last executing test programs:

14.272664705s ago: executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x18000000, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWSETELEM={0x250, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x228, 0x3, 0x0, 0x1, [{0x224, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x1f4, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd3, 0x1, "3357ada11fb6052717ce779fc0649fa46f57773ed4f2be8f4aaf6bf4a1efdcd196d088ed14081c4b5107846bd12ff69b88745c5b1e4a1f1bf00b2acb92c788e1f8917c7c8edf55977a1283ae106b0583a8ffdbae5d6b408c1cc2181a1d5228ab740980857cd6c75c2f40a2f0b7536d880d074222a9793c6159e7cc9c0cfb23f2ba9b5e64715e6dc18d44d2005a0f8890e3c1aec11a52479875072a21d8c1152781dc0701b54659175c59d802e93257be681e92dbed97130134a086053935d3b7982a04b237654dc0190e33c2f386af"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0xffffffffffffff00, 0x1, "d39a0e9cdae257180e814f45139d783cd309c8724d167fd602240c130fea22897e994f18839ca4039d09c11bb4c17e240f77869c4a7fe520708e4562cb839c919e7ac400139b6201960e41944fa55301b0977e7e32126f843fcbf3d06ee72ea1547795bfe2b0a5db20f01034b1397f6aa95c0f5080aa09a459c49209331831e530f1e73eaf587561e2ab1354abbff27cdfc39f272a36193e45a7bc3c51908a32de325208d52bf1af7a8bf0db209a20755302ffa129686f4a6a44596dcbd5c5ac7c7f7de977d79891f04fef3639bf2c61d197c10b9872c1567512293fbfe17a6b3e6fbe13ca5ffe14e3c73b00586dc5"}]}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0x6, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}, {0x14, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0x2d4}}, 0x0)

14.116435189s ago: executing program 3:
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f0000000140), 0x2)

12.781659775s ago: executing program 1:
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0xffffff6f)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x9}, 0x48)
r1 = socket$kcm(0xa, 0x2, 0x0)
setsockopt$sock_attach_bpf(r1, 0x29, 0x30, &(0x7f00000000c0), 0xb9)

12.671204372s ago: executing program 1:
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b9800000c00f3235000800000f300fe095a6520000b8010000000f01d9c402d53b9e0700000026f047ff4d14f30fc775ddb9c5090000b86c000000ba000000000f300f08450f01cb4a0fc72b", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

12.211751123s ago: executing program 0:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000d40)=@ipv6_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0xfc}}, 0x1c}}, 0x0)

11.931187167s ago: executing program 0:
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000180))
ioctl$UFFDIO_ZEROPAGE(r0, 0x541b, 0x0)

11.854951148s ago: executing program 0:
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$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")
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r0, &(0x7f0000000100)='./file1\x00', r0, &(0x7f0000000240)='./file0\x00', 0x0)
unlink(&(0x7f0000000280)='./file1\x00')
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x62901, 0x0)

10.797572492s ago: executing program 0:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = socket(0xa, 0x2, 0x0)
bind$inet6(r1, 0x0, 0x0)
getsockname$netrom(r1, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'wg2\x00'})
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000640)=@bpf_tracing={0x1a, 0x17, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, {}, {}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7fff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x3, 0x0, 0x0, 0x1ff}, 0x10, 0x12913, 0xffffffffffffffff, 0x7, &(0x7f0000000240)=[0x1, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000580)=[{0x3, 0x3, 0x8, 0x7}, {0x0, 0x3, 0xd, 0x3}, {0x5, 0x4}, {0x0, 0x2, 0x5}, {0x4, 0x0, 0x9, 0xb}, {0x3, 0x2}, {0x5, 0x5, 0xc, 0x3}]}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r5, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r6}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)
recvmsg(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002c40)=""/4096, 0x1000}], 0x1}, 0x3)
sendmsg$inet(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0)

10.011304033s ago: executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
syz_usb_disconnect(r0)
syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1}}]}}, 0x0)
ioctl$EVIOCRMFF(r0, 0x541b, 0x0)

9.934131665s ago: executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
bpf$MAP_CREATE(0x0, 0x0, 0x0)
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000003c0)='initcall_level\x00', r2}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8)
kexec_load(0x8001, 0x3, &(0x7f0000000440)=[{&(0x7f0000000340)="23e0729fd3991e08495a3a15546c88e7946e2da1f071a8fec176c5a764fd15ac81fcf3c39291eb3df4dbeaac94de70e8d6ffc0e73e1e6de570e0601fb709d301267a24ca80e02ebf996a467605accd4531aba50a7e2d5a36774744335db452f654564f1d7814e3879e1ad5e397bedcc74bd49c467782d268", 0x78, 0x9}, {&(0x7f0000000a80)="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", 0x1000, 0x1}, {&(0x7f0000002140)="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", 0x1000, 0x6, 0x1ff}], 0x3e0000)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0xff)
write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file1', [{0x20, '\xbf\xa6\xab\xd7\xa2>\x9b@o\xf7\x86\xd5\"R\xd5\x1e\x02\xb9\xbf^XR\xfa\xcf\x88\t\xcf\x05D\xb3\x86\f\xd2OQ\f\x8f=\xaeS\xa9E1[\x10\x90\xae\xf7\xb0\x1a\x9a\x87\xe4\xbf\x90\xe3\xf1\x9f\x9d,\x02\xdcrP=\x15f\x05\x1eb%\xf7'}]}, 0x54)
close(r5)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mknod(&(0x7f0000000140)='./file0\x00', 0x1000, 0x0)
r6 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$FUSE_IOCTL(r6, &(0x7f0000000100)={0x20}, 0xfdef)
mknod(0x0, 0x1000, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000680)={"cb2a2260f7c51864c2b98b3e6e82cee5c8302ebb03728b7c29eb40d76dacf4b21db989f30f699481c463b2ffafc1fbc06e76887144e3e10562a26dcc1971c2693d3d81965a30cc9f6faa8f7df373f349e36b864ceb1bc77825eddbb07d46ec33b8755a8e778dca5b281a0049d61d8cae46792498c1c67874ffa520f9340ffdfa059d85bdd31828e84b51e39950b47c66a331f3f730febec7db13a7a038e797b622c2bc7507c33da2374f94f35d21145c1f5b9eae2c17a68d8cf8ead643464d8f5e48b76e331d4f79cba2a77f1966772fc5f4ab53450b7cc9465a1c9a0df3cf7bf57c190cdefb592cffeccd9d678194c7d7f3a75ba3a3b9bcbf2a376a34c75786b2f41e91eda3ca05539e76fe9bb18a21614959d797f721772b4d1b281b0dacd0add9b4de5dd12ff851b835cf07eddf4f45e5db5186b5ac7688825253f575ae7399852ae882054406a1b9a05c9ba987c8238384a6dec3f4140a09ef619c5df98c63c551c05462163eb5453f22c0c6d0ee2705e0c5ad8e0e86885189d48f6b960f95860f00896c89206a3f5014104fa7046005f2e1ce2a44c97a900a58b1105537b1a6292372565495c9b3644dadd52e7c82c042f3fdab7c48f70e30f336d0464dd7989e7bdaded9105364b77bbe31bd7c91be7b4b8d304abe4801dde068ef9c205af5b290ebf2aa23d99b205fb0d39b1d30ffeb931384c2cad210e6ed0a542f9a55a496ffbac70d100f30336134f490bef9f75f29832970745402a49146e52d2ec481af887eca03f564153e271c260cbecc0568c3bc2fafc5b09eba547db0caa705909ecd638e4619aea50a069ed24c000d3a0663d489315b129062b804f6e452f246e37c6cf727b7ce96485de46a43c2bd91805533e0de4029f51caccfb579eea7b1f9ef2e4210d2ea3a5039968a2c04851df754e36a72ebc2d80c6985d3b8e542e29c4c119acab473090efdcba55938a337f2153e3acf7a83a463e2949909e7f2dc4fba80c707a462f8570611c27f8cc7fc315f415352d8b6745deb8abc2cc31a167b4e63b61895102b9a2d94e55540524dede28eaaba8537813b58464789bee0ed74f3575126f9196603440e1fb04ff6f353c31660559a09fa0676a78184ee06b1659347d2a23c17fb81bdf8bd15f2236fd4f594fa934a5080b04b1beba2013be61146be165bafb27d3b21d51178a19aaceb42711d4a0644e6103ecdf559fff42ccbf4079f8e85fa898ffe6a8f18469c4b1d7b738d6e5205eabf636b903bf19c7170dd2762d830f85fc5249aae05bfd383037fa5dab898553d8e45ae44fec68ab0067959287114a56235a7120c9bdc68c6897a0f06afd4bd636baa5bc532bcfdf5f84777557984bfc2c724a9648730ecd2a1fc498e4d8ff5ebcde672a7d21412d7fcbbccca73bd1706886e3b32c18dc80cf74a79a87f92261a834c3de91c07"})
r7 = open$dir(&(0x7f0000000280)='./file0\x00', 0x0, 0x0)
r8 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
tee(r7, r8, 0x3, 0x0)
execveat(0xffffffffffffffff, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)
r9 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
openat$cgroup_ro(r4, &(0x7f0000000180)='cpu.stat\x00', 0x0, 0x0)
ioctl$TIOCSETD(r9, 0x5423, &(0x7f00000001c0)=0xf)
write$binfmt_aout(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xff2e)

2.083334748s ago: executing program 3:
r0 = syz_io_uring_setup(0x239, &(0x7f0000000080), &(0x7f0000000000), &(0x7f0000000040))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000060000000000000000640000000f000000c5000000a000020095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]})
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x11, &(0x7f0000000140), 0x2)

1.187958776s ago: executing program 3:
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="18020000e2ffffff000000000000000085000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d49631979a42d6884ec11ce1413ac30e00bd0081f8504e19a517bdc69676520e98a263345e44d5187b3c4d86abeb12303ff139fe0d0020000d604000000670000008aff66d6b3181ffc1d62a3954c11c27839dc007c4d296e7359ea79a75dd098bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d2464ef3c6a7def8bad3ca6e3abdb2dfc61696e340bb8e2a093adc57196b40def3858ef569147fa4108328392d322ab4df10a2f69a6bdf7257d327070e42410f57466f59aea2544047d6d8ac442e0000000000ee16c729300d230180000000000000a87db3670bba302085a22b5a8b051dc254ed5290a8cd8470e776d6b80630d6cbde49b29a6cb5f4fc00a4db9f370e5fe57238aeada5acf3209a08439f1ff01ffbe5b57922b6f6c67e02aa6d7760525b595fe1f697bc114ed1778e97a3f0295f946974cfb458be2a34cf924dc37b558fbf17a76f3547497aba5086e30ec8a57c814382ffab045ca077a9d15251875432e74b54afaf4985683c229ff92be0dade95ae7b68136b0046d535dd39c0f35469869e9b342b953f81447e6b9e522d28b1e6ffdaab304f134306335fc7a44195254b45a6c1312a13696c7202df5f764713504f94c5e00000e54e9072a22d91744a332e2fa806e63c5cd98a8569a6d6bcfb0000002cf6c75ac63f04af77c98a1459ab1664885173b2b7130eae67e0ebe380d0f648713e68153579c02d71c58d147b00821ab9a6475b31e1ebf1369afe98682efbf3983f283f2faf8f40e3992774814d63c933912dd0c6908149cb79c5cb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83df998a7469426ec8b0000000000000010ff2cd18bdd8ad0983bc90770bbd26a82b9d99d17c02297b523c47ef8c33400e90d3fbe011904ff782ca00edf8e47a71bcc738ef636d32b01933556f9afe772cd45af8aeffe2753088e02ca6b690decf0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b506380591a8c48e537dd659a7418c1e122bd4c219ff5a679eec4600e99f017246dc0c18a30160f2ac54f842e3be1c95b15175d0e664beb126000e96549e1a1208c686edb475b705e8a9515c96f4fc6b3c925ea404edbb3845111aed1637ec3890f1de61026dc805a05fa626c661856f6d105671241d48a25989e01eae489ec7052f8ed72c336c7a8aa63999ee1f47ce5cb736577bea52b6dbbd56d222659480e82c6f84d2033d9080097c54ce1822d14b7c7699b9d54f5f11f2e7fdc7557515eb70212e8701e94e7b42dc7294b917f2d21dd474cffbc35bc8623cd5eb68af82275a940be0400000000000000bcc3fbe7d90de96d6a8e9f54cf881f606b381e4803b500000000000020000000004a2357ba5f2b50b5e1fa88b7165dcfcf2aaee86d48f05b5ae4fc2bbc908fdb686d5da2da1ac8bab2c153ea923c19e6cb723c1923b3eea2d73e136dff383c9fbbac53dfdcb1a68c988be76fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01f9f2772e5fa454d68d90677d8de36c3215d2ff3cfadcf65eb92adc6c624bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a128c76629a362ee9cc624ec454b90200fd9603f96908bddc1450360d6fd25cbc35345f89215bda856002f40af6b6805a01e7287eab5dd849010480b38ff07d881e833617fe25f14d4e80366b7da96d6b17a8a1ec26ff5893287a4a38facae2c16908d93e79980293b62d431a4ad3b5ec464ede81e5c79f76af8ad9e53ba393a0df5d9ce00dccd782232006126286cedf016ee4a33af799a0fb585253b35727959f7077cc917a586c745d8ac792db10f7c6fe35b4b3e6f72eb98dbaaeb87aebadf8953035e8a4f0590d3803bf803845272adb34feb3c4bba4709f903e57e940b432a2f7719ecd4cf5cb1836bf1f3234e39509ea5f3ede3f0000000000000000000000000000000000000000000000000000000000bf28f87806c5f28469a0cfd0ff47e32e2d8e1744d1d71a36bcd82b85424795c00e3348b33eae0733c00102f9039dd2f22a904948964bc03ea60c31914db798d94bc330e9d848d76b6fd5dfa87649e009d72804e03cad5d9572a97cfc5aa21c901896131025f6891d4f54e79f9c87eb3142fc9aca0659edb4f517a1dd605bda9afa912466fda4a6c2bc3ee1b5faccebc6fba7befb1bda0f31d00d7e40a03e594f2d6bdc41709991180d8d9d00712efb5f3f2f76894bcee4ee66d253f7de504083b93987ecb8fa7df05cb0007fa0104afd8ba95f1c150a5fd37d135716f85a8481ccc52ddf5ee88aae03b3dc54500ddee9af69e7b500563b464863c53c998ab9b0c6854a2ebccac5c33b2de390aa5162f6429f727d5140984159de1d70aecabd810ad30b50de073e3a0ded5791b178dc3f92aea11c18326b74b38dbba12650a8"], &(0x7f0000000040)='GPL\x00', 0x7, 0x1000, &(0x7f0000002880)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x23}, 0x6e)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001300)={r0, r1, 0x25, 0x8}, 0x10)
lseek(0xffffffffffffffff, 0x0, 0x0)
syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(0xffffffffffffffff, 0x0, 0x0)
getpid()
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
getpid()
syz_pidfd_open(0x0, 0x0)
syz_usb_connect(0x0, 0xb, 0x0, 0x0)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x40085507, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)

