last executing test programs:

30.391254284s ago: executing program 2 (id=392):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0xf3, 0x54, 0xed, 0x10, 0xb05, 0x1736, 0xdb1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x49, 0x3e, 0xa}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)

30.064969671s ago: executing program 3 (id=396):
socket$netlink(0x10, 0x3, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$inet_dccp(0x2, 0x6, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
ppoll(&(0x7f0000000500)=[{r0}], 0x1, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

28.904218776s ago: executing program 3 (id=399):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001040)={{0x12, 0x1, 0x0, 0x40, 0x15, 0x42, 0x20, 0x5a9, 0x1550, 0xe4bb, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x8e, 0xc4, 0x6f}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000a80)={0x0, 0x0, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000000)=ANY=[], 0x0, 0x0})

27.297977788s ago: executing program 2 (id=409):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59)
r3 = socket(0x2, 0x1, 0x0)
dup3(r3, r0, 0x0)
connect$inet(r0, &(0x7f0000004300)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
recvmsg(r4, &(0x7f0000000100)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r5=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xab, 0x0}, 0x0)
close(r5)
rt_sigreturn()
timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
syz_extract_tcp_res$synack(0x0, 0x1, 0x0)

26.91119439s ago: executing program 2 (id=410):
mremap(&(0x7f0000df6000/0x4000)=nil, 0x4000, 0x400000, 0x0, &(0x7f000082a000/0x400000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket(0x2b, 0x1, 0x0)
openat$vimc1(0xffffffffffffff9c, 0x0, 0x2, 0x0)
listen(r3, 0x0)
setsockopt$sock_timeval(r3, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
accept4$nfc_llcp(r3, 0x0, 0x0, 0x0)

24.691055752s ago: executing program 3 (id=413):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x40046207, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000000)={0xc, 0x0, &(0x7f00000003c0)=[@increfs, @enter_looper], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x10, 0x0, &(0x7f0000000700)=[@request_death={0x400c630e, 0x0, 0xffffff7f00000000}], 0x2, 0x1000000000000, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000002a40)={0x50, 0x0, &(0x7f0000001900)=[@dead_binder_done, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001840)={0x24, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="000304000000"], 0x0, 0x0}, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0x9}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kmem_cache_free\x00', r5}, 0x10)
r6 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, &(0x7f0000000280)={0x0, 0xe, 0x9f, {0x9f, 0x9, "3cb719fe70902e429d59667a7822f57499173ebc347f80e7a776da71c243006e4b797a5979c86106af4c4664962c84967212aca4c7ea754753016fd7c0567799775e7ef50363c7d690ec1818f215afe05beeb7122612eaec0f576d753a438743f9556624e7689f474ac1e997e09880144916c160fae6e95a97e7aa1c041c084f1e1dfd6412f679084c87d206646aa6ca2605e2ed126041b13c6152a652"}}, &(0x7f00000004c0)={0x0, 0x3, 0x9b, @string={0x9b, 0x3, "787848545410d63a67f54a8348874d24034b8b850c60a18e56055a4ac39cadc6ec135f43b9e3955944de3f463fa565bf7407a4d425f157dd88cf56956b703b2b7eb21ec4aa0911976c487609ccc0d86689f5e69d21479cfa40c3ef07cda2c1accca6910cd0e09c5c2b5c2058f9cd32ea9e1c479898b917da2f86806d974d20e664ba2eb695c6a0f0aad11b503d1385d7dab548f57dcea24dba"}}, &(0x7f0000000340)={0x0, 0x22, 0x12, {[@main=@item_012={0x1, 0x0, 0x8, 'B'}, @global=@item_4={0x3, 0x1, 0x9, "e1b399b2"}, @main=@item_012={0x0, 0x0, 0xc}, @global=@item_012={0x2, 0x1, 0x1, "be7d"}, @main=@item_4={0x3, 0x0, 0x9, "b496d37c"}, @main=@item_012={0x1, 0x0, 0x3, "c4"}]}}, &(0x7f0000000380)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x6f, 0x1, {0x22, 0x779}}}}, &(0x7f0000000840)={0x2c, &(0x7f0000000600)={0x40, 0xf, 0xa7, "46dfcf7e4750489fe3a096dab42217c877981c787138974e18afd3edcc621c5e52164753c71aa90c032b6f2a36620b2f2bb60a866f7efff02ed47fe0961cce46ef630068951d0e8c7046064c9f01d0e3cfc9578a1b804dd96a55a3d401b66966627f8c0f924091c371e34f195c4f0981180b572d0afc80f51c95d928af1b6247d59408f589df828fb7176f42c1c033261f32847df188d7c5431aa26f162e886e059428f657cec5"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x7}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0xb}, &(0x7f0000000740)={0x20, 0x1, 0xb0, "7b3432c0effab1094359b522bc61ce896c72725a0368368e3c4fdf65f462ea4a8896d358cf160d0f9bde8189ed810cf8e10f87430fef7f0e5d3a3b4325fe4a6ea678c246a62993cd459ea1eadc0060654f20a945693a309f6ef132ef26ecbd8a8b27279aec40d8097f67bee3dd62081930cf2cf8e9af2c5c0348adae2efee31ec615524a8d289b7402a93403915875e26996f9fb84c3832e2e88a09f61bb3c6fd4c61a0d5bc5174a2437dfa091f111ca"}, &(0x7f0000000800)={0x20, 0x3, 0x1, 0x7}})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/custom1\x00', 0x800, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00', <r8=>0x0})
sendto$packet(r6, &(0x7f0000000180)='7', 0x1, 0x0, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="000312"], 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="00030400050004035347"], 0x0, 0x0, 0x0}, 0x0)

24.35423574s ago: executing program 2 (id=415):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000b80)={[{@nombcache}, {@abort}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x1a00, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff004})

23.065622656s ago: executing program 2 (id=418):
syz_emit_ethernet(0x5e, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet(0x2, 0x3, 0x6)
ioctl$sock_inet_SIOCSARP(r3, 0x8953, &(0x7f0000000000)={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x0, @local}, 0x4a, {0x2, 0x0, @broadcast}, 'syz_tun\x00'})
r4 = syz_open_dev$tty20(0xc, 0x4, 0x0)
ioctl$TIOCL_GETMOUSEREPORTING(0xffffffffffffffff, 0x5412, &(0x7f00000000c0)=0x13)
ioctl$TIOCL_GETMOUSEREPORTING(r4, 0x5412, &(0x7f00000006c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90)
r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0)
write$rfkill(r5, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8)
io_setup(0x4, &(0x7f0000000680))

20.45059405s ago: executing program 3 (id=430):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x8, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@bh}]}, 0x1, 0x51a, &(0x7f0000001200)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000c40)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000005c0)='./bus\x00')
unlink(&(0x7f00000001c0)='./file0\x00')
symlinkat(&(0x7f00000000c0)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00')

20.351053068s ago: executing program 2 (id=431):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x114, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_flow={{0x9}, {0x80, 0x2, [@TCA_FLOW_EMATCHES={0x74, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x50, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x200, 0x0, 0x5}}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x9e7, 0x1, 0x9}, {0x8001, 0x2, 0x1, 0x4, 0x6, 0x0, 0x1}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x162d, 0x7, 0x8001}, {{0x0, 0x0, 0x0, 0x1}, {0x2, 0x1}}}}, @TCF_EM_META={0x14, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x8, 0x3, [@TCF_META_TYPE_INT=0x2]}]}}]}, @TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_HDR={0x8}]}, @TCA_FLOW_MASK={0x8}]}}]}, 0x114}}, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xf0}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

19.733195209s ago: executing program 3 (id=434):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000240)={0x2c, r0, 0x1, 0x0, 0x0, {{0xc}, {@val={0x8, 0x3, r2}, @void}}, [@key_params=[@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4, 0xa}, @NL80211_KEY_IDX={0x5}]}]]}, 0x2c}}, 0x0)

18.003264541s ago: executing program 3 (id=439):
r0 = fanotify_init(0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_mark(r0, 0x455, 0x8000001, r1, 0x0)
r2 = inotify_init1(0x0)
inotify_add_watch(r2, &(0x7f0000000200)='.\x00', 0x10000a0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x0)

17.023961952s ago: executing program 0 (id=445):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x3f53, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

16.779943612s ago: executing program 0 (id=446):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000001c0)={'wg1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000005f000100"/20, @ANYRES32=r2], 0x1c}}, 0x0)

16.509224484s ago: executing program 0 (id=447):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000001400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2}}, &(0x7f00000014c0)=""/218, 0x1a, 0xda, 0x1}, 0x20)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SCSI_IOCTL_DOORUNLOCK(0xffffffffffffffff, 0x5381)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0000fa00ea8000"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socket$packet(0x11, 0x0, 0x300)
socket$inet(0x2, 0x0, 0x0)
dup(r3)
ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000ec0))

15.524530025s ago: executing program 0 (id=451):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x2000040, &(0x7f0000000280)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@errors_continue}]}, 0x10, 0x4d6, &(0x7f0000000880)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
write$sndseq(r0, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
syz_mount_image$vfat(&(0x7f00000007c0), &(0x7f0000000800)='./file1\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYRESDEC, @ANYRES16=r0], 0x1, 0x388, &(0x7f0000000d80)="$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")
fallocate(r0, 0x10, 0x0, 0x1a00)

14.991103229s ago: executing program 0 (id=452):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x11, 0x5109, &(0x7f000000f400)="$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")
r0 = open$dir(&(0x7f0000000140)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r0, 0x80809440, 0x0)

11.190964941s ago: executing program 0 (id=458):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000000040)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f149010980000202000000270a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x40}}, 0x0)

7.339282017s ago: executing program 4 (id=472):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@autodefrag}, {@space_cache_v1}, {@max_inline={'max_inline', 0x3d, [0x25]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@thread_pool={'thread_pool', 0x3d, 0x9}}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', 0x0, 0x0)
fchown(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x103042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)='y', 0x1}], 0x1, 0x0, 0x0, 0x0)
fdatasync(r0)

5.71985729s ago: executing program 4 (id=476):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xd9, 0x72, 0xa4, 0x40, 0x20b7, 0x1540, 0xb75a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xff}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="1a010300000000f8"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.085491302s ago: executing program 1 (id=477):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000d80), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)

4.211156344s ago: executing program 1 (id=478):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000140), 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f00000003c0), 0x4)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0x40045402, &(0x7f0000000040)={{}, 0x0, 0x0, 'id0\x00', 'timer1\x00'})

3.840439744s ago: executing program 1 (id=479):
pipe(&(0x7f0000000380))
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140))
pipe(&(0x7f0000000100))
write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a843500140600fe80000000000000e5000000", @ANYRES32=0x41424344], 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000327000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000200)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473ba6100b021ee66b9800000c00f146635004000000f300f20e06635800000000f22e0f30fa6c8", 0x54}], 0x1, 0x0, 0x0, 0x0)
r3 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x10, 0x0)
landlock_restrict_self(r3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@ipv6_getroute={0x1c}, 0x1c}}, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.874977264s ago: executing program 4 (id=480):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="822a0a65", 0xfdef)

2.775008981s ago: executing program 1 (id=481):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={0x0, r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000400007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r5}, 0x10)
r6 = socket(0x0, 0x3, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0xb, r6, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r7 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r7, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
r8 = socket$xdp(0x2c, 0x3, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x8012, r8, 0x0)
sendto$inet6(r7, 0x0, 0x0, 0x409c884, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
sendto$inet6(r7, &(0x7f0000000780)="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", 0x482, 0x6d91fb6102d8d9cc, 0x0, 0x0)
sendto$inet6(r7, &(0x7f0000000040)="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", 0xfe, 0x4008004, 0x0, 0x0)
sendto$inet6(r7, &(0x7f0000000000)='I', 0x1, 0x0, 0x0, 0x0)
recvfrom(r7, &(0x7f0000001a80)=""/4096, 0x1000, 0x10142, 0x0, 0x0)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

1.584894249s ago: executing program 1 (id=482):
r0 = syz_mount_image$vfat(&(0x7f0000000580), &(0x7f0000002240)='./file0\x00', 0x0, &(0x7f0000002280)=ANY=[@ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYRESOCT, @ANYBLOB="67b8ed77ab82513664511ea67d1fcaadffba39938d78be1ff85280771cf63d5f423eadaf2193d1e15762b9fe3a3f3c7d8a18f88d43f98558a0422d07ccaab56ad8ab2b9b747b61f26421cc72cc01f6ca35858dbe4b83312410696970ed243f36e1d5630000000000", @ANYRES32, @ANYRES8, @ANYBLOB="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", @ANYRESHEX], 0x9, 0x2af, &(0x7f0000001a40)="$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")
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x18, 0x0, 0x0, 0x0}, 0x90)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open_tree(r0, &(0x7f0000000680)='./file0/file0\x00', 0x8900)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
fchdir(r4)
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r5 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r5, &(0x7f0000000100)='./control\x00', 0x0)
unlinkat(r5, &(0x7f0000000140)='./control\x00', 0x200)
rmdir(&(0x7f0000000040)='./control\x00')
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={r7, 0x58, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r8=>0x0}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'syztnl1\x00', r8, 0x29, 0x8, 0x6, 0x3ff, 0x8, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, 0x7, 0x8, 0xb, 0x5}})

1.584741489s ago: executing program 4 (id=483):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20)
r1 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000033c0)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f00000004c0)=""/140, 0x8c}], 0x1}}], 0x1, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f0000006480)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000003c0)="4ccb06fd68dde6f0ca7ad843ac53da1e7e", 0x11}], 0x1}}], 0x1, 0x0)
write$bt_hci(r1, &(0x7f0000000240)=ANY=[], 0xb)

1.388986706s ago: executing program 4 (id=484):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="00058639aa6f0bfbe4b28434ef119376977b00fffbcec7a5fc1f5a72d4fe24156a9f971990e4f372b7"], 0x1, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA")
r0 = memfd_create(&(0x7f0000000140)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3\xac \xe8\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6)\x9f\x9cR\xae\x12G\xd8\xa4y\xef\x02?\xf2\xe7}\ra\x97F', 0x0)
r1 = dup(r0)
write$cgroup_pid(r1, &(0x7f0000000040)=0xffffffffffffffff, 0x12)
mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0)
sendfile(r0, r1, &(0x7f0000000700), 0x401)
openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

243.109549ms ago: executing program 4 (id=485):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000008c0)={0x2c, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0})

