5 Filesystem
[  176.178176][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  176.228327][ T5020] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.235505][ T5020] bridge0: port 2(bridge_slave_1) entered forwarding state
[  176.243775][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  176.269859][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  176.278831][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  176.295258][ T5660] XFS (loop2): Ending clean mount
[  176.299811][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  176.310059][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  176.323653][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  176.343090][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  176.377340][ T5559] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  176.390184][ T5559] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  176.401320][ T5660] XFS (loop2): Quotacheck needed: Please wait.
[  176.417677][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  176.438071][ T5663] loop0: detected capacity change from 0 to 32768
[  176.463550][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  176.490444][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  176.508203][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  176.519854][ T3549] hid (null): bogus close delimiter
[  176.558368][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  176.565842][ T5660] XFS (loop2): Quotacheck: Done.
[  176.651269][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  176.655729][ T5663] XFS (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  176.661940][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  176.678366][ T5559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  176.685741][ T5663] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  176.724756][ T5663] XFS (loop0): DAX and reflink cannot be used together!
[  176.733887][ T3549] usb 2-1: language id specifier not provided by device, defaulting to English
[  176.741580][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  176.752236][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  176.799689][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  176.810665][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.821936][ T5559] device veth0_vlan entered promiscuous mode
[  176.850431][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.858973][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  176.873213][ T5559] device veth1_vlan entered promiscuous mode
[  177.011034][ T5559] device veth0_macvtap entered promiscuous mode
[  177.018355][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  177.027671][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  177.037309][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  177.055494][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  177.065167][ T5020] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  177.076299][ T5559] device veth1_macvtap entered promiscuous mode
[  177.098844][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.131363][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.156538][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.168777][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.189007][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.208294][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.218368][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.237448][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.260321][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.271404][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.281702][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.292693][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.306586][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.323393][ T5682] netlink: 44 bytes leftover after parsing attributes in process `syz.0.441'.
[  177.334040][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  177.354395][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  177.367428][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.431336][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.451540][ T3549] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input10
[  177.465710][ T5685] xt_TCPMSS: Only works on TCP SYN packets
[  177.482058][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.507045][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.549620][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.563448][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.574365][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.590739][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.601483][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.603195][ T3549] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:256C:006D.0004/input/input11
[  177.611943][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.668127][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.709466][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.720366][ T3549] uclogic 0003:256C:006D.0004: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.1-1/input0
[  177.752834][ T3549] usb 2-1: USB disconnect, device number 5
[  177.759333][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.777538][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  177.815532][ T5140] XFS (loop2): Unmounting Filesystem
[  177.829392][ T3596] Bluetooth: hci0: command 0x0419 tx timeout
[  177.835562][ T4831] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  177.937613][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  177.956778][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  177.972743][ T5559] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  177.993373][ T5559] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.005594][ T5559] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.016991][ T5559] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.109303][ T4831] usb 1-1: Using ep0 maxpacket: 32
[  178.230708][ T4831] usb 1-1: config index 0 descriptor too short (expected 37, got 18)
[  178.425420][ T5692] device syzkaller1 entered promiscuous mode
[  178.469499][ T4831] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  178.489191][ T4831] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  178.497789][ T4831] usb 1-1: Product: syz
[  178.509176][ T4831] usb 1-1: Manufacturer: syz
[  178.536369][ T4831] usb 1-1: SerialNumber: syz
[  178.562437][ T4831] usb 1-1: config 0 descriptor??