1.062182836s ago: executing program 2:
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10)
syz_mount_image$minix(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x804008, &(0x7f0000000100)=ANY=[], 0x5a, 0x20d, &(0x7f0000000200)="$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")
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4040, 0x0)
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00'})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f00000002c0)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000440)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7ac, &(0x7f0000000540)={{@hyper}, @host})

952.321583ms ago: executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x2b)
fcntl$setownex(r0, 0xf, &(0x7f0000000180))
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='attr\x00')
getdents64(r1, &(0x7f0000000300)=""/4143, 0x102f)

865.869377ms ago: executing program 4:
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001a80)=ANY=[@ANYBLOB="20009fa5abe61022492b0000047500000000000093b8bcfb68"], 0x20}}, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000e80)=[{{0x0, 0xfffffffffffffefa, 0x0, 0x0, 0x0, 0x1000000000002}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}}], 0x40000000000033a, 0x0, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r1)

767.619652ms ago: executing program 2:
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000400)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r0, &(0x7f0000000300)='./bus\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x0)

709.73008ms ago: executing program 4:
r0 = socket$kcm(0x29, 0x2, 0x0)
close(r0)
r1 = socket$kcm(0x2b, 0x1, 0x0)
close(r1)
r2 = socket$kcm(0x2, 0x200000000000001, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$inet(r2, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004081)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f00000000c0)=r3, 0x4)
sendmsg$inet(r2, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a00)=[{&(0x7f0000003840)="bf", 0x1}], 0x1}, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f0000000080), 0x2cb)
close(r1)

596.587438ms ago: executing program 1:
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x90, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0x0, 0x0, 0x0, 0x0})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000012000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000000)="b9800000c00f3235000800000f300fe095a6520000b8010000000f01d9c402d53b9e0700000026f047ff4d14f30fc775ddb9c5090000b86c000000ba000000000f300f08450f01cb4a0fc72b", 0x4c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000400)=ANY=[])
ioctl$KVM_RUN(r3, 0xae80, 0x0)

555.321054ms ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000040)='sys_exit\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000380)=0x2, &(0x7f00000003c0)}, 0x20)

511.769821ms ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x90)

424.705314ms ago: executing program 1:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@migrate={0xec, 0x21, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in6=@loopback, @in=@broadcast, @in=@rand_addr=0x64010101, @in6=@private0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in6=@loopback, @in=@broadcast, @in, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}]}, 0xec}}, 0x0)

398.435978ms ago: executing program 2:
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0x4240a2a0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
splice(r0, 0x0, r3, 0x0, 0x1e8640, 0x0)

396.648478ms ago: executing program 3:
syz_open_dev$sndctrl(&(0x7f0000007600), 0xb, 0x210cc0)
syz_io_uring_setup(0x1ed2, &(0x7f0000000080)={0x0, 0x0, 0x20}, &(0x7f0000000040), &(0x7f0000000140))
r0 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c)
listen(r0, 0x20000005)
r1 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r1, 0x8)
accept4(r1, 0x0, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
wait4(0x0, 0x0, 0x0, 0x0)
gettid()
openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/shm\x00', 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001100)=ANY=[@ANYRES16=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRES32=0x0, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1d2, &(0x7f0000000580)="$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")
r6 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x10012, r6, 0x2a065000)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)

394.330109ms ago: executing program 4:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r0, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00', {0x4}})
sendmsg$unix(r1, &(0x7f0000001480)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$kcm(0x10, 0x100000000002, 0x4)
sendmsg$kcm(r2, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000390000883795c04a31ba377a1b2cc32b38d37400"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0)

336.525428ms ago: executing program 1:
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0585611, &(0x7f0000000400)={0x0, 0x1, 0x0, "16ebd627a58a165481e5f86e4e6e2f616256f96a23e40b75c9e25f45ee973ba3"})

298.676074ms ago: executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000300)=@v2={0x2, @aes128, 0x0, '\x00', @d})
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)=0x74)
newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000001800010000000000000000000a000000000000000000000018001600140001000200000000000000000010000068000008000400", @ANYRES32=r3, @ANYBLOB="1400050000000000000000000000ff"], 0x50}}, 0x0)

247.573702ms ago: executing program 4:
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x67}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80)

67.53273ms ago: executing program 1:
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x6b3, &(0x7f00000000c0)="$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")
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x41800}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x3c}}, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r1, 0x0)
mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
dup(r3)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000780)={0x0, r2}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_police={0x38, 0x1, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [[@TCA_POLICE_RESULT={0x8, 0x5, 0x3}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x0)
r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2000}, 0x10, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r5, 0x1, 0x0, 0x0)
landlock_restrict_self(r5, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000180)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2)
r6 = socket(0x10, 0x3, 0x0)
write(r6, &(0x7f0000000280)="240000001a005f0014f9e407000904000a00000074000000000e000008001b0001000000", 0x24)
socket$nl_generic(0x10, 0x3, 0x10)

7.902079ms ago: executing program 4:
socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
unshare(0x8040480)
ppoll(&(0x7f00000000c0)=[{r1, 0x3248}], 0x1, 0x0, 0x0, 0x0)
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file1\x00'}, 0x6e)

0s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r3, 0x80b, 0x0, 0x0, {{0x3e}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

roblem.
[  431.907760][   T26] audit: type=1326 audit(1718290513.963:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f8d19f18627 code=0x7ffc0000
[  431.970762][T11447] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  431.987712][   T26] audit: type=1326 audit(1718290513.963:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11531 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8d19ede309 code=0x7ffc0000
[  432.032998][T11447] batman_adv: batadv0: Adding interface: batadv_slave_1
[  432.043327][T11527] loop4: detected capacity change from 0 to 32768
[  432.047714][T11447] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  432.097317][T11555] loop2: detected capacity change from 0 to 1024
[  432.124403][T11447] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  432.202902][T11527] XFS (loop4): Mounting V5 Filesystem
[  432.239643][T11555] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0
[  432.256118][T11555] EXT4-fs error (device loop2): ext4_acquire_dquot:6196: comm syz-executor.2: Failed to acquire dquot type 0
[  432.279609][T11555] EXT4-fs error (device loop2): ext4_free_blocks:6224: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096
[  432.344371][T11447] device hsr_slave_0 entered promiscuous mode
[  432.357023][T11527] XFS (loop4): Ending clean mount
[  432.362484][T11555] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor.2: Invalid inode bitmap blk 0 in block_group 0
[  432.389080][ T6265] EXT4-fs error (device loop2): ext4_release_dquot:6219: comm kworker/u4:12: Failed to release dquot type 0
[  432.393687][T11447] device hsr_slave_1 entered promiscuous mode
[  432.418884][T11527] XFS (loop4): Quotacheck needed: Please wait.
[  432.425615][T11555] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  432.469208][T11555] EXT4-fs (loop2): 1 orphan inode deleted
[  432.475096][T11555] EXT4-fs (loop2): mounted filesystem without journal. Opts: €�; sysvgroups,noload,auto_da_alloc,noload,journal_dev=0x0000000000000004,norecovery,bsddf,bsdgroups,,errors=continue. Quota mode: writeback.
[  432.497816][T11447] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  432.505412][T11447] Cannot create hsr debugfs directory
[  432.577891][ T3570] Bluetooth: hci5: command 0x041b tx timeout
[  432.626436][T11527] XFS (loop4): Quotacheck: Done.
[  432.747577][ T6997] XFS (loop4): Unmounting Filesystem
[  432.866571][T11567] loop2: detected capacity change from 0 to 2048
[  432.948279][T11567] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  432.972600][    T9] device hsr_slave_0 left promiscuous mode
[  433.007979][    T9] device hsr_slave_1 left promiscuous mode
[  433.014850][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  433.044134][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  433.057143][T11576] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'.
[  433.102766][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  433.120718][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  433.151504][    T9] device bridge_slave_1 left promiscuous mode
[  433.158159][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  433.179955][    T9] device bridge_slave_0 left promiscuous mode
[  433.186233][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  433.299925][    T9] device veth1_macvtap left promiscuous mode
[  433.306162][    T9] device veth0_macvtap left promiscuous mode
[  433.368304][    T9] device veth1_vlan left promiscuous mode
[  433.393312][    T9] device veth0_vlan left promiscuous mode
[  433.431199][T11582] loop2: detected capacity change from 0 to 32768
[  433.514133][T11582] 
[  433.514133][T11582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  433.514133][T11582] 
[  433.563305][T11582] 
[  433.563305][T11582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  433.563305][T11582] 
[  433.575158][T11582] 
[  433.575158][T11582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  433.575158][T11582] 
[  433.585771][T11582] 
[  433.585771][T11582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  433.585771][T11582] 
[  433.604351][T11582] 
[  433.604351][T11582]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  433.604351][T11582] 
[  433.689505][ T9612] 
[  433.689505][ T9612]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  433.689505][ T9612] 
[  433.722023][ T9612] 
[  433.722023][ T9612]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  433.722023][ T9612] 
[  434.022502][    T9] team0 (unregistering): Port device team_slave_1 removed
[  434.095117][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  434.137384][T11598] loop2: detected capacity change from 0 to 2048
[  434.146478][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  434.262769][T11598] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  434.274126][    T9] bond0 (unregistering): Released all slaves
[  434.360679][T11592] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  434.393808][T11592] device vlan0 entered promiscuous mode
[  434.434795][T11592] bond0: (slave vlan0): Enslaving as an active interface with an up link
[  434.461828][T11605] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'.
[  434.493859][T11600] netlink: 'syz-executor.4': attribute type 2 has an invalid length.
[  434.521737][T11600] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  434.647953][ T3573] Bluetooth: hci5: command 0x040f tx timeout
[  434.703221][T11613] loop4: detected capacity change from 0 to 512
[  434.824694][T11613] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  435.378386][T11617] fuse: Bad value for 'fd'
[  435.693782][T11619] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  435.722395][T11613] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,delalloc,,errors=continue. Quota mode: writeback.
[  435.738891][T11613] ext4 filesystem being mounted at /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/339/file0 supports timestamps until 2038 (0x7fffffff)
[  435.863414][T11447] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  435.917600][T11628] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  435.960515][T11447] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  436.018399][T11447] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  436.025988][T11636] loop2: detected capacity change from 0 to 256
[  436.047551][T11447] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  436.107021][T11640] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  436.395987][   T26] kauditd_printk_skb: 4 callbacks suppressed
[  436.396006][   T26] audit: type=1326 audit(1718290519.013:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11589 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8d19f1aea9 code=0x7fc00000
[  436.523851][T11447] 8021q: adding VLAN 0 to HW filter on device bond0
[  437.164430][T11653] fuse: Bad value for 'fd'
[  437.332792][ T3629] Bluetooth: hci5: command 0x0419 tx timeout
[  437.489299][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  437.528737][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  437.604888][T11447] 8021q: adding VLAN 0 to HW filter on device team0
[  437.647375][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  437.664425][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  437.703120][ T4080] bridge0: port 1(bridge_slave_0) entered blocking state
[  437.710501][ T4080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  437.757103][T11668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  437.768201][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  437.800867][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  437.822765][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  437.882517][ T4080] bridge0: port 2(bridge_slave_1) entered blocking state
[  437.889668][ T4080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  437.946891][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  438.090336][T11447] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  438.142159][T11447] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  438.166299][T11676] overlayfs: failed to create directory ./file1/work (errno: 13); mounting read-only
[  438.185805][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  438.197589][T11676] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  438.210162][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  438.235706][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  438.257911][T11676] overlayfs: conflicting lowerdir path
[  438.274647][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  438.292857][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  438.306222][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  438.322661][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  438.336988][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  438.353682][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  438.389757][T11678] device geneve2 entered promiscuous mode
[  438.464722][T11658] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  438.592426][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  438.607798][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  438.664581][   T26] audit: type=1326 audit(1718290521.283:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c09864ea9 code=0x7ffc0000
[  438.764567][   T26] audit: type=1326 audit(1718290521.283:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c09864ea9 code=0x7ffc0000
[  438.818177][T11692] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  438.839890][   T26] audit: type=1326 audit(1718290521.333:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c09864ea9 code=0x7ffc0000
[  438.940047][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  438.950286][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  438.988277][   T26] audit: type=1326 audit(1718290521.343:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5c09864ea9 code=0x7ffc0000
[  439.014125][T11447] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.014450][T11695] input: syz1 as /devices/virtual/input/input17
[  439.065984][   T26] audit: type=1326 audit(1718290521.343:1310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5c09864ea9 code=0x7ffc0000
[  439.584649][T11697] fuse: Bad value for 'fd'
[  439.796680][   T26] audit: type=1326 audit(1718290521.343:1311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c09862627 code=0x7ffc0000
[  439.820095][   T26] audit: type=1326 audit(1718290521.343:1312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c09828309 code=0x7ffc0000
[  439.843808][   T26] audit: type=1326 audit(1718290521.343:1313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5c09862627 code=0x7ffc0000
[  439.871164][   T26] audit: type=1326 audit(1718290521.343:1314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11684 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5c09828309 code=0x7ffc0000
[  439.948481][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  439.955114][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  440.028070][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  440.049191][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  440.111480][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  440.120902][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  440.148278][T11447] device veth0_vlan entered promiscuous mode
[  440.158452][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  440.167272][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  440.195995][T11447] device veth1_vlan entered promiscuous mode
[  440.295691][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  440.308880][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  440.319255][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  440.328417][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  440.340252][T11447] device veth0_macvtap entered promiscuous mode
[  440.353697][T11447] device veth1_macvtap entered promiscuous mode
[  440.374246][T11715] libceph: resolve '00' (ret=-3): failed
[  440.394587][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.420966][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.459031][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.496938][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.540481][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.579653][T11722] loop4: detected capacity change from 0 to 512
[  440.725705][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  440.755852][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.337340][T11725] fuse: Bad value for 'fd'
[  441.619165][   T26] kauditd_printk_skb: 53 callbacks suppressed
[  441.619184][   T26] audit: type=1326 audit(1718290524.243:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11680 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb20b86fea9 code=0x7fc00000
[  441.679721][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.718516][T11447] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.742198][T11722] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  441.747435][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  441.783191][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  441.832326][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  441.852177][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  441.969829][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.981744][T11722] EXT4-fs (loop4): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,delalloc,,errors=continue. Quota mode: writeback.
[  442.026014][T11722] ext4 filesystem being mounted at /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/348/file0 supports timestamps until 2038 (0x7fffffff)
[  442.031465][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.093397][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.106639][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.127850][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.138982][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.164231][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.175193][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.185535][T11447] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.196787][T11447] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.210448][T11447] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.265110][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  442.275515][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  442.288529][T11447] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.357676][T11447] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.407760][T11447] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.416610][T11447] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  442.475111][T11746] loop4: detected capacity change from 0 to 512
[  442.881078][T11746] EXT4-fs (loop4): #blocks per group too big: 16384
[  443.087947][T11754] autofs4:pid:11754:autofs_fill_super: pipe file descriptor does not contain proper ops
[  444.000459][ T3992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.159475][ T3992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.270567][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  444.287592][T11763] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  444.691384][ T3606] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  444.719017][ T3606] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  444.940176][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  444.959156][T11783] loop2: detected capacity change from 0 to 256
[  445.022354][T11783] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  445.193905][T11795] libceph: resolve '00' (ret=-3): failed
[  446.484102][  T150] block nbd4: Attempted send on invalid socket
[  446.490554][  T150] blk_update_request: I/O error, dev nbd4, sector 1 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  446.492653][T11823] loop2: detected capacity change from 0 to 2048
[  446.504241][T11828] qnx4: unable to read the superblock
[  447.156977][T11830] fuse: Bad value for 'fd'
[  447.416503][T11823] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  447.496560][T11837] overlayfs: conflicting lowerdir path
[  447.914175][T11855] loop4: detected capacity change from 0 to 256
[  448.001313][T11855] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  448.804902][T11871] loop2: detected capacity change from 0 to 2048
[  448.958067][T11871] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  449.271312][T11871] overlayfs: failed to resolve './file0': -2
[  449.825491][T11889] fuse: Bad value for 'fd'
[  450.285658][T11894] autofs4:pid:11894:autofs_fill_super: pipe file descriptor does not contain proper ops
[  452.489320][T11937] fuse: Bad value for 'fd'
[  452.748722][   T26] audit: type=1800 audit(1718290535.373:1369): pid=11942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1967 res=0 errno=0
[  452.942680][T11947] loop4: detected capacity change from 0 to 256
[  452.973875][T11951] loop0: detected capacity change from 0 to 2048
[  453.041002][T11947] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  453.058710][T11951] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  453.108760][T11947] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  453.146403][T11947] loop4: Can't mount, would change RO state
[  453.981857][T11952] loop2: detected capacity change from 0 to 40427
[  454.034719][    T9] device hsr_slave_0 left promiscuous mode
[  454.048385][    T9] device hsr_slave_1 left promiscuous mode
[  454.058029][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  454.065716][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  454.075387][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  454.087180][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  454.113395][    T9] device bridge_slave_1 left promiscuous mode
[  454.122005][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  454.133787][    T9] device bridge_slave_0 left promiscuous mode
[  454.140511][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  454.155723][T11952] F2FS-fs (loop2): Found nat_bits in checkpoint
[  454.180956][    T9] device veth1_macvtap left promiscuous mode
[  454.188358][    T9] device veth0_macvtap left promiscuous mode
[  454.194470][    T9] device veth1_vlan left promiscuous mode
[  454.225891][    T9] device veth0_vlan left promiscuous mode
[  454.285019][T11952] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  454.310252][T11983] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'.
[  454.363402][T11985] loop4: detected capacity change from 0 to 1024
[  454.411842][ T9612] attempt to access beyond end of device
[  454.411842][ T9612] loop2: rw=2049, want=45104, limit=40427
[  454.525518][ T3992] hfsplus: b-tree write err: -5, ino 4
[  454.905091][T11997] ucma_write: process 349 (syz-executor.2) changed security contexts after opening file descriptor, this is not allowed.
[  455.003120][T11998] xt_CT: You must specify a L4 protocol and not use inversions on it
[  455.742645][T12001] loop2: detected capacity change from 0 to 2048
[  455.743261][    T9] team0 (unregistering): Port device team_slave_1 removed
[  455.776534][    T9] team0 (unregistering): Port device team_slave_0 removed
[  455.792198][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  455.809192][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  455.869900][T12001] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  455.993395][T12005] loop4: detected capacity change from 0 to 32768
[  456.045743][    T9] bond0 (unregistering): Released all slaves
[  456.373099][T12018] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'.
[  457.306991][   T26] audit: type=1326 audit(1718290539.923:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12028 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d19f1aea9 code=0x0
[  457.383512][T12032] loop2: detected capacity change from 0 to 512
[  457.478836][T12040] loop4: detected capacity change from 0 to 8
[  457.512698][T12044] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  457.544151][T12032] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  457.561432][T12032] ext4 filesystem being mounted at /root/syzkaller-testdir3634828109/syzkaller.5hQFn6/154/file0 supports timestamps until 2038 (0x7fffffff)
[  457.620769][T12040] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  457.637366][T12032] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz-executor.2: corrupted inode contents
[  457.659877][T12032] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #2: comm syz-executor.2: mark_inode_dirty error
[  457.693671][T12032] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz-executor.2: corrupted inode contents
[  457.712576][T12032] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz-executor.2: mark_inode_dirty error
[  457.788205][   T26] audit: type=1800 audit(1718290540.413:1371): pid=12032 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=18 res=0 errno=0
[  457.846041][ T9612] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 3: comm syz-executor.2: path /root/syzkaller-testdir3634828109/syzkaller.5hQFn6/154/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  457.932195][T12016] loop0: detected capacity change from 0 to 40427
[  457.959011][ T9612] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 12: comm syz-executor.2: path /root/syzkaller-testdir3634828109/syzkaller.5hQFn6/154/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  457.988773][ T9612] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 13: comm syz-executor.2: path /root/syzkaller-testdir3634828109/syzkaller.5hQFn6/154/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  458.160245][ T9612] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 14: comm syz-executor.2: path /root/syzkaller-testdir3634828109/syzkaller.5hQFn6/154/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  458.361169][ T9612] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 15: comm syz-executor.2: path /root/syzkaller-testdir3634828109/syzkaller.5hQFn6/154/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  458.630272][ T9612] EXT4-fs error (device loop2): ext4_readdir:260: inode #2: block 16: comm syz-executor.2: path /root/syzkaller-testdir3634828109/syzkaller.5hQFn6/154/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  458.784205][ T3629] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  458.798157][ T3629] Bluetooth: hci0: Injecting HCI hardware error event
[  458.830437][ T3536] Bluetooth: hci0: hardware error 0x00
[  458.848401][T12016] F2FS-fs (loop0): Found nat_bits in checkpoint
[  458.916070][T12016] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  459.011607][T11447] attempt to access beyond end of device
[  459.011607][T11447] loop0: rw=2049, want=45104, limit=40427
[  459.076946][   T26] audit: type=1800 audit(1718290541.693:1372): pid=12081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1962 res=0 errno=0
[  459.078863][T12081] fuse: Bad value for 'fd'
[  459.818095][T12115] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  459.942480][T12127] loop4: detected capacity change from 0 to 8
[  460.035653][T12127] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  460.336037][T12150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  460.458298][T12156] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  460.644401][T12163] tipc: Started in network mode
[  460.658130][T12163] tipc: Node identity aaaaaaaaaa3, cluster identity 4711
[  460.666303][T12163] tipc: Enabled bearer <eth:ipvlan0>, priority 0
[  460.816624][T12165] loop4: detected capacity change from 0 to 1764
[  461.443167][T12196] loop4: detected capacity change from 0 to 8
[  461.547957][T12196] netlink: 'syz-executor.4': attribute type 4 has an invalid length.
[  461.685622][ T3573] tipc: Node number set to 10136234
[  461.765234][T12202] loop4: detected capacity change from 0 to 1764
[  462.138235][T12210] device team_slave_1 entered promiscuous mode
[  462.145472][T12210] device vlan3 entered promiscuous mode
[  462.177891][T12210] device team0 entered promiscuous mode
[  462.197977][T12210] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
[  462.225728][T12197] loop0: detected capacity change from 0 to 32768
[  462.236066][T12210] device team0 left promiscuous mode
[  462.250787][T12210] device team_slave_1 left promiscuous mode
[  462.359641][T12197] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  462.359641][T12197] 
[  462.457985][T12197] ialloc: diAlloc returned -5!
[  463.025957][   T26] audit: type=1800 audit(1718290545.643:1373): pid=12232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1965 res=0 errno=0
[  463.158403][T12236] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  463.203622][T12236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  463.345051][   T26] audit: type=1804 audit(1718290545.963:1374): pid=12213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4082467738/syzkaller.coeOjh/194/bus" dev="sda1" ino=1952 res=1 errno=0
[  463.426962][T12241] device team_slave_0 entered promiscuous mode
[  463.433318][T12241] device team_slave_1 entered promiscuous mode
[  463.445862][T12241] device vlan2 entered promiscuous mode
[  463.466502][T12241] device team0 entered promiscuous mode
[  463.488481][T12241] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  463.506689][T12241] device team0 left promiscuous mode
[  463.515590][T12241] device team_slave_0 left promiscuous mode
[  463.521626][T12241] device team_slave_1 left promiscuous mode
[  464.521411][T12250] loop0: detected capacity change from 0 to 32768
[  464.702174][T12269] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  464.711866][T12269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  464.813610][T12250] XFS (loop0): Mounting V5 Filesystem
[  464.973633][T12250] XFS (loop0): Ending clean mount
[  465.061994][T12250] overlayfs: workdir and upperdir must reside under the same mount
[  465.144842][T11447] XFS (loop0): Unmounting Filesystem
[  465.793505][T12291] loop0: detected capacity change from 0 to 2048
[  465.873596][T12291] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  466.833685][T12307] loop4: detected capacity change from 0 to 512
[  466.985682][T12307] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  466.997898][T12307] ext4 filesystem being mounted at /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/399/file0 supports timestamps until 2038 (0x7fffffff)
[  467.057908][T12315] device team_slave_0 entered promiscuous mode
[  467.064148][T12315] device team_slave_1 entered promiscuous mode
[  467.106970][T12315] device vlan2 entered promiscuous mode
[  467.118385][T12307] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents
[  467.144911][T12315] device team0 entered promiscuous mode
[  467.163894][T12315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan2: link becomes ready
[  467.188162][T12307] EXT4-fs error (device loop4): ext4_dirty_inode:5993: inode #2: comm syz-executor.4: mark_inode_dirty error
[  467.212347][T12315] device team0 left promiscuous mode
[  467.228892][T12315] device team_slave_0 left promiscuous mode
[  467.234921][T12315] device team_slave_1 left promiscuous mode
[  467.245656][T12307] EXT4-fs error (device loop4): ext4_do_update_inode:5160: inode #2: comm syz-executor.4: corrupted inode contents
[  467.294035][T12307] EXT4-fs error (device loop4): __ext4_ext_dirty:183: inode #2: comm syz-executor.4: mark_inode_dirty error
[  467.323730][   T26] audit: type=1326 audit(1718290549.943:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12319 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20b86fea9 code=0x0
[  467.421918][ T6997] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 3: comm syz-executor.4: path /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/399/file0: bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  467.451277][ T6997] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 12: comm syz-executor.4: path /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/399/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  467.487451][   T26] audit: type=1800 audit(1718290550.013:1376): pid=12307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=18 res=0 errno=0
[  467.544325][ T6997] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 13: comm syz-executor.4: path /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/399/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  467.584824][ T6997] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 14: comm syz-executor.4: path /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/399/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  467.640641][ T6997] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 15: comm syz-executor.4: path /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/399/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  467.688813][ T6997] EXT4-fs error (device loop4): ext4_readdir:260: inode #2: block 16: comm syz-executor.4: path /root/syzkaller-testdir2686028559/syzkaller.1cnlBo/399/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  468.193051][   T26] audit: type=1326 audit(1718290550.813:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12331 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20b86fea9 code=0x0
[  468.524016][T12330] loop0: detected capacity change from 0 to 32768
[  468.590727][T12330] ERROR: (device loop0): dbAlloc: the hint is outside the map
[  468.590727][T12330] 
[  468.623878][T12330] ialloc: diAlloc returned -5!
[  469.135330][T12349] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  469.584161][T12359] openvswitch: netlink: IPv4 tunnel dst address is zero
[  469.637914][   T26] audit: type=1326 audit(1718290552.253:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12361 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20b86fea9 code=0x0
[  469.762240][ T3990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.852720][ T3990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  469.960199][ T3990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.074526][ T3990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  470.421804][T12384] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'.
[  470.580986][T12391] loop0: detected capacity change from 0 to 2048
[  470.631626][T12396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  470.665321][T12391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  470.901724][T12376] chnl_net:caif_netlink_parms(): no params data found
[  471.075632][T12412] fuse: Bad value for 'fd'
[  471.191801][T12376] bridge0: port 1(bridge_slave_0) entered blocking state
[  471.200001][T12376] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.209091][T12376] device bridge_slave_0 entered promiscuous mode
[  471.219062][T12376] bridge0: port 2(bridge_slave_1) entered blocking state
[  471.226418][T12376] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.236075][T12376] device bridge_slave_1 entered promiscuous mode
[  471.265339][T12423] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'.
[  471.333214][T12376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  471.345704][T12376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  471.507997][T12376] team0: Port device team_slave_0 added
[  471.548974][ T3990] device hsr_slave_0 left promiscuous mode
[  471.557507][ T3990] device hsr_slave_1 left promiscuous mode
[  471.563306][T12432] loop0: detected capacity change from 0 to 2048
[  471.575444][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  471.585400][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  471.596091][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  471.604355][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  471.616912][ T3990] device bridge_slave_1 left promiscuous mode
[  471.621180][T12432] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  471.629763][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state
[  471.642522][ T3990] device bridge_slave_0 left promiscuous mode
[  471.649270][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state
[  471.676323][ T3990] device bond_slave_0 left promiscuous mode
[  471.682925][ T3990] device bond_slave_1 left promiscuous mode
[  471.691288][ T3990] device veth1_macvtap left promiscuous mode
[  471.698038][ T3990] device veth0_macvtap left promiscuous mode
[  471.704390][ T3990] device veth1_vlan left promiscuous mode
[  471.710759][ T3990] device veth0_vlan left promiscuous mode
[  471.985984][ T3990] team0 (unregistering): Port device macvlan2 removed
[  472.104810][ T3990] bond0 (unregistering): (slave vlan0): Releasing backup interface
[  472.236143][ T3990] team0 (unregistering): Port device team_slave_1 removed
[  472.276388][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  472.304515][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  472.333599][ T4244] Bluetooth: hci3: command 0x0409 tx timeout
[  472.446511][ T3990] bond0 (unregistering): Released all slaves
[  472.507201][T12376] team0: Port device team_slave_1 added
[  472.578980][T12376] batman_adv: batadv0: Adding interface: batadv_slave_0
[  472.598559][T12445] fuse: Bad value for 'fd'
[  472.617654][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.667688][T12376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  472.689808][T12376] batman_adv: batadv0: Adding interface: batadv_slave_1
[  472.696884][T12376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  472.728001][ T4080] Bluetooth: hci1: command 0x0406 tx timeout
[  472.739256][   T26] audit: type=1326 audit(1718290555.363:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12449 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20b86fea9 code=0x0
[  472.787674][T12376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  472.900164][T12376] device hsr_slave_0 entered promiscuous mode
[  472.915197][T12376] device hsr_slave_1 entered promiscuous mode
[  472.930006][T12376] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  472.977693][T12376] Cannot create hsr debugfs directory
[  473.302939][T12467] loop0: detected capacity change from 0 to 512
[  473.348018][T12467] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  473.363544][T12467] EXT4-fs (loop0): Couldn't mount because of unsupported optional features (800)
[  473.744946][T12376] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  473.755089][T12376] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  473.789929][T12376] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  473.827187][T12376] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  474.056306][T12376] 8021q: adding VLAN 0 to HW filter on device bond0
[  474.094203][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  474.108671][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  474.130559][T12376] 8021q: adding VLAN 0 to HW filter on device team0
[  474.158375][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  474.188475][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  474.208446][ T4244] bridge0: port 1(bridge_slave_0) entered blocking state
[  474.215643][ T4244] bridge0: port 1(bridge_slave_0) entered forwarding state
[  474.236151][T12488] libceph: resolve '000' (ret=-3): failed
[  474.266370][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  474.281629][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  474.293455][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  474.306856][ T7152] bridge0: port 2(bridge_slave_1) entered blocking state
[  474.314162][ T7152] bridge0: port 2(bridge_slave_1) entered forwarding state
[  474.338428][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  474.387472][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  474.404492][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  474.407715][ T4083] Bluetooth: hci3: command 0x041b tx timeout
[  474.421283][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  474.436285][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  474.461078][T12493] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'.
[  474.475370][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  474.510986][T12376] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  474.535290][T12376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  474.556237][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  474.573579][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  474.614821][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  474.647286][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  474.679202][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  474.726223][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  475.102467][T12514] xt_CT: You must specify a L4 protocol and not use inversions on it
[  475.888448][T12515] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  476.057751][T12524] libceph: resolve '000' (ret=-3): failed
[  476.138060][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  476.148067][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  476.161521][T12376] 8021q: adding VLAN 0 to HW filter on device batadv0
[  476.250238][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  476.278563][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  476.316112][T12376] device veth0_vlan entered promiscuous mode
[  476.368927][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  476.377477][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  476.414589][T12376] device veth1_vlan entered promiscuous mode
[  476.432943][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  476.450601][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  476.478630][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  476.487760][ T4080] Bluetooth: hci3: command 0x040f tx timeout
[  476.524101][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  476.538670][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  476.547432][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  476.601529][T12376] device veth0_macvtap entered promiscuous mode
[  476.625620][T12376] device veth1_macvtap entered promiscuous mode
[  476.671943][T12376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.708145][T12376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.737710][T12376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.777706][T12376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.797750][T12376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  476.837683][T12376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  476.869422][T12376] batman_adv: batadv0: Interface activated: batadv_slave_0
[  476.877735][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  476.887091][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  476.928466][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  476.937431][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  476.991043][T12376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  477.028702][T12376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.057764][T12376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  477.089796][T12376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.091883][T12529] loop0: detected capacity change from 0 to 32768
[  477.110476][T12376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  477.137650][T12376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.148853][T12376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  477.178027][T12376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  477.222549][T12376] batman_adv: batadv0: Interface activated: batadv_slave_1
[  477.259358][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  477.270043][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  477.397040][T12376] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  477.426402][T12376] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  477.446205][T12376] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  477.465472][T12376] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  477.673823][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  477.696349][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  477.744871][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  477.918988][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  478.063608][T12549] xt_CT: You must specify a L4 protocol and not use inversions on it
[  478.483787][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  478.801965][ T4080] Bluetooth: hci3: command 0x0419 tx timeout
[  478.819974][ T4083] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0
[  478.878314][ T4083] Bluetooth: hci5: Injecting HCI hardware error event
[  478.941319][ T3525] Bluetooth: hci5: hardware error 0x00
[  478.965953][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  479.180242][T12563] xt_HMARK: spi-set and port-set can't be combined
[  479.285630][T12559] loop2: detected capacity change from 0 to 4096
[  479.371065][T12559] ntfs3: loop2: ino=0, Correct links count -> 1.
[  479.421731][T12559] ntfs3: loop2: MFT: r=0, expect seq=1 instead of 0!
[  479.461557][T12559] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  479.493437][T12559] ntfs3: loop2: Failed to load $MFT.
[  479.512829][T12582] fuse: Bad value for 'fd'
[  479.519079][   T26] audit: type=1804 audit(1718290562.143:1380): pid=12582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1349999631/syzkaller.6PcN0T/393/file0" dev="sda1" ino=1960 res=1 errno=0
[  479.529400][T12583] sctp: [Deprecated]: syz-executor.0 (pid 12583) Use of struct sctp_assoc_value in delayed_ack socket option.
[  479.529400][T12583] Use struct sctp_sack_info instead
[  479.560084][T12566] chnl_net:caif_netlink_parms(): no params data found
[  479.589404][ T3990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.665380][ T3990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.710096][T12559] loop2: detected capacity change from 0 to 512
[  479.710426][T12566] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.731873][T12566] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.741640][T12566] device bridge_slave_0 entered promiscuous mode
[  479.762510][ T3990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  479.793598][T12559] EXT4-fs error (device loop2): ext4_xattr_inode_iget:400: comm syz-executor.2: Parent and EA inode have the same ino 15
[  479.815088][T12566] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.824182][T12566] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.826246][T12559] EXT4-fs (loop2): 1 orphan inode deleted
[  479.838852][T12566] device bridge_slave_1 entered promiscuous mode
[  479.843471][T12559] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  479.915456][ T3990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.117205][T12566] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  480.143586][T12566] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.172617][T12608] fuse: Bad value for 'fd'
[  480.274582][T12566] team0: Port device team_slave_0 added
[  480.290669][T12566] team0: Port device team_slave_1 added
[  480.356789][T12619] loop2: detected capacity change from 0 to 64
[  480.365580][T12566] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.378125][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.431946][T12566] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.471479][T12566] batman_adv: batadv0: Adding interface: batadv_slave_1
[  480.484565][T12566] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.576042][T12566] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.072531][T12566] device hsr_slave_0 entered promiscuous mode
[  481.095062][T12627] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  481.105677][T12566] device hsr_slave_1 entered promiscuous mode
[  481.126051][T12627] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 44 bytes, need 64+ bytes)
[  481.126575][T12653] loop2: detected capacity change from 0 to 64
[  481.165913][T12566] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  481.183065][T12566] Cannot create hsr debugfs directory
[  481.338453][T12657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  481.370362][ T3567] Bluetooth: hci0: command 0x0409 tx timeout
[  481.406126][T12657] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  481.419908][T12662] loop0: detected capacity change from 0 to 1024
[  481.457822][T12667] loop2: detected capacity change from 0 to 64
[  481.492324][T12662] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  481.769820][   T23] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  481.784750][   T23] Bluetooth: hci2: Injecting HCI hardware error event
[  481.803474][ T3536] Bluetooth: hci2: hardware error 0x00
[  481.988479][T12690] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  481.996895][T12690] netlink: 592 bytes leftover after parsing attributes in process `syz-executor.1'.
[  482.289144][T12566] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  482.328267][T12566] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  482.349318][T12566] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  482.391154][T12566] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  482.539378][T12711] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 44 bytes, need 64+ bytes)
[  482.615105][ T3990] device hsr_slave_0 left promiscuous mode
[  482.633271][ T3990] device hsr_slave_1 left promiscuous mode
[  482.653581][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  482.662289][T12684] loop2: detected capacity change from 0 to 32768
[  482.669054][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  482.679171][ T3990] device bridge_slave_1 left promiscuous mode
[  482.685417][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.694508][ T3990] device bridge_slave_0 left promiscuous mode
[  482.701642][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state
[  482.722023][ T3990] device veth1_macvtap left promiscuous mode
[  482.745659][ T3990] device veth0_macvtap left promiscuous mode
[  482.752231][ T3990] device veth1_vlan left promiscuous mode
[  482.758719][ T3990] device veth0_vlan left promiscuous mode
[  482.857908][ T3567] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  483.151807][ T3990] team0 (unregistering): Port device team_slave_1 removed
[  483.174616][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  483.192291][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  483.231763][ T3567] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  483.247840][ T3567] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  483.351832][ T3567] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  483.366666][ T3567] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  483.383799][ T3567] usb 1-1: SerialNumber: syz
[  483.415753][ T3990] bond0 (unregistering): Released all slaves
[  483.447964][ T4080] Bluetooth: hci0: command 0x041b tx timeout
[  483.508467][T12723] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  483.517078][T12723] netlink: 592 bytes leftover after parsing attributes in process `syz-executor.3'.
[  483.621959][T12566] 8021q: adding VLAN 0 to HW filter on device bond0
[  483.658046][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  483.667040][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  483.690082][T12566] 8021q: adding VLAN 0 to HW filter on device team0
[  483.692049][ T3567] usb 1-1: 0:2 : does not exist
[  483.718305][ T3567] usb 1-1: unit 5: unexpected type 0x0a
[  483.744826][ T3567] usb 1-1: USB disconnect, device number 12
[  483.764983][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  483.778479][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  483.798757][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.805911][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state
[  483.820143][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  483.832700][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  483.848866][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.856024][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state
[  483.875100][T12728] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'.
[  483.962041][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  483.977384][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  483.989521][T12730] fuse: Bad value for 'fd'
[  483.995903][ T7152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  484.030958][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  484.051788][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  484.078835][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  484.115117][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  484.160791][T12566] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  484.188445][T12566] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  484.229175][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  484.240905][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  484.250318][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  484.265248][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  484.275128][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  484.308822][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  485.447398][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  485.456050][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  485.482359][T12764] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'.
[  485.502091][T12766] loop0: detected capacity change from 0 to 1764
[  485.510098][T12566] 8021q: adding VLAN 0 to HW filter on device batadv0
[  485.526684][T12768] loop2: detected capacity change from 0 to 164
[  485.537791][ T3567] Bluetooth: hci0: command 0x040f tx timeout
[  485.680089][T12777] xt_HMARK: spi-set and port-set can't be combined
[  485.806024][T12781] fscrypt: key with description 'fscrypt:e8dab99234bb312e' is too short (got 44 bytes, need 64+ bytes)
[  485.894482][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  485.910980][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  485.926775][T12566] device veth0_vlan entered promiscuous mode
[  485.945530][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  485.955889][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  485.979971][T12566] device veth1_vlan entered promiscuous mode
[  485.989721][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  485.999341][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  486.007550][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  486.042339][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  486.051782][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  486.069575][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  486.082593][T12566] device veth0_macvtap entered promiscuous mode
[  486.136129][T12566] device veth1_macvtap entered promiscuous mode
[  486.201617][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.247785][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.284684][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.307561][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.324160][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.335268][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.352175][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  486.364092][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.392935][T12566] batman_adv: batadv0: Interface activated: batadv_slave_0
[  486.441410][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.483197][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.514665][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.526278][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.546418][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.565047][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.575308][T12566] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  486.592766][T12566] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  486.604784][T12566] batman_adv: batadv0: Interface activated: batadv_slave_1
[  486.620139][T12795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  486.677712][T12797] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  486.696715][T12786] loop2: detected capacity change from 0 to 32768
[  486.780757][T12786] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (12786)
[  486.855134][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  486.870364][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  486.892055][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  486.907968][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  486.920464][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  486.932121][T12808] loop0: detected capacity change from 0 to 256
[  486.939754][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  486.949355][T12806] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'.
[  486.959772][T12786] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  486.976390][T12566] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  486.986385][T12786] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  487.006076][T12566] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  487.017731][T12786] BTRFS info (device loop2): use lzo compression, level 0
[  487.034643][T12786] BTRFS info (device loop2): force zlib compression, level 3
[  487.040582][T12566] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  487.047562][T12786] BTRFS info (device loop2): using free space tree
[  487.067895][T12566] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  487.077496][T12786] BTRFS info (device loop2): has skinny extents
[  487.292181][ T3606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.305642][   T26] audit: type=1804 audit(1718290569.923:1381): pid=12827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1349999631/syzkaller.6PcN0T/432/bus" dev="sda1" ino=1944 res=1 errno=0
[  487.330958][    C1] vkms_vblank_simulate: vblank timer overrun
[  487.337988][ T3606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.400052][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  487.460645][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  487.492843][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  487.503501][T12843] loop0: detected capacity change from 0 to 64
[  487.523077][T12786] BTRFS info (device loop2): enabling ssd optimizations
[  487.523252][T12844] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  487.558717][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  487.607852][   T23] Bluetooth: hci0: command 0x0419 tx timeout
[  487.944792][T12856] loop4: detected capacity change from 0 to 256
[  487.980532][T12857] 9pnet: Insufficient options for proto=fd
[  488.270915][T12863] loop0: detected capacity change from 0 to 256
[  488.426161][T12863] exfat: Deprecated parameter 'utf8'
[  488.497048][T12863] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  488.790563][    C1] vkms_vblank_simulate: vblank timer overrun
[  488.859216][   T26] audit: type=1804 audit(1718290571.483:1382): pid=12866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4082467738/syzkaller.coeOjh/246/bus" dev="sda1" ino=1956 res=1 errno=0
[  491.012599][T12913] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  491.021852][T12913] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'.
[  491.022184][T12913] device hsr_slave_0 left promiscuous mode
[  491.043409][T12913] device hsr_slave_1 left promiscuous mode
[  491.600197][T12950] tipc: Failed to remove unknown binding: 66,1,1/0:3460874576/3460874578
[  491.623635][T12950] tipc: Failed to remove unknown binding: 66,1,1/0:3460874576/3460874578
[  491.992740][T12959] loop4: detected capacity change from 0 to 512
[  492.084112][T12959] EXT4-fs (loop4): Ignoring removed nobh option
[  492.092181][T12963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  492.103434][T12959] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  492.173701][T12959] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  492.192273][T12959] EXT4-fs (loop4): 1 truncate cleaned up
[  492.198104][T12959] EXT4-fs (loop4): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000006,journal_ioprio=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobh,nombcache,noload,,errors=continue. Quota mode: none.
[  492.220113][    C1] vkms_vblank_simulate: vblank timer overrun
[  492.233127][T12963] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'.
[  492.485187][T12978] tipc: Failed to remove unknown binding: 66,1,1/0:721200920/721200922
[  492.521588][T12978] tipc: Failed to remove unknown binding: 66,1,1/0:721200920/721200922
[  493.256551][T13003] xt_CT: You must specify a L4 protocol and not use inversions on it
[  494.348937][T13015] openvswitch: netlink: Missing key (keys=40, expected=200000)
[  494.481365][T13018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  494.575182][T13022] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'.
[  494.985090][T13041] xt_CT: You must specify a L4 protocol and not use inversions on it
[  496.110533][T13050] bond_slave_0: mtu greater than device maximum
[  496.162482][   T26] audit: type=1326 audit(1718290578.783:1383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  496.266591][   T26] audit: type=1326 audit(1718290578.813:1384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  496.425379][   T26] audit: type=1326 audit(1718290578.813:1385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  496.527419][   T26] audit: type=1326 audit(1718290578.813:1386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  496.637561][   T26] audit: type=1326 audit(1718290578.813:1387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  496.771049][   T26] audit: type=1326 audit(1718290578.813:1388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=439 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  496.871608][T13072] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  496.915752][   T26] audit: type=1326 audit(1718290578.813:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  497.031695][ T2978] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  497.064845][   T26] audit: type=1326 audit(1718290578.823:1390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  497.167122][T13076] xt_CT: You must specify a L4 protocol and not use inversions on it
[  497.312443][ T2978] Bluetooth: hci0: Injecting HCI hardware error event
[  497.325641][ T3536] Bluetooth: hci0: hardware error 0x00
[  497.994772][T13077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  498.017742][   T26] audit: type=1326 audit(1718290578.823:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  498.059953][   T26] audit: type=1326 audit(1718290578.823:1392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0fc9af1ea9 code=0x7ffc0000
[  498.150739][T13077] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'.
[  500.571593][T13148] loop0: detected capacity change from 0 to 128
[  500.787898][T13148] VFS: Found a Xenix FS (block size = 512) on device loop0
[  501.083321][T13153] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.0'.
[  501.428980][ T1376] ieee802154 phy0 wpan0: encryption failed: -22
[  501.440979][ T1376] ieee802154 phy1 wpan1: encryption failed: -22
[  502.014271][T13153] sysv_free_block: trying to free block not in datazone
[  502.629348][T11447] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  502.862175][T13171] loop4: detected capacity change from 0 to 256
[  503.013486][T13179] loop2: detected capacity change from 0 to 256
[  503.032982][T13171] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d)
[  504.052802][T13214] loop2: detected capacity change from 0 to 256
[  504.149440][T13214] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001023f, chksum : 0x0e440cfe, utbl_chksum : 0xe619d30d)
[  504.746350][T13245] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  504.906439][T13254] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'.
[  504.931497][T13254] device gretap0 entered promiscuous mode
[  504.973940][T13258] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'.
[  505.007686][T13258] 0ªX: renamed from gretap0
[  505.400107][T13258] device 
00ªX left promiscuous mode
[  505.779142][T13258] A link change request failed with some changes committed already. Interface 
00ªX may have been left with an inconsistent configuration, please check.
[  505.888036][T13254] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'.
[  505.910236][T13254] device 
00ªX entered promiscuous mode
[  506.039008][T13280] cgroup: subsys name conflicts with all
[  506.119010][T13282] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  506.157134][T13223] loop4: detected capacity change from 0 to 32768
[  506.307047][T13223] XFS (loop4): Mounting V5 Filesystem
[  506.477110][T13223] XFS (loop4): Ending clean mount
[  506.482400][T13305] loop2: detected capacity change from 0 to 256
[  506.625676][T12566] XFS (loop4): Unmounting Filesystem
[  507.282352][T13323] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  507.354834][T13323] device gretap0 entered promiscuous mode
[  507.380817][T13327] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  507.418143][T13327] 0ªX: renamed from gretap0
[  507.495455][T13327] device 
00ªX left promiscuous mode
[  507.512817][T13327] A link change request failed with some changes committed already. Interface 
00ªX may have been left with an inconsistent configuration, please check.
[  507.547892][T13331] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  507.575229][T13331] device 
00ªX entered promiscuous mode
[  507.643063][T13323] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'.
[  507.673570][T13323] 1ªX: renamed from 
00ªX
[  507.703612][T13323] device 
01ªX left promiscuous mode
[  507.719725][T13323] A link change request failed with some changes committed already. Interface 
01ªX may have been left with an inconsistent configuration, please check.
[  508.631347][T13357] loop4: detected capacity change from 0 to 128
[  508.697977][T13357] VFS: Found a Xenix FS (block size = 512) on device loop4
[  508.866151][T13370] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.4'.
[  508.987265][T13365] sysv_free_block: trying to free block not in datazone
[  509.441373][T13383] loop0: detected capacity change from 0 to 4096
[  509.524372][T13383] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  509.618185][T13359] loop2: detected capacity change from 0 to 32768
[  509.674747][T12566] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  509.772879][T13359] XFS (loop2): Mounting V5 Filesystem
[  509.795327][T13394] loop0: detected capacity change from 0 to 256
[  509.895215][T13359] XFS (loop2): Ending clean mount
[  510.170902][T13408] loop0: detected capacity change from 0 to 1764
[  510.283298][T12376] XFS (loop2): Unmounting Filesystem
[  510.358050][T13408] iso9660: Corrupted directory entry in block 2 of inode 1920
[  510.742380][T13424] loop4: detected capacity change from 0 to 256
[  511.338439][T13458] loop0: detected capacity change from 0 to 256
[  511.799340][T13470] loop0: detected capacity change from 0 to 4096
[  511.860700][T13470] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  512.046401][T13483] loop2: detected capacity change from 0 to 64
[  512.180836][T13448] loop4: detected capacity change from 0 to 32768
[  512.257366][T13483] hfs: request for non-existent node 1286 in B*Tree
[  512.265282][T13483] hfs: request for non-existent node 1286 in B*Tree
[  512.272801][T13483] hfs: request for non-existent node 1286 in B*Tree
[  512.287877][T13483] hfs: request for non-existent node 1286 in B*Tree
[  512.328852][T13448] XFS (loop4): Mounting V5 Filesystem
[  512.421341][T13448] XFS (loop4): Ending clean mount
[  512.437368][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  512.660119][T12566] XFS (loop4): Unmounting Filesystem
[  512.688982][T13512] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'.
[  512.980901][    C1] vkms_vblank_simulate: vblank timer overrun
[  513.416295][T13525] fuse: Bad value for 'fd'
[  513.509335][T13520] loop0: detected capacity change from 0 to 4096
[  513.587975][T13520] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  514.201417][T13549] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'.
[  514.286179][T13556] loop4: detected capacity change from 0 to 512
[  514.312862][T13549] device gretap0 entered promiscuous mode
[  514.368804][T13556] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  514.397893][T13554] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'.
[  514.485448][T13556] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz-executor.4: casefold flag without casefold feature
[  514.516186][T13554] 0ªX: renamed from gretap0
[  514.528168][T13556] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.4: missing EA_INODE flag
[  514.528953][T13556] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz-executor.4: error while reading EA inode 12 err=-117
[  514.529560][T13556] EXT4-fs (loop4): 1 orphan inode deleted
[  514.529586][T13556] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,journal_dev=0x0000000000000007,quota,noinit_itable,errors=continue,errors=continue,errors=remount-ro,delalloc,auto_da_alloc,norecovery,errors=continue,journal_ioprio=0x0000000000000001,. Quota mode: writeback.
[  514.563997][T13554] device 
00ªX left promiscuous mode
[  514.565856][T13554] A link change request failed with some changes committed already. Interface 
00ªX may have been left with an inconsistent configuration, please check.
[  514.565938][T13557] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'.
[  514.590710][T13557] device 
00ªX entered promiscuous mode
[  514.736722][T13556] EXT4-fs error (device loop4): __ext4_get_inode_loc:4309: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  514.815770][T13556] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5789: Corrupt filesystem
[  514.850147][T13575] loop2: detected capacity change from 0 to 64
[  514.869178][T13556] EXT4-fs error (device loop4): ext4_splice_branch:479: inode #18: comm syz-executor.4: mark_inode_dirty error
[  514.919094][T13556] EXT4-fs error (device loop4): ext4_free_blocks:6224: comm syz-executor.4: Freeing blocks not in datazone - block = 255, count = 1
[  515.010598][T13556] EXT4-fs error (device loop4): ext4_free_blocks:6224: comm syz-executor.4: Freeing blocks not in datazone - block = 49, count = 1
[  515.050079][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  515.050095][   T26] audit: type=1326 audit(1718290597.673:1394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13580 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d19f1aea9 code=0x0
[  515.059135][T13556] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #18: comm syz-executor.4: invalid indirect mapped block 255 (level 0)
[  515.170625][T13582] ipt_CLUSTERIP: Please specify destination IP
[  515.229509][T13556] EXT4-fs error (device loop4): __ext4_get_inode_loc:4309: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  515.276054][T13556] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5789: Corrupt filesystem
[  515.308180][T13556] EXT4-fs error (device loop4): ext4_truncate:4261: inode #18: comm syz-executor.4: mark_inode_dirty error
[  515.365536][T13556] EXT4-fs error (device loop4): __ext4_get_inode_loc:4309: comm syz-executor.4: Invalid inode table block 0 in block_group 0
[  515.488071][T13571] loop0: detected capacity change from 0 to 32768
[  515.546109][T12566] EXT4-fs warning (device loop4): htree_dirblock_to_tree:1082: inode #2: lblock 0: comm syz-executor.4: error -117 reading directory block
[  515.548320][T13596] loop2: detected capacity change from 0 to 1024
[  515.775957][ T3778] hfsplus: b-tree write err: -5, ino 4
[  516.640998][T13633] loop0: detected capacity change from 0 to 1024
[  516.649099][   T26] audit: type=1326 audit(1718290599.273:1395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13624 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb20b86fea9 code=0x0
[  516.704106][T13633] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  516.777331][T13636] ipt_CLUSTERIP: Please specify destination IP
[  517.054092][T13649] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[  517.190379][T13634] chnl_net:caif_netlink_parms(): no params data found
[  517.241763][T13629] chnl_net:caif_netlink_parms(): no params data found
[  517.547121][T13629] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.555832][T13629] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.565287][T13629] device bridge_slave_0 entered promiscuous mode
[  517.589281][T13629] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.597113][T13629] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.606060][T13629] device bridge_slave_1 entered promiscuous mode
[  517.616271][T13634] bridge0: port 1(bridge_slave_0) entered blocking state
[  517.624735][T13634] bridge0: port 1(bridge_slave_0) entered disabled state
[  517.633746][T13634] device bridge_slave_0 entered promiscuous mode
[  517.678797][T13634] bridge0: port 2(bridge_slave_1) entered blocking state
[  517.686161][T13634] bridge0: port 2(bridge_slave_1) entered disabled state
[  517.712308][T13634] device bridge_slave_1 entered promiscuous mode
[  517.780588][T13629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.822033][T13629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.847144][ T3990] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.873522][T13634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  517.915376][T13634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  517.936448][T13629] team0: Port device team_slave_0 added
[  517.982265][ T3990] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  517.996196][   T26] audit: type=1800 audit(1718290600.613:1396): pid=13681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0
[  518.038620][T13629] team0: Port device team_slave_1 added
[  518.061882][   T26] audit: type=1800 audit(1718290600.643:1397): pid=13681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1946 res=0 errno=0
[  518.114917][ T3990] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.127969][T13683] loop0: detected capacity change from 0 to 64
[  518.144766][T13634] team0: Port device team_slave_0 added
[  518.165399][T13629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.174894][T13629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.255862][T13629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.273765][T13634] team0: Port device team_slave_1 added
[  518.312630][ T3990] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  518.326040][T13629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.375267][T13629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.411172][T13629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.454205][T13634] batman_adv: batadv0: Adding interface: batadv_slave_0
[  518.466719][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.476726][T13679] loop2: detected capacity change from 0 to 32768
[  518.500364][T13634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  518.570307][T13634] batman_adv: batadv0: Adding interface: batadv_slave_1
[  518.577293][T13634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  518.607218][T13634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  518.615343][T13679] XFS (loop2): Mounting V5 Filesystem
[  518.626730][T13629] device hsr_slave_0 entered promiscuous mode
[  518.634208][T13629] device hsr_slave_1 entered promiscuous mode
[  518.641898][T13629] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  518.650696][T13629] Cannot create hsr debugfs directory
[  518.667755][ T4242] Bluetooth: hci0: command 0x0409 tx timeout
[  518.739576][T13679] XFS (loop2): Ending clean mount
[  518.816367][ T4242] Bluetooth: hci2: command 0x0409 tx timeout
[  518.834337][T13634] device hsr_slave_0 entered promiscuous mode
[  518.846770][T13634] device hsr_slave_1 entered promiscuous mode
[  518.869544][T13634] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  518.884197][T13634] Cannot create hsr debugfs directory
[  518.919629][T12376] XFS (loop2): Unmounting Filesystem
[  519.110494][T13696] loop0: detected capacity change from 0 to 40427
[  519.171022][T13696] F2FS-fs (loop0): invalid crc value
[  519.187250][T13696] F2FS-fs (loop0): Found nat_bits in checkpoint
[  519.298998][T13696] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  519.374097][T13696] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  519.636746][T13684] chnl_net:caif_netlink_parms(): no params data found
[  519.664010][T11447] attempt to access beyond end of device
[  519.664010][T11447] loop0: rw=524288, want=45072, limit=40427
[  519.676827][T11447] attempt to access beyond end of device
[  519.676827][T11447] loop0: rw=0, want=45072, limit=40427
[  519.712441][T13634] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.810361][T13634] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.833512][ T1233] attempt to access beyond end of device
[  519.833512][ T1233] loop0: rw=2049, want=40992, limit=40427
[  519.953343][T13634] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  519.985343][T13684] bridge0: port 1(bridge_slave_0) entered blocking state
[  519.993047][T13684] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.002018][T13684] device bridge_slave_0 entered promiscuous mode
[  520.012259][T13684] bridge0: port 2(bridge_slave_1) entered blocking state
[  520.019832][T13684] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.029066][T13684] device bridge_slave_1 entered promiscuous mode
[  520.069830][T13634] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  520.126392][T13684] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  520.191057][T13684] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  520.279721][T13684] team0: Port device team_slave_0 added
[  520.304914][T13684] team0: Port device team_slave_1 added
[  520.327823][ T4242] Bluetooth: hci1: command 0x0409 tx timeout
[  520.386632][T13684] batman_adv: batadv0: Adding interface: batadv_slave_0
[  520.399295][T13684] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  520.441237][T13684] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  520.456582][ T3990] device hsr_slave_0 left promiscuous mode
[  520.473721][ T3990] device hsr_slave_1 left promiscuous mode
[  520.482258][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  520.493437][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  520.514224][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  520.529613][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  520.539467][ T3990] device bridge_slave_1 left promiscuous mode
[  520.545816][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state
[  520.556054][ T3990] device bridge_slave_0 left promiscuous mode
[  520.564128][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state
[  520.580809][ T3990] device veth1_macvtap left promiscuous mode
[  520.587798][ T3990] device veth0_macvtap left promiscuous mode
[  520.593988][ T3990] device veth1_vlan left promiscuous mode
[  520.600248][ T3990] device veth0_vlan left promiscuous mode
[  520.742985][ T3570] Bluetooth: hci0: command 0x041b tx timeout
[  520.900933][ T1069] Bluetooth: hci2: command 0x041b tx timeout
[  520.915009][ T3990] team0 (unregistering): Port device team_slave_1 removed
[  520.930099][ T3990] team0 (unregistering): Port device team_slave_0 removed
[  520.944761][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  520.960900][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  521.051436][ T3990] bond0 (unregistering): Released all slaves
[  521.101289][T13684] batman_adv: batadv0: Adding interface: batadv_slave_1
[  521.113947][T13684] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  521.145832][T13684] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  521.232195][T13684] device hsr_slave_0 entered promiscuous mode
[  521.255390][T13684] device hsr_slave_1 entered promiscuous mode
[  521.293803][T13684] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  521.302347][T13684] Cannot create hsr debugfs directory
[  521.388802][T13629] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  521.428454][T13629] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  521.445637][T13629] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  521.471440][T13629] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  521.586622][T13634] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  521.619400][T13684] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.648317][T13634] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  521.664659][T13725] chnl_net:caif_netlink_parms(): no params data found
[  521.674810][T13634] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  521.707323][T13684] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.745009][T13634] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  521.861869][T13684] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  521.955688][T13725] bridge0: port 1(bridge_slave_0) entered blocking state
[  521.964938][T13725] bridge0: port 1(bridge_slave_0) entered disabled state
[  521.973579][T13725] device bridge_slave_0 entered promiscuous mode
[  521.998248][T13725] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.006059][T13725] bridge0: port 2(bridge_slave_1) entered disabled state
[  522.042443][T13725] device bridge_slave_1 entered promiscuous mode
[  522.097355][T13737] loop2: detected capacity change from 0 to 128
[  522.145877][T13737] VFS: Found a Xenix FS (block size = 512) on device loop2
[  522.165535][T13684] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.191772][T13629] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.244439][T13725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  522.273632][T13629] 8021q: adding VLAN 0 to HW filter on device team0
[  522.294083][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  522.309343][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  522.329487][T13725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  522.351821][T13738] netlink: 9286 bytes leftover after parsing attributes in process `syz-executor.2'.
[  522.387014][T13738] sysv_free_block: trying to free block not in datazone
[  522.399077][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  522.408002][ T4242] Bluetooth: hci1: command 0x041b tx timeout
[  522.438574][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  522.454267][ T5073] bridge0: port 1(bridge_slave_0) entered blocking state
[  522.461505][ T5073] bridge0: port 1(bridge_slave_0) entered forwarding state
[  522.473693][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  522.494755][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  522.515714][ T5073] bridge0: port 2(bridge_slave_1) entered blocking state
[  522.522867][ T5073] bridge0: port 2(bridge_slave_1) entered forwarding state
[  522.540685][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  522.559884][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  522.582774][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  522.607052][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  522.684073][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  522.700400][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  522.717209][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  522.739896][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  522.817896][ T4242] Bluetooth: hci0: command 0x040f tx timeout
[  522.820183][T13725] team0: Port device team_slave_0 added
[  522.832260][ T4242] Bluetooth: hci4: command 0x0409 tx timeout
[  522.876662][T13634] 8021q: adding VLAN 0 to HW filter on device bond0
[  522.899227][T13725] team0: Port device team_slave_1 added
[  522.960896][T13629] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  522.971916][ T4244] Bluetooth: hci2: command 0x040f tx timeout
[  522.987725][T13629] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  523.016581][T12376] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  523.038614][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  523.057540][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  523.066413][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  523.084702][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  523.095870][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  523.154659][T13725] batman_adv: batadv0: Adding interface: batadv_slave_0
[  523.167757][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.227646][T13725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  523.248598][T13725] batman_adv: batadv0: Adding interface: batadv_slave_1
[  523.255567][T13725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  523.317699][T13725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  523.333568][T13634] 8021q: adding VLAN 0 to HW filter on device team0
[  523.352750][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  523.367840][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  523.455778][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  523.476522][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  523.486409][ T4087] bridge0: port 1(bridge_slave_0) entered blocking state
[  523.493551][ T4087] bridge0: port 1(bridge_slave_0) entered forwarding state
[  523.512640][T13684] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  523.546995][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  523.556452][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  523.575635][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  523.594577][ T4087] bridge0: port 2(bridge_slave_1) entered blocking state
[  523.601723][ T4087] bridge0: port 2(bridge_slave_1) entered forwarding state
[  523.621023][T13684] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  523.647833][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  523.657149][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  523.679326][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  523.696632][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  523.708918][T13725] device hsr_slave_0 entered promiscuous mode
[  523.725884][T13725] device hsr_slave_1 entered promiscuous mode
[  523.733902][T13725] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  523.741802][T13725] Cannot create hsr debugfs directory
[  523.748320][T13684] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  523.765611][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  523.775137][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  523.784423][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  523.793051][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  523.801785][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  523.827000][T13684] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  523.844869][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  523.854014][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  523.899288][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  523.917153][ T3567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  523.935688][T13634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  523.979222][T13629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  524.192495][T13725] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.320974][T13725] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.390663][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  524.398501][T13766] loop2: detected capacity change from 0 to 4096
[  524.398633][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  524.424723][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  524.434037][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  524.451917][T13684] 8021q: adding VLAN 0 to HW filter on device bond0
[  524.464183][T13769] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  524.472694][T13634] 8021q: adding VLAN 0 to HW filter on device batadv0
[  524.487774][ T4244] Bluetooth: hci1: command 0x040f tx timeout
[  524.517809][T13725] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.582332][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  524.587441][T13766] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  524.592858][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  524.607518][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  524.616128][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  524.635655][T13684] 8021q: adding VLAN 0 to HW filter on device team0
[  524.642945][T13766] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12)
[  524.646426][T13629] device veth0_vlan entered promiscuous mode
[  524.666036][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  524.675424][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  524.684464][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  524.693824][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  524.716197][T13629] device veth1_vlan entered promiscuous mode
[  524.716566][T13766] Remounting filesystem read-only
[  524.728125][T13766] NILFS (loop2): error -5 truncating bmap (ino=12)
[  524.762560][T12376] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  524.776324][T12376] NILFS (loop2): discard dirty page: offset=0, ino=18
[  524.787936][T12376] NILFS (loop2): discard dirty block: blocknr=0, size=4096
[  524.795548][T12376] NILFS (loop2): discard dirty page: offset=0, ino=2
[  524.798600][T13725] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  524.802431][T12376] NILFS (loop2): discard dirty block: blocknr=14, size=4096
[  524.824880][T12376] NILFS (loop2): discard dirty page: offset=0, ino=6
[  524.832804][T12376] NILFS (loop2): discard dirty block: blocknr=23, size=4096
[  524.840487][T12376] NILFS (loop2): discard dirty page: offset=4096, ino=6
[  524.847450][T12376] NILFS (loop2): discard dirty block: blocknr=24, size=4096
[  524.855486][T12376] NILFS (loop2): discard dirty page: offset=8192, ino=6
[  524.868142][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  524.876959][T12376] NILFS (loop2): discard dirty block: blocknr=25, size=4096
[  524.886758][T12376] NILFS (loop2): discard dirty page: offset=0, ino=3
[  524.888547][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  524.901192][ T1069] Bluetooth: hci4: command 0x041b tx timeout
[  524.907832][ T1069] Bluetooth: hci0: command 0x0419 tx timeout
[  524.913273][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  524.913934][T12376] NILFS (loop2): discard dirty block: blocknr=28, size=4096
[  524.931192][T12376] NILFS (loop2): discard dirty page: offset=4096, ino=3
[  524.932993][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  524.938596][T12376] NILFS (loop2): discard dirty block: blocknr=29, size=4096
[  524.948523][ T4080] bridge0: port 1(bridge_slave_0) entered blocking state
[  524.953862][T12376] NILFS (loop2): discard dirty page: offset=270336, ino=3
[  524.960897][ T4080] bridge0: port 1(bridge_slave_0) entered forwarding state
[  524.968834][T12376] NILFS (loop2): discard dirty block: blocknr=0, size=4096
[  524.985870][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  524.995419][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  525.004178][ T4080] bridge0: port 2(bridge_slave_1) entered blocking state
[  525.011306][ T4080] bridge0: port 2(bridge_slave_1) entered forwarding state
[  525.019654][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  525.030520][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  525.049733][ T1069] Bluetooth: hci2: command 0x0419 tx timeout
[  525.061895][T13634] device veth0_vlan entered promiscuous mode
[  525.110666][T13629] device veth0_macvtap entered promiscuous mode
[  525.119124][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  525.129403][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  525.146008][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  525.155183][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  525.164498][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  525.182116][T13629] device veth1_macvtap entered promiscuous mode
[  525.196582][T13634] device veth1_vlan entered promiscuous mode
[  525.206629][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  525.214998][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  525.223522][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  525.232084][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  525.242290][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  525.258656][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  525.270605][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  525.313347][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  525.326342][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  525.338967][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  525.347551][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  525.356255][ T4080] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  525.391610][T13684] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  525.408329][T13684] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  525.428957][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  525.437140][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  525.445836][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  525.455201][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.467221][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.478312][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.488913][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.499945][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.511996][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.522118][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  525.533313][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.545718][T13629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  525.590300][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  525.599634][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  525.617429][T13634] device veth0_macvtap entered promiscuous mode
[  525.641283][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.653229][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.663404][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.674000][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.683992][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.695328][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.705644][T13629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  525.716417][T13629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  525.727974][T13629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  525.745181][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  525.755298][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  525.764181][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  525.773570][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  525.792805][T13634] device veth1_macvtap entered promiscuous mode
[  525.813665][T13629] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  525.824780][T13629] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  525.833824][T13629] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  525.842656][T13629] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  525.856252][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  525.866353][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  525.954273][T13725] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  525.974776][T13725] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  526.019501][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.038085][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.048853][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.059429][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.070743][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.081315][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.095122][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.106027][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.117036][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  526.127860][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.139681][T13634] batman_adv: batadv0: Interface activated: batadv_slave_0
[  526.150549][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.161308][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.172398][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.185482][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.195612][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.206237][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.216889][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.227382][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.237352][T13634] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  526.248550][T13634] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  526.260199][T13634] batman_adv: batadv0: Interface activated: batadv_slave_1
[  526.269568][T13725] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  526.279535][T13725] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  526.302610][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  526.311784][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  526.321422][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  526.330427][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  526.351734][T13634] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  526.361166][T13634] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  526.370462][T13634] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  526.379257][T13634] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  526.419375][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  526.427299][ T4087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  526.455819][T13684] 8021q: adding VLAN 0 to HW filter on device batadv0
[  526.568267][ T4242] Bluetooth: hci1: command 0x0419 tx timeout
[  526.622640][ T6265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.648468][ T6265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  526.703015][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  526.718654][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  526.738912][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  526.856553][T13684] device veth0_vlan entered promiscuous mode
[  526.889874][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  526.916851][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  526.928586][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  526.937890][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  526.950542][ T3780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.974921][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  526.978141][ T2978] Bluetooth: hci4: command 0x040f tx timeout
[  526.988476][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.003170][ T3780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  527.056325][ T3990] device hsr_slave_0 left promiscuous mode
[  527.065231][ T3990] device hsr_slave_1 left promiscuous mode
[  527.087804][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.114664][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.132871][ T3990] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.157300][ T3990] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.170585][ T3990] device bridge_slave_1 left promiscuous mode
[  527.176836][ T3990] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.189337][ T3990] device bridge_slave_0 left promiscuous mode
[  527.200249][ T3990] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.221676][ T3990] device veth1_macvtap left promiscuous mode
[  527.230230][ T3990] device veth0_macvtap left promiscuous mode
[  527.237100][ T3990] device veth1_vlan left promiscuous mode
[  527.246326][ T3990] device veth0_vlan left promiscuous mode
[  527.711019][T13795] loop2: detected capacity change from 0 to 64
[  527.743899][ T3990] team0 (unregistering): Port device team_slave_1 removed
[  527.774004][   T26] audit: type=1800 audit(1718290610.393:1398): pid=13795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="loop2" ino=1 res=0 errno=0
[  527.796010][ T3990] team0 (unregistering): Port device team_slave_0 removed
[  527.829049][ T3990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  527.848570][ T3990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  527.910885][T13797] loop2: detected capacity change from 0 to 256
[  527.946935][   T26] audit: type=1326 audit(1718290610.563:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13796 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8dfaa05ea9 code=0x0
[  527.995422][ T3990] bond0 (unregistering): Released all slaves
[  528.045754][T13684] device veth1_vlan entered promiscuous mode
[  528.064810][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  528.080170][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  528.089118][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  528.123978][T13798] ipt_CLUSTERIP: Please specify destination IP
[  528.138235][ T6265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  528.143858][T13725] 8021q: adding VLAN 0 to HW filter on device bond0
[  528.146878][ T6265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  528.211319][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  528.233193][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  528.274484][T13725] 8021q: adding VLAN 0 to HW filter on device team0
[  528.305106][T13684] device veth0_macvtap entered promiscuous mode
[  528.313613][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  528.322496][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  528.333613][T13803] loop4: detected capacity change from 0 to 1024
[  528.333900][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  528.350147][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  528.370155][T13684] device veth1_macvtap entered promiscuous mode
[  528.390660][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.433865][   T26] audit: type=1326 audit(1718290611.053:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13804 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f918ec15ea9 code=0x0
[  528.456699][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.471177][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.482196][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.500252][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.515054][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.525908][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.536857][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.548509][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  528.559332][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.603391][T13684] batman_adv: batadv0: Interface activated: batadv_slave_0
[  528.612454][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  528.628585][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  528.641416][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  528.658368][ T5797] bridge0: port 1(bridge_slave_0) entered blocking state
[  528.665505][ T5797] bridge0: port 1(bridge_slave_0) entered forwarding state
[  528.687555][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  528.696961][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  528.715147][ T5797] bridge0: port 2(bridge_slave_1) entered blocking state
[  528.722291][ T5797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  528.740000][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  528.755800][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  528.773455][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.800377][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.827711][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.847642][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.857501][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.876651][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.891806][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.917824][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.936522][T13684] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  528.947201][T13684] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  528.969248][T13684] batman_adv: batadv0: Interface activated: batadv_slave_1
[  528.978137][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  528.986795][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  529.008898][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  529.028288][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  529.050869][ T1069] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  529.069198][T13684] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  529.091215][ T2978] Bluetooth: hci4: command 0x0419 tx timeout
[  529.107691][T13684] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  529.117153][T13684] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  529.134242][T13684] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  529.168030][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  529.191929][   T26] audit: type=1800 audit(1718290611.813:1401): pid=13803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=20 res=0 errno=0
[  529.193362][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  529.249891][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  529.272012][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  529.282733][ T5797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  529.325679][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  529.348286][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  529.356928][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  529.368834][ T5073] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  529.382772][T13725] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  529.443843][   T26] audit: type=1800 audit(1718290612.063:1402): pid=13823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1955 res=0 errno=0
[  529.464972][T13826] loop4: detected capacity change from 0 to 128
[  529.664254][ T3992] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.725352][ T3992] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.759017][ T3780] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  529.779422][ T3780] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  529.786899][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  529.823151][ T4083] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  529.872064][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  529.888136][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  529.919262][T13725] 8021q: adding VLAN 0 to HW filter on device batadv0
[  530.051833][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  530.078627][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  530.156391][T13725] device veth0_vlan entered promiscuous mode
[  530.181498][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  530.190700][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  530.228840][T13725] device veth1_vlan entered promiscuous mode
[  530.238234][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  530.246282][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  530.376784][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  530.439334][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  530.483090][T13863] loop1: detected capacity change from 0 to 1024
[  530.527281][T13864] loop3: detected capacity change from 0 to 8
[  530.697906][T13864] SQUASHFS error: Failed to read block 0x4e8: -5
[  530.704404][T13864] SQUASHFS error: Failed to read block 0xed04f1: -5
[  530.729757][   T26] audit: type=1800 audit(1718290613.333:1403): pid=13864 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=5 res=0 errno=0
[  530.914774][T13863] 
[  530.917176][T13863] ======================================================
[  530.924194][T13863] WARNING: possible circular locking dependency detected
[  530.931216][T13863] 5.15.160-syzkaller #0 Not tainted
[  530.936418][T13863] ------------------------------------------------------
[  530.943954][T13863] syz-executor.1/13863 is trying to acquire lock:
[  530.950366][T13863] ffff888074631c08 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x37f/0x14e0
[  530.961275][T13863] 
[  530.961275][T13863] but task is already holding lock:
[  530.968675][T13863] ffff8880773900b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  530.978184][T13863] 
[  530.978184][T13863] which lock already depends on the new lock.
[  530.978184][T13863] 
[  530.988587][T13863] 
[  530.988587][T13863] the existing dependency chain (in reverse order) is:
[  530.997610][T13863] 
[  530.997610][T13863] -> #1 (&tree->tree_lock){+.+.}-{3:3}:
[  531.005623][T13863]        lock_acquire+0x1db/0x4f0
[  531.010854][T13863]        __mutex_lock_common+0x1da/0x25a0
[  531.016690][T13863]        mutex_lock_nested+0x17/0x20
[  531.022001][T13863]        hfsplus_file_truncate+0x864/0xb80
[  531.023823][T13864] SQUASHFS error: Failed to read block 0x6e6: -5
[  531.027826][T13863]        hfsplus_delete_inode+0x170/0x220
[  531.027858][T13863]        hfsplus_unlink+0x6d8/0x7f0
[  531.027876][T13863]        vfs_unlink+0x359/0x5f0
[  531.027900][T13863]        do_unlinkat+0x4a3/0x950
[  531.034877][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.039929][T13863]        __x64_sys_unlinkat+0xca/0xf0
[  531.039956][T13863]        do_syscall_64+0x3b/0xb0
[  531.039976][T13863]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  531.039997][T13863] 
[  531.039997][T13863] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  531.040030][T13863]        validate_chain+0x1649/0x5930
[  531.045224][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.050056][T13863]        __lock_acquire+0x1295/0x1ff0
[  531.050079][T13863]        lock_acquire+0x1db/0x4f0
[  531.050096][T13863]        __mutex_lock_common+0x1da/0x25a0
[  531.050118][T13863]        mutex_lock_nested+0x17/0x20
[  531.050138][T13863]        hfsplus_get_block+0x37f/0x14e0
[  531.050160][T13863]        block_read_full_page+0x2f9/0xde0
[  531.050181][T13863]        do_read_cache_page+0x752/0x1040
[  531.050203][T13863]        __hfs_bnode_create+0x4f2/0xbb0
[  531.050221][T13863]        hfsplus_bnode_find+0x22e/0xe80
[  531.050240][T13863]        hfsplus_brec_find+0x17f/0x570
[  531.050257][T13863]        hfsplus_brec_read+0x27/0x100
[  531.050275][T13863]        hfsplus_find_cat+0x17b/0x5c0
[  531.050292][T13863]        hfsplus_iget+0x403/0x640
[  531.050313][T13863]        hfsplus_fill_super+0xca4/0x1c90
[  531.050334][T13863]        mount_bdev+0x2c9/0x3f0
[  531.050352][T13863]        legacy_get_tree+0xeb/0x180
[  531.050371][T13863]        vfs_get_tree+0x88/0x270
[  531.050389][T13863]        do_new_mount+0x2ba/0xb40
[  531.050406][T13863]        __se_sys_mount+0x2d5/0x3c0
[  531.050423][T13863]        do_syscall_64+0x3b/0xb0
[  531.050442][T13863]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  531.050463][T13863] 
[  531.050463][T13863] other info that might help us debug this:
[  531.050463][T13863] 
[  531.050470][T13863]  Possible unsafe locking scenario:
[  531.050470][T13863] 
[  531.050477][T13863]        CPU0                    CPU1
[  531.050483][T13863]        ----                    ----
[  531.050489][T13863]   lock(&tree->tree_lock);
[  531.056060][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.062679][T13863]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  531.062700][T13863]                                lock(&tree->tree_lock);
[  531.062715][T13863]   lock(&HFSPLUS_I(inode)->extents_lock);
[  531.062730][T13863] 
[  531.062730][T13863]  *** DEADLOCK ***
[  531.062730][T13863] 
[  531.062735][T13863] 2 locks held by syz-executor.1/13863:
[  531.062749][T13863]  #0: 
[  531.068128][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.073019][T13863] ffff88807ba360e0 (&type->s_umount_key#49/1){+.+.}-{3:3}
[  531.079527][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.088452][T13863] , at: alloc_super+0x210/0x940
[  531.088482][T13863]  #1: ffff8880773900b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  531.093871][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.100613][T13863] 
[  531.100613][T13863] stack backtrace:
[  531.100632][T13863] CPU: 0 PID: 13863 Comm: syz-executor.1 Not tainted 5.15.160-syzkaller #0
[  531.100654][T13863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  531.100671][T13863] Call Trace:
[  531.100683][T13863]  <TASK>
2024/06/13 14:56:53 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  531.100691][T13863]  dump_stack_lvl+0x1e3/0x2d0
[  531.106096][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.111069][T13863]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  531.111105][T13863]  ? print_circular_bug+0x12b/0x1a0
[  531.111128][T13863]  check_noncircular+0x2f8/0x3b0
[  531.116839][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.122107][T13863]  ? add_chain_block+0x850/0x850
[  531.122131][T13863]  ? lockdep_lock+0x11f/0x2a0
[  531.127771][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.133365][T13863]  ? __lock_acquire+0x1295/0x1ff0
[  531.133392][T13863]  validate_chain+0x1649/0x5930
[  531.133424][T13863]  ? reacquire_held_locks+0x660/0x660
[  531.133450][T13863]  ? mark_lock+0x98/0x340
[  531.133468][T13863]  ? look_up_lock_class+0x77/0x120
[  531.133493][T13863]  ? register_lock_class+0x100/0x9a0
[  531.133514][T13863]  ? print_irqtrace_events+0x210/0x210
[  531.133536][T13863]  ? is_dynamic_key+0x1f0/0x1f0
[  531.133560][T13863]  ? do_raw_spin_unlock+0x137/0x8b0
[  531.133585][T13863]  ? mark_lock+0x98/0x340
[  531.133604][T13863]  ? lockdep_hardirqs_on+0x94/0x130
[  531.133629][T13863]  __lock_acquire+0x1295/0x1ff0
[  531.133657][T13863]  lock_acquire+0x1db/0x4f0
[  531.133677][T13863]  ? hfsplus_get_block+0x37f/0x14e0
[  531.133707][T13863]  ? read_lock_is_recursive+0x10/0x10
[  531.133730][T13863]  ? __might_sleep+0xc0/0xc0
[  531.133751][T13863]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  531.133774][T13863]  ? release_firmware_map_entry+0x190/0x190
[  531.133803][T13863]  __mutex_lock_common+0x1da/0x25a0
[  531.133827][T13863]  ? hfsplus_get_block+0x37f/0x14e0
[  531.133853][T13863]  ? print_irqtrace_events+0x210/0x210
[  531.133874][T13863]  ? hfsplus_get_block+0x37f/0x14e0
[  531.133900][T13863]  ? mutex_lock_io_nested+0x60/0x60
[  531.139546][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.145033][T13863]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  531.150674][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.156001][T13863]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  531.161400][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.166709][T13863]  ? block_read_full_page+0x2d8/0xde0
[  531.171821][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.177350][T13863]  mutex_lock_nested+0x17/0x20
[  531.182213][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.187357][T13863]  hfsplus_get_block+0x37f/0x14e0
[  531.192394][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.197506][T13863]  ? hfsplus_ext_write_extent+0x1f0/0x1f0
[  531.202762][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.207613][T13863]  ? do_raw_spin_unlock+0x137/0x8b0
[  531.207644][T13863]  ? create_empty_buffers+0x5c0/0x6d0
[  531.207669][T13863]  ? create_page_buffers+0x24b/0x330
[  531.207694][T13863]  block_read_full_page+0x2f9/0xde0
[  531.207722][T13863]  ? hfsplus_ext_write_extent+0x1f0/0x1f0
[  531.207746][T13863]  ? block_is_partially_uptodate+0x2c0/0x2c0
[  531.207772][T13863]  ? lockdep_hardirqs_on+0x94/0x130
[  531.207798][T13863]  ? hfsplus_writepage+0x30/0x30
[  531.207823][T13863]  do_read_cache_page+0x752/0x1040
[  531.207848][T13863]  __hfs_bnode_create+0x4f2/0xbb0
[  531.207869][T13863]  ? read_lock_is_recursive+0x10/0x10
[  531.207890][T13863]  ? __lock_acquire+0x1ff0/0x1ff0
[  531.207909][T13863]  ? hfsplus_bnode_get+0x40/0x40
[  531.207931][T13863]  ? do_raw_spin_unlock+0x137/0x8b0
[  531.207951][T13863]  ? __lock_acquire+0x1295/0x1ff0
[  531.207973][T13863]  hfsplus_bnode_find+0x22e/0xe80
[  531.207995][T13863]  ? hfsplus_bnode_unlink+0x5e0/0x5e0
[  531.208015][T13863]  ? mark_lock+0x98/0x340
[  531.208033][T13863]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  531.208053][T13863]  hfsplus_brec_find+0x17f/0x570
[  531.208075][T13863]  ? do_raw_spin_unlock+0x137/0x8b0
[  531.214536][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.224798][T13863]  ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0
[  531.224825][T13863]  ? __hfsplus_brec_find+0x880/0x880
[  531.224845][T13863]  ? finish_lock_switch+0x8f/0x100
[  531.224868][T13863]  ? finish_task_switch+0x134/0x630
[  531.224894][T13863]  hfsplus_brec_read+0x27/0x100
[  531.232411][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.237815][T13863]  hfsplus_find_cat+0x17b/0x5c0
[  531.237841][T13863]  ? hfsplus_cat_set_perms+0x630/0x630
[  531.237882][T13863]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  531.237904][T13863]  ? lockdep_hardirqs_on+0x94/0x130
[  531.237929][T13863]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  531.237952][T13863]  ? hfsplus_iget+0x2f8/0x640
[  531.237978][T13863]  hfsplus_iget+0x403/0x640
[  531.238005][T13863]  ? zisofs_cleanup+0x20/0x20
[  531.238027][T13863]  ? hfsplus_btree_open+0x908/0x11e0
[  531.238055][T13863]  hfsplus_fill_super+0xca4/0x1c90
[  531.238087][T13863]  ? finish_task_switch+0x134/0x630
[  531.238113][T13863]  ? hfsplus_mount+0x40/0x40
[  531.238161][T13863]  ? print_irqtrace_events+0x210/0x210
[  531.238188][T13863]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  531.238212][T13863]  ? pointer+0xac/0xc40
[  531.238240][T13863]  mount_bdev+0x2c9/0x3f0
[  531.238261][T13863]  ? hfsplus_mount+0x40/0x40
[  531.238285][T13863]  legacy_get_tree+0xeb/0x180
[  531.238307][T13863]  ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0
[  531.238331][T13863]  vfs_get_tree+0x88/0x270
[  531.238352][T13863]  do_new_mount+0x2ba/0xb40
[  531.238376][T13863]  ? do_move_mount_old+0x160/0x160
[  531.243814][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.248260][T13863]  __se_sys_mount+0x2d5/0x3c0
[  531.248284][T13863]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  531.248308][T13863]  ? __x64_sys_mount+0xc0/0xc0
[  531.255660][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.263969][T13863]  ? syscall_enter_from_user_mode+0x37/0x240
[  531.263999][T13863]  ? __x64_sys_mount+0x1c/0xc0
[  531.271132][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.276965][T13863]  do_syscall_64+0x3b/0xb0
[  531.285136][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.290642][T13863]  ? clear_bhb_loop+0x15/0x70
[  531.290667][T13863]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  531.290689][T13863] RIP: 0033:0x7f162c6b45aa
[  531.293491][T13864] SQUASHFS error: Unable to read metadata cache entry [6e4]
[  531.300177][T13863] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 09 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  531.300198][T13863] RSP: 002b:00007f162b22bef8 EFLAGS: 00000202
[  531.307322][T13864] SQUASHFS error: read_indexes: reading block [6e4:0]
[  531.314581][T13863]  ORIG_RAX: 00000000000000a5
[  531.314593][T13863] RAX: ffffffffffffffda RBX: 00007f162b22bf80 RCX: 00007f162c6b45aa
[  531.314609][T13863] RDX: 0000000020000040 RSI: 0000000020000080 RDI: 00007f162b22bf40
[  531.314624][T13863] RBP: 0000000020000040 R08: 00007f162b22bf80 R09: 0000000002000010
[  531.362966][T13725] device veth0_macvtap entered promiscuous mode
[  531.363900][T13863] R10: 0000000002000010 R11: 0000000000000202 R12: 0000000020000080
[  531.363918][T13863] R13: 00007f162b22bf40 R14: 00000000000006b3 R15: 00000000200013c0
[  531.363943][T13863]  </TASK>
[  532.051407][ T4242] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready