last executing test programs:

23.08551154s ago: executing program 2 (id=528):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0)

22.930666063s ago: executing program 2 (id=530):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x78)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
sendto$inet(r1, &(0x7f0000000400)="a7", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001d40)={0x0, 0x0, 0x806}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002b80)={0x0, 0x3, 0x805}, 0x8)

22.761546147s ago: executing program 2 (id=533):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65a}, {@broadcast}, {@empty}, {@multicast1}, {@multicast2}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x4}}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@empty, 0x5291}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev={0xac, 0x14, 0x14, 0x32}, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

21.470108704s ago: executing program 2 (id=538):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x54f6, &(0x7f0000005800)="$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")
ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x161040, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r5, &(0x7f00000000c0)='./bus\x00', 0x0)

19.403576113s ago: executing program 2 (id=544):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000240)=ANY=[], 0x78)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
sendto$inet(r1, &(0x7f0000000400)="a7", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001d40)={0x0, 0x0, 0x806}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002b80)={0x0, 0x3, 0x805}, 0x8)

18.625774077s ago: executing program 1 (id=546):
r0 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
close(r0)
r1 = inotify_init1(0x0)
fcntl$setstatus(r0, 0x4, 0x2c00)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0xb)
r3 = gettid()
fcntl$setown(r0, 0x8, r3)
fcntl$setsig(r1, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(r1, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

18.285441435s ago: executing program 1 (id=548):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000680)={{r1}, &(0x7f0000000600), &(0x7f0000000640)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r2, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10)
sendto$inet(r2, &(0x7f0000000040)='\x00', 0x1, 0xc840, 0x0, 0x0)
close(r2)

18.11046851s ago: executing program 2 (id=549):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x34, 0x4, 0x0, 0x0, 0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x0, 0x0, 0x5, 0x4]}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65a}, {@broadcast}, {@empty}, {@multicast1}, {@multicast2}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev={0xac, 0x14, 0x14, 0x4}}, {@remote}, {@multicast2}, {@private=0xa010101}, {}, {@empty, 0x5291}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x17, 0x0, [@dev={0xac, 0x14, 0x14, 0x32}, @remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

17.49819132s ago: executing program 1 (id=552):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0)

16.711750655s ago: executing program 1 (id=554):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x54f6, &(0x7f0000005800)="$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")
ioctl$SNDRV_PCM_IOCTL_HW_FREE(0xffffffffffffffff, 0x4112, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
symlinkat(0x0, 0xffffffffffffffff, 0x0)
openat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x161040, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x4}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r3}, &(0x7f0000000800), &(0x7f0000000840)=r4}, 0x20)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
fchmodat(r5, &(0x7f00000000c0)='./bus\x00', 0x0)

13.794370165s ago: executing program 1 (id=563):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0)

10.222352889s ago: executing program 1 (id=571):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x3, 0x4, 0x20, r1, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x1, 0xa}, 0x48)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x405c5503, &(0x7f0000001300)={{0x2, 0x6, 0x0, 0x4}, 'syz1\x00', 0x2a})
mkdir(0x0, 0x41)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x19, 0xf, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, [@call={0x85, 0x0, 0x0, 0x38}, @btf_id={0x18, 0xa, 0x3, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x5, 0xd, 0x6, 0x80000000}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f0000000580)=[0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1], &(0x7f00000005c0)=[{0x3, 0x5, 0xe, 0xc}, {0x5, 0x3, 0x3, 0xb}, {0x0, 0x5, 0x7, 0x9}, {0x5, 0x4, 0x2, 0x9}, {0x5, 0x4, 0x8, 0x4}], 0x10, 0x8}, 0x90)
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(0xffffffffffffffff)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x121a8a1, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0)
futimesat(r4, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, r3}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)

4.806489805s ago: executing program 3 (id=589):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$eJzs3U9sHNUZAPA3a6/txCZeAwUDJaTQikDBDkmkprcgUI+IS++gkNAIQ1FDD0T8MT0gKiGKhDhVHKi4UCqlSK0EqlShntqeWvXWE+qFSlUqBfVSpMRV7PfWu8+e7npsz9q7v5/07ds3b3a+b7yRMzOefRuAkdVYfTx5cr4I4d1P33n05aeK315fdld7jSOrj0XstUIIzY5+kW3v87jg6pWXzmzWFuH46mPqh8cut187HUJYDkfCZ6EVPlpc+vLD9x45+vHrU7e8dfGZV3Zp99vy/QAAgGF06c9Lf7/vn396YO6rS4dPh8n28nR83or96XjcfyweKKfj5Ubo7hcd0WkiW28sRiNbbyxbbzzLM16Sr5ltp1my3kSPfGMdyzbbTwAAANiP0nltKxSNha5+o7GwsHbef93nsxPFwnPnl85dGFChAAAAQGX/eXX1plshhBBCCCGEEEIMcazMDvoKBAAAADBq8vnCNlje2Zm62ltr9Zf/8sONzV8PO6Duf//y76/8H7zmNw4AANUN69Fk2q90HJ3mMcjnERzLXrfV4/9Gtp3xLdZZNq/gfplvsKzO/Oe6V5XVv9X3cVDK6s/nw9yryurP5+ncq8rqn6y5jqrK6p+quY6qyuo/UHMdVZXVf7DmOqoqq3+65jqqKqt/puY6qiqr/4aa66iqrP5DNddRVVn9++W22rL6WzXXUVVZ/XM111FVWf031lxHVWX131RzHVWV1X9zzXUMyp2xTT+Hw9l45/lzfk63X87xAAAAYNT91/x/QgghhBBCCCHE0Merg74AAQAAAAxc+lxA+tT7SpTGx3qMj/cYb/YYn+gxPtljHAAAAAjhd2+cu+3tYv1z/tudDy/NG5XmX9rqPEb5fIRbzb/dec+2m3+/zFsGAADAaCm+99m1+x99/4W5ry4dPt1x9nstnu+meUDH47WBT2I/3Rcwk/WLdA59ujtPo2S9/PrADWXbe3ybOwoAAAAjLJ2/t0LRWOg4726FRmNhYf18fD40i3Pnl84ei/30/Sx/nG1OXl/+UM11AwAAAP1bP9/f/Pw/fY/vfJgoFp47v3Tuwlp/pr282ei8LjC7vrzovC7QypYfL1l+IvbT93f+YPbA6vKFMz9cemqndx4AAABGxIUXLz7z5NLS2R954oknnrSfDPo3EwAAsNO++OKd5o9PzPx+7fP/6/Pfpc//H4n9Vpzb7y9xhXSfQPocwIbP6z/RnWe2bL3nu9drZeuNxZjM6p7q2E7omG8wvW6uLF+rezsTJfmms3wzWb58noLxbP2U71C2PJ+fMK03my3P52Ecz3IUWf67AwAAAJRbfOHZ5xcvvHjxwfPPPvn02afPPnfi+Knvnjp17KHvPLS4el//Yufd/QAAAMB+tH7T76ArAQAAAAAAAAAAAAAAAAAAgNFVx9eJDXofAQAAYNT9+9UQwrIQoiTWvgJz8HUIIYQQQvSOsT1QgxBiz8bKSv5N8wAAAAC76+qVl850thssFzuar7211lpzLeZN7cyDf5u7Hmm1yw93Xy85uKPVMOrq/vcv//7K/8FrO5t/Kj3p+/dfo3sDp6vlvXfxl/Od+W8f7zN/vv+PV8t/NMt/b+gv/8r7Wf4nquW/L8t/sM/8G/b/+Wr574/552P/6D395u9+/ydjm/bjQJ/5v53t/1Oh3/zZ/rf6TJh5IOYHgFHUGHQBuyQdJaTj6OnYT/sbDzdDfvfDVo//G9l2xrddefd203HQrbGfjpdmsrzJVuufzrZ3Q8U6c/vlrpKy+nfqfdxtZfU3a66jqrL6J2quo6qy+idrrqOqsvqnaq6jqrL6+z0PHbSy+vfLdeWy+qdrrqOqsvpnaq6jqrL6t/r/+KCU1X+o5jqqKqt/tuY6qiqrv+JltdqV1T9Xcx1VldV/Y811VFVW/00111FVWf0311zHoNwR27Lz4XT+ORvHUr+V9Sc3+VkO67UFAAAA2G/+Zf4/IYQQQgghhBBi6GNlZdBXIBik3f00MwB7ld//o837P9q8/6PN+8//k+7hL7J+MtZjfLzHeLPH+EQ2nv97newxflO23ZUojd/cY/xrPcYP9Ri/tcf4fI/x23qM395j/I4e4wAAAIyGW2Lr/BAAAACG18u/+uTN39z7xJW5ry4dPh0mNsw7fyz2J+Pf1t+I/Xze+6QZ/+b/k9j/RWz/ENt/ZOu7/wQAAAB2X/qeGH//BwAAgOGVvqfU+T8AAAAMr7nYOv8HAACA4XVjbJ3/AwAAwBArpjZfHNt0XeDu2PY7rx8AsPd9PbZ3xvZwbO+K7Tdim44D7ontN2uqDwDYOT///k9PvV2sz/d/Ihu/GpendoPltSsFRaN7Jv8DsT0Y22/1WU/+fQD95k8O9Zlnt/LPbjM/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA8GquPJ0/OFyG8++k7j/5s4s2/Xl92V3uNI6uPRey1QgjN9uvS6Hr/13HFq1deOtPZXottEY6HIhTt5eGxy+1M0yGE5XAkfBZa4aPFpS8/fO+Rox+/PnXLWxefeWUXfwRd+wcAAADD6H8BAAD//8WNHkw=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(0x0, r1, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r3 = io_uring_setup(0x18cc, &(0x7f0000000200))
r4 = socket(0x1e, 0x1, 0x0)
connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x2000011a)
recvmmsg(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1}}, {{0x0, 0x0, &(0x7f0000001700)}}], 0x2, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
get_robust_list(r2, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, 0x0)

3.418056739s ago: executing program 0 (id=594):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000940)="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", 0xfe, 0x2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@noprefix}, {@subsystem='cpuacct'}]})
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x11)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r2}, 0x10)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYBLOB="b571803b91f3b46ad87af8792a13d13e333f28b70db0dadf241a96d8cfeae0bf640402541a323e81505eb684decb6afb2ec5c574f7cd2e21c4271acccdf803b69041203a55f022ae3df17186c3f293ea917f2f2b68fab21f6e0a37cc0fa12aa37b654a3ee34c21cb2fb876db5e18af95b0e73eb362058942530f0753b6d60a15c80745ac4c8001d88647ad6e93de373f6fc5aaa7f3866bc27ab71117215aa2cf423cc7dec116d90f89f0dd83d9394d21447f97d7aa3ce444bc341dc74e5caaf14c37c832f801c10ba3aa2d8d40b33336a1283101fdfe071fd467a49ffa78dd36", @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fc7000/0x2000)=nil, 0xfffffffffffff000, &(0x7f0000000840)='\x00XL\xc9\xe9+%\xf6\x83\x92D\xeb\xc4\xf6x\x86&q\f\x05\xf2N\x91\xf6\xa0\x8c\x06\xe3\xa7*\xcc\x1e\x96\x1e\x00\x00\x00 A\xe3\x0f<\x02\xe9>\xf2\xcb\xf1\x00\x00C4\x94\x01\x1a\xc9\"\xf6\x8aK\xc7]\xc9v#$*\x0f\xe2\x93\x84\xfa\x0f\x0e\x1c\xd4\x90\xc7\x1a_07\x85N\veX\xd7\r\xac\x1b\xeb&\x85\xef>\xe5\xd0Y\v\xd9\xcf\x19\x1c\xc2\x7f,\xb0\x98\xceR\xe7c^\xbd\xa7\xf8XjV\xe98\xd3[2\xfa?&:.\xd31\xf1\xdahg\x01\x01L\xb4\x84z\xf1\xfb\xaa8\x11\xc2\x00\x00\xcf<\xad*\x9f\xe8\r;\xf4Ak/Qn\xe7\xc5\x1dm\x8c\x1a\rV\xff\x1dy$\xc5\x1a\xe1\x9eP\x95\xcc@>a*$&<\x1d\xde\xde\xc3\xb5\x12\x88\x00JG{\x9aH\x96\xfd\x87\x9c)\xd7\x15_\v\xc3e\xc8r\b,A`\x1f~\xc5\x16S\x1a3|g\x8bCU\xd2!\x8c\xd6\x87\xc4\xa0\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xea\x8c\xab\x96\x9co\xf2\x04\xe1\xad\xfd\xb0\x14\xc4\xa1\xf6h \x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xaf%\xe2+\xde\xe3\x8d<\x00\x00\x16\x8f\xe5\xf3\xca\n\xfc\x8cZ\x1e\xb1=x\xdf\x1c\xb5\xda\xb0\x034\xee.\xd3\x04\xd4\xe8\xa5b[\t\x91\xb9AV;h\v@\x902\xc1\xb8R\xfar)cBCn\xeb*\'\x7f2\x81\xeb\xd7\t\xbe\xb8;\xa7\xb1{\x8c)\x87\\i\xd6\x03\x9e\xfc\xd4I\xc4\x14\xe2\xa0\xe2\x1f\x12\x1bPH\xbb$\xfa\x81\xc5\xfaE/\xd3\x8d\x89`\xe0\x1c\x19\xe4\xa4T\x9a\xa3o\x9b\xb0\x10l\xe2\xe3\xf2\x86/\xa6\xf8,\x1c\x16\x85\x84\xd8F[\xd2$w3\x0f\xdbqR\xa8\xdf(\xfb1\x86\xb2\xcd\xb2\xcd\xa6&Gr\xc0\x98\xcb\xb7\xdf\xcd\v\xb61\xcc\xd6Dou=\xadF\xb7\xbfR\xcd\xf3S\xba\xa3\xe7\x8f\xad\x02\xf9\xfd\x9b\xf7RE\xe3\x0e\xeb\xbf\x1cr\xb1\xfb\x9f)\x890\xb8c\b\xeb\xd2Q\xea\x80\xa7K\x03\x9f}\xb4\xe8\xb7J\xed\x8d\x03NwT\xab\xd6\xe7\xc3\xca\x96p\xa5\x14\xa7\xdb\xa7$\xe4\x1c^tk\xaaq\xb1\xfd\x14\xfe*u\\w \x0e\xf9\xee\x8eDd\x9d=\xfc\n\x8da\xa9\x15\xde\x8a\xe0.7g<R\x89y*\xb8E\xab\a\x96l\xe1\x99`\xc8#\xb8\x8d\xda\xd90?\x8b\xecF\xf4N\xda\x82\x03\xdf\xa2\xec>xvc\xcd\x97')
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04"], 0x7)
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="04ff9a1b8e23930d0fe8348ffcef75bce7d9b48f6d960923cbf7a8c346b56201706e851dbb837a90da63a1a184eeadf19bbfc7e957c4b853377c27165423ff120df0a404e9ab76c7e0231ec9cc70dcb0179d4b69ba5c9c4f9fd6800966419f3f4a5ce2a688f5071b561bfc99bddc971e072ecaaa12333291f2bdb49c35059d907ce91abc39c6003f6e98cf3252d2858165ae3b67a8f3dc9339a67068801c85cc7a9467ccc15c0184f9dd3c5e9a79557de090e6b802a8f6ef793559296443e9390c638572de513228d22ba7d5b75ea0f616a8260c35248b713832df84a92289b88cfa03fcde"], 0x9d)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6"], 0x22)
socket$packet(0x11, 0x3, 0x300)
socket$netlink(0x10, 0x3, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
unshare(0x680)
chdir(0x0)
futex(&(0x7f0000000600), 0x5, 0x0, 0x0, &(0x7f0000000300)=0x1, 0x2000001)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)

3.341297515s ago: executing program 4 (id=595):
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000340), 0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448cb, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000380)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000180)={r1})
socket$alg(0x26, 0x5, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f00000004c0)={<r2=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, &(0x7f0000000080)={r2, 0x3, 0xffffffffffffffff, 0x5})
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x56, @empty}, 0x1c)

3.340755775s ago: executing program 3 (id=596):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xca}, @l2cap_cid_signaling={{0xc6}, [@l2cap_conf_req={{0x4, 0x35, 0x1e}, {0x5, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x4, 0x0, 0x3f, 0x800}}, @l2cap_conf_mtu={0x1, 0x2, 0x19e8}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_conf_req={{0x4, 0x20, 0x30}, {0x9, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0xb5, 0x8, 0x5, 0xfffa}}, @l2cap_conf_efs={0x6, 0x10, {0xfc, 0x2, 0x8d7, 0x81, 0x3, 0xe348}}, @l2cap_conf_flushto={0x2, 0x2, 0xff}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3, 0x0, 0x6, 0x1, 0x800}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x2}}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x1ff, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x6, 0x7, 0x3, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x0, 0x9, 0x8000, 0xfff9}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0x3, 0x5}}, @l2cap_conf_req={{0x4, 0x39, 0x30}, {0x401, 0x4, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0x8, 0x7f, 0x49c, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x0, 0x8439, 0x1, 0x4, 0x7fff}}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0x80, 0x4}, {0x5, 0x6}}]}}, 0xcf)
r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00')
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$FIONREAD(r2, 0x541b, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000040)=<r4=>0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x3}, 0x0, 0x0)
ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000))
fchdir(0xffffffffffffffff)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000000000000000000000000000000000005100008008000000e00000012d00daef8c50255300008b3aa15b4c0b7f6c0a33ca71611b3a3cdaeea9ac742b33a2feeb8ae65780966931197738b42fc2548a000000c22d06aa76fb04769234a2e944a2a68b677be814380000005e7cc81bb676d98fe8cb187d19926966cf85c7c35f227e9f7d4123a0c37367e9dc3760b4a211d3885f9169b3032ef9e6097658cd74fc71d8186dbae1d1a21218a91036b358a9852798f3bb38e7d35577655e6b42c1af17ea74c5948807233f4cad884507c31db7ca07adb4254951bbf2269601eaf79275d9638d53d546ae54dc6ce6aec12de87ddc038b37"], 0x68}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20008001)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x44000)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

2.619691175s ago: executing program 0 (id=597):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0xfffffffe, 0xfffffff7, 0x17, 0x811, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3, 0xc}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001f00)={{r2}, &(0x7f0000001e80), &(0x7f0000001ec0)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040), 0x4)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000006b40)=[{{0x0, 0x0, &(0x7f0000006a40)=[{0x0}, {0x0}, {0x0}], 0x3}}], 0x1, 0x8000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a40)=ANY=[@ANYBLOB="40020000100013072dbd700000000000fc010000000000000000000000000001e000000200000000000000000000000000000000000000000a0000002e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x240}}, 0x0)

2.367853005s ago: executing program 4 (id=598):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x1, 0x803, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @loopback}]}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x803, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0)

2.277434723s ago: executing program 3 (id=599):
r0 = socket$inet6(0xa, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r3}]}}}]}, 0x38}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @local, @local}}}], 0x20}}], 0x1, 0x0)

1.496925877s ago: executing program 0 (id=600):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8", &(0x7f0000000380), 0x9, r0}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
readlinkat(0xffffffffffffffff, &(0x7f0000000200)='./file0\x00', &(0x7f00000013c0)=""/4089, 0xff9)

1.469263179s ago: executing program 0 (id=601):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4)
sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x3}, 0x80, &(0x7f0000000080)=[{&(0x7f00000006c0)="270327003c0f00000000002f1eafbcf706e10500000088f7ffff1104ee162bd4b8bf4a82f6184b8a34f90186cee8440000000000000000190000", 0x3a}, {&(0x7f0000000180)="63f805d7069496db72959832930469edc7b700c9e37eed5653ecb716cdb8981cd819af0b33254465cc904b7b31789d65c0e0d33330e2ef36205dd154e363bcadf8f2ea93f45503c6d9fd8dfe5a638cfeb9f79c930a4d18260e5a08ffd35ed8371cff78119319b2b62c7cd9378c73ae90c801681f55ef26cb00"/135, 0x87}, {&(0x7f0000001400)="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", 0x1f1}, {&(0x7f0000000700)="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", 0xc96}], 0x4}, 0x0)

1.348412439s ago: executing program 0 (id=602):
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
r1 = accept4(r0, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, 0x0, 0x78)
setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8)
sendto$inet(r1, &(0x7f0000000400)="a7", 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000001d40)={0x0, 0x0, 0x806}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000002b80)={0x0, 0x3, 0x805}, 0x8)

1.289144154s ago: executing program 4 (id=603):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x0, 0x0, 0x2}]})
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, r2}, 0x10)

1.229051539s ago: executing program 4 (id=604):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff)
bind$tipc(0xffffffffffffffff, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x3}}, 0x10)
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x3210052, &(0x7f0000000840)={[{}, {@nodiscard}, {@norecovery}, {@order_strict}, {@nobarrier}, {@order_strict}, {@nodiscard}, {@order_relaxed}], [], 0x2c}, 0x3, 0xebd, &(0x7f0000004540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
newfstatat(0xffffffffffffff9c, &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x0)
setresuid(0x0, r1, 0x0)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_setup(0x0, &(0x7f0000000000), &(0x7f0000000080), 0x0)
r3 = io_uring_setup(0x18cc, &(0x7f0000000200))
r4 = socket(0x1e, 0x1, 0x0)
connect$tipc(r4, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
write$binfmt_misc(r4, &(0x7f0000000080)=ANY=[], 0x2000011a)
recvmmsg(r4, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/175, 0xaf}], 0x1}}, {{0x0, 0x0, &(0x7f0000001700)}}], 0x2, 0x0, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
get_robust_list(r2, 0x0, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086e81, 0x0)

1.22165291s ago: executing program 0 (id=605):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mkdir(&(0x7f0000002200)='./file0\x00', 0x0)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendto$inet6(r0, &(0x7f0000000940)="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", 0xfe, 0x2, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={[{@noprefix}, {@subsystem='cpuacct'}]})
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="05c9"], 0x11)
r1 = getpid()
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000240)='xdp_exception\x00', r2}, 0x10)
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0xd, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000f2ffffff000000850000006100000018110000", @ANYBLOB="b571803b91f3b46ad87af8792a13d13e333f28b70db0dadf241a96d8cfeae0bf640402541a323e81505eb684decb6afb2ec5c574f7cd2e21c4271acccdf803b69041203a55f022ae3df17186c3f293ea917f2f2b68fab21f6e0a37cc0fa12aa37b654a3ee34c21cb2fb876db5e18af95b0e73eb362058942530f0753b6d60a15c80745ac4c8001d88647ad6e93de373f6fc5aaa7f3866bc27ab71117215aa2cf423cc7dec116d90f89f0dd83d9394d21447f97d7aa3ce444bc341dc74e5caaf14c37c832f801c10ba3aa2d8d40b33336a1283101fdfe071fd467a49ffa78dd36", @ANYRES32=r3], &(0x7f0000000080)='GPL\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90)
r4 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x200007b, 0x4)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000fc7000/0x2000)=nil, 0xfffffffffffff000, &(0x7f0000000840)='\x00XL\xc9\xe9+%\xf6\x83\x92D\xeb\xc4\xf6x\x86&q\f\x05\xf2N\x91\xf6\xa0\x8c\x06\xe3\xa7*\xcc\x1e\x96\x1e\x00\x00\x00 A\xe3\x0f<\x02\xe9>\xf2\xcb\xf1\x00\x00C4\x94\x01\x1a\xc9\"\xf6\x8aK\xc7]\xc9v#$*\x0f\xe2\x93\x84\xfa\x0f\x0e\x1c\xd4\x90\xc7\x1a_07\x85N\veX\xd7\r\xac\x1b\xeb&\x85\xef>\xe5\xd0Y\v\xd9\xcf\x19\x1c\xc2\x7f,\xb0\x98\xceR\xe7c^\xbd\xa7\xf8XjV\xe98\xd3[2\xfa?&:.\xd31\xf1\xdahg\x01\x01L\xb4\x84z\xf1\xfb\xaa8\x11\xc2\x00\x00\xcf<\xad*\x9f\xe8\r;\xf4Ak/Qn\xe7\xc5\x1dm\x8c\x1a\rV\xff\x1dy$\xc5\x1a\xe1\x9eP\x95\xcc@>a*$&<\x1d\xde\xde\xc3\xb5\x12\x88\x00JG{\x9aH\x96\xfd\x87\x9c)\xd7\x15_\v\xc3e\xc8r\b,A`\x1f~\xc5\x16S\x1a3|g\x8bCU\xd2!\x8c\xd6\x87\xc4\xa0\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x00\xea\x8c\xab\x96\x9co\xf2\x04\xe1\xad\xfd\xb0\x14\xc4\xa1\xf6h \x00\x00\x00\x00\x00\x00\x00\x00\x00\x04\x00\x00\x00\x00\x00\x00\x00\x00\xb2\xaf%\xe2+\xde\xe3\x8d<\x00\x00\x16\x8f\xe5\xf3\xca\n\xfc\x8cZ\x1e\xb1=x\xdf\x1c\xb5\xda\xb0\x034\xee.\xd3\x04\xd4\xe8\xa5b[\t\x91\xb9AV;h\v@\x902\xc1\xb8R\xfar)cBCn\xeb*\'\x7f2\x81\xeb\xd7\t\xbe\xb8;\xa7\xb1{\x8c)\x87\\i\xd6\x03\x9e\xfc\xd4I\xc4\x14\xe2\xa0\xe2\x1f\x12\x1bPH\xbb$\xfa\x81\xc5\xfaE/\xd3\x8d\x89`\xe0\x1c\x19\xe4\xa4T\x9a\xa3o\x9b\xb0\x10l\xe2\xe3\xf2\x86/\xa6\xf8,\x1c\x16\x85\x84\xd8F[\xd2$w3\x0f\xdbqR\xa8\xdf(\xfb1\x86\xb2\xcd\xb2\xcd\xa6&Gr\xc0\x98\xcb\xb7\xdf\xcd\v\xb61\xcc\xd6Dou=\xadF\xb7\xbfR\xcd\xf3S\xba\xa3\xe7\x8f\xad\x02\xf9\xfd\x9b\xf7RE\xe3\x0e\xeb\xbf\x1cr\xb1\xfb\x9f)\x890\xb8c\b\xeb\xd2Q\xea\x80\xa7K\x03\x9f}\xb4\xe8\xb7J\xed\x8d\x03NwT\xab\xd6\xe7\xc3\xca\x96p\xa5\x14\xa7\xdb\xa7$\xe4\x1c^tk\xaaq\xb1\xfd\x14\xfe*u\\w \x0e\xf9\xee\x8eDd\x9d=\xfc\n\x8da\xa9\x15\xde\x8a\xe0.7g<R\x89y*\xb8E\xab\a\x96l\xe1\x99`\xc8#\xb8\x8d\xda\xd90?\x8b\xecF\xf4N\xda\x82\x03\xdf\xa2\xec>xvc\xcd\x97')
ioctl$VHOST_RESET_OWNER(0xffffffffffffffff, 0xaf02, 0x0)
syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e04"], 0x7)
syz_emit_vhci(&(0x7f0000000600)=ANY=[@ANYBLOB="04ff9a1b8e23930d0fe8348ffcef75bce7d9b48f6d960923cbf7a8c346b56201706e851dbb837a90da63a1a184eeadf19bbfc7e957c4b853377c27165423ff120df0a404e9ab76c7e0231ec9cc70dcb0179d4b69ba5c9c4f9fd6800966419f3f4a5ce2a688f5071b561bfc99bddc971e072ecaaa12333291f2bdb49c35059d907ce91abc39c6003f6e98cf3252d2858165ae3b67a8f3dc9339a67068801c85cc7a9467ccc15c0184f9dd3c5e9a79557de090e6b802a8f6ef793559296443e9390c638572de513228d22ba7d5b75ea0f616a8260c35248b713832df84a92289b88cfa03fcde"], 0x9d)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a0000050000000000fc00ff00d87a970000100010000037ab7d818c7880beaf95677040357bab7d7a05c1bb0aa6aebef67ce4b0c51100f43ed1ed9f97ec6a859d46f82853825b67c84a908adca22e7266dfd4f239a3abbb98f982f6e8d4d652b4cc9d5fdab730c023e7cf262d889069e79c3ea45584d799dfdd019bf9611c91a31edc45c2f064bf78d886991b3c7941edf04673356b94520592b962a1dab9fa4c3c9d49d87496c1ce44b6"], 0x22)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0x9, &(0x7f0000000000)=0x8, 0x4)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
unshare(0x680)
chdir(0x0)
futex(&(0x7f0000000600), 0x5, 0x0, 0x0, &(0x7f0000000300)=0x1, 0x2000001)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0x0}, 0x90)

1.09887413s ago: executing program 3 (id=606):
fanotify_mark(0xffffffffffffffff, 0x101, 0x0, 0xffffffffffffffff, 0x0)