[  178.683353][ T5692] loop1: detected capacity change from 0 to 8192
[  178.787448][ T5692] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  178.797249][ T5692] REISERFS (device loop1): using ordered data mode
[  178.804284][ T5692] reiserfs: using flush barriers
[  178.816881][ T5692] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  178.835618][ T5692] REISERFS (device loop1): checking transaction log (loop1)
[  178.881939][ T5692] REISERFS (device loop1): Using r5 hash to sort names
[  178.891005][ T5692] REISERFS (device loop1): using 3.5.x disk format
[  178.897848][ T5692] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  178.922622][    C0] sd 0:0:1:0: [sda] tag#5477 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK cmd_age=0s
[  178.933144][    C0] sd 0:0:1:0: [sda] tag#5477 CDB: Verify(10)
[  178.939234][    C0] sd 0:0:1:0: [sda] tag#5477 CDB[00]: 2f 64 65 76 2f 6e 65 74 2f 74 75 6e 00 00 00 00
[  178.948810][    C0] sd 0:0:1:0: [sda] tag#5477 CDB[10]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  178.958446][    C0] sd 0:0:1:0: [sda] tag#5477 CDB[20]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  178.959517][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.968051][    C0] sd 0:0:1:0: [sda] tag#5477 CDB[30]: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  178.985802][    C0] sd 0:0:1:0: [sda] tag#5477 CDB[40]: 53 00 00 00 00 00 00 00 63 40 00 00 00 00 00 00
[  178.995442][    C0] sd 0:0:1:0: [sda] tag#5477 CDB[50]: 00 00 00 00 ff ff ff ff 00 00 00 20 00 00 00 00
[  179.005058][    C0] sd 0:0:1:0: [sda] tag#5477 CDB[60]: 98 fc ff
[  179.026191][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.059253][ T5236] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  179.127628][ T3618] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.146734][ T3618] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.177624][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  179.324094][ T4831] rtl8150 1-1:0.0: eth1: rtl8150 is detected
[  179.640866][ T5710] loop1: detected capacity change from 0 to 4096
[  179.642451][ T4831] usb 1-1: USB disconnect, device number 12
[  179.690690][ T5710] ntfs3: Bad value for 'uid'
[  179.725234][ T5713] loop3: detected capacity change from 0 to 1024
[  179.842427][ T5713] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  179.872655][ T5713] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  179.900857][ T5713] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  179.930020][   T13] Bluetooth: hci0: command 0x0405 tx timeout
[  179.938443][ T5710] loop1: detected capacity change from 0 to 4096
[  179.960983][ T5713] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  179.982347][ T5713] System zones: 0-1, 3-36
[  180.023934][ T5713] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,jqfmt=vfsold,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  180.160481][ T5700] chnl_net:caif_netlink_parms(): no params data found
[  180.178405][ T5729] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  180.282869][ T3696] device hsr_slave_0 left promiscuous mode
[  180.304900][ T3696] device hsr_slave_1 left promiscuous mode
[  180.313586][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.354772][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.370658][ T5710] handle_bad_sector: 23 callbacks suppressed
[  180.370681][ T5710] attempt to access beyond end of device
[  180.370681][ T5710] loop1: rw=524288, want=2097328, limit=4096
[  180.399956][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.424572][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.466349][ T5710] attempt to access beyond end of device
[  180.466349][ T5710] loop1: rw=0, want=2097328, limit=4096
[  180.468541][ T3696] device bridge_slave_1 left promiscuous mode
[  180.489898][   T26] audit: type=1800 audit(1719735319.310:39): pid=5710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.448" name="file2" dev="loop1" ino=16 res=0 errno=0
[  180.533800][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.579618][ T3696] device bridge_slave_0 left promiscuous mode
[  180.585946][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.657440][ T3696] device veth1_macvtap left promiscuous mode
[  180.667779][ T3696] device veth0_macvtap left promiscuous mode
[  180.707780][ T3696] device veth1_vlan left promiscuous mode
[  180.739236][ T3696] device veth0_vlan left promiscuous mode
[  180.947980][ T5756] loop3: detected capacity change from 0 to 4096
[  181.021891][ T5756] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  181.337631][ T5756] ntfs: (device loop3): check_mft_mirror(): $MFTMirr location mismatch.  Run chkdsk.
[  181.384270][ T5756] ntfs: (device loop3): load_system_files(): $MFTMirr does not match $MFT.  Will not be able to remount read-write.  Run ntfsfix and/or chkdsk.
[  181.615955][ T5756] ntfs: volume version 3.1.