0s ago: executing program 1 (id=486):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x86, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r3)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff)
fcntl$getownex(r4, 0x10, &(0x7f0000000140)={0x0, <r5=>0x0})
r6 = syz_open_procfs(r5, &(0x7f0000000600)='fd/4\x00')
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r6, 0x4004662b, &(0x7f0000000280)={@id={0x2, 0x0, @auto="bfee8e7268b4fecd2fce2d54fbd909e4"}})

kernel console output (not intermixed with test programs):

sabled state
[   98.496253][ T3688] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   98.537792][   T37] device bridge_slave_0 left promiscuous mode
[   98.544078][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.624788][ T3640] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   98.667327][   T37] device veth1_macvtap left promiscuous mode
[   98.676478][   T37] device veth0_macvtap left promiscuous mode
[   98.690980][   T37] device veth1_vlan left promiscuous mode
[   98.702432][   T37] device veth0_vlan left promiscuous mode
[   98.779709][ T3688] usb 1-1: Using ep0 maxpacket: 16
[   99.057712][ T3688] usb 1-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[   99.072469][ T3688] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   99.089784][ T3688] usb 1-1: Product: syz
[   99.098624][ T3688] usb 1-1: Manufacturer: syz
[   99.118688][ T3688] usb 1-1: SerialNumber: syz
[   99.138791][ T3688] usb 1-1: config 0 descriptor??
[   99.219359][ T3688] visor 1-1:0.0: Sony Clie 3.5 converter detected
[   99.437705][ T3688] usb 1-1: clie_3_5_startup: get config number bad return length: 0
[   99.452798][ T3688] visor: probe of 1-1:0.0 failed with error -5
[   99.610050][   T37] team0 (unregistering): Port device team_slave_1 removed
[   99.644592][   T37] team0 (unregistering): Port device team_slave_0 removed
[   99.664625][ T3688] usb 1-1: USB disconnect, device number 2
[   99.703926][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   99.740799][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   99.797438][ T3659] Bluetooth: hci1: command tx timeout
[  100.095721][   T37] bond0 (unregistering): Released all slaves
[  100.202291][ T4036] team0: Port device team_slave_0 added
[  100.268035][ T3942] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  100.329239][ T4036] team0: Port device team_slave_1 added
[  100.346440][ T3942] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  100.388918][ T3942] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  100.449170][ T3942] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  100.479164][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_0
[  100.486166][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.527028][ T4036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  100.589240][ T4036] batman_adv: batadv0: Adding interface: batadv_slave_1
[  100.596237][ T4036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  100.642900][ T4141] loop1: detected capacity change from 0 to 8192
[  100.649729][ T4036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  100.759192][ T4141] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  100.777812][ T4141] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  100.825759][ T4141] REISERFS (device loop1): using ordered data mode
[  100.874242][ T4141] reiserfs: using flush barriers
[  100.896317][ T4036] device hsr_slave_0 entered promiscuous mode
[  100.906714][ T4140] loop0: detected capacity change from 0 to 32768
[  100.908062][ T4141] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  100.930280][ T4036] device hsr_slave_1 entered promiscuous mode
[  100.944302][ T4140] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.90 (4140)
[  100.959752][ T4036] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  100.970420][ T4036] Cannot create hsr debugfs directory
[  100.975662][ T4141] REISERFS (device loop1): checking transaction log (loop1)
[  101.013081][ T4140] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.055340][ T4140] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  101.082887][ T4140] BTRFS info (device loop0): using free space tree
[  101.174131][ T3942] 8021q: adding VLAN 0 to HW filter on device bond0
[  101.291128][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  101.304924][ T4141] REISERFS (device loop1): Using tea hash to sort names
[  101.318503][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  101.319333][ T4141] REISERFS warning (device loop1): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  101.349683][ T3942] 8021q: adding VLAN 0 to HW filter on device team0
[  101.366663][ T4141] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  101.483231][ T4140] BTRFS info (device loop0): enabling ssd optimizations
[  101.520049][ T4036] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.672984][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  101.698015][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  101.706595][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state
[  101.713809][ T4039] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.877497][ T3659] Bluetooth: hci1: command tx timeout
[  101.884673][ T3799] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  101.909877][ T4036] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  101.922463][ T4177] loop2: detected capacity change from 0 to 64
[  102.002880][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.023261][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.041182][ T4177] hfs: get root inode failed
[  102.078056][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.086645][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.093857][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.147627][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.166919][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.259493][ T3637] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.273693][ T4036] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  102.310491][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.347050][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.376687][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  102.400479][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  102.442726][ T3644] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  102.482107][ T4181] loop1: detected capacity change from 0 to 1024
[  102.586358][ T4181] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  103.539045][ T4036] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  103.585457][ T3642] EXT4-fs (loop1): unmounting filesystem.
[  103.621069][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.630125][ T3688] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.643051][ T3942] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  103.657956][ T3942] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  103.666231][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.689219][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.957436][ T3659] Bluetooth: hci1: command tx timeout
[  103.986671][ T4036] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  104.009204][ T4036] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  104.020878][ T4036] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  104.042148][ T4036] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  104.077398][ T3688] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  104.286680][ T4036] 8021q: adding VLAN 0 to HW filter on device bond0
[  104.312300][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  104.324427][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  104.337445][ T3688] usb 2-1: Using ep0 maxpacket: 16
[  104.352648][ T3942] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.368737][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  104.385295][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  104.401888][ T4036] 8021q: adding VLAN 0 to HW filter on device team0
[  104.422654][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  104.438805][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  104.454696][ T4039] bridge0: port 1(bridge_slave_0) entered blocking state
[  104.461943][ T4039] bridge0: port 1(bridge_slave_0) entered forwarding state
[  104.495609][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  104.510622][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  104.510913][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  104.532618][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.567382][ T3688] usb 2-1: New USB device found, idVendor=056e, idProduct=00ff, bcdDevice= 0.00
[  104.570874][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  104.576454][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  104.597104][ T3688] usb 2-1: config 0 descriptor??
[  104.621574][ T4039] bridge0: port 2(bridge_slave_1) entered blocking state
[  104.628829][ T4039] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.638681][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  104.679476][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  104.692118][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  104.714046][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  104.726810][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  104.745259][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  104.755352][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  104.786110][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  104.809427][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  104.844949][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  104.869285][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  104.906191][ T4036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  105.109902][ T4207] loop2: detected capacity change from 0 to 32768
[  105.152076][ T3688] elecom 0003:056E:00FF.0001: item fetching failed at offset 2/5
[  105.161733][ T4207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.103 (4207)
[  105.185043][ T3688] elecom: probe of 0003:056E:00FF.0001 failed with error -22
[  105.218422][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  105.231484][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  105.251704][ T4039] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  105.263899][ T4207] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.284564][ T4207] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  105.301929][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  105.309037][ T4207] BTRFS info (device loop2): setting nodatacow, compression disabled
[  105.328782][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  105.335240][ T4207] BTRFS info (device loop2): enabling auto defrag
[  105.367131][ T4207] BTRFS info (device loop2): max_inline at 0
[  105.378438][ T4207] BTRFS info (device loop2): using free space tree
[  105.387909][ T3942] device veth0_vlan entered promiscuous mode
[  105.400184][ T4119] usb 2-1: USB disconnect, device number 3
[  105.440970][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  105.465394][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  105.489950][ T3942] device veth1_vlan entered promiscuous mode
[  105.517653][ T4039] usb 1-1: Using ep0 maxpacket: 8
[  105.585236][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  105.598802][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  105.634790][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  105.655653][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  105.679534][ T3942] device veth0_macvtap entered promiscuous mode
[  105.701362][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.710661][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  105.719066][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  105.733071][ T4036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.781130][ T3942] device veth1_macvtap entered promiscuous mode
[  105.797553][ T4039] usb 1-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=71.5a
[  105.806674][ T4039] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.850242][ T3942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.862410][ T4039] usb 1-1: Product: syz
[  105.866843][ T4039] usb 1-1: Manufacturer: syz
[  105.869739][ T3640] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  105.872062][ T4039] usb 1-1: SerialNumber: syz
[  105.886434][ T3942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.898530][ T3942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.909078][ T4039] usb 1-1: config 0 descriptor??
[  105.939080][ T3942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.977319][ T3942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.000729][ T4039] ati_remote2 1-1:0.0: ati_remote2_probe(): interface 0 must have an endpoint
[  106.027360][ T3942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.068546][ T3942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.103324][ T3942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.145078][ T3942] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.197756][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  106.206694][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  106.230382][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.271387][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.304172][ T3942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.319230][ T4038] usb 1-1: USB disconnect, device number 3
[  106.355599][ T3942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.386379][ T3942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.424237][ T3942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.453647][ T3942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.464244][ T3942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.474131][ T3942] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.486024][ T3942] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.498753][ T3942] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.519957][ T4252] netlink: 47 bytes leftover after parsing attributes in process `syz.1.108'.
[  106.535415][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  107.295647][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.305615][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  107.314126][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  107.326106][ T3942] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.361130][ T3942] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.463297][ T3942] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.476920][ T3942] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.623619][ T4036] device veth0_vlan entered promiscuous mode
[  107.680045][ T4036] device veth1_vlan entered promiscuous mode
[  107.805729][ T4036] device veth0_macvtap entered promiscuous mode
[  108.382971][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  108.397496][ T3644] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  108.415063][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  108.430755][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  108.450023][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  108.463694][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  108.480903][ T4122] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  108.522031][ T4036] device veth1_macvtap entered promiscuous mode
[  108.559320][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  108.607048][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.652533][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.663031][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.673856][ T3644] usb 1-1: Using ep0 maxpacket: 8
[  108.679299][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.693292][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.719480][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.734321][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.746748][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.756903][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  108.768548][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  108.783171][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_0
[  108.820728][ T3644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  108.840944][ T3644] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  108.862547][ T3644] usb 1-1: New USB device found, idVendor=05ac, idProduct=0267, bcdDevice= 0.00
[  108.872389][ T3644] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.902328][ T3644] usb 1-1: config 0 descriptor??
[  108.951067][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  108.997379][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  109.008632][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.032161][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.052957][ T4275] loop1: detected capacity change from 0 to 1024
[  109.059534][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.078593][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.106223][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.128197][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.141584][ T4275] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  109.177408][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.183799][ T4258] loop0: detected capacity change from 0 to 512
[  109.267335][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.290506][ T4258] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  109.319142][ T4036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  109.324364][ T4258] ext4 filesystem being mounted at /23/bus supports timestamps until 2038 (0x7fffffff)
[  109.347457][ T4036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  109.395900][ T3642] EXT4-fs (loop1): unmounting filesystem.
[  109.419279][ T4273] loop2: detected capacity change from 0 to 32768
[  109.428431][ T4036] batman_adv: batadv0: Interface activated: batadv_slave_1
[  109.532385][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  109.549159][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  109.624471][ T4036] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  109.636247][ T4036] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  109.665709][ T4036] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  109.694919][ T4284] loop1: detected capacity change from 0 to 1024
[  109.700544][ T4036] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  109.761237][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.773160][   T26] audit: type=1800 audit(1723064724.696:3): pid=4258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.110" name="bus" dev="loop0" ino=18 res=0 errno=0
[  109.782228][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.815405][ T4258] EXT4-fs (loop0): shut down requested (0)
[  109.831593][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  109.906460][ T4287] EXT4-fs (loop0): shut down requested (0)
[  109.911693][ T3960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  109.931563][ T3960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  109.990935][ T4284] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  110.003895][ T4284] EXT4-fs: test_dummy_encryption requires encrypt feature
[  110.017672][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  110.057624][ T3644] usbhid 1-1:0.0: can't add hid device: -71
[  110.064379][ T3644] usbhid: probe of 1-1:0.0 failed with error -71
[  110.092006][ T3644] usb 1-1: USB disconnect, device number 4