969.26514ms ago: executing program 3 (id=607):
socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_emit_ethernet(0x5e, &(0x7f0000000000)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x28, 0x3a, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @local, {[], @ndisc_redir={0xa1, 0x0, 0x0, '\x00', @private2, @private0}}}}}}, 0x0)
syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xca}, @l2cap_cid_signaling={{0xc6}, [@l2cap_conf_req={{0x4, 0x35, 0x1e}, {0x5, 0x0, [@l2cap_conf_mtu={0x1, 0x2, 0x40}, @l2cap_conf_fcs={0x5, 0x1}, @l2cap_conf_rfc={0x4, 0x9, {0x3, 0x0, 0x4, 0x0, 0x3f, 0x800}}, @l2cap_conf_mtu={0x1, 0x2, 0x19e8}, @l2cap_conf_mtu={0x1, 0x2}]}}, @l2cap_conf_req={{0x4, 0x20, 0x30}, {0x9, 0x7, [@l2cap_conf_rfc={0x4, 0x9, {0x2, 0x6, 0xb5, 0x8, 0x5, 0xfffa}}, @l2cap_conf_efs={0x6, 0x10, {0xfc, 0x2, 0x8d7, 0x81, 0x3, 0xe348}}, @l2cap_conf_flushto={0x2, 0x2, 0xff}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x3, 0x0, 0x6, 0x1, 0x800}}]}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x4, 0x2}, {0x7}}, @l2cap_move_chan_cfm_rsp={{0x11, 0x3, 0x2}, {0x2}}, @l2cap_disconn_req={{0x6, 0x40, 0x4}, {0x1ff, 0x4}}, @l2cap_create_chan_rsp={{0xd, 0x7, 0x8}, {0x6, 0x7, 0x3, 0x7ff}}, @l2cap_create_chan_rsp={{0xd, 0x0, 0x8}, {0x8, 0x0, 0x8000, 0xfff9}}, @l2cap_conn_req={{0x2, 0x80, 0x4}, {0x3, 0x5}}, @l2cap_conf_req={{0x4, 0x39, 0x30}, {0x401, 0x4, [@l2cap_conf_ews={0x7, 0x2, 0x6}, @l2cap_conf_rfc={0x4, 0x9, {0x0, 0x81, 0x8, 0x7f, 0x49c, 0x6}}, @l2cap_conf_mtu={0x1, 0x2, 0x7}, @l2cap_conf_efs={0x6, 0x10, {0x81, 0x0, 0x8439, 0x1, 0x4, 0x7fff}}, @l2cap_conf_ews={0x7, 0x2, 0x8}, @l2cap_conf_fcs={0x5, 0x1}]}}, @l2cap_move_chan_rsp={{0xf, 0x80, 0x4}, {0x5, 0x6}}]}}, 0xcf)
r0 = syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='wchan\x00')
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x10, r1, 0x0)
r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$FIONREAD(r2, 0x541b, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r3 = syz_open_dev$media(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r3, 0x80047c05, &(0x7f0000000040)=<r4=>0xffffffffffffffff)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x42, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x2, 0xffffffffffffffff}, 0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x7fffffffffffffff, 0x0, 0x3}, 0x0, 0x0)
ioctl$MEDIA_REQUEST_IOC_REINIT(r4, 0x7c81, 0x0)
ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f0000000000))
fchdir(0xffffffffffffffff)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000017c0)={0x0, 0x0, &(0x7f0000001780)={&(0x7f0000000400)=ANY=[@ANYBLOB="68000000000000000000000000000000000000005100008008000000e00000012d00daef8c50255300008b3aa15b4c0b7f6c0a33ca71611b3a3cdaeea9ac742b33a2feeb8ae65780966931197738b42fc2548a000000c22d06aa76fb04769234a2e944a2a68b677be814380000005e7cc81bb676d98fe8cb187d19926966cf85c7c35f227e9f7d4123a0c37367e9dc3760b4a211d3885f9169b3032ef9e6097658cd74fc71d8186dbae1d1a21218a91036b358a9852798f3bb38e7d35577655e6b42c1af17ea74c5948807233f4cad884507c31db7ca07adb4254951bbf2269601eaf79275d9638d53d546ae54dc6ce6aec12de87ddc038b37"], 0x68}, 0x1, 0x0, 0x0, 0x2400c8c1}, 0x20008001)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r5, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x44000)
r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)

244.92009ms ago: executing program 4 (id=608):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00'})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_emit_ethernet(0xe6, &(0x7f0000000340)={@broadcast, @empty, @val={@void}, {@ipv4={0x800, @tcp={{0x30, 0x4, 0x0, 0x0, 0xd4, 0x0, 0x0, 0x0, 0x6, 0x0, @loopback, @multicast2, {[@rr={0x7, 0x1b, 0x0, [@rand_addr, @loopback, @rand_addr, @remote, @multicast2, @private]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@multicast1}, {@private}, {@multicast2}, {@private}]}, @cipso={0x86, 0xb, 0x0, [{0x0, 0x5, "e36897"}]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xb, 0x0, [@loopback, @private]}, @timestamp_addr={0x44, 0x2c, 0x0, 0x1, 0x0, [{@remote}, {@loopback}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {@local}, {@remote, 0xfffff9cc}]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@empty}, {@remote}, {@empty}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0)

93.548853ms ago: executing program 3 (id=609):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
r1 = socket$caif_stream(0x25, 0x1, 0x0)
recvmmsg(r1, &(0x7f0000000f40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40010102, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f000025e000/0x3000)=nil, 0x3000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
socket$phonet(0x23, 0x2, 0x1)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
setreuid(0x0, 0xee01)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)

0s ago: executing program 4 (id=610):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x0, @private2, @local, {[], "223427d5c9a46b9f"}}}}}, 0x0)

kernel console output (not intermixed with test programs):

T ver 1.22
[   61.008485][ T3668] input: syz0 as /devices/virtual/input/input5
[   62.795583][ T3688] loop2: detected capacity change from 0 to 4096
[   63.069320][ T3689] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   63.763596][    T7] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   63.866777][ T3697] netlink: 72 bytes leftover after parsing attributes in process `syz.1.21'.
[   63.974884][ T3698] overlayfs: './file0' not a directory
[   64.057578][    T7] usb 5-1: Using ep0 maxpacket: 32
[   64.184073][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   64.221801][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   64.262821][    T7] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   64.308212][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.327928][    T7] usb 5-1: config 0 descriptor??
[   64.353987][ T3693] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[   64.367650][    T7] hub 5-1:0.0: USB hub found
[   64.522461][ T3709] overlayfs: './file0' not a directory
[   64.680704][    T7] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[   65.051450][    T7] hid-generic 0003:046D:C314.0001: item fetching failed at offset 0/1
[   65.073385][    T7] hid-generic: probe of 0003:046D:C314.0001 failed with error -22
[   65.157811][ T3717] loop1: detected capacity change from 0 to 32768
[   65.291150][ T3717] XFS (loop1): Mounting V5 Filesystem
[   65.363980][ T3625] usb 5-1: USB disconnect, device number 2
[   65.452240][ T3717] XFS (loop1): Ending clean mount
[   65.532076][ T3734] loop3: detected capacity change from 0 to 4096
[   65.597254][ T3735] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.622106][ T3546] XFS (loop1): Unmounting Filesystem
[   67.853670][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   67.862786][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.873478][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   67.883091][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   67.891458][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   67.899839][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   67.908106][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   67.916485][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   67.924752][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   67.933130][    T0] NOHZ tick-stop error: local softirq work is pending, handler #28a!!!
[   69.850907][ T3796] cgroup: noprefix used incorrectly
[   70.049409][ T3799] loop3: detected capacity change from 0 to 4096
[   70.131212][ T3806] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.448295][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[   71.455243][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[   71.683881][ T3822] syz.1.58 uses obsolete (PF_INET,SOCK_PACKET)
[   72.038757][ T3553] Bluetooth: hci2: command tx timeout
[   74.067373][ T3553] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[   74.076025][ T3553] Bluetooth: hci2: Injecting HCI hardware error event
[   74.084411][ T3559] Bluetooth: hci2: hardware error 0x00
[   75.293030][ T3872] cgroup: noprefix used incorrectly
[   75.750085][ T3855] loop0: detected capacity change from 0 to 32768
[   75.863268][ T3855] XFS (loop0): Mounting V5 Filesystem
[   76.023887][ T3855] XFS (loop0): Ending clean mount
[   76.064637][ T3857] loop4: detected capacity change from 0 to 40427
[   76.105722][ T3857] F2FS-fs (loop4): Found nat_bits in checkpoint
[   76.433700][ T3559] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[   76.435541][   T26] cfg80211: failed to load regulatory.db
[   76.474161][   T14] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[   76.685610][   T14] XFS (loop0): Unmount and run xfs_repair
[   76.698438][ T3857] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   76.724170][   T14] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   76.767830][   T14] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   76.799070][   T14] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   76.814054][   T14] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   76.833326][   T14] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   76.863837][   T14] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   76.889744][ T3895] loop2: detected capacity change from 0 to 4096
[   76.911668][   T14] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   76.950925][   T14] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   76.951270][ T3898] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.015293][   T14] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   77.046348][ T3855] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[   77.086132][ T3855] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[   77.140657][ T3855] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   77.271057][ T3855] syz.0.66 (3855) used greatest stack depth: 19152 bytes left
[   77.308301][ T3555] XFS (loop0): Unmounting Filesystem
[   77.474869][ T3559] Bluetooth: hci4: command tx timeout
[   79.514481][ T3553] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[   79.523738][ T3553] Bluetooth: hci4: Injecting HCI hardware error event
[   79.535292][ T3559] Bluetooth: hci4: hardware error 0x00
[   80.211675][ T3931] input: syz1 as /devices/virtual/input/input6
[   80.272877][ T3935] cgroup: noprefix used incorrectly
[   81.297642][ T3544] syz-executor: attempt to access beyond end of device
[   81.297642][ T3544] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   81.297965][ T3544] syz-executor: attempt to access beyond end of device
[   81.297965][ T3544] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   81.516412][   T46] kworker/u4:3: attempt to access beyond end of device
[   81.516412][   T46] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[   81.633809][ T3559] Bluetooth: hci4: Opcode 0x0c03 failed: -110
[   81.853355][   T46] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.005065][   T46] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.203057][   T46] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.401168][   T46] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   82.765560][ T3956] kvm: emulating exchange as write
[   82.841808][ T3559] Bluetooth: hci0: command tx timeout
[   83.340187][ T3559] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.349921][ T3559] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   83.359387][ T3559] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   83.371450][ T3559] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   83.379309][ T3559] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   83.395925][ T3559] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.013305][ T3990] loop3: detected capacity change from 0 to 4096
[   84.093330][ T3997] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   84.446992][   T46] device hsr_slave_0 left promiscuous mode
[   84.505886][   T46] device hsr_slave_1 left promiscuous mode
[   84.520435][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.538326][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.570910][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.603576][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.623673][   T46] device bridge_slave_1 left promiscuous mode
[   84.651995][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.695234][   T46] device bridge_slave_0 left promiscuous mode
[   84.709292][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.755886][   T46] device veth1_macvtap left promiscuous mode
[   84.763163][   T46] device veth0_macvtap left promiscuous mode
[   84.833618][ T3560] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   84.842232][ T3560] Bluetooth: hci0: Injecting HCI hardware error event
[   84.851076][ T3559] Bluetooth: hci0: hardware error 0x00
[   84.957225][   T46] device veth1_vlan left promiscuous mode
[   84.963577][   T46] device veth0_vlan left promiscuous mode
[   85.590936][ T3560] Bluetooth: hci2: command tx timeout
[   86.913826][ T3559] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   87.595378][ T4012] loop1: detected capacity change from 0 to 32768
[   87.753655][ T3559] Bluetooth: hci2: command tx timeout
[   87.852581][ T4012] XFS (loop1): Mounting V5 Filesystem
[   88.659399][ T4012] XFS (loop1): Ending clean mount
[   88.731449][ T3628] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[   88.775075][ T3628] XFS (loop1): Unmount and run xfs_repair
[   88.780844][ T3628] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[   88.826446][ T3628] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   88.860405][ T3628] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   88.896591][ T3628] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   88.913599][ T3628] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   88.930637][ T3628] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   88.975571][ T3628] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   89.007816][ T3628] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   89.036423][ T3628] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   89.063740][ T4012] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[   89.099582][ T4012] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[   89.143641][ T4012] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[   89.183302][ T3546] XFS (loop1): Unmounting Filesystem
[   89.218911][   T46] team0 (unregistering): Port device team_slave_1 removed
[   89.351267][   T46] team0 (unregistering): Port device team_slave_0 removed
[   89.491032][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   89.648883][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   89.794497][ T3560] Bluetooth: hci2: command tx timeout
[   90.311974][ T3559] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   90.322261][ T3559] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   90.331185][ T3559] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   90.342042][ T3559] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   90.349830][ T3559] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   90.357382][ T3559] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   90.495583][   T46] bond0 (unregistering): Released all slaves
[   90.761347][ T3974] chnl_net:caif_netlink_parms(): no params data found
[   91.813787][ T3547] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   91.846169][ T4062] loop1: detected capacity change from 0 to 4096
[   91.883627][ T3560] Bluetooth: hci2: command tx timeout
[   92.025839][ T4072] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.070587][ T3974] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.073710][ T3547] usb 4-1: Using ep0 maxpacket: 32
[   92.097783][ T3974] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.114682][ T3974] device bridge_slave_0 entered promiscuous mode
[   92.224559][ T3547] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[   92.273671][ T3547] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   92.284728][ T3974] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.291859][ T3974] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.330738][ T3974] device bridge_slave_1 entered promiscuous mode
[   92.360121][ T3547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.417200][ T3547] usb 4-1: config 0 descriptor??
[   92.433576][ T3560] Bluetooth: hci5: command tx timeout
[   92.545464][ T4058] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   93.264676][ T3547] hub 4-1:0.0: bad descriptor, ignoring hub
[   93.270719][ T3547] hub: probe of 4-1:0.0 failed with error -5
[   93.855431][ T3547] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[   94.037842][ T3974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.088916][ T3974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.253633][ T3974] team0: Port device team_slave_0 added
[   94.326723][ T3974] team0: Port device team_slave_1 added
[   94.513700][ T3560] Bluetooth: hci5: command tx timeout
[   94.642764][ T4052] chnl_net:caif_netlink_parms(): no params data found
[   94.669047][ T3974] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.691704][ T3974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.819708][ T3974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.051329][ T3974] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.063627][ T3974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.109930][ T3974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.461874][ T4052] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.472725][ T4052] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.493155][ T4052] device bridge_slave_0 entered promiscuous mode
[   95.516972][ T3974] device hsr_slave_0 entered promiscuous mode
[   95.551762][ T3974] device hsr_slave_1 entered promiscuous mode
[   95.593549][   T22] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   95.606119][ T3974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   95.617309][ T3974] Cannot create hsr debugfs directory
[   95.625420][ T4052] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.640701][ T4052] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.696015][ T4052] device bridge_slave_1 entered promiscuous mode
[   95.807025][ T4052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.859021][ T4052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.954064][   T22] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   95.984638][   T22] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   96.011611][ T4052] team0: Port device team_slave_0 added
[   96.031109][   T22] usb 3-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00
[   96.063278][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.079126][ T4052] team0: Port device team_slave_1 added
[   96.145831][   T22] usb 3-1: config 0 descriptor??
[   96.154580][ T3547] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   96.186971][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_0
[   96.208623][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.225488][   T22] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   96.299185][ T4052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.413254][ T4052] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.414702][   T22] usb 4-1: USB disconnect, device number 2
[   96.431726][ T4052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.458989][ T3547] usb 2-1: Using ep0 maxpacket: 32
[   96.480561][ T4052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.583748][ T3547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   96.595039][ T3560] Bluetooth: hci5: command tx timeout
[   96.611541][ T3547] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   96.626984][ T3547] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   96.652018][ T3547] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.667725][ T3547] usb 2-1: config 0 descriptor??
[   96.693775][ T4120] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   96.714551][ T3547] hub 2-1:0.0: USB hub found
[   96.774896][ T4052] device hsr_slave_0 entered promiscuous mode
[   96.820012][ T4052] device hsr_slave_1 entered promiscuous mode
[   96.860857][ T4052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.875012][ T4052] Cannot create hsr debugfs directory
[   97.043634][ T3547] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[   97.144641][   T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.153882][ T3974] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   97.166889][ T3974] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   97.221542][ T4052] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.239508][ T3974] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   97.252495][ T3974] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   97.306068][ T4052] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.403074][   T22] usb 4-1: Using ep0 maxpacket: 16
[   97.463342][ T3547] hid-generic 0003:046D:C314.0002: item fetching failed at offset 0/1
[   97.476959][ T3547] hid-generic: probe of 0003:046D:C314.0002 failed with error -22
[   97.527966][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[   97.539434][   T22] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[   97.549887][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.575825][   T22] usb 4-1: config 0 descriptor??
[   97.613109][ T4052] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.656614][ T3974] 8021q: adding VLAN 0 to HW filter on device bond0
[   97.672555][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   97.681900][ T3018] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   97.706513][ T3974] 8021q: adding VLAN 0 to HW filter on device team0
[   97.762525][ T4052] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.824891][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   97.836660][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   97.838838][ T3592] usb 2-1: USB disconnect, device number 2
[   97.855192][ T3547] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.862318][ T3547] bridge0: port 1(bridge_slave_0) entered forwarding state
[   97.926306][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   97.949868][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   97.967769][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   97.980088][ T3547] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.987248][ T3547] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.003648][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   98.053786][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   98.070052][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   98.077281][ T4136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.082445][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   98.102601][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   98.105317][ T4136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.112736][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   98.136116][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   98.144938][   T22] hid (null): unknown global tag 0xa5
[   98.148711][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   98.151327][   T22] hid (null): unknown global tag 0xd
[   98.175573][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   98.183992][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   98.186224][   T22] hid (null): unknown global tag 0xc
[   98.201379][   T22] hid-generic 0003:0158:0100.0003: unknown main item tag 0x1
[   98.205638][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   98.209318][   T22] hid-generic 0003:0158:0100.0003: unexpected long global item
[   98.237234][   T22] hid-generic: probe of 0003:0158:0100.0003 failed with error -22
[   98.288431][ T3974] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   98.349500][ T3592] usb 3-1: USB disconnect, device number 3
[   98.369170][ T4136] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.408502][ T4136] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.519590][ T3588] usb 4-1: USB disconnect, device number 3
[   98.534305][ T4052] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   98.714609][ T3560] Bluetooth: hci5: command tx timeout
[   99.337761][ T4052] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   99.431377][ T4052] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   99.566718][ T4052] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   99.801765][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   99.814059][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   99.871473][ T3974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  101.444374][ T4052] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.482025][   T46] device hsr_slave_0 left promiscuous mode
[  101.509927][   T46] device hsr_slave_1 left promiscuous mode
[  101.532968][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.542121][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.567990][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.628759][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.649436][   T46] device bridge_slave_1 left promiscuous mode
[  101.683123][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.701362][   T46] device bridge_slave_0 left promiscuous mode
[  101.714088][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  101.789146][   T46] device veth1_macvtap left promiscuous mode
[  101.810923][   T46] device veth0_macvtap left promiscuous mode
[  101.830973][   T46] device veth1_vlan left promiscuous mode
[  101.849403][   T46] device veth0_vlan left promiscuous mode
[  104.446762][ T4228] loop2: detected capacity change from 0 to 40427
[  104.459560][   T46] team0 (unregistering): Port device team_slave_1 removed
[  104.483107][ T4228] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  104.491436][ T4228] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  104.709966][ T4228] F2FS-fs (loop2): Found nat_bits in checkpoint
[  104.916611][ T4228] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  105.322329][   T46] team0 (unregistering): Port device team_slave_0 removed
[  105.519826][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  105.702025][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  106.597651][   T46] bond0 (unregistering): Released all slaves
[  106.684446][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  106.693406][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  106.704104][ T4275] netlink: 12 bytes leftover after parsing attributes in process `syz.3.145'.
[  106.772235][ T4276] 8021q: adding VLAN 0 to HW filter on device bond2
[  106.780980][ T4276] bond1: (slave bond2): Enslaving as an active interface with an up link
[  106.794838][ T4052] 8021q: adding VLAN 0 to HW filter on device team0
[  106.895370][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  106.921110][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  106.955583][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.962748][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  106.974576][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  106.983699][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  106.992300][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.999479][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  107.191261][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  107.245697][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  107.914067][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  107.922661][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  107.948581][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.064601][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.073411][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  108.090372][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  108.100254][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  108.115047][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  108.129055][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  108.140650][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  108.166500][ T3974] device veth0_vlan entered promiscuous mode
[  108.182710][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  108.191235][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  108.209316][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.221002][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  108.299120][ T4052] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  108.321734][ T4052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  108.975765][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  109.010727][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  109.033636][ T3974] device veth1_vlan entered promiscuous mode
[  109.074688][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  109.212426][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  109.230157][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  109.245071][ T3974] device veth0_macvtap entered promiscuous mode
[  109.262568][ T3974] device veth1_macvtap entered promiscuous mode
[  109.318248][ T3974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.162512][ T3974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.194039][ T3974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.244427][ T3974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.267916][ T3974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  110.280538][ T3974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.303265][ T3974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  110.328254][ T3974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.345828][ T3974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.360567][ T3974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.377558][ T3974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.389096][ T3974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  110.425673][ T3974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  110.460815][ T3974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  110.488497][ T3974] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  110.512413][ T3974] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  110.540131][ T3974] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  110.568139][ T3974] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.149059][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  111.198773][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  111.285041][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  111.322228][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.364338][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  111.395149][ T3547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  111.587205][ T3864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.632724][ T3864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.682595][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.689146][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  111.711183][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.760587][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.919836][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  111.942027][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  112.064180][ T4052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  112.099846][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  112.122252][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  112.528451][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  112.579405][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  112.722481][ T4052] device veth0_vlan entered promiscuous mode
[  112.952179][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  112.967087][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  112.982954][ T4052] device veth1_vlan entered promiscuous mode
[  113.819271][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  113.852044][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  113.946865][ T4052] device veth0_macvtap entered promiscuous mode
[  113.974878][ T4052] device veth1_macvtap entered promiscuous mode
[  114.120279][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.131711][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.157196][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.857987][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  114.907679][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  114.957153][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.006226][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  115.063172][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.085658][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  115.149185][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.191992][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.202240][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.213162][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.228957][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.240346][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.259416][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  115.271150][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  115.294338][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  115.313375][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  115.446787][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  115.565695][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  115.576188][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  116.154495][ T4342] loop4: detected capacity change from 0 to 32768
[  116.160564][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  116.169819][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  116.186999][ T4052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  116.234619][ T4052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  116.243515][ T4052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  116.254804][ T4052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.074014][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.082046][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.095496][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.506719][   T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.539092][   T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.655071][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  119.189923][ T4386] loop2: detected capacity change from 0 to 4096
[  119.192770][ T4403] netlink: 12 bytes leftover after parsing attributes in process `syz.3.175'.
[  119.458880][ T4403] 8021q: adding VLAN 0 to HW filter on device bond4
[  119.507523][ T4403] bond3: (slave bond4): Enslaving as an active interface with an up link
[  119.793067][ T4420] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  120.050277][   T46] tipc: Subscription rejected, illegal request
[  121.679205][ T3628] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  122.663662][ T3628] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  122.689924][ T4425] loop4: detected capacity change from 0 to 32768
[  122.701508][ T3628] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  122.750370][ T3628] usb 2-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00
[  122.776437][ T3628] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.926474][ T3628] usb 2-1: config 0 descriptor??
[  123.140070][ T4455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.189'.
[  123.497253][ T3628] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  123.798964][  T152] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  124.064444][  T152] usb 4-1: Using ep0 maxpacket: 32
[  124.214281][  T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  124.285244][  T152] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  124.440896][  T152] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  124.599332][  T152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.656975][ T3628] usb 2-1: USB disconnect, device number 3
[  124.708161][ T4462] loop0: detected capacity change from 0 to 40427
[  124.755095][ T4462] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  124.813577][ T4462] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  124.885521][ T4462] F2FS-fs (loop0): Found nat_bits in checkpoint
[  125.090710][ T4462] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  125.355686][ T4462] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  125.627873][ T4462] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  125.961588][  T152] usb 4-1: config 0 descriptor??
[  125.983921][ T4468] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  126.054928][  T152] hub 4-1:0.0: USB hub found
[  126.383916][  T152] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  126.936487][  T152] hid-generic 0003:046D:C314.0004: item fetching failed at offset 0/1
[  126.968350][  T152] hid-generic: probe of 0003:046D:C314.0004 failed with error -22
[  127.406163][    T7] usb 4-1: USB disconnect, device number 4
[  128.138335][ T4517] netlink: 12 bytes leftover after parsing attributes in process `syz.3.202'.
[  128.337447][ T4517] 8021q: adding VLAN 0 to HW filter on device bond8
[  128.361746][ T4517] bond7: (slave bond8): Enslaving as an active interface with an up link
[  128.365080][ T4507] loop0: detected capacity change from 0 to 40427
[  128.432540][ T4507] F2FS-fs (loop0): Found nat_bits in checkpoint
[  128.473759][ T3591] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  128.574479][ T4507] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  128.733672][ T3591] usb 5-1: Using ep0 maxpacket: 32
[  128.854262][ T3591] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  128.959934][ T3591] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  129.094451][ T3591] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.274323][ T3591] usb 5-1: config 0 descriptor??
[  129.342125][ T4525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  130.333465][    C0] sched: RT throttling activated
[  130.338236][ T3591] hub 5-1:0.0: bad descriptor, ignoring hub
[  130.356104][ T3591] hub: probe of 5-1:0.0 failed with error -5
[  130.482800][ T3591] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  130.850266][ T4535] loop3: detected capacity change from 0 to 40427
[  130.879848][ T4535] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  130.891362][ T4535] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  130.973487][ T4535] F2FS-fs (loop3): Found nat_bits in checkpoint
[  131.032739][ T4535] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  131.141857][ T4535] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  131.167651][ T4535] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  131.217239][ T4535] overlayfs: missing 'lowerdir'
[  132.394763][    T7] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  132.824354][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  133.114910][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  133.224357][    T7] usb 4-1: Using ep0 maxpacket: 32
[  133.331154][ T4577] netlink: 12 bytes leftover after parsing attributes in process `syz.4.217'.
[  133.343803][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  133.383676][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  133.414486][    T7] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  133.444864][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.470470][    T7] usb 4-1: config 0 descriptor??
[  133.478747][ T3590] usb 5-1: USB disconnect, device number 3
[  133.493931][ T4567] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  133.514425][    T7] hub 4-1:0.0: USB hub found
[  133.545533][ T4577] bond1 (unregistering): Released all slaves
[  133.638518][ T3559] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  133.647233][ T3559] Bluetooth: hci2: Injecting HCI hardware error event
[  133.656336][ T3560] Bluetooth: hci2: hardware error 0x00
[  134.423823][    T7] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  135.486421][    T7] hid-generic 0003:046D:C314.0005: item fetching failed at offset 0/1
[  135.534208][    T7] hid-generic: probe of 0003:046D:C314.0005 failed with error -22
[  136.049835][    T7] usb 4-1: USB disconnect, device number 5
[  137.428682][ T4592] loop4: detected capacity change from 0 to 40427
[  137.503696][ T4592] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[  137.518614][ T3594] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  137.704893][ T4602] loop2: detected capacity change from 0 to 40427
[  137.708248][ T4626] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'.
[  137.735537][ T4602] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  137.770153][ T4602] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  137.793627][ T3560] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  137.800169][ T3594] usb 1-1: Using ep0 maxpacket: 32
[  137.850824][ T4602] F2FS-fs (loop2): Found nat_bits in checkpoint
[  137.893942][ T4629] 8021q: adding VLAN 0 to HW filter on device bond10
[  137.899077][ T4602] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  137.912606][ T4629] bond9: (slave bond10): Enslaving as an active interface with an up link
[  137.927605][ T4602] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  137.938185][ T4602] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  137.953880][ T3594] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  137.988951][ T3594] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  137.999713][ T4602] overlayfs: missing 'lowerdir'
[  138.022563][ T3594] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.768392][ T3594] usb 1-1: config 0 descriptor??
[  138.925605][ T4617] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  139.020018][ T3594] hub 1-1:0.0: bad descriptor, ignoring hub
[  139.116276][ T3594] hub: probe of 1-1:0.0 failed with error -5
[  139.764769][ T3594] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  142.173424][ T4679] can0: slcan on ttyS3.
[  142.324650][ T4679] can0 (unregistered): slcan off ttyS3.
[  142.375287][ T3628] usb 1-1: USB disconnect, device number 2
[  142.397598][ T4685] netlink: 12 bytes leftover after parsing attributes in process `syz.3.244'.
[  142.621990][ T4688] 8021q: adding VLAN 0 to HW filter on device bond12
[  142.664982][ T4688] bond11: (slave bond12): Enslaving as an active interface with an up link
[  143.326476][ T3560] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  143.336458][ T3560] Bluetooth: hci5: Injecting HCI hardware error event
[  143.353256][ T3553] Bluetooth: hci5: hardware error 0x00
[  143.512921][ T4669] loop2: detected capacity change from 0 to 40427
[  145.212831][ T4669] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12)
[  145.874862][ T3553] Bluetooth: hci5: Opcode 0x0c03 failed: -110
[  146.745509][ T3628] libceph: connect (1)[c::]:6789 error -101
[  146.752472][ T3628] libceph: mon0 (1)[c::]:6789 connect error
[  146.887461][ T4726] ceph: No mds server is up or the cluster is laggy
[  147.026315][ T3628] libceph: connect (1)[c::]:6789 error -101
[  147.033638][   T22] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  147.036911][ T3628] libceph: mon0 (1)[c::]:6789 connect error
[  147.285709][   T22] usb 2-1: Using ep0 maxpacket: 32
[  147.425922][   T22] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  147.443929][   T22] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  147.458775][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.563686][ T3628] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  147.594579][   T22] usb 2-1: config 0 descriptor??
[  147.803677][ T3628] usb 1-1: Using ep0 maxpacket: 32
[  147.925163][ T3628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  147.943764][ T4730] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  148.002778][ T3628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  148.162842][ T3628] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  148.273752][ T3628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.314601][ T3628] usb 1-1: config 0 descriptor??
[  148.333790][ T4745] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  148.357949][   T22] hub 2-1:0.0: bad descriptor, ignoring hub
[  148.374721][ T3628] hub 1-1:0.0: USB hub found
[  148.379864][   T22] hub: probe of 2-1:0.0 failed with error -5
[  148.427519][   T22] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  148.673808][ T3628] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[  149.746190][ T3628] hid-generic 0003:046D:C314.0006: item fetching failed at offset 0/1
[  149.776645][ T3628] hid-generic: probe of 0003:046D:C314.0006 failed with error -22
[  150.075744][ T3590] usb 1-1: USB disconnect, device number 3
[  150.235838][ T4790] loop4: detected capacity change from 0 to 4096
[  150.256031][ T4790] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  150.277372][ T4790] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  150.943695][ T4792] can0: slcan on ttyS3.
[  151.053812][ T4795] can0 (unregistered): slcan off ttyS3.
[  151.135511][  T152] usb 2-1: USB disconnect, device number 4
[  152.273845][ T3553] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  152.282607][ T3553] Bluetooth: hci1: Injecting HCI hardware error event
[  152.293011][ T3553] Bluetooth: hci1: hardware error 0x00
[  152.586613][ T3974] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  153.098164][ T4819] loop2: detected capacity change from 0 to 32768
[  153.166817][ T4853] can0: slcan on ttyS3.
[  153.199824][ T3592] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  153.314529][ T4853] can0 (unregistered): slcan off ttyS3.
[  153.352094][ T4819] XFS (loop2): Mounting V5 Filesystem
[  153.483930][ T3592] usb 1-1: Using ep0 maxpacket: 32
[  153.674659][ T3592] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  153.823121][ T3592] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  153.996908][ T3592] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.046937][ T4819] XFS (loop2): Ending clean mount
[  154.077282][ T3592] usb 1-1: config 0 descriptor??
[  154.116326][ T4819] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  154.128074][ T4843] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  154.164666][ T3592] hub 1-1:0.0: bad descriptor, ignoring hub
[  154.164696][ T4819] XFS (loop2): Unmount and run xfs_repair
[  154.170592][ T3592] hub: probe of 1-1:0.0 failed with error -5
[  154.197346][ T4819] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  154.205251][ T3592] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  154.217147][ T4819] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  154.243632][ T4819] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  154.277750][ T4819] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  154.317626][ T4819] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  154.338729][ T4819] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  154.353613][ T3553] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  154.390850][ T4819] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  154.454203][ T4819] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  154.488717][ T4834] loop3: detected capacity change from 0 to 40427
[  154.501169][ T4819] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  154.541437][ T4819] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  154.565844][ T4819] XFS (loop2): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[  154.596519][ T4819] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  154.605363][ T4834] F2FS-fs (loop3): Found nat_bits in checkpoint
[  154.683670][ T3545] XFS (loop2): Unmounting Filesystem
[  154.691265][ T4834] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  155.399405][ T4896] loop4: detected capacity change from 0 to 4096
[  155.451089][ T4896] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  155.480233][ T4896] ntfs3: loop4: Failed to load $Volume.
[  156.352607][ T4930] cgroup: noprefix used incorrectly
[  156.594121][ T3592] usb 1-1: USB disconnect, device number 4
[  157.025852][ T3558] syz-executor: attempt to access beyond end of device
[  157.025852][ T3558] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  157.068740][ T3558] syz-executor: attempt to access beyond end of device
[  157.068740][ T3558] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  157.173973][ T3864] kworker/u4:10: attempt to access beyond end of device
[  157.173973][ T3864] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  157.504272][ T3592] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  157.910840][ T3616] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.194708][ T3592] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.268229][ T3592] usb 2-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00
[  158.307655][ T3592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.354752][ T3592] usb 2-1: config 0 descriptor??
[  158.362057][ T3616] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.398826][ T3592] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  158.474547][ T4956] loop2: detected capacity change from 0 to 4096
[  158.489108][ T4956] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  158.498724][ T4956] ntfs3: loop2: Failed to load $Volume.
[  158.519644][ T3616] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.746757][ T3616] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  159.114771][ T3560] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  159.125688][ T3560] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  159.137146][ T3560] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  159.146016][ T3560] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  159.154719][ T3560] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  159.161972][ T3560] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  159.788399][ T4987] cgroup: noprefix used incorrectly
[  159.806729][ T4974] chnl_net:caif_netlink_parms(): no params data found
[  160.112075][ T3590] usb 2-1: USB disconnect, device number 5
[  160.408452][ T4974] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.418831][ T4974] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.448337][ T4974] device bridge_slave_0 entered promiscuous mode
[  160.513047][ T4974] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.542199][ T4974] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.568699][ T4974] device bridge_slave_1 entered promiscuous mode
[  160.595910][ T4976] loop2: detected capacity change from 0 to 40427
[  160.604521][ T3616] device hsr_slave_0 left promiscuous mode
[  160.611769][ T3616] device hsr_slave_1 left promiscuous mode
[  160.630439][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.647168][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.672690][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.684277][ T4976] F2FS-fs (loop2): Found nat_bits in checkpoint
[  160.696197][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.721531][ T3616] device bridge_slave_1 left promiscuous mode
[  160.744632][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.777869][ T3616] device bridge_slave_0 left promiscuous mode
[  160.799952][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.820434][ T4976] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  160.905057][ T3616] device veth1_macvtap left promiscuous mode
[  160.927693][ T3616] device veth0_macvtap left promiscuous mode
[  160.960140][ T3616] device veth1_vlan left promiscuous mode
[  160.984234][ T3616] device veth0_vlan left promiscuous mode
[  161.233628][ T3553] Bluetooth: hci3: command tx timeout
[  161.895617][ T3616] bond11 (unregistering): (slave bond12): Releasing backup interface
[  161.926545][ T3616] bond12 (unregistering): Released all slaves
[  161.959955][ T3616] bond11 (unregistering): Released all slaves
[  162.443907][ T3616] bond9 (unregistering): (slave bond10): Releasing backup interface
[  162.455480][ T3616] bond10 (unregistering): Released all slaves
[  162.478764][ T3616] bond9 (unregistering): Released all slaves
[  162.718354][ T5016] loop1: detected capacity change from 0 to 40427
[  162.773677][ T5016] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  162.788400][ T5016] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  162.831157][ T3616] bond7 (unregistering): (slave bond8): Releasing backup interface
[  162.852843][ T5016] F2FS-fs (loop1): Found nat_bits in checkpoint
[  162.862631][ T3616] bond8 (unregistering): Released all slaves
[  162.889407][ T3616] bond7 (unregistering): Released all slaves
[  162.914972][ T3616] bond6 (unregistering): Released all slaves
[  162.919832][ T5028] loop4: detected capacity change from 0 to 4096
[  162.939628][ T5028] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  162.961049][ T5016] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  162.971532][ T5028] ntfs3: loop4: Failed to load $Volume.
[  162.980278][ T3616] bond5 (unregistering): Released all slaves
[  163.024416][ T5016] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  163.031644][ T5016] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  163.089771][ T5016] overlayfs: missing 'lowerdir'
[  163.238643][ T3545] syz-executor: attempt to access beyond end of device
[  163.238643][ T3545] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  163.254531][ T3545] syz-executor: attempt to access beyond end of device
[  163.254531][ T3545] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  163.285229][ T3616] bond3 (unregistering): (slave bond4): Releasing backup interface
[  163.296577][ T3616] bond4 (unregistering): Released all slaves
[  163.310677][ T3616] bond3 (unregistering): Released all slaves
[  163.317028][ T3560] Bluetooth: hci3: command tx timeout
[  163.381438][ T3846] kworker/u4:8: attempt to access beyond end of device
[  163.381438][ T3846] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  163.548859][ T3616] bond1 (unregistering): (slave bond2): Releasing backup interface
[  163.560965][ T3616] bond2 (unregistering): Released all slaves
[  163.575251][ T3616] bond1 (unregistering): Released all slaves
[  163.842451][ T5039] loop1: detected capacity change from 0 to 32768
[  163.908816][ T5039] XFS (loop1): Mounting V5 Filesystem
[  163.952238][ T5039] XFS (loop1): Ending clean mount
[  163.979971][ T5039] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  163.991394][ T5039] XFS (loop1): Unmount and run xfs_repair
[  163.999227][ T5039] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  164.007003][ T5039] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  164.016599][ T5039] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  164.027122][ T5039] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  164.036283][ T5039] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  164.039554][ T3616] team0 (unregistering): Port device team_slave_1 removed
[  164.045210][ T5039] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  164.045230][ T5039] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  164.045244][ T5039] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  164.045258][ T5039] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  164.045284][ T5039] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  164.052215][ T5039] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[  164.118143][ T5039] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  164.147638][ T3616] team0 (unregistering): Port device team_slave_0 removed
[  164.149181][ T3546] XFS (loop1): Unmounting Filesystem
[  164.193084][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.238775][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.602129][ T3616] bond0 (unregistering): Released all slaves
[  164.975807][ T4974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.029352][ T5062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.325'.
[  165.070288][ T4974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.201725][ T5062] 8021q: adding VLAN 0 to HW filter on device bond2
[  165.224773][ T5062] bond1: (slave bond2): Enslaving as an active interface with an up link
[  165.379901][ T4974] team0: Port device team_slave_0 added
[  165.393860][ T3560] Bluetooth: hci3: command tx timeout
[  165.477096][ T4974] team0: Port device team_slave_1 added
[  165.635235][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.642218][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.778561][ T4974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.851085][ T4974] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.875048][ T4974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.981452][ T4974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.043547][ T3590] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  166.126601][ T4974] device hsr_slave_0 entered promiscuous mode
[  166.160166][ T4974] device hsr_slave_1 entered promiscuous mode
[  166.205799][ T4974] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.239035][ T4974] Cannot create hsr debugfs directory
[  166.293639][ T3590] usb 1-1: Using ep0 maxpacket: 32
[  166.413736][ T3590] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  166.449064][ T3590] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  166.493867][ T3590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.543136][ T3590] usb 1-1: config 0 descriptor??
[  166.563763][ T5086] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  166.604596][ T3590] hub 1-1:0.0: bad descriptor, ignoring hub
[  166.610545][ T3590] hub: probe of 1-1:0.0 failed with error -5
[  166.655262][ T3590] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  166.775521][ T3553] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  166.791147][ T3553] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  166.799536][ T3553] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  166.809735][ T3553] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  166.817695][ T3553] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  166.826579][ T3553] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  166.955268][ T5084] loop1: detected capacity change from 0 to 40427
[  166.978622][ T5084] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  166.993760][ T5084] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  167.039322][ T5084] F2FS-fs (loop1): Found nat_bits in checkpoint
[  167.124256][ T5084] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  167.194284][ T5084] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  167.213905][ T5084] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  167.280240][ T5084] overlayfs: missing 'lowerdir'
[  167.470287][ T4974] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  167.477300][ T3560] Bluetooth: hci3: command tx timeout
[  167.493608][  T152] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  167.507087][ T4974] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  167.528191][ T4974] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  167.574851][ T4974] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  167.716762][ T5096] chnl_net:caif_netlink_parms(): no params data found
[  167.743686][  T152] usb 5-1: Using ep0 maxpacket: 16
[  167.863687][  T152] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  167.893726][  T152] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  167.904410][  T152] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.917749][  T152] usb 5-1: config 0 descriptor??
[  168.097517][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.118713][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.143751][ T5096] device bridge_slave_0 entered promiscuous mode
[  168.170070][ T4974] 8021q: adding VLAN 0 to HW filter on device bond0
[  168.200253][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.212673][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.238205][ T5096] device bridge_slave_1 entered promiscuous mode
[  168.320460][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  168.340743][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.360113][ T4974] 8021q: adding VLAN 0 to HW filter on device team0
[  168.471515][ T5109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.519696][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.539377][ T5109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.577904][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  168.590532][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  168.606905][ T3590] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.614617][ T3590] bridge0: port 1(bridge_slave_0) entered forwarding state
[  168.625143][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  168.645182][  T152] hid (null): unknown global tag 0xa5
[  168.651107][  T152] hid (null): unknown global tag 0xd
[  168.657811][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.694870][  T152] hid (null): unknown global tag 0xc
[  168.784718][ T5134] loop1: detected capacity change from 0 to 4096
[  168.793721][ T5134] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  168.807469][  T152] hid-generic 0003:0158:0100.0007: unknown main item tag 0x1
[  168.815477][  T152] hid-generic 0003:0158:0100.0007: unexpected long global item
[  168.825191][  T152] hid-generic: probe of 0003:0158:0100.0007 failed with error -22
[  168.848915][ T5134] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  168.870568][ T5109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  168.891663][ T5109] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  168.901922][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  168.913890][ T3560] Bluetooth: hci0: command tx timeout
[  168.951932][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  168.981060][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.988330][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.054552][    T7] usb 5-1: USB disconnect, device number 4
[  169.090451][ T5096] team0: Port device team_slave_0 added
[  169.177165][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.367512][ T5096] team0: Port device team_slave_1 added
[  169.376228][  T152] usb 1-1: USB disconnect, device number 5
[  169.384545][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.393394][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.405598][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.415635][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  169.424739][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.166932][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.175516][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.194597][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.279541][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  170.296755][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.389132][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  170.439593][ T4974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.455091][ T5147] netlink: 12 bytes leftover after parsing attributes in process `syz.4.336'.
[  170.623141][ T5151] 8021q: adding VLAN 0 to HW filter on device bond2
[  170.641960][ T5151] bond1: (slave bond2): Enslaving as an active interface with an up link
[  170.650950][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.653110][ T3546] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  170.659778][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.724705][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.731692][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.848536][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.993969][ T3560] Bluetooth: hci0: command tx timeout
[  171.173830][ T5096] device hsr_slave_0 entered promiscuous mode
[  171.198010][ T5096] device hsr_slave_1 entered promiscuous mode
[  171.309107][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  171.330351][ T5096] Cannot create hsr debugfs directory
[  171.517316][ T3616] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.671264][ T3616] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.736094][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  171.750492][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  171.785191][ T4974] 8021q: adding VLAN 0 to HW filter on device batadv0
[  171.827227][ T3616] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  171.915924][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  171.932583][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  171.974041][   T22] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  172.002250][ T3616] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  172.034073][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  172.043231][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  172.068976][ T4974] device veth0_vlan entered promiscuous mode
[  172.092867][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  172.108747][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  172.115185][ T5172] loop0: detected capacity change from 0 to 40427
[  172.135365][ T4974] device veth1_vlan entered promiscuous mode
[  172.150912][ T5172] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  172.169018][ T5172] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  172.223842][   T22] usb 2-1: Using ep0 maxpacket: 16
[  172.231751][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  172.242826][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  172.262356][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  172.275495][ T5172] F2FS-fs (loop0): Found nat_bits in checkpoint
[  172.282637][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  172.305662][ T4974] device veth0_macvtap entered promiscuous mode
[  172.362104][ T4974] device veth1_macvtap entered promiscuous mode
[  172.372607][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  172.404033][ T5172] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  172.404156][   T22] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  172.452413][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.455152][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.473618][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.493587][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.510708][ T5172] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  172.513620][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.533015][   T22] usb 2-1: config 0 descriptor??
[  172.543553][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.554733][ T5172] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  172.572202][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.598611][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.626951][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.638661][ T4974] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.638790][ T5172] overlayfs: missing 'lowerdir'
[  172.648982][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.661908][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.671971][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.691759][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.701924][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.713930][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.736075][ T4974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.750565][ T4974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.772884][ T4974] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.788517][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  172.800803][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  172.809207][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  172.823168][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  172.832455][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  172.841937][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.854259][ T4974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.863260][ T4974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.887404][ T4974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.896624][ T4974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  173.073890][ T3560] Bluetooth: hci0: command tx timeout
[  173.098971][ T5184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.133175][ T5184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.165033][   T22] hid (null): unknown global tag 0xa5
[  173.177887][   T22] hid (null): unknown global tag 0xd
[  173.183396][   T22] hid (null): unknown global tag 0xc
[  173.192105][   T22] hid-generic 0003:0158:0100.0008: unknown main item tag 0x1
[  173.199952][   T22] hid-generic 0003:0158:0100.0008: unexpected long global item
[  173.208483][   T22] hid-generic: probe of 0003:0158:0100.0008 failed with error -22
[  173.407401][ T5184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.423874][ T5184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.463658][   T22] usb 2-1: USB disconnect, device number 6
[  173.464014][ T3864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.493996][ T3864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.563029][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  173.668005][ T3864] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.689752][ T3864] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.756626][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.869647][ T5096] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  173.911172][ T5096] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  174.162507][ T5096] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  174.251230][ T5096] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  174.734867][ T3616] device hsr_slave_0 left promiscuous mode
[  174.761776][ T3616] device hsr_slave_1 left promiscuous mode
[  174.813845][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.855593][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.909233][ T3616] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.973200][ T3616] batman_adv: batadv0: Removing interface: batadv_slave_1
[  175.025033][ T3616] device bridge_slave_1 left promiscuous mode
[  175.059600][ T3616] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.107971][ T3616] device bridge_slave_0 left promiscuous mode
[  175.145628][ T3616] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.153945][ T3560] Bluetooth: hci0: command tx timeout
[  175.331176][ T3616] device veth1_macvtap left promiscuous mode
[  175.345325][ T3616] device veth0_macvtap left promiscuous mode
[  175.351498][ T3616] device veth1_vlan left promiscuous mode
[  175.370783][ T5259] Bluetooth: MGMT ver 1.22
[  175.388194][ T3616] device veth0_vlan left promiscuous mode
[  175.949272][ T5242] loop1: detected capacity change from 0 to 40427
[  176.014103][ T5242] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  176.022320][ T5242] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  176.118825][ T5242] F2FS-fs (loop1): Found nat_bits in checkpoint
[  176.227131][ T5242] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  176.274916][ T5242] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  176.281996][ T5242] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  176.327328][ T5242] overlayfs: missing 'lowerdir'
[  176.527831][ T5256] loop4: detected capacity change from 0 to 32768
[  176.716687][ T5256] XFS (loop4): Mounting V5 Filesystem
[  176.786304][ T3616] team0 (unregistering): Port device team_slave_1 removed
[  176.886241][ T3616] team0 (unregistering): Port device team_slave_0 removed
[  176.904839][ T5256] XFS (loop4): Ending clean mount
[  176.947223][  T152] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  176.988102][  T152] XFS (loop4): Unmount and run xfs_repair
[  177.004497][  T152] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  177.012272][  T152] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  177.044749][  T152] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  177.059936][  T152] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  177.070481][  T152] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  177.086962][  T152] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  177.098472][  T152] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  177.112012][  T152] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  177.129217][  T152] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  177.139868][ T5256] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  177.167596][ T3616] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  177.172337][ T5256] XFS (loop4): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[  177.210149][ T5256] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  177.241930][ T3974] XFS (loop4): Unmounting Filesystem
[  177.375430][ T3616] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.376732][ T5305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.365'.
[  177.732021][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz.1.367'.
[  177.846199][ T5318] netlink: 44 bytes leftover after parsing attributes in process `syz.4.368'.
[  178.032751][ T3616] bond0 (unregistering): Released all slaves
[  178.038869][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.4.368'.
[  178.110767][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.311917][ T5096] 8021q: adding VLAN 0 to HW filter on device team0
[  178.342944][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.352037][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.387270][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.397015][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.406600][ T3592] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.413763][ T3592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.486884][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  178.541985][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  178.603170][ T3592] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.610383][ T3592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.639387][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.693935][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.719635][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.768407][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.808073][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.873771][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.886142][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.911141][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.940575][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.963876][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.989612][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.057939][ T5096] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.084949][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.194486][ T3594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.767495][ T5348] loop1: detected capacity change from 0 to 32768
[  179.791728][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.817333][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.839728][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.904905][ T5348] XFS (loop1): Mounting V5 Filesystem
[  179.910461][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  179.920096][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  179.942319][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  179.964403][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  179.976427][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  179.991656][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  180.014951][ T5096] device veth0_vlan entered promiscuous mode
[  180.117250][ T5348] XFS (loop1): Ending clean mount
[  180.167982][ T5096] device veth1_vlan entered promiscuous mode
[  180.181093][ T3589] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  180.263643][ T3589] XFS (loop1): Unmount and run xfs_repair
[  180.298018][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  180.314809][ T3553] Bluetooth: Wrong link type (-71)
[  180.318834][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  180.327421][ T3589] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  180.337662][ T3589] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  180.347053][ T3589] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  180.356354][ T3589] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  180.365625][ T3589] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  180.383544][ T3589] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  180.393890][ T3589] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  180.402788][ T3589] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  180.413977][ T3589] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  180.433746][ T5348] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  180.434877][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  180.470901][ T5348] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[  180.523909][ T5400] loop3: detected capacity change from 0 to 4096
[  180.531548][ T5400] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  180.551574][ T5348] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  180.554297][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  180.584655][ T5096] device veth0_macvtap entered promiscuous mode
[  180.609467][ T5400] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  180.641511][ T5096] device veth1_macvtap entered promiscuous mode
[  180.810365][ T3546] XFS (loop1): Unmounting Filesystem
[  180.825375][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.904825][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.953279][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.990683][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.017573][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.043337][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.056862][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.073342][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.100989][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.164199][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.184111][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.218875][ T3592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.268927][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.319858][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.363528][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.396249][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.424906][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.455794][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.513248][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.543607][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.598595][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.621109][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.653674][ T3589] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.701223][ T4974] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  181.717322][ T5096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.758145][ T5096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.788120][ T5096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.813235][ T5096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.168727][ T3864] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.194079][ T3864] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.215430][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.247927][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.259241][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.293392][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.405271][ T3018] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  182.684008][ T3018] usb 1-1: Using ep0 maxpacket: 32
[  182.823888][ T3018] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  183.003800][ T3018] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  183.027745][ T3018] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  183.056085][ T3018] usb 1-1: Product: syz
[  183.069864][ T3018] usb 1-1: Manufacturer: syz
[  183.085285][ T3018] usb 1-1: SerialNumber: syz
[  183.111639][ T3018] usb 1-1: config 0 descriptor??
[  183.153829][ T5423] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  183.306331][ T3553] Bluetooth: Wrong link type (-71)
[  183.490321][ T5447] loop2: detected capacity change from 0 to 4096
[  183.589662][ T5447] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  183.615212][ T5447] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  184.407980][ T5440] loop3: detected capacity change from 0 to 32768
[  184.459258][ T5432] loop4: detected capacity change from 0 to 40427
[  184.468725][ T5432] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  184.486919][ T5432] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  184.502731][ T5459] netlink: 16 bytes leftover after parsing attributes in process `syz.1.398'.
[  184.513868][ T5440] XFS (loop3): Mounting V5 Filesystem
[  184.525095][ T5432] F2FS-fs (loop4): invalid crc value
[  184.583164][ T3589] usb 1-1: USB disconnect, device number 6
[  184.629282][ T5432] F2FS-fs (loop4): Found nat_bits in checkpoint
[  184.665531][ T5096] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  184.679606][ T5440] XFS (loop3): Ending clean mount
[  184.730123][ T3591] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  184.755580][ T3591] XFS (loop3): Unmount and run xfs_repair
[  184.761345][ T3591] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  184.777223][ T5432] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  184.788291][ T5432] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  184.801146][ T3591] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  184.811671][ T3591] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  184.821306][ T3591] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  184.833241][ T3591] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  184.843179][ T3591] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  184.854169][ T3591] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  184.868768][ T3591] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  184.881233][ T3591] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  184.906008][ T5440] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  184.928780][ T5440] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[  184.958807][ T5440] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  185.011289][ T4974] XFS (loop3): Unmounting Filesystem
[  185.063684][ T3018] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  185.346186][ T3018] usb 2-1: Using ep0 maxpacket: 32
[  185.483798][ T3018] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  185.568261][ T3018] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  185.577997][ T3018] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.610430][ T3018] usb 2-1: config 0 descriptor??
[  185.622939][ T5491] loop4: detected capacity change from 0 to 128
[  185.633998][ T5470] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  185.664644][ T3018] hub 2-1:0.0: bad descriptor, ignoring hub
[  185.675266][ T3018] hub: probe of 2-1:0.0 failed with error -5
[  185.718206][ T3018] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  185.831183][ T5491] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  185.841146][ T5491] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038 (0x7fffffff)
[  187.181678][ T3974] EXT4-fs (loop4): unmounting filesystem.
[  187.217272][ T3553] Bluetooth: Wrong link type (-71)
[  187.370376][ T5518] loop2: detected capacity change from 0 to 4096
[  187.379643][ T5518] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  187.413243][ T5518] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  187.786139][ T5515] loop3: detected capacity change from 0 to 40427
[  187.806142][ T5515] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  187.816928][ T5515] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  187.834812][ T5515] F2FS-fs (loop3): invalid crc value
[  187.883431][ T5515] F2FS-fs (loop3): Found nat_bits in checkpoint
[  187.999478][ T5096] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  188.060415][ T5515] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  188.082317][ T5515] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  188.133091][ T5513] loop0: detected capacity change from 0 to 32768
[  188.197611][ T5513] XFS (loop0): Mounting V5 Filesystem
[  188.276253][ T5535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.414'.
[  189.322926][ T5513] XFS (loop0): Ending clean mount
[  189.328529][ T3592] usb 2-1: USB disconnect, device number 7
[  189.440964][ T4052] XFS (loop0): Unmounting Filesystem
[  191.373544][ T3592] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  191.603698][ T3594] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  191.652325][ T3592] usb 2-1: Using ep0 maxpacket: 32
[  191.818970][ T3592] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  191.843802][ T3592] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  191.853041][ T3592] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.874605][ T3594] usb 5-1: Using ep0 maxpacket: 16
[  191.888318][ T3592] usb 2-1: config 0 descriptor??
[  191.908879][ T5582] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  191.950086][ T3592] hub 2-1:0.0: bad descriptor, ignoring hub
[  191.962354][ T3592] hub: probe of 2-1:0.0 failed with error -5
[  191.985402][ T3592] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  192.003751][ T3594] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  192.024109][ T3594] usb 5-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  192.033207][ T3594] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.069949][ T3594] usb 5-1: config 0 descriptor??
[  192.133389][ T5588] loop3: detected capacity change from 0 to 32768
[  192.177598][ T5588] XFS (loop3): Mounting V5 Filesystem
[  192.225300][ T5588] XFS (loop3): Ending clean mount
[  192.294648][ T4974] XFS (loop3): Unmounting Filesystem
[  193.614822][ T5584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.623729][ T5584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.635207][ T3594] hid (null): unknown global tag 0xa5
[  193.640615][ T3594] hid (null): unknown global tag 0xd
[  193.653657][ T3594] hid (null): unknown global tag 0xc
[  193.662222][ T3594] hid-generic 0003:0158:0100.0009: unknown main item tag 0x1
[  193.670282][ T3594] hid-generic 0003:0158:0100.0009: unexpected long global item
[  193.679629][ T3594] hid-generic: probe of 0003:0158:0100.0009 failed with error -22
[  193.866485][ T5584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  193.899677][ T5584] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  193.924120][ T3594] usb 5-1: USB disconnect, device number 5
[  194.229650][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  194.461369][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  195.116346][ T3018] usb 2-1: USB disconnect, device number 8
[  195.342602][ T5637] loop1: detected capacity change from 0 to 128
[  195.391404][ T3553] Bluetooth: Wrong link type (-71)
[  195.906248][ T5643] loop2: detected capacity change from 0 to 4096
[  196.077206][ T5643] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  196.406380][ T5643] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  197.011897][ T5637] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  197.045929][ T5637] ext4 filesystem being mounted at /106/mnt supports timestamps until 2038 (0x7fffffff)
[  197.131668][ T5630] loop4: detected capacity change from 0 to 32768
[  197.178038][ T3536] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (3536)
[  198.134096][ T5096] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  198.583702][ T3590] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  198.843697][ T3590] usb 3-1: Using ep0 maxpacket: 32
[  198.963970][ T3590] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  199.010196][ T3590] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  199.029940][ T3590] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.077457][ T3546] EXT4-fs (loop1): unmounting filesystem.
[  199.085563][ T3590] usb 3-1: config 0 descriptor??
[  199.137017][ T5673] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  199.164679][ T3590] hub 3-1:0.0: bad descriptor, ignoring hub
[  199.170634][ T3590] hub: probe of 3-1:0.0 failed with error -5
[  199.196220][ T3590] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  199.388147][ T5685] loop1: detected capacity change from 0 to 256
[  199.526371][ T5685] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  200.794107][ T5685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'.
[  201.407264][ T3553] Bluetooth: Wrong link type (-71)
[  201.544704][ T5708] loop3: detected capacity change from 0 to 4096
[  201.553865][ T5708] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  201.570410][ T5708] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  202.183867][ T3592] usb 3-1: USB disconnect, device number 4
[  202.585906][ T5713] loop2: detected capacity change from 0 to 4096
[  202.768956][ T5720] loop0: detected capacity change from 0 to 512
[  202.795063][ T5720] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  202.866318][ T4974] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  202.876869][ T5720] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  203.003069][ T5720] EXT4-fs (loop0): 1 truncate cleaned up
[  203.009654][ T5720] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  203.522947][ T3553] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  203.532049][ T3553] Bluetooth: hci0: Injecting HCI hardware error event
[  203.542416][ T3553] Bluetooth: hci0: hardware error 0x00
[  204.619635][ T4052] EXT4-fs (loop0): unmounting filesystem.
[  205.691909][ T5758] loop2: detected capacity change from 0 to 4096
[  205.699403][ T5758] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  205.708893][ T3590] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  205.756557][ T5758] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  205.877353][ T5766] loop4: detected capacity change from 0 to 128
[  205.953619][ T3590] usb 1-1: Using ep0 maxpacket: 32
[  206.026873][ T5766] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  206.039201][ T5766] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038 (0x7fffffff)
[  206.073651][ T3590] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  206.115979][ T3590] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  206.146794][ T3590] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.156412][ T5772] netlink: 32 bytes leftover after parsing attributes in process `syz.1.480'.
[  206.195465][ T3590] usb 1-1: config 0 descriptor??
[  206.223969][ T5750] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  206.264736][ T3590] hub 1-1:0.0: bad descriptor, ignoring hub
[  206.270889][ T3590] hub: probe of 1-1:0.0 failed with error -5
[  206.306562][ T3590] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  206.403244][ T5096] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  206.593739][ T3553] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  206.890783][ T5790] loop1: detected capacity change from 0 to 512
[  206.925719][ T3974] EXT4-fs (loop4): unmounting filesystem.
[  206.961449][ T5790] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (3832!=33349)
[  207.853013][ T5790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e01c, mo2=0002]
[  207.893392][ T5790] System zones: 1-12
[  207.898689][ T5790] EXT4-fs (loop1): orphan cleanup on readonly fs
[  207.918553][ T5790] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.485: Inode bitmap for bg 0 marked uninitialized
[  207.993846][ T5790] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  208.199925][ T3546] EXT4-fs (loop1): unmounting filesystem.
[  208.619875][ T5783] loop3: detected capacity change from 0 to 32768
[  209.327840][   T27] audit: type=1800 audit(1720123750.830:2): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.483" name="memory.events" dev="loop3" ino=7 res=0 errno=0
[  209.665565][ T5825] loop4: detected capacity change from 0 to 4096
[  209.673022][ T5825] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  209.683048][   T26] usb 1-1: USB disconnect, device number 7
[  209.806060][ T5825] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  210.274716][ T5843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.453979][ T5843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  210.945796][ T3974] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  211.817039][   T34] tipc: Subscription rejected, illegal request
[  212.488966][ T5865] loop0: detected capacity change from 0 to 32768
[  213.663707][   T27] audit: type=1800 audit(1720123755.170:3): pid=5895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.504" name="memory.events" dev="loop0" ino=7 res=0 errno=0
[  215.265206][ T5922] input: syz0 as /devices/virtual/input/input7
[  215.583679][   T22] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  216.423586][   T22] usb 4-1: Using ep0 maxpacket: 16
[  217.003784][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  217.043692][   T22] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  217.101991][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.145968][   T22] usb 4-1: config 0 descriptor??
[  217.600543][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.632096][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  217.685104][   T22] hid (null): unknown global tag 0xa5
[  217.690820][   T22] hid (null): unknown global tag 0xd
[  217.711541][   T22] hid (null): unknown global tag 0xc
[  217.744574][   T22] hid-generic 0003:0158:0100.000A: unknown main item tag 0x1
[  217.782884][   T22] hid-generic 0003:0158:0100.000A: unexpected long global item
[  217.827753][   T22] hid-generic: probe of 0003:0158:0100.000A failed with error -22
[  217.896627][ T5926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  217.923932][ T5926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.035162][ T3590] usb 4-1: USB disconnect, device number 6
[  218.123990][ T5932] loop0: detected capacity change from 0 to 32768
[  218.258842][ T5932] XFS (loop0): Mounting V5 Filesystem
[  218.389541][ T5932] XFS (loop0): Ending clean mount
[  218.682818][ T4052] XFS (loop0): Unmounting Filesystem
[  220.253528][   T22] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  220.303136][ T5970] loop1: detected capacity change from 0 to 32768
[  220.384002][ T5970] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop1 scanned by syz.1.531 (5970)
[  220.450210][ T5999] input: syz0 as /devices/virtual/input/input8
[  220.518418][ T5970] BTRFS info (device loop1): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  220.571104][ T5970] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  220.595911][ T5970] BTRFS info (device loop1): using free space tree
[  220.673927][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.693738][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.703997][   T22] usb 4-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00
[  220.713305][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.727751][   T22] usb 4-1: config 0 descriptor??
[  220.825577][ T5970] BTRFS info (device loop1): enabling ssd optimizations
[  221.115846][ T5996] loop2: detected capacity change from 0 to 40427
[  221.161761][ T5996] F2FS-fs (loop2): Found nat_bits in checkpoint
[  221.263749][   T22] usbhid 4-1:0.0: can't add hid device: -71
[  221.273607][ T5996] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  221.277785][   T22] usbhid: probe of 4-1:0.0 failed with error -71
[  222.006441][ T5096] syz-executor: attempt to access beyond end of device
[  222.006441][ T5096] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  222.022180][   T22] usb 4-1: USB disconnect, device number 7
[  222.046891][ T3546] BTRFS info (device loop1): last unmount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  222.086471][ T5096] syz-executor: attempt to access beyond end of device
[  222.086471][ T5096] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  222.443624][   T22] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  222.452283][ T3866] kworker/u4:11: attempt to access beyond end of device
[  222.452283][ T3866] loop2: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  222.723672][   T22] usb 4-1: Using ep0 maxpacket: 16
[  222.873741][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 33032, setting to 1024
[  222.899181][   T22] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  222.916007][ T5737] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.929424][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  222.982458][   T22] usb 4-1: config 0 descriptor??
[  223.072241][ T6034] loop4: detected capacity change from 0 to 32768
[  223.118690][ T5737] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.262844][ T5737] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.266701][ T6034] XFS (loop4): Mounting V5 Filesystem
[  223.357832][ T5737] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.387899][ T6034] XFS (loop4): Ending clean mount
[  223.479789][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.506390][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.568119][   T22] hid (null): unknown global tag 0xa5
[  223.579489][ T6045] loop0: detected capacity change from 0 to 32768
[  223.592673][   T22] hid (null): unknown global tag 0xd
[  223.623092][   T22] hid (null): unknown global tag 0xc
[  223.650093][   T22] hid-generic 0003:0158:0100.000B: unknown main item tag 0x1
[  223.688449][   T22] hid-generic 0003:0158:0100.000B: unexpected long global item
[  223.874012][   T22] hid-generic: probe of 0003:0158:0100.000B failed with error -22
[  223.884576][ T6032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.905068][ T3974] XFS (loop4): Unmounting Filesystem
[  223.931365][ T6032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  224.458520][ T6038] usb 4-1: USB disconnect, device number 8
[  224.500243][   T27] audit: type=1800 audit(1720123766.030:4): pid=6064 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.547" name="memory.events" dev="loop0" ino=7 res=0 errno=0
[  224.646936][ T3560] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  224.657590][ T3560] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  224.669879][ T3560] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  224.688448][ T3560] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  224.696240][ T3560] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  224.704122][ T3560] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  225.264817][ T3628] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  225.340563][ T6068] chnl_net:caif_netlink_parms(): no params data found
[  225.664027][ T3628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.698079][ T3628] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.741794][ T3628] usb 1-1: New USB device found, idVendor=056a, idProduct=01bb, bcdDevice= 0.00
[  225.784953][ T3628] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.835052][ T3628] usb 1-1: config 0 descriptor??
[  225.985058][ T6076] loop1: detected capacity change from 0 to 40427
[  226.068293][ T6068] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.079428][ T6068] bridge0: port 1(bridge_slave_0) entered disabled state
[  226.084381][ T6092] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  226.087020][ T6076] F2FS-fs (loop1): Found nat_bits in checkpoint
[  226.104598][ T6068] device bridge_slave_0 entered promiscuous mode
[  226.125362][ T6068] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.142890][ T6068] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.176043][ T6068] device bridge_slave_1 entered promiscuous mode
[  226.392255][ T6076] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  226.403761][ T3628] usbhid 1-1:0.0: can't add hid device: -71
[  226.409786][ T3628] usbhid: probe of 1-1:0.0 failed with error -71
[  227.248697][ T3628] usb 1-1: USB disconnect, device number 8
[  227.608392][ T3546] syz-executor: attempt to access beyond end of device
[  227.608392][ T3546] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  227.672330][ T6068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  227.685334][ T3546] syz-executor: attempt to access beyond end of device
[  227.685334][ T3546] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  227.873673][ T6068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  228.015044][ T3866] kworker/u4:11: attempt to access beyond end of device
[  228.015044][ T3866] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  228.039822][ T5737] device hsr_slave_0 left promiscuous mode
[  228.090514][ T5737] device hsr_slave_1 left promiscuous mode
[  228.104224][ T5737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.130620][ T5737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.165649][ T5737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.191904][ T5737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.203725][ T5737] device bridge_slave_1 left promiscuous mode
[  228.210579][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[  228.221665][ T5737] device bridge_slave_0 left promiscuous mode
[  228.231832][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.275044][ T5737] device veth1_macvtap left promiscuous mode
[  228.281360][ T5737] device veth0_macvtap left promiscuous mode
[  228.307007][ T5737] device veth1_vlan left promiscuous mode
[  228.313091][ T5737] device veth0_vlan left promiscuous mode
[  228.945480][ T6128] loop3: detected capacity change from 0 to 40427
[  229.006735][ T6128] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  229.028171][ T6128] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  229.051418][ T6128] F2FS-fs (loop3): invalid crc value
[  229.081844][ T6128] F2FS-fs (loop3): Found nat_bits in checkpoint
[  229.158398][ T6128] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  229.173697][ T6128] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  229.589441][ T5737] team0 (unregistering): Port device team_slave_1 removed
[  229.626296][ T5737] team0 (unregistering): Port device team_slave_0 removed
[  229.667601][ T5737] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.708603][ T5737] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  230.160625][ T5737] bond0 (unregistering): Released all slaves
[  230.518259][ T6068] team0: Port device team_slave_0 added
[  230.624868][ T6068] team0: Port device team_slave_1 added
[  231.393812][ T6164] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  231.537149][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.604338][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.693888][ T6068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  231.785480][ T6068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.792470][ T6068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.893975][ T6068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.924337][ T3553] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  231.935032][ T3553] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  231.943601][ T3553] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  231.963638][ T3553] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  231.982942][ T3553] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  231.991601][ T3553] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  232.159126][ T6068] device hsr_slave_0 entered promiscuous mode
[  232.284023][ T6068] device hsr_slave_1 entered promiscuous mode
[  233.344984][ T6172] loop0: detected capacity change from 0 to 40427
[  233.402152][ T6172] F2FS-fs (loop0): invalid crc value
[  233.486792][ T6204] netlink: 12 bytes leftover after parsing attributes in process `syz.3.579'.
[  233.503658][ T6172] F2FS-fs (loop0): Found nat_bits in checkpoint
[  233.603514][ T6211] bond1: (slave vti0): The slave device specified does not support setting the MAC address
[  233.614738][ T6211] bond1: (slave vti0): Error -95 calling set_mac_address
[  233.665922][ T6172] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  233.703026][ T6178] chnl_net:caif_netlink_parms(): no params data found
[  233.777632][ T6172] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  234.034481][ T3560] Bluetooth: hci1: command tx timeout
[  234.206076][ T6228] cgroup: noprefix used incorrectly
[  234.315695][ T4052] syz-executor: attempt to access beyond end of device
[  234.315695][ T4052] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  234.480023][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.489721][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.510564][ T6178] device bridge_slave_0 entered promiscuous mode
[  234.611301][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.624037][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.645838][ T6178] device bridge_slave_1 entered promiscuous mode
[  234.819374][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.866355][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  235.112463][ T6178] team0: Port device team_slave_0 added
[  235.189230][ T6178] team0: Port device team_slave_1 added
[  235.256788][ T6222] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  235.504632][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.528733][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.658952][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.709217][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.757323][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.830252][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.863196][ T6068] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  235.890622][ T6068] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  236.219838][ T3553] Bluetooth: hci1: command tx timeout
[  236.481243][ T3560] Bluetooth: hci3: command tx timeout
[  236.527853][ T6068] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  236.684871][ T6068] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  236.721967][ T6178] device hsr_slave_0 entered promiscuous mode
[  236.761958][ T6178] device hsr_slave_1 entered promiscuous mode
[  236.774893][ T6178] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  236.802842][ T6178] Cannot create hsr debugfs directory
[  236.837779][ T6267] loop3: detected capacity change from 0 to 4096
[  236.840654][ T6270] netlink: 12 bytes leftover after parsing attributes in process `syz.4.588'.
[  236.966268][ T6276] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  237.489616][ T6068] 8021q: adding VLAN 0 to HW filter on device bond0
[  237.538096][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  237.559170][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  237.606463][ T6068] 8021q: adding VLAN 0 to HW filter on device team0
[  237.635458][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  237.661038][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  237.680222][   T22] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.687643][   T22] bridge0: port 1(bridge_slave_0) entered forwarding state
[  237.721756][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  237.842025][ T6178] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  237.924465][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  237.941045][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  237.970955][   T22] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.978136][   T22] bridge0: port 2(bridge_slave_1) entered forwarding state
[  238.020450][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  238.092499][ T6296] cgroup: noprefix used incorrectly
[  238.115323][ T6178] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.174999][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  238.277508][ T6178] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.283713][ T3560] Bluetooth: hci1: command tx timeout
[  238.345016][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  238.354274][ T3560] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  238.362899][ T3560] Bluetooth: hci3: Injecting HCI hardware error event
[  238.371588][ T3553] Bluetooth: hci3: hardware error 0x00
[  238.426853][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  238.457598][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  238.475203][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  238.502698][ T6068] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  238.516681][ T6068] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  238.626284][ T6178] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.651084][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  238.666576][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  238.685854][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  238.711806][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  238.735077][ T3591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  238.769204][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  238.936408][ T6298] Bluetooth: hci0: Opcode 0x0c03 failed: -4
[  239.629103][ T6320] netlink: 12 bytes leftover after parsing attributes in process `syz.4.598'.
[  240.317879][ T6178] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  240.349546][ T6348] cgroup: noprefix used incorrectly
[  240.366387][ T3560] Bluetooth: hci1: command tx timeout
[  240.397949][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  240.406069][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  240.433657][ T3553] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  240.487214][ T6178] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  240.502527][ T6068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.511243][ T6351] loop4: detected capacity change from 0 to 4096
[  240.518491][ T6178] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  240.541589][ T6178] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  240.624565][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.652079][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.679653][ T6360] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  240.761977][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.775138][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  240.798085][ T6068] device veth0_vlan entered promiscuous mode
[  240.815884][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  240.827421][ T3587] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  240.872224][ T6068] device veth1_vlan entered promiscuous mode
[  241.081365][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  241.109399][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  241.129627][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  241.152965][ T6038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  241.185571][ T6068] device veth0_macvtap entered promiscuous mode
[  241.228194][ T6068] device veth1_macvtap entered promiscuous mode
[  241.267944][ T5737] device hsr_slave_0 left promiscuous mode
[  241.284178][ T5737] device hsr_slave_1 left promiscuous mode
[  241.339576][ T5737] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.353681][ T5737] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.391162][ T5737] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.416326][ T5737] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.434978][ T5737] device bridge_slave_1 left promiscuous mode
[  241.444560][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.616097][ T6373] loop3: detected capacity change from 0 to 32768
[  241.697382][ T6373] ================================================================================
[  241.697473][ T6375] ================================================================================
[  241.707093][ T6373] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:9
[  241.716616][ T6375] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:270:11
[  241.716638][ T6375] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
[  241.716659][ T6375] CPU: 0 PID: 6375 Comm: syz.3.609 Not tainted 6.1.96-syzkaller #0
[  241.716678][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  241.724219][ T6373] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
[  241.731800][ T6375] Call Trace:
[  241.731808][ T6375]  <TASK>
[  241.731816][ T6375]  dump_stack_lvl+0x1e3/0x2cb
[  241.731859][ T6375]  ? nf_tcp_handle_invalid+0x642/0x642
[  241.731887][ T6375]  ? panic+0x764/0x764
[  241.731910][ T6375]  ? PageHeadHuge+0x8e/0x1c0
[  241.731936][ T6375]  ? folio_unlock+0x122/0x2f0
[  241.731967][ T6375]  __ubsan_handle_out_of_bounds+0x118/0x140
[  241.731996][ T6375]  ? validate_chain+0x112/0x5950
[  241.732029][ T6375]  xtSearch+0x10e8/0x1ca0
[  241.732073][ T6375]  xtLookup+0x2c0/0x8e0
[  241.732101][ T6375]  ? jfs_umount_rw+0x130/0x130
[  241.732160][ T6375]  extHint+0x291/0x710
[  241.825087][ T6375]  ? extAlloc+0x1000/0x1000
[  241.829622][ T6375]  jfs_get_block+0x3a7/0xe50
[  241.834215][ T6375]  ? create_page_buffers+0x1d2/0x4b0
[  241.839516][ T6375]  ? jfs_dirty_inode+0x230/0x230
[  241.844475][ T6375]  ? create_page_buffers+0x24e/0x4b0
[  241.849762][ T6375]  __block_write_begin_int+0x544/0x1a30
[  241.855326][ T6375]  ? rcu_is_watching+0x11/0xb0
[  241.860088][ T6375]  ? jfs_dirty_inode+0x230/0x230
[  241.865025][ T6375]  ? page_zero_new_buffers+0x650/0x650
[  241.870592][ T6375]  ? jfs_dirty_inode+0x230/0x230
[  241.875547][ T6375]  block_write_begin+0x98/0x1f0
[  241.880433][ T6375]  ? jfs_write_begin+0x16/0x60
[  241.885217][ T6375]  jfs_write_begin+0x2d/0x60
[  241.889826][ T6375]  generic_perform_write+0x2fc/0x5e0
[  241.895126][ T6375]  ? generic_file_direct_write+0x460/0x460
[  241.900942][ T6375]  ? __file_remove_privs+0x640/0x640
[  241.906236][ T6375]  ? generic_write_checks+0x15c/0x1c0
[  241.911869][ T6375]  ? clear_nonspinnable+0x60/0x60
[  241.916901][ T6375]  __generic_file_write_iter+0x176/0x400
[  241.922543][ T6375]  generic_file_write_iter+0xab/0x310
[  241.928005][ T6375]  vfs_write+0x7ae/0xba0
[  241.932340][ T6375]  ? file_end_write+0x250/0x250
[  241.937197][ T6375]  ? __fget_files+0x28/0x4a0
[  241.941798][ T6375]  ? __fget_files+0x435/0x4a0
[  241.946509][ T6375]  ? __fdget_pos+0x2ba/0x360
[  241.951187][ T6375]  ? ksys_write+0x77/0x2c0
[  241.955605][ T6375]  ksys_write+0x19c/0x2c0
[  241.959932][ T6375]  ? print_irqtrace_events+0x210/0x210
[  241.965397][ T6375]  ? __ia32_sys_read+0x80/0x80
[  241.970160][ T6375]  ? syscall_enter_from_user_mode+0x2e/0x230
[  241.976145][ T6375]  ? lockdep_hardirqs_on+0x94/0x130
[  241.981342][ T6375]  ? syscall_enter_from_user_mode+0x2e/0x230
[  241.987329][ T6375]  do_syscall_64+0x3b/0xb0
[  241.991760][ T6375]  ? clear_bhb_loop+0x45/0xa0
[  241.996445][ T6375]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.002340][ T6375] RIP: 0033:0x7f978db75bd9
[  242.006893][ T6375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.026634][ T6375] RSP: 002b:00007f978ea0b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  242.035057][ T6375] RAX: ffffffffffffffda RBX: 00007f978dd04038 RCX: 00007f978db75bd9
[  242.043032][ T6375] RDX: 000000000208e24b RSI: 0000000020000240 RDI: 0000000000000007
[  242.051003][ T6375] RBP: 00007f978dbe4aa1 R08: 0000000000000000 R09: 0000000000000000
[  242.058978][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.066943][ T6375] R13: 000000000000006e R14: 00007f978dd04038 R15: 00007fff050dba48
[  242.074934][ T6375]  </TASK>
[  242.077950][ T6373] CPU: 1 PID: 6373 Comm: syz.3.609 Not tainted 6.1.96-syzkaller #0
[  242.079461][ T6375] ================================================================================
[  242.085842][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  242.085859][ T6373] Call Trace:
[  242.085867][ T6373]  <TASK>
[  242.085874][ T6373]  dump_stack_lvl+0x1e3/0x2cb
[  242.085906][ T6373]  ? __get_metapage+0x9ae/0x1040
[  242.095233][ T6375] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  242.105217][ T6373]  ? nf_tcp_handle_invalid+0x642/0x642
[  242.105245][ T6373]  ? panic+0x764/0x764
[  242.105277][ T6373]  __ubsan_handle_out_of_bounds+0x118/0x140
[  242.105307][ T6373]  xtInsert+0xf41/0xfa0
[  242.105339][ T6373]  ? xtSearch+0x1ca0/0x1ca0
[  242.105380][ T6373]  ? mark_lock+0x9a/0x340
[  242.105408][ T6373]  ? __dquot_drop+0x420/0x420
[  242.105440][ T6373]  ? rcu_is_watching+0x11/0xb0
[  242.105456][ T6373]  ? __mark_inode_dirty+0x430/0xf80
[  242.105486][ T6373]  extAlloc+0xa70/0x1000
[  242.105525][ T6373]  ? jfs_ioc_trim+0x660/0x660
[  242.105561][ T6373]  jfs_get_block+0x417/0xe50
[  242.105584][ T6373]  ? create_page_buffers+0x1d2/0x4b0
[  242.105612][ T6373]  ? jfs_dirty_inode+0x230/0x230
[  242.105640][ T6373]  ? create_page_buffers+0x24e/0x4b0
[  242.105662][ T6373]  __block_write_begin_int+0x544/0x1a30
[  242.105702][ T6373]  ? jfs_dirty_inode+0x230/0x230
[  242.105720][ T6373]  ? page_zero_new_buffers+0x650/0x650
[  242.105746][ T6373]  ? jfs_dirty_inode+0x230/0x230
[  242.105764][ T6373]  block_write_begin+0x98/0x1f0
[  242.105780][ T6373]  ? jfs_write_begin+0x16/0x60
[  242.105801][ T6373]  jfs_write_begin+0x2d/0x60
[  242.105821][ T6373]  generic_perform_write+0x2fc/0x5e0
[  242.105852][ T6373]  ? generic_file_direct_write+0x460/0x460
[  242.105871][ T6373]  ? __file_remove_privs+0x640/0x640
[  242.105896][ T6373]  ? generic_write_checks+0x15c/0x1c0
[  242.105916][ T6373]  ? clear_nonspinnable+0x60/0x60
[  242.105945][ T6373]  __generic_file_write_iter+0x176/0x400
[  242.105971][ T6373]  generic_file_write_iter+0xab/0x310
[  242.105992][ T6373]  vfs_write+0x7ae/0xba0
[  242.106017][ T6373]  ? file_end_write+0x250/0x250
[  242.106037][ T6373]  ? __fget_files+0x28/0x4a0
[  242.106053][ T6373]  ? __fget_files+0x435/0x4a0
[  242.106078][ T6373]  ? __fdget_pos+0x2ba/0x360
[  242.106094][ T6373]  ? ksys_write+0x77/0x2c0
[  242.106112][ T6373]  ksys_write+0x19c/0x2c0
[  242.106129][ T6373]  ? print_irqtrace_events+0x210/0x210
[  242.106156][ T6373]  ? __ia32_sys_read+0x80/0x80
[  242.106174][ T6373]  ? syscall_enter_from_user_mode+0x2e/0x230
[  242.106193][ T6373]  ? lockdep_hardirqs_on+0x94/0x130
[  242.106213][ T6373]  ? syscall_enter_from_user_mode+0x2e/0x230
[  242.106236][ T6373]  do_syscall_64+0x3b/0xb0
[  242.106258][ T6373]  ? clear_bhb_loop+0x45/0xa0
[  242.106282][ T6373]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.106306][ T6373] RIP: 0033:0x7f978db75bd9
[  242.106322][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.106336][ T6373] RSP: 002b:00007f978ea2c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  242.106354][ T6373] RAX: ffffffffffffffda RBX: 00007f978dd03f60 RCX: 00007f978db75bd9
[  242.106366][ T6373] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005
[  242.106377][ T6373] RBP: 00007f978dbe4aa1 R08: 0000000000000000 R09: 0000000000000000
[  242.106388][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.106398][ T6373] R13: 000000000000000b R14: 00007f978dd03f60 R15: 00007fff050dba48
[  242.106426][ T6373]  </TASK>
[  242.106433][ T6375] CPU: 0 PID: 6375 Comm: syz.3.609 Not tainted 6.1.96-syzkaller #0
[  242.106484][ T6373] ================================================================================
[  242.106683][ T6373] ================================================================================
[  242.106690][ T6373] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:179:9
[  242.106704][ T6373] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
[  242.468012][ T6375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  242.478086][ T6375] Call Trace:
[  242.481361][ T6375]  <TASK>
[  242.484288][ T6375]  dump_stack_lvl+0x1e3/0x2cb
[  242.488973][ T6375]  ? nf_tcp_handle_invalid+0x642/0x642
[  242.494444][ T6375]  ? panic+0x764/0x764
[  242.498630][ T6375]  ? vscnprintf+0x59/0x80
[  242.502958][ T6375]  panic+0x318/0x764
[  242.506860][ T6375]  ? check_panic_on_warn+0x1d/0xa0
[  242.511970][ T6375]  ? memcpy_page_flushcache+0xfc/0xfc
[  242.517346][ T6375]  ? dump_stack_lvl+0x24f/0x2cb
[  242.522203][ T6375]  ? PageHeadHuge+0x8e/0x1c0
[  242.526804][ T6375]  check_panic_on_warn+0x7e/0xa0
[  242.531745][ T6375]  __ubsan_handle_out_of_bounds+0x138/0x140
[  242.537638][ T6375]  ? validate_chain+0x112/0x5950
[  242.542583][ T6375]  xtSearch+0x10e8/0x1ca0
[  242.546932][ T6375]  xtLookup+0x2c0/0x8e0
[  242.551094][ T6375]  ? jfs_umount_rw+0x130/0x130
[  242.555890][ T6375]  extHint+0x291/0x710
[  242.559970][ T6375]  ? extAlloc+0x1000/0x1000
[  242.564490][ T6375]  jfs_get_block+0x3a7/0xe50
[  242.569077][ T6375]  ? create_page_buffers+0x1d2/0x4b0
[  242.574365][ T6375]  ? jfs_dirty_inode+0x230/0x230
[  242.579315][ T6375]  ? create_page_buffers+0x24e/0x4b0
[  242.584610][ T6375]  __block_write_begin_int+0x544/0x1a30
[  242.590199][ T6375]  ? rcu_is_watching+0x11/0xb0
[  242.594975][ T6375]  ? jfs_dirty_inode+0x230/0x230
[  242.599919][ T6375]  ? page_zero_new_buffers+0x650/0x650
[  242.605396][ T6375]  ? jfs_dirty_inode+0x230/0x230
[  242.610329][ T6375]  block_write_begin+0x98/0x1f0
[  242.615259][ T6375]  ? jfs_write_begin+0x16/0x60
[  242.620024][ T6375]  jfs_write_begin+0x2d/0x60
[  242.624611][ T6375]  generic_perform_write+0x2fc/0x5e0
[  242.629911][ T6375]  ? generic_file_direct_write+0x460/0x460
[  242.635714][ T6375]  ? __file_remove_privs+0x640/0x640
[  242.641004][ T6375]  ? generic_write_checks+0x15c/0x1c0
[  242.646370][ T6375]  ? clear_nonspinnable+0x60/0x60
[  242.651398][ T6375]  __generic_file_write_iter+0x176/0x400
[  242.657040][ T6375]  generic_file_write_iter+0xab/0x310
[  242.662411][ T6375]  vfs_write+0x7ae/0xba0
[  242.666657][ T6375]  ? file_end_write+0x250/0x250
[  242.671511][ T6375]  ? __fget_files+0x28/0x4a0
[  242.676107][ T6375]  ? __fget_files+0x435/0x4a0
[  242.680785][ T6375]  ? __fdget_pos+0x2ba/0x360
[  242.685454][ T6375]  ? ksys_write+0x77/0x2c0
[  242.689881][ T6375]  ksys_write+0x19c/0x2c0
[  242.694203][ T6375]  ? print_irqtrace_events+0x210/0x210
[  242.699690][ T6375]  ? __ia32_sys_read+0x80/0x80
[  242.704451][ T6375]  ? syscall_enter_from_user_mode+0x2e/0x230
[  242.710432][ T6375]  ? lockdep_hardirqs_on+0x94/0x130
[  242.715638][ T6375]  ? syscall_enter_from_user_mode+0x2e/0x230
[  242.721714][ T6375]  do_syscall_64+0x3b/0xb0
[  242.726136][ T6375]  ? clear_bhb_loop+0x45/0xa0
[  242.730836][ T6375]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.736736][ T6375] RIP: 0033:0x7f978db75bd9
[  242.741153][ T6375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.761103][ T6375] RSP: 002b:00007f978ea0b048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  242.769520][ T6375] RAX: ffffffffffffffda RBX: 00007f978dd04038 RCX: 00007f978db75bd9
[  242.777751][ T6375] RDX: 000000000208e24b RSI: 0000000020000240 RDI: 0000000000000007
[  242.785736][ T6375] RBP: 00007f978dbe4aa1 R08: 0000000000000000 R09: 0000000000000000
[  242.793793][ T6375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.801764][ T6375] R13: 000000000000006e R14: 00007f978dd04038 R15: 00007fff050dba48
[  242.809748][ T6375]  </TASK>
[  242.812770][ T6373] CPU: 1 PID: 6373 Comm: syz.3.609 Not tainted 6.1.96-syzkaller #0
[  242.812788][ T6373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  242.812799][ T6373] Call Trace:
[  242.812806][ T6373]  <TASK>
[  242.812813][ T6373]  dump_stack_lvl+0x1e3/0x2cb
[  242.812849][ T6373]  ? __get_metapage+0x9ae/0x1040
[  242.812878][ T6373]  ? nf_tcp_handle_invalid+0x642/0x642
[  242.812910][ T6373]  ? panic+0x764/0x764
[  242.812954][ T6373]  __ubsan_handle_out_of_bounds+0x118/0x140
[  242.812996][ T6373]  xtLookup+0x8cc/0x8e0
[  242.813026][ T6373]  ? jfs_umount_rw+0x130/0x130
[  242.813086][ T6373]  extHint+0x291/0x710
[  242.813120][ T6373]  ? extAlloc+0x1000/0x1000
[  242.813163][ T6373]  jfs_get_block+0x3a7/0xe50
[  242.813182][ T6373]  ? create_page_buffers+0x1d2/0x4b0
[  242.813212][ T6373]  ? jfs_dirty_inode+0x230/0x230
[  242.813242][ T6373]  ? create_page_buffers+0x24e/0x4b0
[  242.813265][ T6373]  __block_write_begin_int+0x544/0x1a30
[  242.813313][ T6373]  ? jfs_dirty_inode+0x230/0x230
[  242.813332][ T6373]  ? page_zero_new_buffers+0x650/0x650
[  242.813360][ T6373]  ? jfs_dirty_inode+0x230/0x230
[  242.813379][ T6373]  block_write_begin+0x98/0x1f0
[  242.813396][ T6373]  ? jfs_write_begin+0x16/0x60
[  242.813419][ T6373]  jfs_write_begin+0x2d/0x60
[  242.813443][ T6373]  generic_perform_write+0x2fc/0x5e0
[  242.813474][ T6373]  ? generic_file_direct_write+0x460/0x460
[  242.813494][ T6373]  ? __file_remove_privs+0x640/0x640
[  242.813531][ T6373]  ? generic_write_checks+0x15c/0x1c0
[  242.813552][ T6373]  ? clear_nonspinnable+0x60/0x60
[  242.813580][ T6373]  __generic_file_write_iter+0x176/0x400
[  242.813612][ T6373]  generic_file_write_iter+0xab/0x310
[  242.813635][ T6373]  vfs_write+0x7ae/0xba0
[  242.813671][ T6373]  ? file_end_write+0x250/0x250
[  242.813697][ T6373]  ? __fget_files+0x28/0x4a0
[  242.813723][ T6373]  ? __fget_files+0x435/0x4a0
[  242.813749][ T6373]  ? __fdget_pos+0x2ba/0x360
[  242.813766][ T6373]  ? ksys_write+0x77/0x2c0
[  242.813786][ T6373]  ksys_write+0x19c/0x2c0
[  242.813803][ T6373]  ? print_irqtrace_events+0x210/0x210
[  242.813832][ T6373]  ? __ia32_sys_read+0x80/0x80
[  242.813851][ T6373]  ? syscall_enter_from_user_mode+0x2e/0x230
[  242.813877][ T6373]  ? lockdep_hardirqs_on+0x94/0x130
[  242.813898][ T6373]  ? syscall_enter_from_user_mode+0x2e/0x230
[  242.813923][ T6373]  do_syscall_64+0x3b/0xb0
[  242.813947][ T6373]  ? clear_bhb_loop+0x45/0xa0
[  242.813974][ T6373]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  242.813998][ T6373] RIP: 0033:0x7f978db75bd9
[  242.814019][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  242.814035][ T6373] RSP: 002b:00007f978ea2c048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  242.814054][ T6373] RAX: ffffffffffffffda RBX: 00007f978dd03f60 RCX: 00007f978db75bd9
[  242.814067][ T6373] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000005
[  242.814079][ T6373] RBP: 00007f978dbe4aa1 R08: 0000000000000000 R09: 0000000000000000
[  242.814091][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  242.814101][ T6373] R13: 000000000000000b R14: 00007f978dd03f60 R15: 00007fff050dba48
[  242.814130][ T6373]  </TASK>
[  242.814374][ T6375] Kernel Offset: disabled
[  243.129104][ T6375] Rebooting in 86400 seconds..