[  181.762718][ T5771] loop0: detected capacity change from 0 to 1024
[  181.810943][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[  181.943308][ T5771] hfsplus: unable to parse mount options
[  182.200638][   T26] audit: type=1804 audit(1719735320.960:40): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.459" name="/root/syzkaller.L0Zqmo/11/bus" dev="sda1" ino=2022 res=1 errno=0
[  182.269233][   T26] audit: type=1804 audit(1719735320.960:41): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.459" name="/root/syzkaller.L0Zqmo/11/bus" dev="sda1" ino=2022 res=1 errno=0
[  182.313860][   T26] audit: type=1804 audit(1719735320.980:42): pid=5785 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.459" name="/root/syzkaller.L0Zqmo/11/bus" dev="sda1" ino=2022 res=1 errno=0
[  182.326459][ T5783] loop3: detected capacity change from 0 to 4096
[  182.349486][ T5771] loop0: detected capacity change from 0 to 4096
[  182.358439][ T5787] loop4: detected capacity change from 0 to 64
[  182.377948][ T5783] NILFS (loop3): unrecognized mount option "norea7jq	й_ßzr…"
[  182.666643][ T3696] team0 (unregistering): Port device team_slave_1 removed
[  182.701189][ T3696] team0 (unregistering): Port device team_slave_0 removed
[  182.796537][ T5791] overlayfs: filesystem on './file2' not supported
[  183.075007][ T3696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  183.176344][ T5795] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  183.192143][ T3696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  183.384442][ T5799] loop1: detected capacity change from 0 to 8192
[  183.411227][ T5801] netlink: 20 bytes leftover after parsing attributes in process `syz.4.464'.
[  183.455742][ T5799] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  183.488385][ T5799] REISERFS (device loop1): using ordered data mode
[  183.510113][ T5799] reiserfs: using flush barriers
[  183.519931][ T5799] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  183.562106][ T3696] bond0 (unregistering): Released all slaves
[  183.582860][ T5799] REISERFS (device loop1): checking transaction log (loop1)
[  183.594307][ T5799] REISERFS (device loop1): Using r5 hash to sort names
[  183.609138][ T5799] REISERFS (device loop1): using 3.5.x disk format
[  183.617986][ T5799] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  183.819535][ T3545] Bluetooth: hci3: command 0x041b tx timeout
[  183.985059][ T5700] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.993751][ T5700] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.004807][ T5801] loop4: detected capacity change from 0 to 40427
[  184.024541][ T5700] device bridge_slave_0 entered promiscuous mode
[  184.050599][ T5700] bridge0: port 2(bridge_slave_1) entered blocking state
[  184.057811][ T5700] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.079626][ T5700] device bridge_slave_1 entered promiscuous mode
[  184.126353][ T5801] F2FS-fs (loop4): Found nat_bits in checkpoint
[  184.189176][ T3545] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  184.205120][ T5700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  184.262743][ T5700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  184.289367][ T5801] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  184.569189][ T3545] usb 4-1: Using ep0 maxpacket: 32
[  184.571658][ T5700] team0: Port device team_slave_0 added
[  185.640277][ T3545] usb 4-1: config index 0 descriptor too short (expected 26, got 18)
[  185.785388][ T3545] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  185.957789][ T3545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.134098][ T5236] Bluetooth: hci3: command 0x040f tx timeout
[  186.170564][ T3545] usb 4-1: config 0 descriptor??
[  186.189929][ T5700] team0: Port device team_slave_1 added
[  186.237227][ T3545] as10x_usb: device has been detected
[  186.281807][ T3545] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  186.294139][ T5843] loop1: detected capacity change from 0 to 64
[  186.311137][ T3545] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  186.322802][ T3545] as10x_usb: error during firmware upload part1
[  186.330356][ T3545] Registered device nBox DVB-T Dongle
[  186.340823][ T4673] attempt to access beyond end of device
[  186.340823][ T4673] loop4: rw=2049, want=45104, limit=40427
[  186.384298][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.414137][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.458631][ T5700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.498195][ T5700] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.509300][ T3551] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  186.537286][ T5700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.607783][ T4831] usb 4-1: USB disconnect, device number 7
[  186.641276][ T4831] Unregistered device nBox DVB-T Dongle
[  186.641958][ T5700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.676518][ T4831] as10x_usb: device has been disconnected
[  186.709255][ T3551] usb 1-1: device descriptor read/64, error -71
[  186.765591][ T5811] ramfs: Bad value for 'mode'
[  186.812555][ T5700] device hsr_slave_0 entered promiscuous mode
[  186.834809][ T5700] device hsr_slave_1 entered promiscuous mode
[  186.842129][ T5700] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  186.855338][ T5700] Cannot create hsr debugfs directory
[  186.989248][ T3551] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  187.125796][ T5700] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.189273][ T3551] usb 1-1: device descriptor read/64, error -71
[  187.228525][ T5849] Mount JFS Failure: -22
[  187.246049][ T5849] jfs_mount failed w/return code = -22
[  187.281875][ T5852] Mount JFS Failure: -22
[  187.300018][ T5700] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.310816][ T3551] usb usb1-port1: attempt power cycle
[  187.320016][ T5852] jfs_mount failed w/return code = -22
[  187.437684][   T26] audit: type=1804 audit(1719735326.250:43): pid=5858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.478" name="/root/syzkaller.L0Zqmo/17/bus" dev="sda1" ino=2016 res=1 errno=0
[  187.506794][ T5700] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.588482][ T5700] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  187.749216][ T3551] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  187.769437][ T5017] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  187.845490][ T3551] usb 1-1: device descriptor read/8, error -71
[  187.854425][ T5700] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  187.874370][ T5864] netlink: 160 bytes leftover after parsing attributes in process `syz.4.481'.
[  187.919198][ T5864] netlink: 160 bytes leftover after parsing attributes in process `syz.4.481'.
[  187.936047][ T5864] netlink: 160 bytes leftover after parsing attributes in process `syz.4.481'.
[  187.956522][ T5700] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  187.976503][ T5700] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  188.017823][ T5700] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  188.029284][ T5017] usb 4-1: Using ep0 maxpacket: 32
[  188.129313][ T3551] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  188.170968][ T5017] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  188.219201][ T3549] Bluetooth: hci3: command 0x0419 tx timeout
[  188.229608][ T3551] usb 1-1: device descriptor read/8, error -71
[  188.249329][ T5700] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.278439][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.308294][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.330207][ T5700] 8021q: adding VLAN 0 to HW filter on device team0
[  188.349581][ T3551] usb usb1-port1: unable to enumerate USB device
[  188.359393][ T5017] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  188.378795][ T5017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.412271][ T5017] usb 4-1: Product: syz
[  188.416480][ T5017] usb 4-1: Manufacturer: syz
[  188.424745][ T5872] loop4: detected capacity change from 0 to 8192
[  188.439352][ T5017] usb 4-1: SerialNumber: syz
[  188.464254][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.476551][ T5017] usb 4-1: config 0 descriptor??
[  188.483276][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.509844][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.516959][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.525001][ T5860] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  188.539484][ T5872] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  188.555272][ T5872] REISERFS (device loop4): using ordered data mode
[  188.567980][ T5872] reiserfs: using flush barriers
[  188.570642][ T5017] hub 4-1:0.0: bad descriptor, ignoring hub
[  188.578900][ T5017] hub: probe of 4-1:0.0 failed with error -5
[  188.586120][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.586518][ T5872] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  188.612493][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.615396][ T5872] REISERFS (device loop4): checking transaction log (loop4)
[  188.637017][ T5017] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input12
[  188.666037][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.673243][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.736882][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.756673][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.766738][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.788767][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  188.794814][ T5860] udc-core: couldn't find an available UDC or it's busy
[  188.825442][ T5860] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  188.830589][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  188.847816][ T5872] REISERFS (device loop4): Using tea hash to sort names
[  188.860925][ T5872] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  188.880285][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  188.883505][ T5872] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  188.899860][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  188.920320][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  188.942707][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  188.962266][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  188.982471][ T5700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  188.985927][ T5860] udc-core: couldn't find an available UDC or it's busy
[  189.013882][ T5872] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  189.047022][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  189.049384][ T5860] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  189.087996][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.211747][ T5872] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.483'.
[  189.282105][ T3549] usb 4-1: USB disconnect, device number 8
[  189.439989][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.469358][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  189.483708][ T5700] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.586569][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  189.600001][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  189.649225][ T3551] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  189.655675][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  189.680077][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  189.709472][ T5700] device veth0_vlan entered promiscuous mode
[  189.725742][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  189.734676][ T5017] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  189.753025][ T5700] device veth1_vlan entered promiscuous mode
[  189.808271][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  189.817318][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  189.827981][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  189.837214][ T3597] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  189.861704][ T5700] device veth0_macvtap entered promiscuous mode
[  189.889282][ T3551] usb 2-1: Using ep0 maxpacket: 32
[  189.891199][ T5700] device veth1_macvtap entered promiscuous mode
[  189.943141][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.969099][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.978949][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.987105][ T5885] loop0: detected capacity change from 0 to 32768
[  190.009358][ T3551] usb 2-1: config index 0 descriptor too short (expected 26, got 18)
[  190.022147][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.027757][ T3551] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  190.045001][ T3551] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.055456][ T3551] usb 2-1: config 0 descriptor??
[  190.065739][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.077150][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.087166][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.098045][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.104267][ T3551] as10x_usb: device has been detected
[  190.110196][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.122623][ T3551] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  190.139768][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.152654][ T3551] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  190.164131][ T3551] as10x_usb: error during firmware upload part1
[  190.171310][ T3551] Registered device nBox DVB-T Dongle
[  190.171428][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  190.187758][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.199542][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_0
[  190.210573][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  190.211414][ T5885] XFS: attr2 mount option is deprecated.
[  190.218884][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  190.239263][ T5885] XFS: ikeep mount option is deprecated.
[  190.243774][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  190.260894][ T5885] XFS: noikeep mount option is deprecated.
[  190.271420][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  190.318992][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.368600][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.402720][ T5885] XFS (loop0): Mounting V5 Filesystem
[  190.419215][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.444852][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.467395][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.537796][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.596797][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.612967][ T5885] XFS (loop0): Ending clean mount
[  190.624947][ T5885] XFS (loop0): Quotacheck needed: Please wait.
[  190.671057][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.719339][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.752895][ T5885] XFS (loop0): Quotacheck: Done.
[  190.800913][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.811312][ T5700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  190.837989][ T5700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  190.861588][ T5700] batman_adv: batadv0: Interface activated: batadv_slave_1
[  190.864998][ T4750] XFS (loop0): Unmounting Filesystem
[  190.873370][ T5700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  190.885110][ T5700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  190.898460][ T5700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  190.907439][ T5700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  190.939604][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  190.948427][ T3549] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.163093][ T3617] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.187271][ T3617] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.220898][ T3545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  191.245342][ T3617] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.255637][ T3617] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.270408][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  191.346120][ T3551] usb 2-1: USB disconnect, device number 6
[  191.390122][ T5919] loop2: detected capacity change from 0 to 256
[  191.404289][ T3551] Unregistered device nBox DVB-T Dongle
[  191.417238][ T3551] as10x_usb: device has been disconnected
[  191.642644][   T26] audit: type=1326 audit(1719735330.460:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5918 comm="syz.2.447" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f85ace36b99 code=0x0
[  191.704897][ T5917] loop3: detected capacity change from 0 to 32768
[  191.706989][ T5894] ramfs: Bad value for 'mode'
[  191.759268][ T5917] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.494 (5917)
[  191.808901][ T5917] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  191.819645][ T5917] BTRFS warning (device loop3): the 'inode_cache' option is deprecated and has no effect since 5.11
[  191.883820][ T5917] BTRFS info (device loop3): max_inline at 0
[  191.893702][ T5917] BTRFS info (device loop3): using free space tree
[  191.901217][ T5917] BTRFS info (device loop3): has skinny extents
[  191.983984][ T5926] loop2: detected capacity change from 0 to 8192
[  192.101005][ T5926] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  192.117866][ T5926] REISERFS (device loop2): using ordered data mode
[  192.124832][ T5926] reiserfs: using flush barriers
[  192.140231][ T5926] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  192.157205][ T5926] REISERFS (device loop2): checking transaction log (loop2)
[  192.196455][ T5917] BTRFS info (device loop3): enabling ssd optimizations
[  192.200447][ T5926] REISERFS (device loop2): Using r5 hash to sort names
[  192.216719][ T5917] BTRFS info (device loop3): checking UUID tree
[  192.226125][ T5926] REISERFS (device loop2): using 3.5.x disk format
[  192.241735][ T5926] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  192.342616][ T3696] device hsr_slave_0 left promiscuous mode
[  192.356822][ T5917] overlayfs: missing 'lowerdir'
[  192.372387][ T3696] device hsr_slave_1 left promiscuous mode
[  192.391628][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  192.414584][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_0
[  192.452848][ T3696] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  192.484159][ T3696] batman_adv: batadv0: Removing interface: batadv_slave_1
[  192.512902][ T3696] device bridge_slave_1 left promiscuous mode
[  192.526737][ T3696] bridge0: port 2(bridge_slave_1) entered disabled state
[  192.581421][ T3696] device bridge_slave_0 left promiscuous mode
[  192.587699][ T3696] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.001981][ T3696] device veth1_macvtap left promiscuous mode
[  193.018122][ T3696] device veth0_macvtap left promiscuous mode
[  193.018568][ T5958] loop4: detected capacity change from 0 to 8192
[  193.032349][ T3696] device veth1_vlan left promiscuous mode
[  193.079794][ T5967] xt_CT: You must specify a L4 protocol and not use inversions on it
[  193.085645][ T3696] device veth0_vlan left promiscuous mode
[  193.109713][ T5958] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  193.129427][ T5958] REISERFS (device loop4): using ordered data mode
[  193.135981][ T5958] reiserfs: using flush barriers
[  193.172648][ T5958] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  193.299930][ T5958] REISERFS (device loop4): checking transaction log (loop4)
[  193.521476][ T5989] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  193.543823][ T5958] REISERFS (device loop4): Using tea hash to sort names
[  193.553185][ T5509] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  193.570362][ T5958] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  193.601553][ T5958] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  193.679933][   T26] audit: type=1800 audit(1719735332.500:45): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.507" name="file1" dev="sda1" ino=1998 res=0 errno=0
[  193.738041][ T5958] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[  193.794027][ T3696] team0 (unregistering): Port device team_slave_1 removed
[  193.809162][ T5509] usb 3-1: Using ep0 maxpacket: 8
[  193.818758][ T3696] team0 (unregistering): Port device team_slave_0 removed
[  193.836145][ T3696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  193.852969][ T3696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  193.957606][ T3696] bond0 (unregistering): Released all slaves
[  193.959310][ T5509] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.974146][ T3548] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  194.069431][ T5509] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  194.079208][ T5509] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  194.085342][ T5993] netlink: 8 bytes leftover after parsing attributes in process `syz.1.507'.
[  194.087673][ T5509] usb 3-1: SerialNumber: syz
[  194.119314][ T5997] netlink: 61211 bytes leftover after parsing attributes in process `syz.4.498'.
[  194.142043][ T5509] usb 3-1: bad CDC descriptors
[  194.220825][ T1385] ieee802154 phy0 wpan0: encryption failed: -22
[  194.227238][ T1385] ieee802154 phy1 wpan1: encryption failed: -22
[  194.234040][ T3548] usb 4-1: Using ep0 maxpacket: 32
[  194.341561][ T5999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.510'.
[  194.369304][ T3548] usb 4-1: config index 0 descriptor too short (expected 26, got 18)
[  194.378456][ T3548] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  194.432759][ T3548] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.462735][ T6004] loop0: detected capacity change from 0 to 256
[  194.479828][ T3548] usb 4-1: config 0 descriptor??
[  194.533076][ T6008] netlink: 100 bytes leftover after parsing attributes in process `syz.4.509'.
[  194.554250][ T3548] as10x_usb: device has been detected
[  194.560814][ T3548] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  194.595102][ T6004] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  194.672388][ T3548] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  194.698601][ T3548] as10x_usb: error during firmware upload part1
[  194.726355][ T3548] Registered device nBox DVB-T Dongle
[  194.743253][ T6008] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.758002][ T6008] bridge0: port 1(bridge_slave_0) entered disabled state
[  194.759325][ T3545] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  194.768149][ T6008] device bridge0 entered promiscuous mode
[  194.947087][ T3548] usb 4-1: USB disconnect, device number 9
[  194.986271][ T3548] Unregistered device nBox DVB-T Dongle
[  195.003970][ T3548] as10x_usb: device has been disconnected
[  195.029397][ T3545] usb 2-1: Using ep0 maxpacket: 32
[  195.050525][ T5995] ramfs: Bad value for 'mode'
[  195.057689][ T5236] usb 3-1: USB disconnect, device number 5
[  195.149473][ T3545] usb 2-1: config index 0 descriptor too short (expected 26, got 18)
[  195.167868][ T3545] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  195.189382][ T3545] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.210281][ T3545] usb 2-1: config 0 descriptor??
[  195.256816][ T3545] as10x_usb: device has been detected
[  195.277676][ T3545] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  195.325772][ T3545] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  195.357312][ T3545] as10x_usb: error during firmware upload part1
[  195.369748][ T3545] Registered device nBox DVB-T Dongle
[  195.860531][ T6028] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  195.903983][ T6030] netlink: 24 bytes leftover after parsing attributes in process `syz.0.519'.
[  196.159214][ T3545] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  196.257345][ T6044] loop2: detected capacity change from 0 to 2048
[  196.326986][ T6047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'.
[  196.396918][ T6044] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  196.447759][ T6044] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.472615][ T6049] loop0: detected capacity change from 0 to 1024
[  196.529443][ T3545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.548225][ T3545] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.611907][ T3545] usb 4-1: New USB device found, idVendor=0757, idProduct=0a00, bcdDevice= 0.00
[  196.631367][ T6049] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  196.647856][ T3545] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  196.711261][ T3545] usb 4-1: config 0 descriptor??
[  196.719737][   T23] usb 2-1: USB disconnect, device number 7
[  196.796064][   T23] Unregistered device nBox DVB-T Dongle
[  196.798215][ T6049] PKCS7: Unknown OID: [4] 5.25.49073.73.54.11555.88.10324.24.3339.184467440
[  196.835015][   T23] as10x_usb: device has been disconnected
[  196.877814][ T6049] PKCS7: Only support pkcs7_signedData type
[  197.145658][ T6007] ramfs: Bad value for 'mode'
[  197.181756][ T3545] nti 0003:0757:0A00.0005: unknown main item tag 0x0
[  197.208911][ T3545] nti 0003:0757:0A00.0005: unknown main item tag 0x0
[  197.217583][ T6064] loop0: detected capacity change from 0 to 256
[  197.224716][ T3545] nti 0003:0757:0A00.0005: unknown main item tag 0x0
[  197.240848][ T3545] nti 0003:0757:0A00.0005: unknown main item tag 0x0
[  197.268536][ T3545] nti 0003:0757:0A00.0005: unknown main item tag 0x0
[  197.280405][ T3545] nti 0003:0757:0A00.0005: hidraw0: USB HID v0.00 Device [HID 0757:0a00] on usb-dummy_hcd.3-1/input0
[  197.403840][ T3548] usb 4-1: USB disconnect, device number 10
[  197.692176][ T6078] netlink: 'syz.0.534': attribute type 1 has an invalid length.
[  197.857456][ T6061] loop2: detected capacity change from 0 to 32768
[  197.951605][ T6061] 
[  197.951605][ T6061]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  197.951605][ T6061] 
[  198.072904][ T6061] 
[  198.072904][ T6061]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  198.072904][ T6061] 
[  198.075067][ T6083] ialloc: diAlloc returned -5!
[  198.157411][ T6061] 
[  198.157411][ T6061]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  198.157411][ T6061] 
[  198.956814][   T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  199.213689][ T6103] loop1: detected capacity change from 0 to 2048
[  199.275129][ T5236] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  199.450463][ T5236] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  199.479382][   T23] usb 3-1: device descriptor read/64, error -71
[  199.812543][ T6103] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  199.982282][   T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  200.060872][ T6115] usb usb5: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  200.107873][ T5700] non-latin1 character 0x3ff found in JFS file name
[  200.155854][ T5700] mount with iocharset=utf8 to access
[  200.234218][ T5700] 
[  200.234218][ T5700]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  200.234218][ T5700] 
[  200.277528][ T5700] 
[  200.277528][ T5700]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  200.277528][ T5700] 
[  200.301409][ T5700] 
[  200.301409][ T5700]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  200.301409][ T5700] 
[  200.343333][ T5700] 
[  200.343333][ T5700]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  200.343333][ T5700] 
[  200.362167][ T6122] loop3: detected capacity change from 0 to 16
[  200.410260][ T6122] erofs: Unknown parameter 'ÿÿÿÿ'
[  200.418527][  T275] ================================================================================
[  200.436517][  T275] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_imap.c:886:2
[  200.453293][  T275] index -134217728 is out of range for type 'struct mutex[128]'
[  200.469749][  T275] CPU: 1 PID: 275 Comm: jfsCommit Not tainted 5.15.161-syzkaller #0
[  200.477813][  T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  200.487902][  T275] Call Trace:
[  200.491200][  T275]  <TASK>
[  200.494141][  T275]  dump_stack_lvl+0x1e3/0x2d0
[  200.498848][  T275]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  200.504500][  T275]  ? panic+0x860/0x860
[  200.508613][  T275]  __ubsan_handle_out_of_bounds+0x118/0x140
[  200.514541][  T275]  diFree+0x21bb/0x2fb0
[  200.518738][  T275]  ? invalidate_inode_page+0x370/0x370
[  200.524230][  T275]  ? diWrite+0x19b0/0x19b0
[  200.528672][  T275]  ? jfs_free_zero_link+0x46a/0x6e0
[  200.533900][  T275]  ? jfs_write_failed+0x190/0x190
[  200.538949][  T275]  ? bit_waitqueue+0x30/0x30
[  200.543563][  T275]  jfs_evict_inode+0x329/0x440
[  200.548350][  T275]  ? jfs_write_inode+0x210/0x210
[  200.553315][  T275]  evict+0x2a4/0x620
[  200.558111][  T275]  txUpdateMap+0x825/0x9e0
[  200.562565][  T275]  ? txCommit+0x6ba0/0x6ba0
[  200.567102][  T275]  jfs_lazycommit+0x470/0xc30
[  200.571814][  T275]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  200.577856][  T275]  ? lockdep_hardirqs_on+0x94/0x130
[  200.583193][  T275]  ? txFreelock+0x580/0x580
[  200.587724][  T275]  ? sched_dynamic_update+0x240/0x240
[  200.593132][  T275]  kthread+0x3f6/0x4f0
[  200.597223][  T275]  ? txFreelock+0x580/0x580
[  200.601765][  T275]  ? kthread_blkcg+0xd0/0xd0
[  200.606369][  T275]  ret_from_fork+0x1f/0x30
[  200.610818][  T275]  </TASK>
[  200.656108][  T275] ================================================================================
[  200.665719][  T275] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  200.672931][  T275] CPU: 0 PID: 275 Comm: jfsCommit Not tainted 5.15.161-syzkaller #0
[  200.680934][  T275] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  200.691011][  T275] Call Trace:
[  200.694307][  T275]  <TASK>
[  200.697259][  T275]  dump_stack_lvl+0x1e3/0x2d0
[  200.701968][  T275]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  200.707626][  T275]  ? panic+0x860/0x860
[  200.711740][  T275]  panic+0x318/0x860
[  200.715663][  T275]  ? check_panic_on_warn+0x1d/0xa0
[  200.720882][  T275]  ? fb_is_primary_device+0xd0/0xd0
[  200.726281][  T275]  ? dump_stack_lvl+0x24f/0x2d0
[  200.731164][  T275]  check_panic_on_warn+0x7e/0xa0
[  200.736149][  T275]  __ubsan_handle_out_of_bounds+0x138/0x140
[  200.742204][  T275]  diFree+0x21bb/0x2fb0
[  200.746486][  T275]  ? invalidate_inode_page+0x370/0x370
[  200.751982][  T275]  ? diWrite+0x19b0/0x19b0
[  200.756426][  T275]  ? jfs_free_zero_link+0x46a/0x6e0
[  200.761808][  T275]  ? jfs_write_failed+0x190/0x190
[  200.767092][  T275]  ? bit_waitqueue+0x30/0x30
[  200.771808][  T275]  jfs_evict_inode+0x329/0x440
[  200.776605][  T275]  ? jfs_write_inode+0x210/0x210
[  200.781578][  T275]  evict+0x2a4/0x620
[  200.785511][  T275]  txUpdateMap+0x825/0x9e0
[  200.789971][  T275]  ? txCommit+0x6ba0/0x6ba0
[  200.794509][  T275]  jfs_lazycommit+0x470/0xc30
[  200.799215][  T275]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  200.805139][  T275]  ? lockdep_hardirqs_on+0x94/0x130
[  200.810364][  T275]  ? txFreelock+0x580/0x580
[  200.814887][  T275]  ? sched_dynamic_update+0x240/0x240
[  200.820300][  T275]  kthread+0x3f6/0x4f0
[  200.824383][  T275]  ? txFreelock+0x580/0x580
[  200.828900][  T275]  ? kthread_blkcg+0xd0/0xd0
[  200.833506][  T275]  ret_from_fork+0x1f/0x30
[  200.837953][  T275]  </TASK>
[  200.841312][  T275] Kernel Offset: disabled
[  200.853771][  T275] Rebooting in 86400 seconds..