[  110.261096][ T3960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.278876][ T3960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.392846][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  110.552257][ T3800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  110.589153][ T3800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  110.656137][ T4298] capability: warning: `syz.1.117' uses deprecated v2 capabilities in a way that may be insecure
[  111.134061][ T3637] EXT4-fs (loop0): unmounting filesystem.
[  111.451120][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  111.933968][   T37] device hsr_slave_0 left promiscuous mode
[  111.967318][   T37] device hsr_slave_1 left promiscuous mode
[  111.998458][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.046425][   T37] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.075643][   T37] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  112.089193][   T37] batman_adv: batadv0: Removing interface: batadv_slave_1
[  112.114100][ T4313] binder: 4312:4313 unknown command 0
[  112.232254][ T3692] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  112.278383][ T4313] binder: 4312:4313 ioctl c0306201 20000480 returned -22
[  112.330684][   T37] device bridge_slave_1 left promiscuous mode
[  112.486110][ T4317] binder: 4312:4317 ioctl c0306201 0 returned -14
[  112.511193][   T37] bridge0: port 2(bridge_slave_1) entered disabled state
[  112.813409][ T3692] usb 1-1: Using ep0 maxpacket: 8
[  112.851732][ T4291] loop4: detected capacity change from 0 to 32768
[  112.891808][   T37] device bridge_slave_0 left promiscuous mode
[  112.930894][   T37] bridge0: port 1(bridge_slave_0) entered disabled state
[  112.938677][ T3692] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  112.964873][ T3692] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  113.000981][ T3692] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  113.011995][ T4318] binder: 4312:4318 ioctl 540f 20000000 returned -22
[  113.037439][ T3692] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  113.048201][ T3692] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  113.054447][ T4322] loop3: detected capacity change from 0 to 512
[  113.061913][ T3692] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  113.077047][ T3692] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.127743][ T4291] XFS (loop4): Mounting V5 Filesystem
[  113.133767][ T4322] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  113.192125][ T4322] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.124: casefold flag without casefold feature
[  113.235733][ T4322] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz.3.124: missing EA_INODE flag
[  113.259031][ T4291] XFS (loop4): AIL initialisation failed: error -12
[  113.301883][   T37] device veth1_macvtap left promiscuous mode
[  113.308905][ T4322] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.124: error while reading EA inode 12 err=-117
[  113.322061][   T37] device veth0_macvtap left promiscuous mode
[  113.335426][   T37] device veth1_vlan left promiscuous mode
[  113.352928][ T4291] XFS (loop4): log mount failed
[  113.368438][ T4322] EXT4-fs (loop3): 1 orphan inode deleted
[  113.371437][   T37] device veth0_vlan left promiscuous mode
[  113.398048][ T4322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  113.443874][ T3692] usb 1-1: usb_control_msg returned -32
[  113.659126][ T3692] usbtmc 1-1:16.0: can't read capabilities
[  113.775617][ T4336] EXT4-fs error (device loop3): ext4_add_entry:2484: inode #2: comm syz.3.124: Directory hole found for htree leaf block 0
[  114.111016][ T4303] loop2: detected capacity change from 0 to 40427
[  114.282811][ T4303] F2FS-fs (loop2): invalid crc value
[  114.293209][ T4036] EXT4-fs (loop3): unmounting filesystem.
[  114.299494][ T4303] F2FS-fs (loop2): Found nat_bits in checkpoint
[  114.735388][ T4346] loop4: detected capacity change from 0 to 128
[  115.645364][ T4346] affs: No valid root block on device loop4
[  115.743464][ T3644] usb 1-1: USB disconnect, device number 5
[  116.507828][ T4356] virtio-fs: tag <(null)> not found
[  117.911745][   T37] team0 (unregistering): Port device team_slave_1 removed
[  118.021873][   T37] team0 (unregistering): Port device team_slave_0 removed
[  118.153839][   T37] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  118.269032][   T37] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  118.931973][ T4373] overlayfs: failed to get inode (-116)
[  119.168562][ T4376] syz.1.135 uses obsolete (PF_INET,SOCK_PACKET)
[  119.471995][   T37] bond0 (unregistering): Released all slaves
[  119.501236][ T4383] tmpfs: Unknown parameter 'usrquota'
[  120.514729][ T4347] netlink: 40 bytes leftover after parsing attributes in process `syz.3.125'.
[  120.882598][ T3692] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  122.344531][ T4387] sched: RT throttling activated
[  123.930832][ T4400] loop4: detected capacity change from 0 to 256
[  124.047502][ T3692] usb 5-1: device not accepting address 3, error -71
[  124.057294][ T4040] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  124.248989][ T4406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.145'.
[  124.457645][ T4040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  124.480576][ T4040] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  124.501884][ T4040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  124.543150][ T4040] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  124.553401][ T3692] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  124.566878][ T4040] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  124.583746][ T4040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.612286][ T4412] loop0: detected capacity change from 0 to 4096
[  124.619428][ T4040] usb 3-1: config 0 descriptor??
[  124.739273][ T4412] ntfs: volume version 3.1.
[  124.807346][ T3692] usb 5-1: Using ep0 maxpacket: 32
[  124.918397][ T4040] hdpvr 3-1:0.0: firmware version 0x8 dated ¥)†íËŸâè�=ÛJå¦+nÍoKÜ�o5Éüf¦oŠÉ °ÐôçO¬übL
[  124.939342][ T4412] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  124.967463][ T4412] ntfs: (device loop0): ntfs_read_block(): Failed to read from inode 0x6, attribute type 0x80, vcn 0x0, offset 0x800 because its location on disk could not be determined even after retrying (error code -5).
[  124.989874][ T4412] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to map page.
[  125.026262][ T4412] ntfs: (device loop0): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -5).
[  125.119823][ T3692] usb 5-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  125.137689][ T4040] hdpvr 3-1:0.0: device init failed
[  125.151036][ T4040] hdpvr: probe of 3-1:0.0 failed with error -12
[  125.190620][ T3692] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.287979][ T4040] usb 3-1: USB disconnect, device number 2
[  125.297385][ T3692] usb 5-1: Product: syz
[  125.324609][ T3692] usb 5-1: Manufacturer: syz
[  125.349859][ T3692] usb 5-1: SerialNumber: syz
[  125.409019][ T3692] usb 5-1: config 0 descriptor??
[  125.562762][ T4422] loop1: detected capacity change from 0 to 2048
[  125.599350][ T4422] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  125.734932][ T4422] syz.1.152: attempt to access beyond end of device
[  125.734932][ T4422] loop1: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  125.902932][ T3692] airspy 5-1:0.0: Board ID: 00
[  125.907835][ T3692] airspy 5-1:0.0: Firmware version: 
[  126.131546][ T3692] airspy 5-1:0.0: usb_control_msg() failed -71 request 11
[  126.158123][ T3692] airspy 5-1:0.0: Registered as swradio16
[  126.163909][ T3692] airspy 5-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  126.426359][ T3692] usb 5-1: USB disconnect, device number 4
[  126.960951][ T4438] loop1: detected capacity change from 0 to 256
[  127.247558][   T26] audit: type=1326 audit(1723064742.086:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4441 comm="syz.0.161" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9eb779f9 code=0x0
[  127.358310][ T4438] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  128.559997][ T4472] loop0: detected capacity change from 0 to 512
[  128.737525][ T3692] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  128.899853][ T4472] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[  128.908965][ T4472] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  128.943666][ T4472] EXT4-fs (loop0): 1 truncate cleaned up
[  128.949578][ T4472] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  129.004461][ T4472] EXT4-fs (loop0): re-mounted. Quota mode: writeback.
[  129.297896][ T3692] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  129.347399][ T3692] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  129.377697][ T3692] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 3328, setting to 64
[  129.389480][ T3692] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  129.404705][ T4478] netlink: 20 bytes leftover after parsing attributes in process `syz.1.170'.
[  129.428065][ T3637] EXT4-fs (loop0): unmounting filesystem.
[  129.439943][ T4478] netlink: 'syz.1.170': attribute type 5 has an invalid length.
[  129.487540][ T3692] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40
[  129.507322][ T3692] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  129.533927][ T4478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.170'.
[  129.543166][ T3692] usb 3-1: SerialNumber: syz
[  129.609328][ T3692] cdc_ether: probe of 3-1:1.0 failed with error -22
[  129.619288][ T3692] usb-storage 3-1:1.0: USB Mass Storage device detected
[  129.644731][ T4485] loop0: detected capacity change from 0 to 1024
[  129.756186][ T4485] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (1764!=20869)
[  129.797717][ T4485] EXT4-fs (loop0): invalid journal inode
[  129.803469][ T4485] EXT4-fs (loop0): can't get journal size
[  129.862627][ T3692] usb-storage 3-1:1.0: Quirks match for vid 0525 pid a4a5: 10000
[  129.874324][ T4485] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  130.463865][ T4497] ptrace attach of "./syz-executor exec"[3642] was attempted by ""[4497]
[  130.985512][ T4501] loop3: detected capacity change from 0 to 2048
[  131.374525][ T4504] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #16: comm syz.0.171: pblk 0 bad header/extent: too large eh_max - magic f30a, entries 1, max 1796(4), depth 0(0)
[  131.683947][ T4501] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.849312][ T3637] EXT4-fs (loop0): unmounting filesystem.
[  131.913703][   T26] audit: type=1800 audit(1723064746.836:5): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.175" name="bus" dev="loop3" ino=1367 res=0 errno=0
[  132.188566][ T4038] usb 3-1: USB disconnect, device number 3
[  132.204483][ T4520] loop1: detected capacity change from 0 to 256
[  132.292402][ T4520] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  132.550223][ T4489] loop4: detected capacity change from 0 to 40427
[  132.655047][ T4489] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4)
[  132.760180][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  132.766578][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  135.345116][ T4565] netlink: 72 bytes leftover after parsing attributes in process `syz.0.193'.
[  135.352623][ T4536] loop3: detected capacity change from 0 to 32768
[  135.369213][ T4536] BTRFS: device fsid 34a2da50-e117-4d40-8878-8e0fb0127b5f devid 1 transid 8 /dev/loop3 scanned by syz.3.184 (4536)
[  135.393511][ T4536] BTRFS info (device loop3): first mount of filesystem 34a2da50-e117-4d40-8878-8e0fb0127b5f
[  135.419601][ T4536] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  135.434698][ T4536] BTRFS info (device loop3): using free space tree
[  135.484879][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  135.507095][ T4570] loop2: detected capacity change from 0 to 512
[  135.534658][ T4038] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  135.547534][ T4570] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  135.635629][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.655090][ T4570] Quota error (device loop2): v2_read_file_info: Number of blocks too big for quota file size (2164663523328 > 4127201280).
[  135.670600][ T4570] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  135.686976][ T4570] EXT4-fs (loop2): mount failed
[  135.769101][ T3659] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  135.779346][ T3659] CPU: 1 PID: 3659 Comm: kworker/u5:9 Not tainted 6.1.103-syzkaller #0
[  135.787620][ T3659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  135.797712][ T3659] Workqueue: hci3 hci_rx_work
[  135.802451][ T3659] Call Trace:
[  135.805754][ T3659]  <TASK>
[  135.808711][ T3659]  dump_stack_lvl+0x1e3/0x2cb
[  135.813438][ T3659]  ? nf_tcp_handle_invalid+0x642/0x642
[  135.814244][ T4569] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.818918][ T3659]  ? panic+0x764/0x764
[  135.819002][ T3659]  sysfs_create_dir_ns+0x2c6/0x390
[  135.819043][ T3659]  ? sysfs_warn_dup+0xa0/0xa0
[  135.819089][ T3659]  kobject_add_internal+0x6df/0xd10
[  135.819123][ T3659]  kobject_add+0x14e/0x210
[  135.849955][ T3659]  ? device_add+0x3c2/0xfd0
[  135.854510][ T3659]  ? kobject_init+0x1d0/0x1d0
[  135.859236][ T3659]  ? __raw_spin_lock_init+0x41/0x100
[  135.864566][ T3659]  ? get_device_parent+0x128/0x400
[  135.869730][ T3659]  device_add+0x476/0xfd0
[  135.874120][ T3659]  hci_conn_add_sysfs+0xe4/0x1f0
[  135.879123][ T3659]  le_conn_complete_evt+0xcc6/0x1320
[  135.884472][ T3659]  ? hci_le_big_info_adv_report_evt+0x390/0x390
[  135.890768][ T3659]  ? __mutex_unlock_slowpath+0x218/0x750
[  135.896454][ T3659]  ? mutex_unlock+0x10/0x10
[  135.900997][ T3659]  ? skb_pull_data+0x10e/0x220
[  135.905826][ T3659]  hci_le_enh_conn_complete_evt+0x181/0x410
[  135.911780][ T3659]  hci_event_packet+0xa40/0x1510
[  135.916763][ T3659]  ? hci_remote_host_features_evt+0x210/0x210
[  135.922884][ T3659]  ? bis_list+0x290/0x290
[  135.927255][ T3659]  ? do_raw_spin_unlock+0x137/0x8a0
[  135.932498][ T3659]  ? kcov_remote_start+0x4b5/0x7d0
[  135.937658][ T3659]  ? lockdep_hardirqs_on+0x80/0x130
[  135.942894][ T3659]  ? hci_send_to_monitor+0x99/0x4d0
[  135.948142][ T3659]  hci_rx_work+0x3cd/0xce0
[  135.952626][ T3659]  ? do_raw_spin_unlock+0x137/0x8a0
[  135.957876][ T3659]  ? process_one_work+0x7a9/0x11d0
[  135.963026][ T3659]  process_one_work+0x8a9/0x11d0
[  135.968024][ T3659]  ? worker_detach_from_pool+0x260/0x260
[  135.973711][ T3659]  ? _raw_spin_lock_irqsave+0x120/0x120
[  135.979302][ T3659]  ? kthread_data+0x4e/0xc0
[  135.983864][ T3659]  ? wq_worker_running+0x97/0x190
[  135.988950][ T3659]  worker_thread+0xa47/0x1200
[  135.993665][ T3659]  ? _raw_spin_unlock+0x40/0x40
[  135.998566][ T3659]  ? release_firmware_map_entry+0x186/0x186
[  136.004527][ T3659]  ? _raw_spin_unlock+0x40/0x40
[  136.009457][ T3659]  kthread+0x28d/0x320
[  136.013557][ T3659]  ? worker_clr_flags+0x190/0x190
[  136.018617][ T3659]  ? kthread_blkcg+0xd0/0xd0
[  136.023258][ T3659]  ret_from_fork+0x1f/0x30
[  136.027748][ T3659]  </TASK>
[  136.058069][ T3659] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  136.072562][ T3659] Bluetooth: hci3: failed to register connection device
[  136.097263][ T4038] usb 5-1: Using ep0 maxpacket: 16
[  136.208536][ T4536] BTRFS error (device loop3): open_ctree failed
[  136.217831][ T4038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  136.245304][ T4038] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0
[  136.276870][ T4038] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.300030][ T4038] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  136.425582][ T4569] rose0: tun_chr_ioctl cmd 1074812117
[  136.477628][ T4038] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  136.517318][ T4038] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.525503][ T4038] usb 5-1: Product: syz
[  136.530518][ T4038] usb 5-1: Manufacturer: syz
[  136.547334][ T4038] usb 5-1: SerialNumber: syz
[  136.559858][ T4038] usb 5-1: config 0 descriptor??
[  136.612979][ T4038] mcba_usb 5-1:0.0 can0: couldn't setup read URBs
[  136.627512][ T4038] mcba_usb 5-1:0.0 can0: couldn't start device: -90
[  136.717509][ T4038] mcba_usb: probe of 5-1:0.0 failed with error -90
[  136.877988][ T4038] usb 5-1: USB disconnect, device number 5
[  137.021004][ T4608] loop3: detected capacity change from 0 to 512
[  137.095873][ T4608] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz.3.202: bad orphan inode 4
[  137.156816][ T4608] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  137.992929][ T4628] netlink: 'syz.1.207': attribute type 10 has an invalid length.
[  138.197383][ T4628] team0: Port device netdevsim0 added
[  138.209835][ T4630] netlink: 'syz.1.207': attribute type 10 has an invalid length.
[  138.274128][ T4036] EXT4-fs (loop3): unmounting filesystem.
[  138.309184][ T4630] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  138.441495][ T4630] team0: Failed to send options change via netlink (err -105)
[  138.467479][ T4630] team0: Failed to send port change of device netdevsim0 via netlink (err -105)
[  138.518425][ T4630] team0: Port device netdevsim0 removed
[  138.541360][ T4630] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  138.546234][ T4640] loop3: detected capacity change from 0 to 2048
[  138.584604][ T4618] loop2: detected capacity change from 0 to 32768
[  138.658601][ T4641] loop0: detected capacity change from 0 to 4096
[  138.665508][ T4641] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0x0000000000000000'
[  138.751079][ T4618] XFS (loop2): Mounting V5 Filesystem
[  138.914228][ T4618] XFS (loop2): Ending clean mount
[  138.922518][ T4637] overlayfs: upper fs does not support tmpfile.
[  138.978874][ T4618] XFS (loop2): Quotacheck needed: Please wait.
[  139.147592][ T4618] XFS (loop2): Quotacheck: Done.
[  139.293340][ T3640] XFS (loop2): Unmounting Filesystem
[  139.725342][ T4245] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  140.300685][ T4245] usb 5-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=d2.0d
[  140.321532][ T4245] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.338237][ T4245] usb 5-1: Product: syz
[  140.353361][ T4245] usb 5-1: Manufacturer: syz
[  140.363005][ T4245] usb 5-1: SerialNumber: syz
[  140.398581][ T4245] usb 5-1: config 0 descriptor??
[  140.453274][ T4245] xillyusb 5-1:0.0: Failed to send quiesce request. Aborting.
[  140.461871][   T26] audit: type=1326 audit(1723064755.386:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4674 comm="syz.0.222" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9eb779f9 code=0x0
[  140.517735][ T4245] xillyusb: probe of 5-1:0.0 failed with error -5
[  140.611457][ T4681] capability: warning: `syz.0.222' uses 32-bit capabilities (legacy support in use)
[  140.670380][ T4245] usb 5-1: USB disconnect, device number 6
[  140.962367][ T3650] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  140.986784][ T3650] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  140.995596][ T3650] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  141.010508][ T3650] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  141.018289][ T3650] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  141.026715][ T3650] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  141.653697][ T4696] tmpfs: Bad value for 'mpol'
[  141.711418][ T4683] chnl_net:caif_netlink_parms(): no params data found
[  141.836545][ T4040] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  142.238019][ T4040] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.537519][ T4040] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18
[  142.707398][ T4040] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.727303][ T4040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  142.735356][ T4040] usb 1-1: SerialNumber: syz
[  142.778403][ T4040] cdc_ether: probe of 1-1:1.0 failed with error -22
[  142.798289][ T4709] Failed to get privilege flags for destination (handle=0x2:0x0)
[  142.865162][ T4683] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.886720][ T4683] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.905777][ T4683] device bridge_slave_0 entered promiscuous mode
[  142.916921][ T4673] loop1: detected capacity change from 0 to 65536
[  142.955376][ T4683] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.973689][ T4683] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.994135][ T4683] device bridge_slave_1 entered promiscuous mode
[  143.020831][ T4711] Driver unsupported XDP return value 0 on prog  (id 38) dev N/A, expect packet loss!
[  143.077392][ T3650] Bluetooth: hci1: command tx timeout
[  143.108695][ T4673] XFS (loop1): Mounting V5 Filesystem
[  143.200912][ T4683] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.210126][ T4673] XFS (loop1): AIL initialisation failed: error -12
[  143.224384][ T4719] loop0: detected capacity change from 0 to 1764
[  143.257945][ T4673] XFS (loop1): log mount failed
[  143.316448][ T3639] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  143.334313][ T4683] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.522281][ T4683] team0: Port device team_slave_0 added
[  143.556842][ T4708] loop2: detected capacity change from 0 to 32768
[  143.588489][ T4683] team0: Port device team_slave_1 added
[  143.623568][ T4708] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  143.654426][ T4040] usb 1-1: USB disconnect, device number 6
[  143.689052][ T4708] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  143.752004][ T4708] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  143.781687][ T4683] batman_adv: batadv0: Adding interface: batadv_slave_0
[  143.797001][ T4683] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.832595][ T4118] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  143.866224][ T4118] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  143.925969][ T4683] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  143.951188][ T4683] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.983544][ T4683] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.018169][ T4118] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 151ms
[  144.048450][ T4118] gfs2: fsid=syz:syz.0: jid=0: Done
[  144.061549][ T4708] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  144.064741][ T4683] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.351467][ T4683] device hsr_slave_0 entered promiscuous mode
[  144.381131][ T4683] device hsr_slave_1 entered promiscuous mode
[  144.410857][ T4683] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  144.441149][ T4683] Cannot create hsr debugfs directory
[  144.728884][ T3685] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  144.895887][ T4683] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.934592][ T4120] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  145.049558][ T4683] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.129537][ T4683] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.163106][ T3650] Bluetooth: hci1: command tx timeout
[  145.209596][ T4120] usb 2-1: Using ep0 maxpacket: 8
[  145.257381][ T3685] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  145.271112][ T3685] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.281684][ T4683] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.291861][ T3685] usb 1-1: Product: syz
[  145.301110][ T3685] usb 1-1: Manufacturer: syz
[  145.311348][ T3685] usb 1-1: SerialNumber: syz
[  145.321614][ T4737] loop2: detected capacity change from 0 to 32768
[  145.370445][ T4737] XFS (loop2): Mounting V5 Filesystem
[  145.379318][ T3685] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  145.450524][ T4737] XFS (loop2): Ending clean mount
[  145.467133][ T4737] XFS (loop2): Quotacheck needed: Please wait.
[  145.562561][ T4120] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  145.587473][ T4120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.595957][ T4120] usb 2-1: Product: syz
[  145.600311][ T4120] usb 2-1: Manufacturer: syz
[  145.604945][ T4120] usb 2-1: SerialNumber: syz
[  145.611562][ T4120] usb 2-1: config 0 descriptor??
[  145.620267][ T4737] XFS (loop2): Quotacheck: Done.
[  145.623976][ T4683] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  145.696807][ T4683] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  145.716582][   T26] audit: type=1804 audit(1723064760.636:7): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.237" name="/newroot/52/file0/bus" dev="loop2" ino=9291 res=1 errno=0
[  145.719374][ T4683] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  145.752928][ T4683] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  145.877631][ T4120] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  145.917889][   T26] audit: type=1804 audit(1723064760.836:8): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.237" name="/newroot/52/file0/bus" dev="loop2" ino=9291 res=1 errno=0
[  146.024178][ T4683] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.040470][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  146.058599][ T3685] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  146.071261][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  146.088320][ T4683] 8021q: adding VLAN 0 to HW filter on device team0
[  146.106829][ T3640] XFS (loop2): Unmounting Filesystem
[  146.147908][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  146.156762][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  146.182310][ T4044] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.189599][ T4044] bridge0: port 1(bridge_slave_0) entered forwarding state
[  146.243351][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  146.252112][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  146.265168][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  146.274329][ T3691] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.281526][ T3691] bridge0: port 2(bridge_slave_1) entered forwarding state
[  146.298594][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  146.355162][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  146.366656][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  146.396850][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  146.477825][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  146.496939][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  146.499478][ T4044] usb 1-1: USB disconnect, device number 7
[  146.518349][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  146.528045][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  146.536798][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  146.589713][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  146.604672][ T4119] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  146.739965][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  147.630076][ T3650] Bluetooth: hci1: command tx timeout
[  147.638425][ T3685] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  147.649509][ T3685] ath9k_htc: Failed to initialize the device
[  147.661133][ T4044] usb 1-1: ath9k_htc: USB layer deinitialized
[  148.259179][ T4120] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  148.285199][ T4120] usb 2-1: USB disconnect, device number 4
[  148.385596][   T26] audit: type=1326 audit(1723064763.306:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4773 comm="syz.0.247" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9eb779f9 code=0x0
[  148.517464][ T4039] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  148.556927][ T4780] loop0: detected capacity change from 0 to 2048
[  148.710592][ T4780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  148.831551][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  148.857691][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  148.880952][ T4683] 8021q: adding VLAN 0 to HW filter on device batadv0
[  148.920466][ T4475] device hsr_slave_0 left promiscuous mode
[  148.942342][ T4475] device hsr_slave_1 left promiscuous mode
[  148.957752][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.965430][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.985844][ T4475] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.993672][ T4475] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.036325][ T4475] device bridge_slave_1 left promiscuous mode
[  149.044984][ T4475] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.053647][ T4039] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  149.076716][ T4039] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.087549][ T4475] device bridge_slave_0 left promiscuous mode
[  149.102028][ T4039] usb 5-1: Product: syz
[  149.104196][ T4475] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.114972][ T4039] usb 5-1: Manufacturer: syz
[  149.124454][ T4039] usb 5-1: SerialNumber: syz
[  149.178802][ T4039] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  149.283196][ T4776] loop1: detected capacity change from 0 to 32768
[  149.310809][ T4475] device veth1_macvtap left promiscuous mode
[  149.317432][ T4475] device veth0_macvtap left promiscuous mode
[  149.336105][ T4776] ERROR: (device loop1): diAllocAG: nfreeinos = 0, but iag on freelist
[  149.336105][ T4776] 
[  149.341359][ T4475] device veth1_vlan left promiscuous mode
[  149.356713][ T4475] device veth0_vlan left promiscuous mode
[  149.373553][ T4776] ERROR: (device loop1): remounting filesystem as read-only
[  149.382805][ T4776] ialloc: diAlloc returned -5!
[  149.412643][ T4780] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  149.433870][ T4780] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1676 with error 28
[  149.448928][ T4780] EXT4-fs (loop0): This should not happen!! Data will be lost
[  149.448928][ T4780] 
[  149.459645][ T4780] EXT4-fs (loop0): Total free blocks count 0
[  149.465676][ T4780] EXT4-fs (loop0): Free/Dirty block details
[  149.497293][ T4780] EXT4-fs (loop0): free_blocks=2415919104
[  149.503226][ T4780] EXT4-fs (loop0): dirty_blocks=1712
[  149.508628][ T4780] EXT4-fs (loop0): Block reservation details
[  149.528090][ T4780] EXT4-fs (loop0): i_reserved_data_blocks=105
[  149.717357][ T3650] Bluetooth: hci1: command tx timeout
[  149.777421][ T4039] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  149.794732][ T3799] EXT4-fs (loop0): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 32 with error 28
[  149.869074][ T4802] netlink: 4 bytes leftover after parsing attributes in process `syz.1.254'.
[  150.293814][ T4475] team0 (unregistering): Port device team_slave_1 removed
[  150.333811][ T4475] team0 (unregistering): Port device team_slave_0 removed
[  150.375196][ T4475] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.417400][ T4475] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.809835][ T4475] bond0 (unregistering): Released all slaves
[  150.845495][ T4039] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  150.852787][ T4039] ath9k_htc: Failed to initialize the device
[  150.923195][ T4808] netlink: 'syz.0.256': attribute type 10 has an invalid length.
[  150.962396][ T4808] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.971627][ T3685] usb 5-1: USB disconnect, device number 7
[  150.975196][ T4808] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  151.007850][ T3685] usb 5-1: ath9k_htc: USB layer deinitialized
[  151.008679][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.068125][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.162154][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.171919][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.186101][ T4683] device veth0_vlan entered promiscuous mode
[  151.203555][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.218717][ T4044] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.240021][ T4683] device veth1_vlan entered promiscuous mode
[  151.294864][   T26] audit: type=1326 audit(1723064766.216:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4811 comm="syz.0.258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7a9eb779f9 code=0x0
[  151.295681][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  151.330154][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  151.339530][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.348719][ T4039] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.360209][ T4683] device veth0_macvtap entered promiscuous mode
[  151.374923][ T4683] device veth1_macvtap entered promiscuous mode
[  151.408407][ T4816] netlink: 24 bytes leftover after parsing attributes in process `syz.0.258'.
[  151.454471][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.478668][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.488802][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.499642][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.511464][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.523538][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.535272][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.547940][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.570090][ T4683] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.585942][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  151.612372][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  151.634586][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.666026][ T4245] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.679061][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.695039][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.705542][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.716554][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.726949][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.738402][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.749600][ T4683] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.760227][ T4683] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.771941][ T4683] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.801451][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  151.813131][ T4120] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  151.825464][ T4683] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.862374][ T4683] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.872840][ T4683] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.887626][ T4683] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.017291][ T4119] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  152.105522][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.129782][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.187510][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  152.266419][ T3738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.333443][ T3738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.368776][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.459391][ T4119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.493218][ T4119] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.537772][ T4119] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  152.607722][ T4119] usb 2-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  153.413073][ T4119] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.458319][ T4119] usb 2-1: config 0 descriptor??
[  153.961315][ T4119] hid-udraw 0003:20D6:CB17.0002: unknown main item tag 0x0
[  154.029705][ T4119] hid-udraw 0003:20D6:CB17.0002: unknown main item tag 0x0
[  154.320928][ T4119] input: THQ uDraw Game Tablet for PS3 Joypad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0002/input/input5
[  154.583288][ T4039] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  154.665747][ T4119] input: THQ uDraw Game Tablet for PS3 Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0002/input/input6
[  154.725029][ T4119] input: THQ uDraw Game Tablet for PS3 Pen as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0002/input/input7
[  154.783085][ T4119] input: THQ uDraw Game Tablet for PS3 Accelerometer as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:20D6:CB17.0002/input/input8
[  154.861822][ T4119] hid-udraw 0003:20D6:CB17.0002: hidraw0: USB HID v0.00 Device [HID 20d6:cb17] on usb-dummy_hcd.1-1/input0
[  154.911569][ T4119] usb 2-1: USB disconnect, device number 5
[  154.947774][ T4039] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  154.957564][ T3691] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  154.972788][ T4039] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.057594][ T4039] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  155.066970][ T4039] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  155.081085][ T4039] usb 3-1: Manufacturer: syz
[  155.090792][ T4039] usb 3-1: config 0 descriptor??
[  155.161900][ T4044] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  155.197824][ T3691] usb 1-1: Using ep0 maxpacket: 32
[  155.232901][ T4039] rc_core: IR keymap rc-hauppauge not found
[  155.240299][ T4039] Registered IR keymap rc-empty
[  155.255017][ T4039] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  155.273934][ T4039] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9
[  155.347479][ T4039] usb 3-1: USB disconnect, device number 4
[  155.407291][ T4044] usb 5-1: Using ep0 maxpacket: 8
[  155.479232][ T3691] usb 1-1: New USB device found, idVendor=0b57, idProduct=7187, bcdDevice=70.8b
[  155.502975][ T3691] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.527583][ T4044] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  155.547686][ T4044] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  155.557941][ T3691] usb 1-1: Product: syz
[  155.579181][ T3691] usb 1-1: Manufacturer: syz
[  155.585879][ T3691] usb 1-1: SerialNumber: syz
[  155.591297][ T4044] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  155.603083][ T4044] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  155.617315][ T3691] usb 1-1: config 0 descriptor??
[  155.622493][ T4044] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  155.633196][ T4044] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.659754][ T3691] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  155.765671][ T4879] netlink: 4 bytes leftover after parsing attributes in process `syz.1.279'.
[  155.774731][ T4879] netlink: 48 bytes leftover after parsing attributes in process `syz.1.279'.
[  155.889440][ T4039] usb 1-1: USB disconnect, device number 8
[  155.973399][ T4044] usb 5-1: GET_CAPABILITIES returned 0
[  155.989380][ T4044] usbtmc 5-1:16.0: can't read capabilities
[  156.194517][ T4118] usb 5-1: USB disconnect, device number 8
[  157.125578][ T4915] loop0: detected capacity change from 0 to 2048
[  157.175178][ T4915] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  157.207387][ T4039] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  157.293027][ T4919] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  157.326452][ T4915] syz.0.292: attempt to access beyond end of device
[  157.326452][ T4915] loop0: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  157.457567][ T4039] usb 4-1: Using ep0 maxpacket: 8
[  157.577794][ T4039] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  157.631298][ T4039] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  158.319179][ T4908] loop2: detected capacity change from 0 to 32768
[  158.355995][ T4908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.289 (4908)
[  158.446666][ T4039] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  158.457253][ T4039] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  158.470603][ T4039] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  158.479820][ T4039] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.533854][ T4928] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  158.544339][ T4908] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  158.574543][ T4908] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  158.627770][ T4908] BTRFS info (device loop2): setting nodatacow, compression disabled
[  158.636023][ T4908] BTRFS info (device loop2): enabling auto defrag
[  158.685539][ T4908] BTRFS info (device loop2): max_inline at 0
[  158.710645][ T4908] BTRFS info (device loop2): using free space tree
[  158.807403][ T4039] usb 4-1: GET_CAPABILITIES returned 0
[  158.813119][ T4039] usbtmc 4-1:16.0: can't read capabilities
[  159.015904][ T4120] usb 4-1: USB disconnect, device number 2
[  159.243919][ T3640] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  159.309463][ T4931] loop4: detected capacity change from 0 to 32768
[  159.330534][ T4931] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.296 (4931)
[  159.443580][ T4931] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  159.537390][ T4931] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  159.607689][ T4931] BTRFS info (device loop4): setting nodatacow, compression disabled
[  159.634091][ T4931] BTRFS info (device loop4): setting datacow
[  159.656743][ T4931] BTRFS info (device loop4): doing ref verification
[  159.673420][ T4931] BTRFS info (device loop4): force clearing of disk cache
[  159.690961][ T4931] BTRFS info (device loop4): turning off barriers
[  159.717412][ T4931] BTRFS info (device loop4): enabling ssd optimizations
[  159.757944][ T4931] BTRFS info (device loop4): using spread ssd allocation scheme
[  159.766031][ T4931] BTRFS info (device loop4): not using ssd optimizations
[  159.777261][ T4931] BTRFS info (device loop4): not using spread ssd allocation scheme
[  159.812966][ T4931] BTRFS info (device loop4): using free space tree
[  160.013469][ T4973] loop0: detected capacity change from 0 to 128
[  160.032458][ T4973] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  160.086946][ T4973] ext4 filesystem being mounted at /66/mnt supports timestamps until 2038 (0x7fffffff)
[  160.340164][ T4931] BTRFS info (device loop4): rebuilding free space tree
[  160.495719][   T26] audit: type=1800 audit(1723064775.414:11): pid=4931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.296" name="bus" dev="loop4" ino=263 res=0 errno=0
[  164.516788][ T3942] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.544081][ T3637] EXT4-fs (loop0): unmounting filesystem.
[  165.267455][ T4038] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  165.527379][ T4038] usb 4-1: Using ep0 maxpacket: 8
[  165.572970][ T5012] loop2: detected capacity change from 0 to 256
[  165.580106][ T5012] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿÿÿÿÿÿ0xffffffffffffffffÿÿÿÿÿ18446744073709551615t‹ˆìä;×s™í·›nŒóÎE±sT]&QBÐç‡åÅÅ)A©êÏúCô	ß¾²Û\\nuâÐÕ–Ì\Udèڋõ„ŽNeÑ&_œ&RÊF:Ü×\~NŠ‘" or missing value
[  165.659640][ T3643] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  165.817922][ T4038] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76
[  165.827026][ T4038] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.889383][ T4038] usb 4-1: Product: syz
[  165.893682][ T4038] usb 4-1: Manufacturer: syz
[  165.900469][ T5022] loop0: detected capacity change from 0 to 1024
[  165.926645][ T4038] usb 4-1: SerialNumber: syz
[  165.947350][ T4038] usb 4-1: config 0 descriptor??
[  165.963879][ T5020] loop1: detected capacity change from 0 to 512
[  165.999859][ T5020] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  166.015369][ T4038] gspca_main: ALi m5602-2.14.0 probing 0402:5602
[  166.033988][ T5020] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  166.264189][ T5020] EXT4-fs (loop1): 1 orphan inode deleted
[  166.289782][ T5020] EXT4-fs (loop1): 1 truncate cleaned up
[  166.306246][ T5020] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  166.758373][ T4038] gspca_m5602: Failed to find a sensor
[  166.764294][ T4038] ALi m5602 4-1:0.0: ALi m5602 webcam failed
[  166.990207][ T4038] usb 4-1: USB disconnect, device number 3
[  167.144548][ T5014] loop4: detected capacity change from 0 to 32768
[  167.172669][ T5014] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.313 (5014)
[  167.235800][ T5014] BTRFS info (device loop4): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  167.321985][ T5014] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  167.336914][ T5014] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  167.357300][ T5034] binder: 5033:5034 ioctl 541b 0 returned -22
[  167.361951][ T5014] BTRFS info (device loop4): use lzo compression, level 0
[  167.376329][ T3642] EXT4-fs (loop1): unmounting filesystem.
[  167.382227][ T5014] BTRFS info (device loop4): using free space tree
[  167.690778][ T5014] BTRFS info (device loop4): enabling ssd optimizations
[  167.714186][ T5060] loop3: detected capacity change from 0 to 256
[  167.847701][ T5060] FAT-fs (loop3): Directory bread(block 64) failed
[  167.854296][ T5060] FAT-fs (loop3): Directory bread(block 65) failed
[  167.874933][ T5024] loop2: detected capacity change from 0 to 32768
[  167.913598][ T5060] FAT-fs (loop3): Directory bread(block 66) failed
[  167.924153][ T5060] FAT-fs (loop3): Directory bread(block 67) failed
[  167.931687][ T5060] FAT-fs (loop3): Directory bread(block 68) failed
[  167.939127][ T5060] FAT-fs (loop3): Directory bread(block 69) failed
[  167.946756][ T5060] FAT-fs (loop3): Directory bread(block 70) failed
[  167.954135][ T5060] FAT-fs (loop3): Directory bread(block 71) failed
[  167.964890][ T5060] FAT-fs (loop3): Directory bread(block 72) failed
[  167.974436][ T5060] FAT-fs (loop3): Directory bread(block 73) failed
[  167.992285][ T5024] XFS (loop2): Mounting V5 Filesystem
[  168.003759][ T3942] BTRFS info (device loop4): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  168.214566][ T5024] XFS (loop2): Ending clean mount
[  169.263883][ T5078] loop0: detected capacity change from 0 to 1764
[  169.276779][ T5081] loop1: detected capacity change from 0 to 256
[  169.283896][ T5081] FAT-fs (loop1): Unrecognized mount option "ÿÿÿÿ" or missing value
[  169.301958][ T5024] XFS (loop2): Quotacheck needed: Please wait.
[  169.446460][ T5024] XFS (loop2): Quotacheck: Done.
[  169.719414][   T26] audit: type=1326 audit(1723064784.634:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5080 comm="syz.1.327" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22cfb779f9 code=0x0
[  169.778655][ T3640] XFS (loop2): Unmounting Filesystem
[  170.521941][ T5096] loop4: detected capacity change from 0 to 16
[  170.646052][ T5096] erofs: (device loop4): mounted with root inode @ nid 36.
[  170.694749][ T5096] syz.4.332: attempt to access beyond end of device
[  170.694749][ T5096] loop4: rw=524288, sector=16, nr_sectors = 16 limit=16
[  170.717870][ T5096] syz.4.332: attempt to access beyond end of device
[  170.717870][ T5096] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16
[  170.897254][ T4243] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  171.055115][ T5108] loop0: detected capacity change from 0 to 2048
[  171.077727][ T3689] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  171.158187][ T4243] usb 4-1: Using ep0 maxpacket: 8
[  171.178482][ T5108] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  171.281411][ T5110] kvm: emulating exchange as write
[  171.352708][ T5116] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  171.377588][ T3689] usb 2-1: Using ep0 maxpacket: 16
[  171.435276][ T5116] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 454 with error 28
[  171.473491][ T5116] EXT4-fs (loop0): This should not happen!! Data will be lost
[  171.473491][ T5116] 
[  171.514995][ T5116] EXT4-fs (loop0): Total free blocks count 0
[  171.527440][ T4243] usb 4-1: New USB device found, idVendor=07c4, idProduct=a109, bcdDevice= f.59
[  171.536841][ T3689] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 104
[  171.557064][ T5116] EXT4-fs (loop0): Free/Dirty block details
[  171.557344][ T4243] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.578076][ T4243] usb 4-1: Product: syz
[  171.586869][ T4243] usb 4-1: Manufacturer: syz
[  171.596443][ T4243] usb 4-1: SerialNumber: syz
[  171.597354][ T5116] EXT4-fs (loop0): free_blocks=2415919104
[  171.618443][ T4243] usb 4-1: config 0 descriptor??
[  171.649513][ T5105] loop4: detected capacity change from 0 to 32768
[  171.663743][ T5116] EXT4-fs (loop0): dirty_blocks=464
[  171.678527][ T4243] ums-datafab 4-1:0.0: USB Mass Storage device detected
[  171.685987][ T5105] Only 4K block size supported!
[  171.686068][ T5116] EXT4-fs (loop0): Block reservation details
[  171.686087][ T5116] EXT4-fs (loop0): i_reserved_data_blocks=29
[  171.755693][ T5105] Mount JFS Failure: -22
[  171.763768][ T5105] jfs_mount failed w/return code = -22
[  171.776255][ T3689] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  171.789842][ T4243] ums-sddr55 4-1:0.0: USB Mass Storage device detected
[  171.804847][ T3689] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.838966][ T3689] usb 2-1: Product: syz
[  171.853524][ T3689] usb 2-1: Manufacturer: syz
[  171.904685][ T4243] usb 4-1: USB disconnect, device number 4
[  171.913571][ T3689] usb 2-1: SerialNumber: syz
[  171.942164][ T3689] usb 2-1: config 0 descriptor??
[  171.992483][ T5101] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  172.025346][ T3800] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 452 with error 28
[  172.050959][ T3689] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input10
[  172.421728][ T4243] usb 2-1: USB disconnect, device number 6
[  172.468241][ T5127] loop4: detected capacity change from 0 to 256
[  172.821412][ T3942] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  172.859859][ T3942] FAT-fs (loop4): error, corrupted directory (invalid entries)
[  172.956326][ T5140] loop0: detected capacity change from 0 to 512
[  173.018799][ T5140] ext4: Unknown parameter 'noacl'
[  174.072667][ T5157] input: syz0 as /devices/virtual/input/input11
[  174.601399][ T3904] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.376891][ T3904] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.562344][   T26] audit: type=1326 audit(1723064790.484:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5173 comm="syz.2.356" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb7de3779f9 code=0x0
[  175.591508][ T3904] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.917333][ T5148] loop1: detected capacity change from 0 to 32768
[  176.791477][ T3904] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.299061][ T3659] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  177.317002][ T3659] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  177.326224][ T3659] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  177.334291][ T3659] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  177.344750][ T3659] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  177.352515][ T3659] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  177.495631][ T5205] netlink: 'syz.1.362': attribute type 1 has an invalid length.
[  177.507924][ T5205] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'.
[  177.816575][ T5214] loop1: detected capacity change from 0 to 2048
[  177.845554][ T5214] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  177.906905][ T5208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'.
[  177.935351][ T5214] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  177.974830][ T5214] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.006730][ T5182] loop3: detected capacity change from 0 to 32768
[  178.027362][ T5214] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  178.035112][ T5214] UDF-fs: Scanning with blocksize 512 failed
[  178.087247][ T5214] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.144014][ T5182] XFS (loop3): Mounting V5 Filesystem
[  178.194229][ T5219] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'.
[  178.434192][ T5182] XFS (loop3): Ending clean mount
[  178.455960][ T5182] XFS (loop3): Quotacheck needed: Please wait.
[  178.822100][ T5182] XFS (loop3): Quotacheck: Done.
[  179.018328][ T4683] XFS (loop3): Unmounting Filesystem
[  179.228569][ T5242] netlink: 24 bytes leftover after parsing attributes in process `syz.1.368'.
[  179.371089][ T5194] chnl_net:caif_netlink_parms(): no params data found
[  179.397630][ T3659] Bluetooth: hci4: command tx timeout
[  179.403251][    C0] eth0: bad gso: type: 1, size: 1408
[  179.713940][ T5250] process 'syz.0.370' launched './file2' with NULL argv: empty string added
[  180.114976][ T5252] loop1: detected capacity change from 0 to 1024
[  180.368223][ T5252] hfsplus: unable to parse mount options
[  180.711105][ T5194] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.737479][ T5194] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.779412][ T5194] device bridge_slave_0 entered promiscuous mode
[  180.802221][ T5269] loop0: detected capacity change from 0 to 512
[  180.858385][ T5269] EXT4-fs: Ignoring removed mblk_io_submit option
[  180.895956][ T5269] EXT4-fs: Ignoring removed i_version option
[  180.980824][ T5194] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.980941][ T5194] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.982171][ T5194] device bridge_slave_1 entered promiscuous mode
[  181.027859][ T5194] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  181.030592][ T5194] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.040718][ T5269] EXT4-fs error (device loop0): __ext4_iget:5044: inode #11: block 1: comm syz.0.373: invalid block
[  181.064951][ T5269] EXT4-fs (loop0): Remounting filesystem read-only
[  181.065039][ T5269] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.373: couldn't read orphan inode 11 (err -117)
[  181.073679][ T5269] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  181.306776][ T5194] team0: Port device team_slave_0 added
[  181.456245][ T5252] loop1: detected capacity change from 0 to 32768
[  181.463088][ T5252] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.371 (5252)
[  181.466818][ T5252] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.469543][ T5252] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  181.469601][ T5252] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  181.469635][ T5252] BTRFS info (device loop1): use zstd compression, level 3
[  181.469658][ T5252] BTRFS info (device loop1): using free space tree
[  181.477959][ T3659] Bluetooth: hci4: command tx timeout
[  181.837692][ T5278] device dummy0 entered promiscuous mode
[  181.837998][ T5278] device vlan2 entered promiscuous mode
[  181.932377][ T5278] device dummy0 left promiscuous mode
[  181.969698][ T5252] BTRFS info (device loop1): enabling ssd optimizations
[  182.060574][ T5194] team0: Port device team_slave_1 added
[  182.171588][ T5306] netlink: 8 bytes leftover after parsing attributes in process `syz.3.378'.
[  182.274863][ T3904] device hsr_slave_0 left promiscuous mode
[  182.319391][ T3642] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.336834][ T3904] device hsr_slave_1 left promiscuous mode
[  182.368835][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  182.376337][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  182.508659][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  182.516128][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  182.626948][ T3904] device bridge_slave_1 left promiscuous mode
[  182.654375][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state
[  182.718279][ T3904] device bridge_slave_0 left promiscuous mode
[  182.725938][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state
[  182.857519][ T3904] device veth1_macvtap left promiscuous mode
[  182.874428][ T3904] device veth0_macvtap left promiscuous mode
[  182.889029][ T3904] device veth1_vlan left promiscuous mode
[  182.902513][ T3904] device veth0_vlan left promiscuous mode
[  183.000898][ T3637] EXT4-fs (loop0): unmounting filesystem.
[  183.132008][ T5325] loop1: detected capacity change from 0 to 4096
[  183.178756][ T5325] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  183.219440][ T5325] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  183.436832][ T3642] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  183.557871][ T3650] Bluetooth: hci4: command tx timeout
[  183.574794][ T5329] netlink: 168 bytes leftover after parsing attributes in process `syz.1.383'.
[  183.956742][ T5327] loop0: detected capacity change from 0 to 32768
[  184.080850][ T5327] XFS (loop0): Mounting V5 Filesystem
[  184.164739][ T5327] XFS (loop0): Ending clean mount
[  184.296280][ T3637] XFS (loop0): Unmounting Filesystem
[  184.477584][ T3904] team0 (unregistering): Port device team_slave_1 removed
[  184.587871][ T3904] team0 (unregistering): Port device team_slave_0 removed
[  184.719701][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.832260][ T5345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.387'.
[  184.856779][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.348389][ T3904] bond0 (unregistering): Released all slaves
[  185.420169][ T5194] batman_adv: batadv0: Adding interface: batadv_slave_0
[  185.428041][ T5194] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.455749][ T5194] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  185.468413][ T5194] batman_adv: batadv0: Adding interface: batadv_slave_1
[  185.475374][ T5194] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  185.501625][ T5194] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  185.637921][ T3653] Bluetooth: hci4: command tx timeout
[  185.780473][ T5194] device hsr_slave_0 entered promiscuous mode
[  185.807643][ T5194] device hsr_slave_1 entered promiscuous mode
[  185.843729][ T5194] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  185.867327][ T5194] Cannot create hsr debugfs directory
[  186.037333][ T3653] Bluetooth: hci3: command 0x0406 tx timeout
[  186.037358][ T3659] Bluetooth: hci2: command 0x0406 tx timeout
[  186.043683][ T3653] Bluetooth: hci0: command 0x0401 tx timeout
[  186.207631][ T4043] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  186.457322][ T4043] usb 3-1: Using ep0 maxpacket: 16
[  186.738341][ T4043] usb 3-1: New USB device found, idVendor=0b05, idProduct=1736, bcdDevice= d.b1
[  186.788424][ T4043] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.828383][ T4043] usb 3-1: Product: syz
[  186.839261][ T4043] usb 3-1: Manufacturer: syz
[  186.845101][ T4043] usb 3-1: SerialNumber: syz
[  186.944811][ T4043] usb 3-1: config 0 descriptor??
[  187.218304][ T4043] dvb-usb: found a 'Asus My Cinema-U3000Hybrid' in cold state, will try to load a firmware
[  187.293652][ T4043] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  187.325304][ T4043] dib0700: firmware download failed at 7 with -22
[  187.589869][ T5391] loop0: detected capacity change from 0 to 1024
[  187.648564][ T5391] EXT4-fs: Ignoring removed orlov option
[  187.700277][ T5391] ext4: Unknown parameter 'dont_hash'
[  187.757275][ T3689] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  188.007396][ T3689] usb 4-1: Using ep0 maxpacket: 32
[  188.144585][ T5194] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  188.193499][ T5194] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  188.233780][ T5194] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  188.271552][ T5194] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  188.301793][ T5407] loop1: detected capacity change from 0 to 1764
[  188.329655][ T3689] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb
[  188.370209][ T3689] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.410675][ T3689] usb 4-1: Product: syz
[  188.419365][ T3689] usb 4-1: Manufacturer: syz
[  188.434251][ T3689] usb 4-1: SerialNumber: syz
[  188.447268][ T5407] iso9660: Corrupted directory entry in block 2 of inode 1920
[  188.483974][ T3689] usb 4-1: config 0 descriptor??
[  188.510072][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  188.550008][ T3689] gspca_main: ov534_9-2.14.0 probing 05a9:1550
[  188.606543][ T5194] 8021q: adding VLAN 0 to HW filter on device bond0
[  188.683408][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  188.696425][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  188.726376][ T5194] 8021q: adding VLAN 0 to HW filter on device team0
[  188.766855][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  188.776825][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  188.796357][ T4045] bridge0: port 1(bridge_slave_0) entered blocking state
[  188.803641][ T4045] bridge0: port 1(bridge_slave_0) entered forwarding state
[  188.845417][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  188.865364][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  188.894358][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  188.910459][ T4045] bridge0: port 2(bridge_slave_1) entered blocking state
[  188.917679][ T4045] bridge0: port 2(bridge_slave_1) entered forwarding state
[  188.925803][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  188.931049][ T4243] usb 3-1: USB disconnect, device number 5
[  188.955548][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  188.969478][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  188.995880][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  189.025547][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  189.045904][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  189.073926][ T5194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  189.104045][ T5194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  189.122744][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  189.131896][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  189.141039][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  189.147343][ T4244] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  189.160335][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  189.172744][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  189.177259][  T153] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  189.212097][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.417518][ T4244] usb 2-1: Using ep0 maxpacket: 8
[  189.537966][ T4244] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  189.557204][ T4244] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  189.587278][ T4244] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  189.598026][  T153] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  189.606666][  T153] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  189.634583][ T4244] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  189.663490][  T153] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  189.682654][ T4244] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  189.702216][  T153] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  189.727256][ T4244] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.745645][  T153] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  189.820994][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.841299][ T4045] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  189.873281][ T5194] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.913406][  T153] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  189.931693][  T153] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  189.957745][  T153] usb 1-1: Product: syz
[  189.972357][  T153] usb 1-1: Manufacturer: syz
[  190.027441][ T4244] usb 2-1: GET_CAPABILITIES returned 0
[  190.033002][ T4244] usbtmc 2-1:16.0: can't read capabilities
[  190.040409][  T153] cdc_wdm 1-1:1.0: skipping garbage
[  190.045675][  T153] cdc_wdm 1-1:1.0: skipping garbage
[  190.068322][  T153] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  190.101699][  T153] cdc_wdm 1-1:1.0: Unknown control protocol
[  190.281127][ T4244] usb 2-1: USB disconnect, device number 7
[  190.327584][  T153] usb 1-1: USB disconnect, device number 9
[  190.673162][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  190.684082][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  190.714717][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  190.724561][  T153] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  190.742931][ T5194] device veth0_vlan entered promiscuous mode
[  190.755409][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  190.764417][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  190.780748][ T5194] device veth1_vlan entered promiscuous mode
[  190.841205][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  190.855016][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  190.891547][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  190.908097][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  190.935391][ T5194] device veth0_macvtap entered promiscuous mode
[  190.944230][ T3689] gspca_ov534_9: reg_r err -71
[  190.973055][ T5194] device veth1_macvtap entered promiscuous mode
[  191.020266][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.031372][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.042625][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.073993][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.107304][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.136732][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.167294][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  191.197342][ T5466] loop0: detected capacity change from 0 to 512
[  191.204368][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.242278][ T5194] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.249800][ T3689] gspca_ov534_9: Unknown sensor 0000
[  191.249866][ T3689] ov534_9: probe of 4-1:0.0 failed with error -22
[  191.277996][ T3689] usb 4-1: USB disconnect, device number 5
[  191.286651][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  191.296822][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  191.311099][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  191.320507][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.334026][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.348644][ T3643] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  191.374647][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.390556][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.405989][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.427409][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.442524][ T5468] loop0: detected capacity change from 0 to 1024
[  191.449601][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.482291][ T5468] hfsplus: invalid attributes max_key_len 0
[  191.497334][ T5194] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.509521][ T5468] hfsplus: failed to load attributes file
[  191.534013][ T5194] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.577543][ T5194] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.600672][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.614482][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.705317][ T5194] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.793384][ T5194] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.828880][ T5194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.867430][ T5194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.953852][ T4045] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  192.042038][ T5481] loop2: detected capacity change from 0 to 1024
[  192.224145][ T5481] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  192.248846][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.325672][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.328224][ T4045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.391418][ T4045] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.429032][ T4045] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  192.463808][ T3744] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  192.473506][ T4045] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.509242][ T3738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.541985][ T4045] usb 4-1: config 0 descriptor??
[  192.558785][ T3738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.572648][   T26] audit: type=1800 audit(1723064807.494:14): pid=5493 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.415" name="file0" dev="overlay" ino=13 res=0 errno=0
[  192.583899][ T4042] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  192.655447][ T5481] syz.2.415 (5481) used greatest stack depth: 18840 bytes left
[  193.254847][ T5472] binder: 5471:5472 ioctl c0306201 20000580 returned -14
[  193.532250][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  193.612364][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  193.679391][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  193.708022][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  193.745109][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  193.794150][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  193.857994][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  193.895723][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  193.964596][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  194.025532][ T3640] EXT4-fs error (device loop2): ext4_empty_dir:3134: inode #11: comm syz-executor: invalid size
[  194.047565][ T5513] loop1: detected capacity change from 0 to 1024
[  194.200940][ T1265] ieee802154 phy0 wpan0: encryption failed: -22
[  194.207374][ T1265] ieee802154 phy1 wpan1: encryption failed: -22
[  194.727548][  T153] kernel write not supported for file /snd/seq (pid: 153 comm: kworker/0:2)
[  194.733489][ T5516] syz.1.421: attempt to access beyond end of device
[  194.733489][ T5516] loop1: rw=0, sector=201326592, nr_sectors = 2 limit=1024
[  194.756341][ T5516] Buffer I/O error on dev loop1, logical block 100663296, async page read
[  194.791797][ T5516] hfsplus: unable to mark blocks free: error -5
[  194.822451][ T5516] hfsplus: can't free extent
[  195.068188][ T4045] uclogic 0003:256C:006D.0003: failed retrieving Huion firmware version: -71
[  195.136524][ T4045] uclogic 0003:256C:006D.0003: failed probing parameters: -71
[  195.211441][ T4045] uclogic: probe of 0003:256C:006D.0003 failed with error -71
[  195.300431][ T4045] usb 4-1: USB disconnect, device number 6
[  195.716470][ T3640] EXT4-fs (loop2): unmounting filesystem.
[  195.747913][ T5532] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  195.759918][ T5532] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  195.776858][ T5537] loop1: detected capacity change from 0 to 512
[  195.820096][ T5532] vhci_hcd vhci_hcd.0: Device attached
[  195.853895][ T5537] EXT4-fs: Ignoring removed nobh option
[  195.873368][ T5537] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  195.891419][ T5537] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  195.942449][ T5540] loop3: detected capacity change from 0 to 512
[  195.963398][ T5537] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  195.988641][ T5540] EXT4-fs: Ignoring removed bh option
[  196.004956][ T5537] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038 (0x7fffffff)
[  196.107293][ T3744] usb 17-1: new low-speed USB device number 2 using vhci_hcd
[  196.150055][ T5540] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  196.184270][ T5540] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038 (0x7fffffff)
[  196.257082][ T3642] EXT4-fs (loop1): unmounting filesystem.
[  196.470742][ T5533] vhci_hcd: connection reset by peer
[  196.494579][ T3800] vhci_hcd: stop threads
[  196.512864][ T3800] vhci_hcd: release socket
[  196.530334][ T3800] vhci_hcd: disconnect device
[  196.575200][ T4683] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  196.625507][ T4683] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  196.630126][ T5528] loop0: detected capacity change from 0 to 32768
[  196.667799][ T4683] EXT4-fs error (device loop3): ext4_acquire_dquot:6777: comm syz-executor: Failed to acquire dquot type 0
[  196.706825][ T5528] XFS (loop0): Mounting V5 Filesystem
[  196.800440][ T5528] XFS (loop0): Ending clean mount
[  197.140323][ T3645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  197.150353][ T3645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  197.150567][ T5565] netlink: 340 bytes leftover after parsing attributes in process `syz.4.436'.
[  197.713387][ T5566] usb usb9: usbfs: process 5566 (syz.1.435) did not claim interface 0 before use
[  197.722893][ T5566] usb usb9: selecting invalid altsetting 21783
[  197.741212][ T3645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  197.791170][ T3645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  197.811724][ T3645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  197.828767][ T3645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  197.915328][ T4683] EXT4-fs (loop3): unmounting filesystem.
[  198.316747][ T3637] XFS (loop0): Unmounting Filesystem
[  198.497944][ T5559] chnl_net:caif_netlink_parms(): no params data found
[  198.570054][ T4043] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  198.750505][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state
[  198.789031][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state
[  198.839974][ T5559] device bridge_slave_0 entered promiscuous mode
[  198.859298][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state
[  198.866446][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state
[  198.895341][ T5559] device bridge_slave_1 entered promiscuous mode
[  198.957595][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.983561][ T5559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  198.984502][ T4043] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.019246][ T4043] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  199.033607][ T4043] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.068541][ T4043] usb 2-1: config 0 descriptor??
[  199.089223][ T3659] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  199.103017][ T3659] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  199.112750][ T3659] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  199.132310][ T3659] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  199.142909][ T3659] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  199.151589][ T3659] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  199.154669][ T3904] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.180162][ T4120] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  199.197564][ T5559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  199.274964][ T3904] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.352049][ T5559] team0: Port device team_slave_0 added
[  199.404217][ T3904] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.418397][ T5559] team0: Port device team_slave_1 added
[  199.457267][ T4120] usb 5-1: Using ep0 maxpacket: 32
[  199.526967][ T3904] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  199.556814][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_0
[  199.564728][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.593668][ T4120] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  199.606445][ T5559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  199.622661][ T4043] usbhid 2-1:0.0: can't add hid device: -71
[  199.631076][ T4043] usbhid: probe of 2-1:0.0 failed with error -71
[  199.652982][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_1
[  199.654920][ T4043] usb 2-1: USB disconnect, device number 8
[  199.660692][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  199.693519][ T5559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  199.797537][ T4120] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  199.812098][ T4120] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  199.821058][ T4120] usb 5-1: Product: syz
[  199.825973][ T4120] usb 5-1: Manufacturer: syz
[  199.831218][ T4120] usb 5-1: SerialNumber: syz
[  199.838903][ T4120] usb 5-1: config 0 descriptor??
[  199.850658][ T5559] device hsr_slave_0 entered promiscuous mode
[  199.858455][ T5559] device hsr_slave_1 entered promiscuous mode
[  199.867055][ T5559] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.875504][ T5584] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  199.883428][ T5559] Cannot create hsr debugfs directory
[  199.958237][ T3659] Bluetooth: hci1: command tx timeout
[  200.023141][ T5587] chnl_net:caif_netlink_parms(): no params data found
[  200.095232][ T4120] usb 5-1: USB disconnect, device number 9
[  200.497877][ T3904] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.782971][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.797753][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.826477][ T5587] device bridge_slave_0 entered promiscuous mode
[  200.826589][ T5621] loop0: detected capacity change from 0 to 512
[  200.861783][   T26] audit: type=1326 audit(1723064815.784:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5617 comm="syz.4.450" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f506b9779f9 code=0x0
[  200.918010][ T3904] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  200.939762][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.951130][ T5621] EXT4-fs (loop0): 1 orphan inode deleted
[  200.952770][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.956893][ T5621] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  200.966645][ T5587] device bridge_slave_1 entered promiscuous mode
[  200.989374][ T5621] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038 (0x7fffffff)
[  201.053949][ T5621] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz.0.451: Invalid inode table block 0 in block_group 0
[  201.070510][ T3904] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.072862][ T5621] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  201.108140][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  201.119857][ T5621] EXT4-fs error (device loop0): ext4_alloc_file_blocks:4524: inode #16: comm syz.0.451: mark_inode_dirty error
[  201.180479][ T3904] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.210409][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  201.214535][ T3637] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0
[  201.238960][ T3659] Bluetooth: hci2: command tx timeout
[  201.241948][ T3637] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0
[  201.326234][ T3744] vhci_hcd: vhci_device speed not set
[  201.334437][ T5632] loop4: detected capacity change from 0 to 128
[  201.367677][ T5632] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  201.434522][ T5632] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  201.463383][ T5587] team0: Port device team_slave_0 added
[  201.520000][ T5587] team0: Port device team_slave_1 added
[  201.653620][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.677508][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.787695][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.842094][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.855617][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.941338][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  202.055917][ T3650] Bluetooth: hci1: command tx timeout
[  202.303626][ T5587] device hsr_slave_0 entered promiscuous mode
[  202.315839][ T5645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.337273][ T5645] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  202.352086][ T5645] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  202.379950][ T5645] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  202.615277][ T5587] device hsr_slave_1 entered promiscuous mode
[  203.098504][ T5587] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  203.283810][ T5587] Cannot create hsr debugfs directory
[  203.327249][ T3650] Bluetooth: hci2: command tx timeout
[  203.810118][ T5638] loop1: detected capacity change from 0 to 32768
[  203.874429][ T5638] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.453 (5638)
[  203.965830][ T5638] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  203.966690][ T5652] loop4: detected capacity change from 0 to 512
[  203.984814][ T5638] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  204.006141][ T3637] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm syz-executor: Invalid inode table block 0 in block_group 0
[  204.049410][ T5638] BTRFS info (device loop1): using free space tree
[  204.056587][ T3637] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  204.111932][ T3637] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz-executor: mark_inode_dirty error
[  204.124454][ T3650] Bluetooth: hci1: command tx timeout
[  204.148460][ T3920] EXT4-fs error (device loop0): __ext4_get_inode_loc:4495: comm kworker/u4:11: Invalid inode table block 0 in block_group 0
[  204.175231][ T3920] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  204.243534][ T5652] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  204.254879][ T3920] EXT4-fs (loop0): Delayed block allocation failed for inode 16 at logical offset 0 with max blocks 1 with error 117
[  204.279236][ T3920] EXT4-fs (loop0): This should not happen!! Data will be lost
[  204.279236][ T3920] 
[  204.283380][ T5652] ext4 filesystem being mounted at /12/bus supports timestamps until 2038 (0x7fffffff)
[  204.493529][ T3637] EXT4-fs (loop0): unmounting filesystem.
[  205.018970][ T5638] BTRFS error (device loop1): open_ctree failed
[  205.159508][ T5194] EXT4-fs (loop4): unmounting filesystem.
[  205.477289][ T3650] Bluetooth: hci2: command tx timeout
[  206.465310][ T3659] Bluetooth: hci1: command tx timeout
[  206.580286][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.590508][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.605153][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.616891][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.638115][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  206.646199][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.866317][ T5559] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  207.041806][ T5559] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  207.070167][ T5559] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  207.186794][ T5559] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  207.563556][ T3650] Bluetooth: hci2: command tx timeout
[  207.663419][ T5722] loop4: detected capacity change from 0 to 512
[  207.731780][ T5704] loop1: detected capacity change from 0 to 32768
[  207.746830][ T5704] XFS: ikeep mount option is deprecated.
[  207.753898][ T5704] XFS: ikeep mount option is deprecated.
[  207.804285][ T5727] loop4: detected capacity change from 0 to 512
[  207.839292][ T5704] XFS (loop1): Mounting V5 Filesystem
[  207.849316][ T5727] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  207.905850][ T5704] XFS (loop1): Ending clean mount
[  207.908193][ T5727] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  207.913305][ T5704] XFS (loop1): Quotacheck needed: Please wait.
[  207.928736][ T5727] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038 (0x7fffffff)
[  208.029632][ T5704] XFS (loop1): Quotacheck: Done.
[  208.116026][ T3642] XFS (loop1): Unmounting Filesystem
[  208.181068][   T26] audit: type=1326 audit(1723064823.104:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5721 comm="syz.4.467" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f506b9779f9 code=0x0
[  208.458446][ T5587] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  208.639813][ T5194] EXT4-fs (loop4): unmounting filesystem.
[  208.680403][ T3659] Bluetooth: hci0: command tx timeout
[  208.693487][ T5587] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  208.750372][ T5587] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  208.798987][ T5559] 8021q: adding VLAN 0 to HW filter on device bond0
[  208.811710][ T5587] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  208.853413][ T3904] device hsr_slave_0 left promiscuous mode
[  208.887958][ T3904] device hsr_slave_1 left promiscuous mode
[  208.896792][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.938654][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.954925][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.962916][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.975636][ T3904] device bridge_slave_1 left promiscuous mode
[  208.983524][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.992756][ T3904] device bridge_slave_0 left promiscuous mode
[  208.999477][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.014563][ T3904] device hsr_slave_0 left promiscuous mode
[  209.021599][ T3904] device hsr_slave_1 left promiscuous mode
[  209.039104][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.046725][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  209.068163][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.075725][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  209.115648][ T3904] device bridge_slave_1 left promiscuous mode
[  209.124479][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.152688][ T3904] device bridge_slave_0 left promiscuous mode
[  209.162553][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.280255][ T5751] loop1: detected capacity change from 0 to 256
[  209.308185][ T3904] device veth1_macvtap left promiscuous mode
[  209.314284][ T3904] device veth0_macvtap left promiscuous mode
[  209.331904][ T3904] device veth1_vlan left promiscuous mode
[  209.338073][ T3904] device veth0_vlan left promiscuous mode
[  209.362556][ T3904] device veth1_macvtap left promiscuous mode
[  209.374446][ T3904] device veth0_macvtap left promiscuous mode
[  209.393809][ T3904] device veth1_vlan left promiscuous mode
[  209.404255][ T3904] device veth0_vlan left promiscuous mode
[  209.505085][ T5749] loop4: detected capacity change from 0 to 32768
[  209.537302][ T5749] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.472 (5749)
[  209.578526][ T5749] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  209.608085][ T5749] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  209.638394][ T5749] BTRFS info (device loop4): force zlib compression, level 3
[  209.677367][ T5749] BTRFS info (device loop4): enabling auto defrag
[  209.683950][ T5749] BTRFS info (device loop4): enabling disk space caching
[  209.724838][ T5749] BTRFS info (device loop4): max_inline at 0
[  209.749624][ T5749] BTRFS info (device loop4): force clearing of disk cache
[  209.756815][ T5749] BTRFS info (device loop4): turning on sync discard
[  209.789905][ T5749] BTRFS info (device loop4): disk space caching is enabled
[  209.920145][ T5749] BTRFS info (device loop4): enabling ssd optimizations
[  209.930804][ T5749] BTRFS info (device loop4): rebuilding free space tree
[  210.031530][ T5775] loop1: detected capacity change from 0 to 64
[  210.061173][ T5749] BTRFS info (device loop4): disabling free space tree
[  210.073892][ T5749] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  210.094489][ T5775] MINIX-fs: mounting file system with errors, running fsck is recommended
[  210.102324][ T5749] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  210.585888][ T5194] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  210.772190][ T3659] Bluetooth: hci0: command tx timeout
[  211.340668][ T3904] team0 (unregistering): Port device team_slave_1 removed
[  211.419895][ T3904] team0 (unregistering): Port device team_slave_0 removed
[  211.437576][ T4041] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  211.514267][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.596137][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  211.974761][ T4041] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  211.985471][ T4041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.002111][ T4041] usb 5-1: Product: syz
[  212.006323][ T4041] usb 5-1: Manufacturer: syz
[  212.013627][ T4041] usb 5-1: SerialNumber: syz
[  212.043484][ T4041] usb 5-1: config 0 descriptor??
[  212.183556][ T5784] loop1: detected capacity change from 0 to 1024
[  212.198527][ T5784] EXT4-fs: Ignoring removed orlov option
[  212.204248][ T5784] EXT4-fs: Ignoring removed nomblk_io_submit option
[  212.276535][ T5784] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  212.350303][ T3904] bond0 (unregistering): Released all slaves
[  212.413187][ T3642] EXT4-fs (loop1): unmounting filesystem.
[  212.631957][ T4041] usb 5-1: Firmware: major: 0, minor: 248, hardware type: ATUSB (0)
[  212.839876][ T3659] Bluetooth: hci0: command tx timeout
[  212.881408][ T4041] usb 5-1: failed to fetch extended address, random address set
[  213.196882][ T3904] team0 (unregistering): Port device team_slave_1 removed
[  213.258159][ T3904] team0 (unregistering): Port device team_slave_0 removed
[  213.325597][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  213.453525][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.738837][ T5805] loop1: detected capacity change from 0 to 256
[  214.787010][ T5805] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  215.027203][ T3659] Bluetooth: hci0: command tx timeout
[  215.052003][ T5810] loop4: detected capacity change from 0 to 16
[  215.077751][ T5810] erofs: (device loop4): mounted with root inode @ nid 36.
[  216.315693][ T5816] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow
[  216.346667][ T3904] bond0 (unregistering): Released all slaves
[  216.394258][ T5816] 
[  216.396633][ T5816] ======================================================
[  216.403726][ T5816] WARNING: possible circular locking dependency detected
[  216.410736][ T5816] 6.1.103-syzkaller #0 Not tainted
[  216.415832][ T5816] ------------------------------------------------------
[  216.422836][ T5816] syz.1.486/5816 is trying to acquire lock:
[  216.428713][ T5816] ffff888148fc8400 (&sb->s_type->i_mutex_key#8){++++}-{3:3}, at: ext4_bmap+0x4b/0x410
[  216.438326][ T5816] 
[  216.438326][ T5816] but task is already holding lock:
[  216.445710][ T5816] ffff88807f8743f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40
[  216.456404][ T5816] 
[  216.456404][ T5816] which lock already depends on the new lock.
[  216.456404][ T5816] 
[  216.466801][ T5816] 
[  216.466801][ T5816] the existing dependency chain (in reverse order) is:
[  216.475809][ T5816] 
[  216.475809][ T5816] -> #3 (&journal->j_checkpoint_mutex){+.+.}-{3:3}:
[  216.484593][ T5816]        lock_acquire+0x1f8/0x5a0
[  216.489642][ T5816]        mutex_lock_io_nested+0x134/0xab0
[  216.495402][ T5816]        jbd2_journal_flush+0x29b/0xc40
[  216.500954][ T5816]        ext4_ioctl+0x3986/0x5f60
[  216.505980][ T5816]        __se_sys_ioctl+0xf1/0x160
[  216.511097][ T5816]        do_syscall_64+0x3b/0xb0
[  216.516042][ T5816]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.522459][ T5816] 
[  216.522459][ T5816] -> #2 (&journal->j_barrier){+.+.}-{3:3}:
[  216.530451][ T5816]        lock_acquire+0x1f8/0x5a0
[  216.535549][ T5816]        __mutex_lock+0x132/0xd80
[  216.540580][ T5816]        jbd2_journal_lock_updates+0x2b0/0x380
[  216.546745][ T5816]        ext4_change_inode_journal_flag+0x1a8/0x6e0
[  216.553344][ T5816]        ext4_fileattr_set+0xe04/0x1770
[  216.558895][ T5816]        vfs_fileattr_set+0x8f3/0xd30
[  216.564310][ T5816]        do_vfs_ioctl+0x1cd1/0x2a90
[  216.569514][ T5816]        __se_sys_ioctl+0x81/0x160
[  216.574670][ T5816]        do_syscall_64+0x3b/0xb0
[  216.579609][ T5816]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.586037][ T5816] 
[  216.586037][ T5816] -> #1 (&sbi->s_writepages_rwsem){++++}-{0:0}:
[  216.594478][ T5816]        lock_acquire+0x1f8/0x5a0
[  216.599542][ T5816]        percpu_down_write+0x50/0x2f0
[  216.604911][ T5816]        ext4_ind_migrate+0x254/0x760
[  216.610277][ T5816]        ext4_fileattr_set+0xe9b/0x1770
[  216.615832][ T5816]        vfs_fileattr_set+0x8f3/0xd30
[  216.621210][ T5816]        do_vfs_ioctl+0x1cd1/0x2a90
[  216.626403][ T5816]        __se_sys_ioctl+0x81/0x160
[  216.631519][ T5816]        do_syscall_64+0x3b/0xb0
[  216.636465][ T5816]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.642881][ T5816] 
[  216.642881][ T5816] -> #0 (&sb->s_type->i_mutex_key#8){++++}-{3:3}:
[  216.651482][ T5816]        validate_chain+0x1661/0x5950
[  216.656850][ T5816]        __lock_acquire+0x125b/0x1f80
[  216.662229][ T5816]        lock_acquire+0x1f8/0x5a0
[  216.667270][ T5816]        down_read+0xad/0xa30
[  216.671970][ T5816]        ext4_bmap+0x4b/0x410
[  216.676652][ T5816]        bmap+0xa1/0xd0
[  216.680819][ T5816]        jbd2_journal_flush+0x5b5/0xc40
[  216.686374][ T5816]        ext4_ioctl+0x3986/0x5f60
[  216.691501][ T5816]        __se_sys_ioctl+0xf1/0x160
[  216.696616][ T5816]        do_syscall_64+0x3b/0xb0
[  216.701560][ T5816]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  216.707975][ T5816] 
[  216.707975][ T5816] other info that might help us debug this:
[  216.707975][ T5816] 
[  216.718196][ T5816] Chain exists of:
[  216.718196][ T5816]   &sb->s_type->i_mutex_key#8 --> &journal->j_barrier --> &journal->j_checkpoint_mutex
[  216.718196][ T5816] 
[  216.733680][ T5816]  Possible unsafe locking scenario:
[  216.733680][ T5816] 
[  216.741121][ T5816]        CPU0                    CPU1
[  216.746477][ T5816]        ----                    ----
[  216.751833][ T5816]   lock(&journal->j_checkpoint_mutex);
[  216.757377][ T5816]                                lock(&journal->j_barrier);
[  216.764676][ T5816]                                lock(&journal->j_checkpoint_mutex);
[  216.772746][ T5816]   lock(&sb->s_type->i_mutex_key#8);
[  216.778124][ T5816] 
[  216.778124][ T5816]  *** DEADLOCK ***
[  216.778124][ T5816] 
[  216.786257][ T5816] 2 locks held by syz.1.486/5816:
[  216.791287][ T5816]  #0: ffff88807f874170 (&journal->j_barrier){+.+.}-{3:3}, at: jbd2_journal_lock_updates+0x2b0/0x380
[  216.802209][ T5816]  #1: ffff88807f8743f8 (&journal->j_checkpoint_mutex){+.+.}-{3:3}, at: jbd2_journal_flush+0x323/0xc40
[  216.813278][ T5816] 
[  216.813278][ T5816] stack backtrace:
[  216.819167][ T5816] CPU: 1 PID: 5816 Comm: syz.1.486 Not tainted 6.1.103-syzkaller #0
[  216.827182][ T5816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  216.837242][ T5816] Call Trace:
[  216.840529][ T5816]  <TASK>
[  216.843454][ T5816]  dump_stack_lvl+0x1e3/0x2cb
[  216.848140][ T5816]  ? nf_tcp_handle_invalid+0x642/0x642
[  216.853607][ T5816]  ? print_circular_bug+0x12b/0x1a0
[  216.858803][ T5816]  check_noncircular+0x2fa/0x3b0
[  216.863752][ T5816]  ? add_chain_block+0x850/0x850
[  216.868687][ T5816]  ? lockdep_lock+0x11f/0x2a0
[  216.873386][ T5816]  ? _find_first_zero_bit+0xd0/0x100
[  216.878674][ T5816]  validate_chain+0x1661/0x5950
[  216.883539][ T5816]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  216.889536][ T5816]  ? reacquire_held_locks+0x660/0x660
[  216.894936][ T5816]  ? do_raw_spin_unlock+0x137/0x8a0
[  216.900132][ T5816]  ? validate_chain+0x112/0x5950
[  216.905069][ T5816]  ? finish_task_switch+0x299/0x810
[  216.910289][ T5816]  ? mark_lock+0x9a/0x340
[  216.914638][ T5816]  __lock_acquire+0x125b/0x1f80
[  216.919518][ T5816]  lock_acquire+0x1f8/0x5a0
[  216.924023][ T5816]  ? ext4_bmap+0x4b/0x410
[  216.928363][ T5816]  ? read_lock_is_recursive+0x10/0x10
[  216.933742][ T5816]  ? __might_sleep+0xb0/0xb0
[  216.938336][ T5816]  ? __lock_acquire+0x125b/0x1f80
[  216.943404][ T5816]  down_read+0xad/0xa30
[  216.947563][ T5816]  ? ext4_bmap+0x4b/0x410
[  216.951910][ T5816]  ? bit_waitqueue+0x30/0x30
[  216.956506][ T5816]  ? __down_common+0x8b0/0x8b0
[  216.961277][ T5816]  ? jbd2_journal_flush+0x374/0xc40
[  216.966487][ T5816]  ? __lock_acquire+0x1f80/0x1f80
[  216.971518][ T5816]  ? jbd2_cleanup_journal_tail+0x1a7/0x2c0
[  216.977330][ T5816]  ? ext4_journalled_write_end+0xec0/0xec0
[  216.983138][ T5816]  ext4_bmap+0x4b/0x410
[  216.987310][ T5816]  ? ext4_journalled_write_end+0xec0/0xec0
[  216.993138][ T5816]  bmap+0xa1/0xd0
[  216.996855][ T5816]  jbd2_journal_flush+0x5b5/0xc40
[  217.001889][ T5816]  ? jbd2_journal_lock_updates+0x2b0/0x380
[  217.007700][ T5816]  ? __bpf_trace_jbd2_shrink_checkpoint_list+0x50/0x50
[  217.014556][ T5816]  ? bpf_lsm_capable+0x5/0x10
[  217.019241][ T5816]  ? security_capable+0x86/0xb0
[  217.024099][ T5816]  ext4_ioctl+0x3986/0x5f60
[  217.028604][ T5816]  ? kasan_set_track+0x4b/0x70
[  217.033371][ T5816]  ? security_file_ioctl+0x6d/0xa0
[  217.038488][ T5816]  ? __se_sys_ioctl+0x47/0x160
[  217.043283][ T5816]  ? do_syscall_64+0x3b/0xb0
[  217.047898][ T5816]  ? ext4_fileattr_set+0x1770/0x1770
[  217.053207][ T5816]  ? do_vfs_ioctl+0x1ab2/0x2a90
[  217.058065][ T5816]  ? __x64_compat_sys_ioctl+0x80/0x80
[  217.063431][ T5816]  ? __lock_acquire+0x1f80/0x1f80
[  217.068463][ T5816]  ? lockdep_hardirqs_on+0x94/0x130
[  217.073662][ T5816]  ? __kmem_cache_free+0x25c/0x3c0
[  217.078779][ T5816]  ? tomoyo_path_number_perm+0x61b/0x7f0
[  217.084413][ T5816]  ? tomoyo_path_number_perm+0x68a/0x7f0
[  217.090060][ T5816]  ? tomoyo_path_number_perm+0x1f2/0x7f0
[  217.095728][ T5816]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  217.101191][ T5816]  ? __fget_files+0x28/0x4a0
[  217.105785][ T5816]  ? __fget_files+0x28/0x4a0
[  217.110371][ T5816]  ? __fget_files+0x435/0x4a0
[  217.115053][ T5816]  ? __fget_files+0x28/0x4a0
[  217.119659][ T5816]  ? bpf_lsm_file_ioctl+0x5/0x10
[  217.124597][ T5816]  ? security_file_ioctl+0x7d/0xa0
[  217.129702][ T5816]  ? ext4_fileattr_set+0x1770/0x1770
[  217.134992][ T5816]  __se_sys_ioctl+0xf1/0x160
[  217.139598][ T5816]  do_syscall_64+0x3b/0xb0
[  217.144034][ T5816]  ? clear_bhb_loop+0x45/0xa0
[  217.148723][ T5816]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  217.154642][ T5816] RIP: 0033:0x7f22cfb779f9
[  217.159064][ T5816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  217.178670][ T5816] RSP: 002b:00007f22d0a34038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  217.187084][ T5816] RAX: ffffffffffffffda RBX: 00007f22cfd05f80 RCX: 00007f22cfb779f9
[  217.195059][ T5816] RDX: 0000000020000280 RSI: 000000004004662b RDI: 000000000000000a
[  217.203113][ T5816] RBP: 00007f22cfbe58ee R08: 0000000000000000 R09: 0000000000000000
[  217.211080][ T5816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  217.219048][ T5816] R13: 0000000000000000 R14: 00007f22cfd05f80 R15: 00007ffdf5d1c1f8
[  217.227110][ T5816]  </TASK>
[  217.293538][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  217.301575][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  217.335204][ T5559] 8021q: adding VLAN 0 to HW filter on device team0
[  217.345577][ T5694] chnl_net:caif_netlink_parms(): no params data found
[  217.397034][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  217.405967][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  217.407600][ T4041] usb 5-1: USB disconnect, device number 10
[  217.417570][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.427007][ T5776] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.444376][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  217.504804][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  217.514277][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  217.525176][ T4241] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.532281][ T4241] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.542140][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  217.550792][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  217.561858][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  217.570619][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  217.582201][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  217.590940][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  217.601606][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  217.609974][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  217.618492][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  217.626837][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  217.639925][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  217.662090][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  217.735386][ T5694] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.746393][ T5694] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.754978][ T5694] device bridge_slave_0 entered promiscuous mode
[  217.770736][ T5694] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.780915][ T5694] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.790344][ T5694] device bridge_slave_1 entered promiscuous mode
[  217.839613][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.872003][ T5694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.905798][ T5694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.923191][ T5587] 8021q: adding VLAN 0 to HW filter on device team0
[  217.955481][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  217.964106][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  217.989847][ T5694] team0: Port device team_slave_0 added
[  217.996851][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  218.005278][ T4041] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  218.015219][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  218.025830][ T4038] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.032995][ T4038] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.041236][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  218.050170][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  218.059056][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.066171][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.074579][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  218.083611][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  218.100982][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  218.109215][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  218.116645][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  218.130069][ T5694] team0: Port device team_slave_1 added
[  218.155559][ T5559] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.190344][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  218.200072][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  218.212474][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  218.222437][ T3415] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  218.250719][ T5587] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  218.264688][ T5587] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  218.284641][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  218.297015][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  218.306625][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  218.318761][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  218.329071][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  218.339937][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  218.353141][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_0
[  218.365219][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.393358][ T5694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  218.409888][ T5694] batman_adv: batadv0: Adding interface: batadv_slave_1
[  218.416862][ T5694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  218.446652][ T5694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  218.490365][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  218.502771][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  218.559564][ T4041] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  218.572232][ T4041] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.588094][ T4041] usb 5-1: Product: syz
[  218.596728][ T4041] usb 5-1: Manufacturer: syz
[  218.606977][ T4041] usb 5-1: SerialNumber: syz
[  218.623054][ T4041] usb 5-1: config 0 descriptor??
[  218.636003][ T5694] device hsr_slave_0 entered promiscuous mode
[  218.650304][ T5694] device hsr_slave_1 entered promiscuous mode
[  218.656994][ T5694] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  218.668799][ T5694] Cannot create hsr debugfs directory
[  218.680088][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  218.698721][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  218.719663][ T5559] device veth0_vlan entered promiscuous mode
[  218.741628][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  218.760979][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  218.776693][ T5559] device veth1_vlan entered promiscuous mode
[  218.850882][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  218.860104][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  218.890212][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  218.900916][ T3689] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  218.914952][ T5559] device veth0_macvtap entered promiscuous mode
[  218.937480][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  218.946669][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  218.956738][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  218.975363][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.985803][ T5559] device veth1_macvtap entered promiscuous mode
[  219.024540][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.040424][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.051721][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.064437][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.075673][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.089699][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.100892][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.133492][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  219.142222][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  219.154085][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  219.165865][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  219.167468][ T4041] usb 5-1: Firmware version (0.0) predates our first public release.
[  219.176991][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  219.192129][ T4041] usb 5-1: Please update to version 0.2 or newer
[  219.194540][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.213647][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.224701][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.237796][ T4041] usb 5-1: Firmware: build 
[  219.240172][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.254545][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.265035][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.278448][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_1
[  219.303328][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  219.314858][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  219.324203][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  219.334678][ T4241] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  219.344678][ T5559] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  219.356267][ T5559] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  219.365324][ T5559] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  219.374574][ T5559] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  219.389111][ T5694] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.402387][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  219.410570][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  219.419603][ T5587] device veth0_vlan entered promiscuous mode
[  219.459230][ T5587] device veth1_vlan entered promiscuous mode
[  219.485109][ T5694] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.508647][ T5559] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht'
[  219.522954][ T4041] usb 5-1: USB disconnect, device number 11
[  219.553152][ T5694] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.581756][ T5587] device veth0_macvtap entered promiscuous mode
[  219.616762][ T5694] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.635058][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  219.658504][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  219.672533][ T5587] device veth1_macvtap entered promiscuous mode
[  219.689774][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  219.708206][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  219.718296][ T5559] ieee80211 phy24: Selected rate control algorithm 'minstrel_ht'
[  219.726435][ T3960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.753462][ T3960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.769200][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.781118][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.793737][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.805195][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.816789][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.829314][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.839484][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  219.850081][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.864762][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0
[  219.879552][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  219.890340][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  219.901557][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  219.929913][ T3960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.939255][ T3960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.951415][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.962078][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.974822][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  219.985855][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  219.999964][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.017978][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.028051][ T5587] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  220.047171][ T5587] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  220.068346][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1
[  220.076040][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  220.086902][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  220.100395][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  220.124677][ T5587] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  220.147219][ T5587] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  220.156118][ T5587] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  220.167221][ T5587] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  220.193754][ T5694] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  220.244286][ T5694] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  220.276876][ T5694] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  220.294322][ T5587] ieee80211 phy25: Selected rate control algorithm 'minstrel_ht'
[  220.311231][ T5694] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  220.340187][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.352129][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.354721][ T5587] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht'
[  220.379367][ T4041] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  220.403957][ T3738] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  220.426386][ T3738] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  220.454760][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  220.517057][ T5694] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.546156][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  220.560094][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  220.571278][ T5694] 8021q: adding VLAN 0 to HW filter on device team0
[  220.586384][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  220.596660][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  220.605507][ T3685] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.612657][ T3685] bridge0: port 1(bridge_slave_0) entered forwarding state
[  220.632489][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  220.642387][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  220.655473][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  220.664222][ T4038] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.671380][ T4038] bridge0: port 2(bridge_slave_1) entered forwarding state
[  220.681956][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  220.726351][ T5694] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  220.737970][ T5694] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  220.756410][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  220.765727][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  220.776998][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  220.785935][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  220.797537][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  220.806736][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  220.818035][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  220.826767][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  220.838101][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  220.866566][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  220.875271][ T5776] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  220.980050][ T3904] device hsr_slave_0 left promiscuous mode
[  220.987488][ T3904] device hsr_slave_1 left promiscuous mode
[  221.002103][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  221.010967][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_0
[  221.021232][ T3904] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  221.029350][ T3904] batman_adv: batadv0: Removing interface: batadv_slave_1
[  221.037063][ T3904] device bridge_slave_1 left promiscuous mode
[  221.043883][ T3904] bridge0: port 2(bridge_slave_1) entered disabled state
[  221.052350][ T3904] device bridge_slave_0 left promiscuous mode
[  221.058724][ T3904] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.069325][ T3904] device veth1_vlan left promiscuous mode
[  221.075147][ T3904] device veth0_vlan left promiscuous mode
[  221.221878][ T3904] team0 (unregistering): Port device team_slave_1 removed
[  221.248363][ T3904] team0 (unregistering): Port device team_slave_0 removed
[  221.273476][ T3904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  221.299578][ T3904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  221.346956][ T3904] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  221.379934][ T3904] bond0 (unregistering): Released all slaves
[  221.446383][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  221.454245][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  221.465509][ T5694] 8021q: adding VLAN 0 to HW filter on device batadv0
[  221.504565][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  221.513732][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  221.531231][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  221.539591][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  221.550886][ T5694] device veth0_vlan entered promiscuous mode
[  221.559132][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  221.566903][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  221.594828][ T5694] device veth1_vlan entered promiscuous mode
[  221.612405][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  221.620461][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  221.630240][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  221.639053][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  221.653983][ T5694] device veth0_macvtap entered promiscuous mode
[  221.666083][ T5694] device veth1_macvtap entered promiscuous mode
[  221.686928][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.700156][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.710546][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.722440][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.732327][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.742793][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.752654][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  221.763324][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.774517][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_0
[  221.785078][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.796237][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.806424][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.816974][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.826926][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.837435][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.847649][ T5694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  221.858183][ T5694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  221.869244][ T5694] batman_adv: batadv0: Interface activated: batadv_slave_1
[  221.876795][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  221.886103][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  221.894089][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  221.902913][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  221.911814][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  221.920477][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  221.931687][ T5694] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  221.943459][ T5694] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  221.953054][ T5694] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  221.963173][ T5694] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  222.003528][ T5694] ieee80211 phy27: Selected rate control algorithm 'minstrel_ht'
[  222.030935][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.036164][ T5694] ieee80211 phy28: Selected rate control algorithm 'minstrel_ht'
[  222.046700][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.068948][ T4038] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  222.077886][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  222.086879][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  222.098099][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready