last executing test programs:

18.845578824s ago: executing program 3:
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, 0x3, 0x8, 0x101, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_RESPOND={0x8}]}]}, 0x30}}, 0x0)

18.749090939s ago: executing program 3:
r0 = open(&(0x7f0000000140)='./bus\x00', 0x400145042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x5800005, 0x12, r0, 0x0)
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x81fd)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000040), 0xfea0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x145842, 0x0)
fallocate(r3, 0x10, 0x0, 0x950e)

18.593950523s ago: executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
mount$bind(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
umount2(&(0x7f0000000100)='./file0/file0\x00', 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
getsockopt$sock_buf(r3, 0x1, 0x1a, &(0x7f0000000540)=""/223, &(0x7f00000001c0)=0xdf)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
getdents64(r4, &(0x7f0000000400)=""/258, 0x102)

17.712940979s ago: executing program 3:
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"})

17.64362621s ago: executing program 3:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000440)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0x6}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000002340)='L', 0x1}], 0x1, &(0x7f00000004c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x18}}], 0x2, 0x0)
migrate_pages(0x0, 0x2b4, &(0x7f0000000000), 0x0)
syz_read_part_table(0x107c, &(0x7f0000000000)="$eJzs0L1NA0EQBeC358NnB9QAxZCRQUIdVODSkEiQoAkaQCIh4WfQ7pkWTPJ9wen0dmeetOFfzVMyJ2nJIcmmZ+/b9WyTPJ6v2dw/U/YjX5ZxuX1V/VTVcWq1zZJ1XfdZZ30sSVX7rrv7/rtPXqZjQ7u5ur3OlJbRebhMXv+GR9VYNSe7LG/Zjezj6TnJw8UJXgcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATuM3AAD//yn6GNw=")
sendto$inet(r0, &(0x7f00000012c0)="e2", 0x1, 0x11, 0x0, 0x0)

17.599578317s ago: executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
ioctl$sock_bt_hci(r0, 0x400448c8, &(0x7f0000000040))

16.605330351s ago: executing program 4:
r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020)

16.54517083s ago: executing program 4:
mkdir(0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
r2 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/138, 0x0})
ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x0, r2})
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x0, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000180)={0x0, r2})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x20000)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000001040)={'#! ', './file0'}, 0xb)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x6, 0x13, r3, 0x0)
ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000100)={0x1100, 0x0, 0x0, 0x10000})
dup2(r0, 0xffffffffffffffff)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)
getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, 0x0, &(0x7f0000000080)=0x54)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

16.273269882s ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000000), 0x5, 0x579, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
unlinkat(r0, &(0x7f00000000c0)='./file1\x00', 0x200)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x4, 0x4, 0x4, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100000}, 0x48)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x11, &(0x7f0000004300), 0x4)
syz_mount_image$minix(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x1000002, &(0x7f0000002900)=ANY=[@ANYBLOB="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", @ANYBLOB="86e65fc95cec3737ffc083e9420e0fda32ad9e60822bfec34b914022040a90f8741ca4d99221eeaef6d92e8595aacab6491e0f137f25a1eb6ce98ef49a462828f95b2b068d0d761d5b739c59f7553d6f322aa98313062ead06b1ad3b6575bd1804ab3d04d07d4692003ea4284df89a58c389ecd40e7168cf59c6200e16312d9aaa8722fb6a41995420c131b395b247f1e00fa27a838f52cecfdbf295c4f590e11c0121e67f19efbfe3041bbaa77cef1561d494e645805ba55eb8463cf1b56c08e44d71830924371064c7dd3fe5219c8af052190d7376aa62bf5edc726143be953f1494b0f2ac4591e4676317241150e315770ce42000ae7d8d7a416575697ce99892636ff8f3947eeaf6e73defb3c85aba7ba589d4bba6fb05b84fed5d7a3e6fc3692ee0e37c7515caaf9815bad099d93d420ec27e0da0eb2566233ce799632051375cd5b545428d3209708dd8bc9aed1af2b2dd96d8d7617fac7f5f006e165cd1add85134b939cf15175850d2f58d89ab6d4f0aa93ae8ad8f9d4f428b007af33a69188e661ef662cacd512ef14955045acfd4ab4ab699881d2365236c7dd59f7a28f5579b480600f3070bfe97f59e609da493e6750153bca6cad17312baa4879e0fde2f81ae15ce236f64fb898ad4ba6071403b0cafd642e2648d4e3218949dd9e906c76609ac9efe8c6176ad5e9a2f139d7b6e7e248dadbdf1cc74c05ce3ad93359b3928ec022e6ed2512c66bc64087f22a9bc10961477f5ad8acca7d2fbb242d52703ec70225d76713dfd7dc1ce24ab3aede0f39f2740181efdbaf4dd912701fd8c568d8d0daea80a4c9a93a9e28ba48f1dbafaf2e279c0d83c327e045e20d37abc0ecacd0fd6220295c16e0f4849096f0d5a7d337c8460553a5d5b63ed01a55047e22c98e9df86bd22e4ec55b7c311497d97b30709634c58c2eb751a724f6086d562b9c1d3f5fbba7d5c78a9ed08c924ab085ecaf50cb2a0437174550ea20bdba86364bc9453fb4af21f6cac1268118be3eca0ea7d6f94447e7b2cb6247f42836caa7da504f60314182201790974ac7b648a57b8d87b7af022266b3e3fb6303583fa876de471b1d8ac73f0af724581271be1ba839261e7b50f42e1d3c44856f0a5b3e148a7783ed2ed70ee435cec055be29b7997d2e2bb52e39e413b570d383febe08c38310ca77b3622cc45c1a79f0de240f23c0a9a28ea6fc2030f927a1e07fe15ae8e70e170a7152ce5475e199b780390c971c9148f72eff33cac7f0cb23850f1d7f2494733f86bf52df43c2a44b412c5f0cd830e45a9fa097d4f7508fa6e1f33ddf6953b6dbce69aa70f078c4112636c3a902252a17b197ecb8f05beb5a276e0c297990b240bf0156601deb9105be5529e4c6923f14a8c7e1fe6a04cd229194a0b974d473ce6726fc481bb7f4e172eb661162d221a6837849fd618849da2d300d25db9cb8386efba1c099edd5ac31bf9fbda2a8a3b824cbe2e953710555f579d8fcf51b6d14bb098cdb68d25b9962cb163b78b89ddcb201f8882e036d60c2348a52536d06f1dc891fcdb6a6baab4ad69051ae5eefd73f0f67eb0f254dd3b460a2cf56a796d7a16d67e6818119cc8c40facc305657bfa74bdfee0faa0eec37cf000ecce3f86cc6f6cb40ad12a46a0184391fe32616531b35fd3bf1c3d28d00aa052fd7c2c1891448db260db1a9717281a25bf705514aaee649e0630da06fe202e3949674554373d878e13d90f2dc3fcf3143f1cf9605f694b7854038409573d12eb872befe1132f79d4d7a9b1964fc1cd5214fb99a0ffd1e88936d01b052479e777340b29dc97c5b02e8ddee2a848ab31cac8696b6cc6f7630f2aaca9b8032780b68f2e26d42ea1b86b40fd499c394cf8880d3ee6fa4fc6dd4ff236d0a82641a95767ae8f9ef5ed219891f78db23a977a017da0b0c1914334cf3c919ba02eae35d7e98b96c6a9e7e0a6f0f6747cf91c008ebe56522e7dbdf7a942b16e01427ba658543b4438686a62015bcdfffcd05ef587d3ce8a916a6ab0a80c17096a3180a57bc20bdadd9b5380a59567bb4a0b10fcdc5c98a4168753489c45dbf922962dd7a8968de0fc2ad6d4abfd1fcc530a8eea9f025ef6b7442a7a340d1f8b477db5d4e65d864ff2cc559640b47f47381c1d2de06e957199db1dadc94ae0a320b6829ec3e7506856869979f791c2122e6991b3789a87ada5f5169040344b94841e296dc963d38e775cdc5e65eee3bd059e55c5cc1fb31f7061acc19e0b8dcf72b583578fd5557bcc6dbf8b5e0b7185e7d7dca2c08589c8f8d57a8df8b015942f853a69d7ba492337b04c5f3e6e19ec5fbc28aa100174c71912681576dd014bd4d496abcfdf75289dde158bae37686b042df4de5de3dd19105887f3e4e291a30c1f19061bbea43ea75afb678b1377c2bd189b86bf60b1084dcd91d23197e944f691153df147d5051f2d5ed1b0b55677c1e7a6d99aaefc08db70e7d4b5a59e0d8fcffa8fd76d42e4c326b1df840538662c60c046d219beeb81a62c28565cf2a71742bc702a5c9bad03dd69d00da46478bb48d0a85e333c651245ea387f286cc9114f97cbfcdfe0dce4e37da4a41943785781123dace55d34ede0a855b36972ed1442b1404df80f9532a0db809948bd241f3383d56c8a6ef57a9e5549c12f2677a960bf54d7cbaf6560bd86a91ad793bedddbb704324126b5ea2f145b8aeb17d1ef863cde3a3e2749f5bbcbd45673269d8421cc1eb90ec66f7764bb657de407119146d74b460c727c0ffe7a1f85db6f43dea39a1b81bc6f65cfeb8ecba31dae17f16c4d726f4bf778b235ae38c3270c663d1391a4fc48990383dd240714612358ba3d8dfe2dd6f3347146d3e93082a49bdeeec58263a6f7d34e2ed759eb9b0fa298ac063c09ddf39c86d426d1bdbd173cb3283e99cdc301b13557250615e89e870ee820783eec14398fe91996359ff4bfd39f3a36cd5bd697200f5db1b1c4a58bf60d55f99b323450004277e90a32b0ab09327091afe269a871504da4ca79ebdddaa2d246bcbdf3c57c13184cda844255e03b1437ef5e79545b764ec6dd666b17dd0648806805d09e12c68d794a6da81d70454b09fded5d98aaa17d69e0e343995307785cf40e8993dc72d5f2b7ee69efe86ee897d1d0d46a51898c73d09a709fc9180c71d6cae0a6161b4bcd39bc090dd319165d73e312108a1b4b2515c572e03bd4be6184717037e29868d33f7ccc2885af1beae10bef038df839b7cbc126b1baf8f2e14007e49f2d4a95626c625ecdba3333c69cbae6416a18a75769a7020ecdc96630e0a3c920de9329d6bb6b605f6eb5c2ba273bf5efa977bece3bd4ad848fcd2f11a4103f9abed1eee1b7ea2ad1ebb75327125a1eb5f62c6bcd45fcdac8edc6a29aed4a906d86da215b492ff1a726aa4a317af822060a674b9774464d53a477061117cf3a5d38d91bf3df21dfc398ef04f565c53abd7ebb1b41e2bc5bbc5f218598010c829039852216b19d0762cdd7dce5e7620403313180b04a97651350a7c2bf6380363528d733a74a64594d7a801d3fb3fc80cad52a77d5b8518ef89310f8509bef1933ef303562380bb1e381d49b2c08cc56efa1983c63f60107f378704ae1e89b9dfee5b7478e5e6e5dfb62f75387fe010818be933b0504545513739db06db38abc16387f1b7a4f3908a6a2119432997718506a7e750e40215f6d63787aa74cfe039b3d38dec31b9dfbb3ef901a6f66357d60ee51e06f8b72555092b79be38ec8952bda7dc78dc37ef1f35d0506f6a58a1dfe288b5d388df12c5f6f5eeefcc6c4ace03643e7b600904623891d8e31b2ef23fd8137690621f3deaed46cee675b6d968bccb784add5d0ede8e0289a163b00f5a42573936864efcfb2357b6bb5f4e1872aec8f9d7be2059f1d98a3da288016497e5b358dec464e64dfb21edcd591ac769e100db57b3654c3008644839a929063a3c142606efe3edf19f63ef934d7a949bfcf85dcd6b6fd7a64e786f9ddbd1f8bb86ed4203676cc57f4cc32ccbed9888d7be95903dbcf1d60c6e93e7d5683cfd58950f589284e6950651a8624a5bdb4c23d662ff0554914e0c1f1d5e9b189e566d6daba050749cab9e694fb801efd5f6f342cb077912a846536909a9b3b11d95df8983ddc9448f7b1b89017ec4860bd317467d08e6c0656585d4013270fdb5aed829ba2a44725b552014ac4127edb29adf23956e4ed96ef23f052e4ac88252d5c7842b7e255988d2415fb3a46500c686bc3ea214e5c552b916aa0800cd83bce02e2731c8145a28c4fd19891c5e032e762e1f3a183e091bd5475f682593a0d6ac7697d32ec78142699b9664b7f41194daca4867e9d1dce20c3781b03c18a6d5dcc5f716d8d3fa38ed9604b4a8afc0fefa03b02063a33861d8f17574c6801e6b0bb34c54db351554f3b9f7ae6be472cad47aa41a28382bc5e61a001b5b32c7113a363d6a392e757510858313cb6d14d27e34c8e22486376a6c51bdde8827f2005772ec868b67be57f97d9d341074fc5cdef9678b3b72bcd509d53c9244a85bf790e9cf3dcdece8d66c3bbd5baba730ddff52bbb7a66bfe421684192653479b3588a9b4319c57060eb3fb6a7eec73a51bb5836f50944a5d38a81811b0130ecda2966944f475adb4d828a01c88f7dd29de8ae38265bd382d5e9afd9ee27c378cf56e5e4195ca8a4d46f6c28e1e5e9b4a7a3f6942102dfc249020e79e10061ba420ff2d1181ae6020c9ed2f9f386b8b56bf487b9ef0fe86f4443ac720325720b13596efb718ff28082eafd42353321faad5d4ecc427ac9e9a51950c1e4fe8151d8905108eda21082c09b7858dffbea8ad6bad372e8b37949e4d1b5efde2a1974f1d8e05220ae58bf30cd9b914da9a65b08ad806187cc4385994646811851978a1f9a573f8b01db05941db6b7daedca083981b775cce43228e36e27b591be6c435974b6d0e6c082b08a9d07fd3c138431d8238db64cbaabeff4c522d0504329d913afb4f173d19d8c9c84421199074a91aa0c9ece65ddb46032a6dfcb15f09f582c8b6b4adbcaa2f83727eafa9e01a59fa17d481e3afd4a3e94f860be0c8e6d0fe1031c384b0357784f6d170ab328506e22add3dcf367763c2d9e09737aff5ff4836dd7fbd571548bfb94144403c906a5f2763b619df470843ed660f3c48e6d2f6574c6ccff2ef3dd103ed2b60d643f9a9f8435d8878bbfdfa28414935ba08557e8a21a44df75f21dd7be31013a692729649114e2585be2dfddbfe5f2deb6ab8d0cc4e245ae3b1d99d4d4e6c167d798c438664599e10e839864f6beb76d8d193b1cdde48e185fcb897aebc659f14890b96b3cc044f32f24f8564fb8e5e6bf92a4365051561e0236916f8c9ff5115793eea703452ca42bfd6bdc3ad80c36e38d090bb8a992ab44ac41c7f661b586cf64ad3822b626c5418a8619a0697c5fd27a59f82b188c38006daa29d3ae07acd4c8bfcb3a3a11428fa92b03d1ee330ce4142b97894222244d43c4bfb8a0d202f7d2fddd32a6fd56a8f32974aa6d036bc641d6fbd85b54be459845f4aaff42d8ae4315d35b08e7cedff13cdf1eb8b3b76e1e82aa91564ef26d8ecb7d757d081a1455f14c6f5b0a53c8e4376083303427ad743b83d28d85724bdb65cada011b2500b058ea5b9124c07824c2b22595cbbfe9287155896f323bf2914334dc4e9db35717f0f6ef50cd4192a9b05b2fdba5840bbc81914b8fe1f34bef54c6f2e1068f8d1a9b51b7b1d9226287cfd7b50eb746a9e2b289fe43d02d8031928992f1b22409221e4557285d440dc2a20b677e8f6160eeb81fc0beca14482c7e6d62105df6b5e9ef5d8607d759513bdd3d", @ANYRESOCT, @ANYRES64, @ANYRESHEX, @ANYRESDEC, @ANYRES16, @ANYBLOB="6fb7580105bd2aa4171a74a5fa1a7b074da50e0ab86953e675526c6e2f43b10bb45f511db96f53a17039584d315bb6ab0100838d"], 0x1, 0x1c8, &(0x7f0000000240)="$eJzs282O0lAYxvGnBdqZ8ftr48rEhW6kypDo7JwL8AbcTWYqIRY14gZiom68Dy/DnXfiDUCiV1DTUgJFWkobWhj+v2Sm75z06TmT8JYDAQHYWzfD34YMNcLK9/0vDyS9fiWpnhq1SlkggI3xjUnTJ7GWDx+kpwDshtqf5eN2YoP/nBYmdwFgl41Pa+E+4Jch/f77+XwU/TQy7h/Gp6ZUi/6Yy1vSQab8NyM83q9Lo7m8rfgFjK8J+5cfk/wjxfOHWdcfzX+0kD/KnDfD4+OH8fwVSVclXZN0XdKN6LXWLUm3l8x/sTD/vYzzA0UEj75mbCRT28bzzZQT7PR80D1vup77dK1ZZxpR/lnOvBXlWwXzxznzdpRvnr/3LhLPepnz6kA687/+X8/K/k80e/uwSP/XC/Y/sM/6g+HbM89zP65fmLlSFPtSTDeSwUhwm16d+l75mssrDrdjGclFxTcmABvnfOp9cPqD4ZNu76zjdtx3rfbJi/Zxq/38xAn35U6R3TmAbTZ70s92fvpHggAAAAAAAAAAAAAAQBXuSLpb9SIAAAAAlKKMrxNV/T8CAAAAAAAAAAAAAAAAAAAAl8W/AAAA//9nAzz0")
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xffffffffffffffff)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000140)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', r3, &(0x7f0000000000)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000380)='./bus\x00')
link(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='./bus\x00')
llistxattr(&(0x7f0000000880)='./file0\x00', 0x0, 0x0)
mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='minix\x00', 0x8005, 0x0)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c010000", @ANYRES16, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000"], 0x16c}}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x9}], {0x14}}, 0x9c}}, 0x0)
r6 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r6, &(0x7f0000003000)=[{{&(0x7f0000000180)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c, 0x0, 0x0, &(0x7f0000000540)=[@pktinfo={{0x24, 0x29, 0x32, {@local}}}], 0x28}}], 0x1, 0x0)
setsockopt$inet_int(r1, 0x0, 0x0, 0x0, 0x0)

15.499475691s ago: executing program 4:
r0 = userfaultfd(0x1)
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000f77000/0x3000)=nil, 0x3000}, 0x2})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2})
r1 = userfaultfd(0x80800)
ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f0000000180)={{&(0x7f0000e2c000/0x4000)=nil, 0x4000}})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000b45000/0x4000)=nil, 0x4000}, 0x1})
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000140)="441009000000000000006e0000", 0xd)
getsockopt$inet_opts(r2, 0x0, 0x4, 0x0, &(0x7f00000017c0))
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002340)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, <r3=>0x0})
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x4, 0x0, 0x0)
ioctl$int_in(r4, 0x5421, &(0x7f0000000300)=0x208)
bind$inet6(r4, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r4, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r4, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
poll(&(0x7f0000000040)=[{r4}], 0x1, 0x800)
sendto$inet6(r4, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)
shutdown(r4, 0x1)
ioctl$BTRFS_IOC_BALANCE_PROGRESS(r4, 0x84009422, &(0x7f0000002540)={0x0, 0x0, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, <r5=>0x0}})
bind$inet6(r4, &(0x7f00000001c0)={0xa, 0x4e21, 0x3, @mcast2, 0x4}, 0x1c)
ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001980))
ioctl$BTRFS_IOC_GET_DEV_STATS(r4, 0xc4089434, &(0x7f0000000640)={r5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x9], [0x100, 0x7fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x104000001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x80000001, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x3, 0xb062, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x5, 0x0, 0x800]})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000300)={{}, r3, 0x0, @inherit={0x58, 0x0}, @devid=r5})
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f00000001c0)={{r2}, r3, 0xdded4d3b9d8d8673, @unused=[0x81, 0x8000000000000001, 0x9, 0x20000000000], @name="51acf4443a34a624b83dd06fda3dacef4985400264cb6f079d193534dc815e18d77f4e5ea0ab0102560dd3276b765a25240d9377edec85fbb497a1e3837245b08cb7ddb5304682fa74db637adea612ff48bad791c9967403cd5730e6a055559cf7b7f6173f07ba12b34fd01c3648cd3a2049fb88324f9c048715ba2024a99699f4a40e8f44b500021f16fd66aa6a84d9f6d1b018f6a35846260437f92aa9a4217ef1a9d3ca9ad30bb4894a59a4ccc91b4feba9a0722c25cb832927267d73b6a0c54e20b7d4d02231892773edd4c64e52814d0ee21340ab22a75eaf5b9ed69804fb282107dcaf6fb09b475f333be0f458159a88f5ce1c526309494df2cf94a60740331fda790c03906e90a53412abc27d2d86b0bc4d645add9400a667496f01cb474b20154dc25d454785c3a7415edae87d8150f4f84d51e2cc54d0560a9d7b923734b9a735dfacaf3b006086051aeb3c2406016a70d4278977c90fa4a5d5f706baacfbaa332f5d3a6825a4fd234a706974fbfdd97d2b7571130b3a6597409c3e38280d00a4fd6dd3e374c9e27d424772d9a6f219dc0dfe20287309d0d6e4cfab86abb8b92443dc68098bae20051835c50be4ff54e4968863179baa48fa953d4e0460de315195b79ecafe45b8f2e17cf0595b9cc90d0286ff1e47fe75967c8aa69e0138fc8043d95ac1a67669c11a425ec54b23b6cf2ab81e3030f93f179d0064a41727a729582f826a16ba95f1e77b83f23e5a3bccbf36155c31efc40f9f561dd5bb61adbf2ad5a0f34135cd506f93c6ca9a3e4d77e73a30666852cae9637a58e9b9ca9c9c524810ead88a05bc38d4c1d32322aef8b9d9b4d748692639bbf63de9194b3b9e16f8dfc74738e9e252c5418cfbaf6075a236fb549e5a817e826247e9c3599d847e2dcb7ee632a5dbf166c04bcca0faed2af8216a85574d55c2f3d329b65c235f5e0773fc8bede777e9e317665e3c81509847a9c03a714e765bb42c7c02fc3f5c9fa83bb2e7b8e191c8d05d97ffe91081ee9a3eb3851e6962887b719468eae17f0e05a6161baea9e01b5581784e192f9fd889005ef9a0a012663cc14f6e1fee51a2356da87b899e0be1b84f4f4db799d34f24b2ac913d3809a88841d213f52f0ceff0c03dcf1fc38a5df2d86ae39e74ee6a4c7cfea29dd4a3e9748fefeca21afde697d578c69c8eaadebc8ff272ae98b8efb5525938ca5a99633f15f4f3fd9bbafc4a47447d7d7bd2fb3924c39ad6999ff8f48de06dae8158e31d0c8dad10fc22d3e87e8017459bdf596ae0c939b851ebd661f9204f3d3c4357849ef50473d5d99ada3422cb0b5d6740ff18da2b20ccf886e87e3c0b2f93bd6fef9ec462086fb0add3b0cf64379599e7c4292779db796ad111bc46ed4c4f222e060986a4008e0deec17eb27d689baca9fb54188781c7ef7e2e2d1a1fec858dafc7dc2c30083d737b41938b0c1aa6b8482b48a54fc30385d9064d0952c48434482fbcb02e7f082f8aedeeb0f1492f1a8598e19d6fdc033192ef0f083c45b540150490d9a3df1eb8c7c50d23750b5eefe64739db13a37145b604c8067106b32baa4260a61a19d8f1e8721f6814cebc4215e631534f2eca5af111a67934418d1b29180edf244795c37598e7cf163afff1eca9e8a7cbfb88e45c034fe6d3e22eff5ab1539994d654a334e64cd1ab54fa74181957c117b36c8fb24eb17d8bf244185d7de8312566bfe3f166afc675f512e583b17b9973c27e12e7a9284e29e5b617fb2faded811760f8979d8fa37992284088ef52d5279eedb806102c030acabd5ea07c250b74aae126f7f12bb80707636e71c72d3a69b158d6ba2501cdfd5b90016d75a74aa28e1fa32d15b834c133554d05a6c7bc993e01f6c9c8a173ce5babb895f72d4987515b113739052ab6e626d096977cdff3d27ff741c72307c3161ec42ba797a8fa01f4147b23ac448f101194e3fa92ae5db3ec27159b1eb1a64dd764ca56b945497f3ab94bb24f7699f8cceb0e0183f17e99350010f1978a6ceadde8657b99d54ae6f86e7c327b1682618d0dbbe9a4c6472c8f44598640849c05ee5db42d0e4abfb36e68d9fa932efa07c53f5182408207be06b7d77e461d75f64df503903e28aa70e451fb652a4093c4c50f82dbf8e7a5d303365991bddee0b6d680c527e45649fd7888923a32f80f6731fd5db856502c40a3680f762e36e89bc4d35d0f8b8f42d86205aa6bf5650492f477c6979d21261cf8f1b4ea5ca581105584540e2d6bbc274cefb8477b1edb6a0754b4ea0fb5cb4f40d940645325173c73d69872c3ade73145fb38d55330216ace66f0734de66cfe86ce1ac82cff0814455ac39faac02e66e27715044c0ffad5675dfdacf328214cb1cda85aba8bbc4f38e2ef9fdb27d19d51fdc51e140c95cbdac4309f56ac78bc2bae734438ed1c358c38501c8fbfdf1f1d78b678ee555358480343e5815d798a0d607a8074c7708823ee58606265c99d827b50bf4e5c5775e7399feb370a23325441544a4bfd22c2c41fc1d6748cbef976371da5636833da2aee9a1ce9fc0ab58c2ad644b7beea53808f7b45ea7cb6eb2494cebe3ca32bfa804884d9a9ff51c1eb49afd2b91e4bbaa9f0a674841e398714908e448dd538aa51de73a6e3540aaae05200e54b86e999c8a8d1d9f58360ac7538cb6b1d5b2c7baae59dc5ad2c5f400800213aa2508cb16b3cdc98beef748ba2b4e3d3fced335e614a018a5c43ff2f5dac40b6781b6ba68efc542bf57b797d5ee807ae857171e320ce796c7ecefa519493c5e825d822b390066bc74850ae6dd0a6d22088c8fd2eca7032e2caed72cc463313d52994a22bbd125afd2acadcb4435912c9f70ebf3c7332f0dc51e0feff9d926ce849ba47355e4db438c082f11ca1d074d061ce5fb0cf7f08669cbcb94d3ed0bd5e2a006e2137de1ba867a8af781d66246a73b2c6af93d211bbc8f13abda3fb1315dcb29979ef83d8c302536f3612e6aed9124de310ca2ccc9f5c29f13cbd6e224b236e8b0e2b160658fd2c518233738c32dd5aee1b962560282922c3031584aef9a205f6f14e08f42954f005c146b26c16a0a7e2812932d379b9e50c6d7c569f3f787efe89e2b6582ff6196b4b1f16f4bbd5548572fa42e764e0c1caba579e4c5ad39cade5b9b8413c196600404ccd6818194642f11a807ab9aeb44f353beb6fff1f91dd43898d10dca3f95455435c375fe5246a0a89bbbe4d254c178d82ecb3cd55b35df81f62d1cb03237d50fd62b081f4df8622fa8eec0be5393e1dcb1415acbd7d04ece81f9c98257bdbd6c5f549acb47e58b6257bc49d06e032bdd897e79931e33ae99eeb327321928ebd38f3bb6171342781b38f6f10cd2686c4776731fad63510a82f8b02412b1a236873db1386b35648b6fcc533ef5508e1dead0ab744f0c8ae6fab116b4ba4e00de797e343eb9cce007739d3e19d28a5b1f10af5852535eb628c71d0a65797f36c20fd0a9a2d14b1285068565d3c8301c44b9d1ffb4042bfed4e1bcc1bdce7406e40f3220a69b5ff1758ca577def6979a708406d080b68a6f8ae2ef61838a8223ff1ea1fbe6bed52ef3e8d8b186c20a228b1028312af7a50caf807dee7b4c99fc97575899a393ec7977ec798ce509afd7412e4c24bd55a179316286556345c93a60ec39e349e75bbacce5c1a0267869848220ad9ca734157a916c97f78ef67e2947617eb61dea7f120ad1b8ec784541f922b4fa5db051cb96a85cf68c72f92be422794eb3792c836e5e02738f19efde4676139313a3e8621788095186d9a970580ff45d2742af6b6784141bccd343cdf9db1e3aaf81f9d3647f0fa1196e4f198dbc3d8b9ce977319fb2cb93e6f0381892f298e2056be9ba0bf53676eae5b69d584f7be2a52d99a30da83747cf445feab4383c5a11cac6facf16660bf80d2df6f3aedbaac84a8b24b2722e10170d21eb590bc47895e37eaecdcd1f5e5ba0f858bee48c7f73fe80400c3c53bee42c776945a2113c2e46ed5ecad503608d5e8b79b3dc1e04cda641c9c09ad96a31e04e9abc9e2fa329d542f52ff355c6cf7a660daed8b7e4138af97ab6133d287cd9e3c7f701762cab8b79205e93f10ed5acba8d2708f8eff27d0e4a2db6414bc73ad68d0db0e3caa98f510cc23cdffc3d1171ad9bb2d5682ddeebcdfd89dfc5ab5737acac259972c6ba50e31a0162d7430eec6cb9cd6a59f0b6a54c5b8fa7f6a21640a775c532b0ab3a5cd83c12bb8bb7f9b1da4f2a305a2a60914e456bc189a5d03634bb43101766e42a1489f8595dfc798260c93db67088db87a6f232a39425da978906144e240d2b99414d899f2885907c58ad58dc7e2b673e8123c442852223e1049d78c67c33781a7f14ede9157cb2908e4d44d431d2c9a6eed4478a8b4f83e615ea37e2ee957420a144b37a4afdcc727289cb401b89e8aa71f918cc174d81748898bf00f91f1b30062a46811b93c963d06f4e6a0fd04f77e2983b0d7df3df5c81ce45451d9d581e877b904c96af0cf410fdf9fac71490db1bc9b7fe8022b57af62fcc60621f51f4566f6a11d754a1d560f40d945f80b12962fdfbca4f5f9850e58f7eb7c81a42824be4a87624799b4224d9ef13f639d7cdbb263e964a95a7d7f85062bd43fe12d2b8d64ecd58634f508e44af90375a065f9198ae14263140378c4bd778560282befc15f1e3ccf264e42545439feb0d746d2904091d7618bda91f4b364ae1da15214a866a3b2d6ad8b13944195b7b99cd2b28275c25a869dcad54c6899ee5fca9b465f53a5372987d7ae9c4b5e2bb291098d32362c391481fa7cb7e5e43e5fef887783f186727b835ea237d153e74f7af5b3c427e0575381b22a982708a9846cd9e42b7abab9acc7f49006ddc5a12b3ef11ef12550a7e86fd97b0af1dad24ac57860b0f2f7ecdfa88b319dee7b073fd18dcaa699c829ea13869cc626a3a4feb09e177f6eefa9ffc0a1577fe785eba35188cb00225e43d6f40285fe5bda9bd759ad48fe8063ad35c174563bb35cadb22d9d0c042b60468af9afbfcb3de2256f1baf979a2fb7567351dacf149a621691ca7cf0a7bcdf885d3331c59ea78044b155a5c994bbf84c56fca87f8398b9065527b6366b657f3e0fda10d6c7c6420c26fc3e1b51070aa2211fc3d66827cfa27c18440b698a8ce794d3ff6810e12e9efe6c261e65cb29b5921c46845245adc7f4d3d89bb3c719d994b993a87ac339171fd121e601a2b937227d8997ffe56a26d51edac728a3226fb1eb295334840caef86d49066a28caff83b0970218bef29271d56d98f13db36bc5f6f115bd8efe0cf9f2d1ef6f0fab816581518c91adc7a1a8f52ec89b3046cee7f588be3bd3385fc1243aff8404ebc934a53511659e084be4e50a6ae47e6866d88c70d75201b97ea3d1730402a548d690a850bf00a583db3082b1de7656d4ac4ff86033c70016e3bab9ef3b3a2f1e262211567e648fe6e3e12d31572c7d1fa2a6d37c2e85af6df9e78253439b573a057204e2f421c1c9b8ad8bf658a5334a6eb625978894dfad30cba707066b88c65c0ee21553bd4adfde76443eb65ef7a28a406dae3b38b6f4cb6847e78001577aef8620cd28e90f7bf3b4f183a35cc3fd3fd4ec53d60099d4caf071653a1acddb4cf6889ac69e92b0bf4002fb7b3d9762de807d2c4ee8fcfc5282fa4cf08978af2fef249929e611754e86efa695"})
ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(0xffffffffffffffff, 0x50009418, &(0x7f0000001040)={{}, r3, 0x10, @unused=[0x8, 0x9, 0xfffffffffffffffb], @subvolid=0x7})
ioctl$BTRFS_IOC_RM_DEV_V2(r1, 0x5000943a, &(0x7f0000002940)={{}, r3, 0x0, @unused=[0x8, 0xfffffffffffffffd, 0x5, 0x400000000000], @subvolid=0x1000000000006})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000800000/0x800000)=nil, 0x800000}})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x240})

14.325900603s ago: executing program 4:
ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6, 0x0, 0x9}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1a, &(0x7f0000000000)={'virt_wifi0\x00', @random="0200002000"})

14.264907682s ago: executing program 4:
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r4=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f0000000340)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_GET_LEASE(r0, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000180)=[0x0, 0x0, <r5=>0x0], &(0x7f0000000040), 0x3, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000000c0)=[r2], &(0x7f0000000200), &(0x7f0000000300)=[r5], &(0x7f0000000340)})

10.886928815s ago: executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x4}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000), 0x0)
close(0xffffffffffffffff)
socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet(0x2, 0x80001, 0x84)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000001c0), 0x8)
getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000380)={{{@in=@initdev, @in6=@private0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f00000000c0)=0xe8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0)
r6 = syz_open_dev$cec(&(0x7f0000000340), 0x0, 0x0)
dup3(r6, r5, 0x0)

9.967025338s ago: executing program 1:
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9)

9.882138541s ago: executing program 1:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4004af07, 0x0)

9.739485703s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$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")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r2 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0)
write(r2, &(0x7f0000000140)='/', 0x1)
sendfile(r2, r2, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r2, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x41000, 0x0)
mount(&(0x7f0000000080)=@filename='\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x105043, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0)
sendfile(r1, r0, 0x0, 0x8000000d)

8.748852406s ago: executing program 1:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0)

7.741690202s ago: executing program 1:
r0 = socket$inet6(0xa, 0x3, 0xa)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback={0xfec0ffff00000000}, 0x0, 0x0, 0x1, 0x9}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002ac0)={@loopback, 0x0, 0x1}, 0x20)
bind$inet6(r0, &(0x7f0000000380)={0xa, 0x4e22, 0x599, @rand_addr=' \x01\x00', 0x7fffffff}, 0x1c)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000500)='./bus\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
mknodat(r1, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000007d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r2}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000080))
linkat(r1, &(0x7f0000000200)='./file0\x00', r1, &(0x7f0000000000)='./file1\x00', 0x0)
chdir(&(0x7f0000000100)='./bus\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000040)='./file0\x00', 0x100)
unlinkat(r3, &(0x7f0000000280)='./file1\x00', 0x0)

4.616335016s ago: executing program 2:
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040), 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c)
write$binfmt_elf64(r0, &(0x7f0000009a40)=ANY=[], 0x17b0)

4.547725786s ago: executing program 2:
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x52, 0x2}, @ramp})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x58, &(0x7f0000000100)="639b8210cdd78458335f21c6ce34ec9f46afcea7bf6588c1f889bcb8d2153f38b9831d2e534912d9a69cc6ef93abe0a9d40b87135df26355a6c4bf0d5a0059e45e403b939dbdf040aef33292aa6b26b5e84307a09cdce9db"})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x10f8)

4.444666342s ago: executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x5138, &(0x7f000000a440)="$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")
llistxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x2)

2.045654334s ago: executing program 2:
r0 = epoll_create1(0x0)
r1 = timerfd_create(0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000))
timerfd_settime(r1, 0x0, &(0x7f00000000c0)={{}, {0x0, 0x989680}}, 0x0)
poll(&(0x7f0000000140)=[{r0}], 0x1, 0xdc)
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000040)={0x9})
epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f0000000100))
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

1.778079985s ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="24000000430001000000000000000000000000000f000100aaaaaaaa37a56d2230", @ANYBLOB="8029"], 0x24}}, 0x0)

1.574490336s ago: executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$netlbl_mgmt(0x0, 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r0}, 0x10)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x3}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

1.246789267s ago: executing program 2:
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee000000010902240001000000000904000000ff0100000724"], 0x0)

1.202177844s ago: executing program 0:
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @loopback=0x7f000002}, 0x10)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x4, 0x0, 0x0)

1.104376659s ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000002c0)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0)
r2 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r2, 0x10d, 0xa5, 0x0, &(0x7f00000000c0))

1.014018533s ago: executing program 0:
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1000806, &(0x7f00000000c0)={[{@errors_remount}, {@fmask={'fmask', 0x3d, 0x7}}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@errors_continue}, {@fmask={'fmask', 0x3d, 0x7}}, {@errors_remount}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}]}, 0x9, 0x1505, &(0x7f0000000180)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000001c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

657.930068ms ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

0s ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000006, &(0x7f0000000680)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1000}}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@jqfmt_vfsv1}, {@block_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@orlov}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x400}}, {@user_xattr}, {@quota}]}, 0x1, 0x54f, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbZdnamc8HbnvOvTc995t7v6fn5iQkgKE1kf0oRLwcEd8kEQfbto1GvnFibb/V+1dnsyWJRuPTv5JI8nWt/ZP89/688lJE/PZVxPHCxnZryysLpXI5Xczrk/XKpcna8sqJC5XSfDqfXpyemTn19sz0e+++M7BY3zj7z/ef3P7w1NdHV7/75e6hm0mcjgP5tvY4nsC19spETOTPyVicfmTHqQE0tpMk230A9GUkz/OxyPqAgzGSZz3w//dlRDSAIZXIfxhSrXFA695+QPfBz417H6zdAG2Mf3TttZHY07w32reaPHRnlN3vjg+g/ayNX/+8dTNbYnCvQwBs6dr1iDg5Orqx/0vy/q9/J3vY59E29H/w7NzOxj9vdhr/FNbHP9Fh/LO/Q+72Y+v8L9wdQDNdZeO/9zuOf9cnrcZH8toLzTHfWHL+QjnN+rYXI+JYjO3O6pvN55xavdPotq19/JctWfutsWB+HHdHdz/8mLlSvfQkMbe7dz3ilY7j32T9/Ccdzn/2fJztsY0j6a3Xum3bOv6nq/FTxOsdz/+DGa1k8/nJyeb1MNm6Kjb6+8aR37u1v93xZ+d/3+bxjyft87W1x2/jxz3/pt229Xv970o+a5Z35euulOr1xamIXcnHG9dPP3hsq97aP4v/2NHN+79O1//eiPi8x/hvHP751f7jf7qy+Oce6/w/fuHOR1/80K393s7/W83SsXxNL/1frwf4JM8dAAAAAAAA7DSFiDgQSaG4Xi4UisW193ccjn2FcrVWP36+unRxLpqflR2PsUJrpvtg2/shpvL3w7bq04/UZyLiUER8O7K3WS/OVstz2x08AAAAAAAAAAAAAAAAAAAA7BD7u3z+P/PHyHYfHfDU+cpvGF5b5v8gvukJ2JH8/4fhJf9heMl/GF7yH4aX/IfhJf9heMl/GF7yHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAbq7Jkz2dJYvX91NqvPXV5eWqhePjGX1haKlaXZ4mx18VJxvlqdL6fF2Wplq79XrlYvTU3H0pXJelqrT9aWV85VqksX6+cuVErz6bl07JlEBQAAAAAAAAAAAAAAAAAAAM+X2vLKQqlcThcVFPoqjO6Mw1AYcGG7eyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOC/AAAA///ktDiZ")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mounts\x00')
r1 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0)
r2 = memfd_create(&(0x7f0000000180)='\x00\xac=W[[\x87\x12\x04\xd5\xbc\x80K\x06\xcd]4(\xa2\xee2>\xa1\x9c\x86x\x1c\x9f\x97\x87\xd9c\xecR\xd6\xe8\xf3Y\x121p^\xc1\x0f\x00\x00\x00\x00\x00\x00\x00t\x00\x00\x00\x00\x00\x00\x00\x05\x00\x00\x00\x00M\xc2N%\x93t[\xf3\xee\xa4\xb4\xfbf\x8dz7\\\x8e\xac\x18\x00\xfd\x89\xe1d\xfa\xcfb\xf3\xdc\xd4CY\x9a\xef\xa3\\\xa7\xa9^\xafL:[\x8e\x83U\xff\xfd\xb0\xfa\xdaL\xa99\x9b\xcfA\xe4n\xa0^\n\x1c\x84\x04\xc5a\xdf\xe5\xd4Hyn\xba:/\xa5\xf4\xaa\xfa\xcd\xc7T\x83\xf5N^\xf2n\xd0=\xb9\t\xdd-F\xacb\xac \xd3\xccj\x13\xa2\x9fLu\'\xed\x91\x867\xaa\xf5\xa0]\xb6\xaa\xea\xfd\xde\xa6\xec\b\x16\x86l:;\xf9\xdb\xcf\x88\"\xca\xe0E\xdb\xec\xf9\xb3\xed\a\x00\x00\x00\x00\x00\x00\x00\xd6.\xf7\x92\xc42\xdf\xefE\xce}\x1b\xda\xdd?\n6\xe1\xb1\xd8Y\x960\xd1\x00\x00\x00\x00\x00\x00MW\x8f\xc6\x82\xe4\x15\xf7\xe9\xd8\xc5b\x0e\x91\xc5\xc76$\x18\xa4\xbe\xe8V\x8d-\xe3\x8fC\xd5\xf5\xd6L\xe3\xce\xa1\x8dz\xce\xa7\xa5\xc8\xcbhM\x1b\xf8\x98\xc4\xfbD6\x88\xfd\xe5i\x8a\xd8\xcfm\x81Z\x19\xf0\xef\xc15\xe8\xcb\xf5\t\t\x00\x17\xfa\x1fqb\xe7\"\xcb4\xb8\xe5/\xd52\x17\x12\x1d\xd8\x87\xb9|\x8d\x83\xea\xcc\x94\xebZ\xae\xaf\x19\xa4\xb2\xc6\xe1\x926B\xb6\x89Z\xa9\xb5/\xbb\x9d&\xeeO\xb3\xb3\xd4\b`\xa9f\x84\xad\t\x1a\xc2\xd5\x88\xbfo\x80V\x93\x9fX\xd7\xff\x03\xb7J\xed\x183\xe3\x7f\xfaq,\xca\x06\xb0\xc9\x92\x93\xa5I\x89\xb7\x85\x90\xb7\x1b0\xce\xd7!\x8fD\x96\xe1 ^>\x9f\x04\x89<\xb7S\x7f\x1a\x88\xab$\xd3y\xc2\xe1\x99\xbch\xd3\x83\xcd\x7f\xc5n\xb1\xc1X \xe2\xbb\x1f\x01\x90\xb1O\x8d\x7f\xa8\xd4\xdbO\xef\x99\xf3\xd3M\x0f\t\x7f\n,\x84\x1f\xfa\xe2\xc8\x99\x97Oq\xae\x9b\x86h\xfa3\xb9\xfd\xbb\xd4^\xc0t\xa7]Y\xe9\x7f[\x11\xb1\xf3m\x17F\x9d\x18\xe2\xe1\x01\xb6f=-?\xbcI\xf2\xd9\xc4>-\xc0E\x9a\x82\xcc7S\xd4\xb6\'\xd2DY\xa5\x83,\xd1\xbc\xc7\xf6\xe0\x1f o\x06\xc2t\x14\xc2\xe0\x92\xc1\x8a\x85>@\xc9\xb0% \xc7\x13l\x8bJ\xe5\xec\x1dE\xf5\xc5\xe2\xe3\x10G7r#\xbc\x95&\x14\x1e\x97\xce\x83>Q@\xfb\xeb=\x1e\xb3\xd5H\x02\x86\xc6\xf3\xe1i\\\x1d\xf4\xc1\xacJC+\xc8}\x1b{\x86\x17\x00\n\"\xec\xa5x\xe6\xb1i\xeb\xb3\xb7I\x90\x9eai\xde\x01\xdc\xfeA\x05Sn\xe6\xe8^\xdf\x8c`\x17\xca\xbd\\QG\xb15\x82*=\xbd\xe9\xaf\x12<\xd7\xe1$\xa4\xdaU\xfb^\xd8!\xacxy\xd5X\xef\x03\xa7\x10\xa1C#S~\x0f\x17\t>X\\mv0\x9eZ\x89\xf4\xae\a\xc8\x16\xd2t\x16\xf3X%Q\xbd\xe9\x86V\xf2\x99^0\xe8xI(\xde-\x04s\x15\x06#2\xef\xef@\xa3t0d^^\xad\xf6\xad\xe0\x16\xf6\xa8\x99!\x0e\x9d+;D&\xebN\x94\x12\x04\x95o\xd6\x9fl\xcb\x16gc\xf5(\xaa_\xec\x9aiE\f\xd4\xc6\xf2\xae\x85n\x995\xcd\xa7\xbb\xf0pz\xaf\tC\x1cq\xaa\x92,Li\r\x95Z\x89\"\xaf]\x95\xb9b_\xe4\xba\xd4\x93\xab\xe1\xb9\xd8E[\xbb\xc9.M+\xbe\x81<z\xf2\xe8\xf4\x93\xe6h\x97\x7f\xaf\xc5\x06g\fI\xa58\xf5\x18x\xc9\xb9\x03\t\x06\x96gf5\xb0\xc8\x86\x14\xe2\x01\x1f\x80\xe7Ol\xba\x93\xaa\x15\x87I7W\x87\xc4;p\xc5\x1e\"K5r\xec6\xac\xf0;\xf8 \xad\xc9\xf0\x16\xce\x17\xa1%f\x12\x80\x03N[qz\xf0q\xbd\xb8s\xe5>N\xd2\xae\xf4\x18\xd0\xe7\x98\x90,\xce\ft\xc4\xc7\x02\xaa\xc7\xeb1;\x86b\x8f\x12{k#c\x1d@\xc31\x00\xd2}f\x8cX\xce\xed\xa4\xe4\xca`<_}\'\xce\x81\xb3O\xae\xa1\xbfwcN,\xf2#\x16\xc4\xad\a&\xb1U\x83w\xd0K\xaa\xdf\x84\xe5\xe4\xdb\xa3G(\x7fv\x93\xb8m\x96\xd89Kb\xa9\x852\xb9\xcaG\x8b\x11\x16\x16\xeeI\x14\xcb\xe4\x9a\x1e\xb6^\xa3\xaa^\xdc\xcfo\xfb\xd6<\xa2\xc6\xbdj\xc4\xb1B\xf3S}\xfeI\xe2e\xec}o\xcfB\xa6\x877\'\x80\x82\t\xec\xc1&\xb8\xa9\x82&\xb8XQ8M@\xaa\x1f\vj\x9aW\xec\x92\x19\xdb^\x9d\x94\x87-&\x00/z\xa2\xd7\x01\\\t\xae~\xed\no\x1a\x9cKG^+\xc9\xe0v\xc0\x96\xc4\xcc\xb7\xdd\xdf\xf9\x01\x91\xe5\to[\x97\xbe\x110\x93\x14\xf8\x8a\x8d\xeb\t\xe7?/C\xaa\xd9\xc4\xc9\xbe\x12\xed\xb3*f\xd1J\x14\x80Iy4\xa9\xf88C\xe3', 0x0)
write(r2, &(0x7f0000000140)='/', 0x1)
sendfile(r2, r2, &(0x7f0000001000), 0xfec)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x100000c, 0x11, r2, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1000, 0x0)
mount$9p_unix(&(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x41000, 0x0)
mount(&(0x7f0000000080)=@filename='\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x105043, 0x0)
mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0)
sendfile(r1, r0, 0x0, 0x8000000d)

kernel console output (not intermixed with test programs):

ace
[  139.912853][ T3528] Bluetooth: hci1: command 0x040f tx timeout
[  139.944471][ T1291] usb 4-1: Using ep0 maxpacket: 8
[  139.985613][  T406] bond0 (unregistering): Released all slaves
[  140.059601][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.068284][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.076665][ T1291] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.099084][ T1291] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  140.113112][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.120219][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.129349][ T1291] usb 4-1: New USB device found, idVendor=046d, idProduct=c22d, bcdDevice= 0.00
[  140.138743][ T1291] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.187725][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  140.220394][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  140.228841][ T3573] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.235971][ T3573] bridge0: port 2(bridge_slave_1) entered forwarding state
[  140.251899][ T1291] usb 4-1: config 0 descriptor??
[  140.270853][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  140.279680][ T5291] loop2: detected capacity change from 0 to 4096
[  140.310631][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  140.324807][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  140.335757][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  140.357637][ T2925] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  140.394965][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  140.407799][ T5291] NILFS (loop2): invalid segment: Checksum error in segment payload
[  140.420213][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  140.434016][ T5291] NILFS (loop2): trying rollback from an earlier position
[  140.447339][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  140.488146][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  140.502045][ T5291] NILFS (loop2): recovery complete
[  140.523804][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  140.529310][ T1291] usb 4-1: string descriptor 0 read error: -71
[  140.552905][ T5294] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.572034][ T1291] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  140.581458][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  140.617208][ T1291] usb 4-1: USB disconnect, device number 10
[  140.623500][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  140.674055][ T5159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  140.895061][ T5298] PM: Enabling pm_trace changes system date and time during resume.
[  140.895061][ T5298] PM: Correct system time has to be restored manually after resume.
[  141.105776][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  141.123590][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  141.161967][ T5159] 8021q: adding VLAN 0 to HW filter on device batadv0
[  141.220565][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  141.235697][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  141.984990][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  141.993667][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  142.038884][ T5159] device veth0_vlan entered promiscuous mode
[  142.052044][ T5159] device veth1_vlan entered promiscuous mode
[  142.055216][ T3572] Bluetooth: hci1: command 0x0419 tx timeout
[  142.111727][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  142.124490][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  142.158342][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  142.219270][ T5318] loop2: detected capacity change from 0 to 512
[  142.221022][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  142.254294][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  142.271590][ T5159] device veth0_macvtap entered promiscuous mode
[  142.295222][ T5159] device veth1_macvtap entered promiscuous mode
[  142.328214][ T5318] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  142.370304][ T5318] EXT4-fs (loop2): 1 truncate cleaned up
[  142.372501][ T5159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.389795][ T3568] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  142.399805][ T5318] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable,resuid=0x0000000000000000,stripe=0x0000000000000000,,errors=continue. Quota mode: none.
[  142.404924][ T5159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.481531][ T5293] loop0: detected capacity change from 0 to 32768
[  142.523863][ T5293] XFS: attr2 mount option is deprecated.
[  142.529130][   T26] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  142.537342][ T5159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.549947][ T5159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.561049][ T5159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.571845][ T5159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.582450][ T5159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  142.594019][ T5159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.605637][ T5159] batman_adv: batadv0: Interface activated: batadv_slave_0
[  142.618411][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  142.629524][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  142.637944][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  142.647513][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  142.659944][ T5159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.674236][ T5159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.684740][ T5159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.697795][ T5159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.707997][ T5159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.719088][ T5159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.745908][ T5159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  142.757523][ T5293] XFS (loop0): Mounting V5 Filesystem
[  142.775718][ T5159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.799114][   T26] usb 4-1: Using ep0 maxpacket: 32
[  142.808862][ T5159] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.819404][ T3568] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.831138][ T3568] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  142.845253][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.845385][ T3568] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  142.855350][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.863435][ T3568] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.884723][ T3568] usb 5-1: config 0 descriptor??
[  142.913308][ T5159] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.949962][ T5159] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.969610][ T5159] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.978381][ T5293] XFS (loop0): Ending clean mount
[  142.983693][ T5159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  143.050914][ T5293] XFS (loop0): Quotacheck needed: Please wait.
[  143.125925][   T26] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3
[  143.131361][ T5293] XFS (loop0): Quotacheck: Done.
[  143.146718][   T26] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.161441][ T5338] loop2: detected capacity change from 0 to 4096
[  143.172113][   T26] usb 4-1: Product: syz
[  143.176474][   T26] usb 4-1: Manufacturer: syz
[  143.189603][   T26] usb 4-1: SerialNumber: syz
[  143.198631][   T26] usb 4-1: config 0 descriptor??
[  143.228462][ T3629] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.245166][ T3629] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.255263][   T26] radio-si470x 4-1:0.0: could not find interrupt in endpoint
[  143.263157][   T26] radio-si470x: probe of 4-1:0.0 failed with error -5
[  143.278047][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  143.296653][ T5338] NILFS (loop2): invalid segment: Checksum error in segment payload
[  143.303124][ T3882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  143.312906][ T5338] NILFS (loop2): trying rollback from an earlier position
[  143.319535][ T4976] XFS (loop0): Unmounting Filesystem
[  143.350615][ T5338] NILFS (loop2): recovery complete
[  143.354210][ T3882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  143.362876][ T3568] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  143.374350][ T5339] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  143.388553][ T3568] plantronics 0003:047F:FFFF.0014: unknown main item tag 0x0
[  143.406529][ T3568] plantronics 0003:047F:FFFF.0014: No inputs registered, leaving
[  143.422940][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  143.458504][ T3568] plantronics 0003:047F:FFFF.0014: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  143.477178][   T26] radio-raremono 4-1:0.0: Thanko's Raremono connected: (10C4:818A)
[  143.666387][ T4709] usb 5-1: USB disconnect, device number 11
[  143.691021][   T26] radio-raremono 4-1:0.0: V4L2 device registered as radio32
[  143.911425][ T3568] usb 4-1: USB disconnect, device number 11
[  143.921258][ T3568] radio-raremono 4-1:0.0: Thanko's Raremono disconnected
[  144.147115][ T5351] loop2: detected capacity change from 0 to 4096
[  144.228940][ T5351] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  144.311310][ T5351] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  145.149173][   T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  145.435790][ T5365] loop4: detected capacity change from 0 to 4096
[  145.444336][ T3629] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[  145.900142][   T13] usb 1-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.945915][   T13] usb 1-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.031672][   T13] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  146.102596][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.181956][ T5365] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  146.212911][ T5365] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  146.214763][ T3531] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  146.246491][ T5365] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  146.278667][ T5365] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount.
[  146.326923][ T5365] ntfs: (device loop4): read_ntfs_boot_sector(): Using backup boot sector.
[  146.347175][ T5365] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  146.419182][ T5365] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  146.464315][ T5365] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  146.488551][ T5365] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  146.522879][ T5365] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  146.557689][ T5365] ntfs: volume version 3.1.
[  146.652256][ T5365] =======================================================
[  146.652256][ T5365] WARNING: The mand mount option has been deprecated and
[  146.652256][ T5365]          and is ignored by this kernel. Remove the mand
[  146.652256][ T5365]          option from the mount to silence this warning.
[  146.652256][ T5365] =======================================================
[  146.661513][   T13] kye 0003:0458:501A.0015: unknown main item tag 0x0
[  146.687152][    C1] vkms_vblank_simulate: vblank timer overrun
[  146.716532][ T5374] loop2: detected capacity change from 0 to 4096
[  146.741060][ T5376] loop1: detected capacity change from 0 to 4096
[  146.747768][   T13] kye 0003:0458:501A.0015: unknown main item tag 0x0
[  146.762602][   T13] kye 0003:0458:501A.0015: item fetching failed at offset 2/11
[  146.786495][   T13] kye 0003:0458:501A.0015: parse failed
[  146.797209][ T5376] NILFS (loop1): invalid segment: Checksum error in segment payload
[  146.806198][   T13] kye: probe of 0003:0458:501A.0015 failed with error -22
[  146.817221][ T5374] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  146.833142][ T5376] NILFS (loop1): trying rollback from an earlier position
[  146.880981][ T5374] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  146.907382][ T5376] NILFS (loop1): recovery complete
[  146.933034][ T5377] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.974697][ T5353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  147.003177][   T13] usb 1-1: USB disconnect, device number 10
[  147.189670][ T1212] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[  147.207273][ T3531] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  147.420509][ T5390] loop2: detected capacity change from 0 to 128
[  147.739437][   T13] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  148.079087][   T13] usb 2-1: Using ep0 maxpacket: 32
[  148.178458][ T5370] loop3: detected capacity change from 0 to 32768
[  148.227195][ T5370] XFS: attr2 mount option is deprecated.
[  148.359306][   T13] usb 2-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3
[  148.368373][   T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  148.462882][   T13] usb 2-1: Product: syz
[  148.480193][   T13] usb 2-1: Manufacturer: syz
[  148.506930][   T13] usb 2-1: SerialNumber: syz
[  149.364634][   T13] usb 2-1: config 0 descriptor??
[  149.390088][ T5370] XFS (loop3): Mounting V5 Filesystem
[  149.411035][   T13] radio-si470x 2-1:0.0: could not find interrupt in endpoint
[  149.411549][ T5370] XFS (loop3): log mount failed
[  149.418483][   T13] radio-si470x: probe of 2-1:0.0 failed with error -5
[  149.453337][ T5409] loop2: detected capacity change from 0 to 4096
[  149.489836][ T5409] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  149.537310][ T5409] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  149.598729][ T5413] loop4: detected capacity change from 0 to 4096
[  149.633489][   T13] radio-raremono 2-1:0.0: Thanko's Raremono connected: (10C4:818A)
[  149.693896][ T5413] ntfs: volume version 3.1.
[  149.730544][  T406] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[  149.743444][ T3531] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  149.869315][   T13] radio-raremono 2-1:0.0: V4L2 device registered as radio32
[  150.064625][ T5416] loop2: detected capacity change from 0 to 4096
[  150.096970][ T3568] usb 2-1: USB disconnect, device number 6
[  150.117068][ T3568] radio-raremono 2-1:0.0: Thanko's Raremono disconnected
[  150.141798][ T5416] NILFS (loop2): invalid segment: Checksum error in segment payload
[  150.169981][ T5416] NILFS (loop2): trying rollback from an earlier position
[  150.197082][ T5416] NILFS (loop2): recovery complete
[  150.214518][ T5425] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.283034][ T5421] loop4: detected capacity change from 0 to 4096
[  150.370395][ T5421] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  150.415283][ T5421] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  150.467231][ T5432] loop2: detected capacity change from 0 to 128
[  150.585254][ T3629] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22.
[  150.621260][ T3524] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  150.669207][ T3569] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  152.239584][ T3569] usb 4-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.490720][ T3569] usb 4-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  152.503211][ T3569] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  152.512672][ T3569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  152.542932][ T5446] loop0: detected capacity change from 0 to 4096
[  152.619310][ T5446] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  152.673677][ T5446] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  152.747338][ T5452] loop4: detected capacity change from 0 to 4096
[  152.816088][ T3629] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22.
[  152.832472][ T4976] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  152.848250][ T5464] loop1: detected capacity change from 0 to 4096
[  152.893547][ T5452] __ntfs_warning: 50 callbacks suppressed
[  152.893562][ T5452] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  152.919122][ T5464] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  152.919754][    C1] vkms_vblank_simulate: vblank timer overrun
[  152.965225][ T5464] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  153.037755][ T5452] ntfs: (device loop4): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  153.064723][ T3569] kye 0003:0458:501A.0016: unknown main item tag 0x0
[  153.074916][ T3569] kye 0003:0458:501A.0016: unknown main item tag 0x0
[  153.088637][ T5452] ntfs: (device loop4): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  153.098701][ T3569] kye 0003:0458:501A.0016: item fetching failed at offset 2/11
[  153.114574][ T3569] kye 0003:0458:501A.0016: parse failed
[  153.124345][ T5452] ntfs: (device loop4): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount.
[  153.136938][  T406] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22.
[  153.139876][ T3569] kye: probe of 0003:0458:501A.0016 failed with error -22
[  153.154407][ T5159] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  153.158244][ T5452] ntfs: (device loop4): read_ntfs_boot_sector(): Using backup boot sector.
[  153.188694][ T5452] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  153.211588][ T5452] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  153.239106][ T3571] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  153.246162][ T5452] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  153.282504][ T5452] ntfs: (device loop4): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  153.298017][ T5469] loop1: detected capacity change from 0 to 128
[  153.302690][    C1] vkms_vblank_simulate: vblank timer overrun
[  153.318116][ T5452] ntfs: (device loop4): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  153.338285][ T5452] ntfs: volume version 3.1.
[  153.415344][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  153.427251][ T1291] usb 4-1: USB disconnect, device number 12
[  153.481917][ T3571] usb 1-1: Using ep0 maxpacket: 32
[  154.489271][ T3571] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3
[  154.510249][ T3571] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.535434][ T3571] usb 1-1: Product: syz
[  154.543372][ T3571] usb 1-1: Manufacturer: syz
[  154.548152][ T3571] usb 1-1: SerialNumber: syz
[  154.594737][ T3571] usb 1-1: config 0 descriptor??
[  154.691268][ T3571] radio-si470x 1-1:0.0: could not find interrupt in endpoint
[  154.698782][ T3571] radio-si470x: probe of 1-1:0.0 failed with error -5
[  155.589297][ T3571] radio-raremono 1-1:0.0: Thanko's Raremono connected: (10C4:818A)
[  155.590645][ T5501] loop2: detected capacity change from 0 to 128
[  155.718574][ T5499] loop3: detected capacity change from 0 to 4096
[  155.750288][ T5498] loop4: detected capacity change from 0 to 4096
[  155.772636][ T5503] loop1: detected capacity change from 0 to 4096
[  155.784647][ T5499] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  155.803672][ T3571] radio-raremono 1-1:0.0: V4L2 device registered as radio32
[  155.817537][ T5499] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  155.837890][ T5498] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  155.868770][ T5503] ntfs: volume version 3.1.
[  155.886178][ T5498] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  156.665702][ T1291] usb 1-1: USB disconnect, device number 11
[  156.676496][ T1291] radio-raremono 1-1:0.0: Thanko's Raremono disconnected
[  156.756113][ T3945] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[  156.799381][ T3539] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  156.821116][ T4999] ntfs3: loop4: ntfs3_write_inode r=5 failed, -22.
[  156.856406][ T3524] ntfs3: loop4: ntfs_evict_inode r=5 failed, -22.
[  157.279140][ T3568] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  157.367892][ T5535] loop0: detected capacity change from 0 to 128
[  158.517232][ T3568] usb 2-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.678171][ T3568] usb 2-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.988729][ T3568] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  159.072414][ T3568] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.082761][ T5539] loop2: detected capacity change from 0 to 4096
[  159.174464][ T5541] loop3: detected capacity change from 0 to 4096
[  159.196487][ T5539] __ntfs_warning: 50 callbacks suppressed
[  159.196503][ T5539] ntfs: (device loop2): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  159.207324][ T5548] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[  159.244534][ T5544] loop0: detected capacity change from 0 to 4096
[  159.247460][ T5539] ntfs: (device loop2): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  159.266163][ T5539] ntfs: (device loop2): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  159.275857][ T5539] ntfs: (device loop2): read_ntfs_boot_sector(): Hot-fix: Recovery of primary boot sector failed: Read-only mount.
[  159.277150][ T5551] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer.
[  159.299299][ T5539] ntfs: (device loop2): read_ntfs_boot_sector(): Using backup boot sector.
[  159.319025][ T5544] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  159.319356][ T5541] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  159.389849][ T5539] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  159.405549][ T5541] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  159.412867][ T5544] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  159.416314][ T5539] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x0 because its location on disk could not be determined even after retrying (error code -5).
[  159.448274][ T5539] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  159.510374][ T5539] ntfs: (device loop2): ntfs_read_block(): Failed to read from inode 0xa, attribute type 0x80, vcn 0x0, offset 0x200 because its location on disk could not be determined even after retrying (error code -5).
[  159.532617][ T5539] ntfs: (device loop2): ntfs_mapping_pairs_decompress(): Corrupt attribute.
[  159.545905][ T5539] ntfs: volume version 3.1.
[  159.575240][ T3945] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22.
[  159.659156][ T4976] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  159.661271][ T3568] kye 0003:0458:501A.0017: unknown main item tag 0x0
[  159.679581][ T4512] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[  159.681039][ T3568] kye 0003:0458:501A.0017: unknown main item tag 0x0
[  159.694733][ T3568] kye 0003:0458:501A.0017: item fetching failed at offset 2/11
[  159.703206][ T3568] kye 0003:0458:501A.0017: parse failed
[  159.713828][ T3539] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  159.724041][ T3568] kye: probe of 0003:0458:501A.0017 failed with error -22
[  160.002319][ T5512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  160.015087][    T7] usb 2-1: USB disconnect, device number 7
[  160.199178][ T3568] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  160.221489][ T5561] loop3: detected capacity change from 0 to 32768
[  160.312174][ T5561] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5561)
[  160.368072][ T5561] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  160.377379][ T5561] BTRFS info (device loop3): using free space tree
[  160.384539][ T5561] BTRFS info (device loop3): has skinny extents
[  160.479355][ T3568] usb 3-1: Using ep0 maxpacket: 32
[  160.500966][ T5561] BTRFS info (device loop3): enabling ssd optimizations
[  161.503634][ T3568] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3
[  161.533329][ T3568] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.613100][ T3568] usb 3-1: Product: syz
[  161.635593][ T3568] usb 3-1: Manufacturer: syz
[  161.646990][ T3568] usb 3-1: SerialNumber: syz
[  162.057173][ T3568] usb 3-1: config 0 descriptor??
[  162.358437][ T3568] radio-si470x 3-1:0.0: could not find interrupt in endpoint
[  162.403917][ T3568] radio-si470x: probe of 3-1:0.0 failed with error -5
[  162.404440][ T5600] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer.
[  162.582136][ T3568] radio-raremono 3-1:0.0: Thanko's Raremono connected: (10C4:818A)
[  162.666355][ T5611] loop0: detected capacity change from 0 to 4096
[  162.767944][ T5623] netlink: 2036 bytes leftover after parsing attributes in process `syz-executor.1'.
[  162.780500][ T5623] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  162.781198][ T5611] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  162.801744][ T3568] radio-raremono 3-1:0.0: V4L2 device registered as radio32
[  162.881982][ T5608] chnl_net:caif_netlink_parms(): no params data found
[  162.892497][ T5611] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  162.964151][ T5629] loop3: detected capacity change from 0 to 4096
[  163.027253][ T5622] usb 3-1: USB disconnect, device number 10
[  163.034103][ T5622] radio-raremono 3-1:0.0: Thanko's Raremono disconnected
[  163.047330][ T3615] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22.
[  163.059949][ T5629] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  163.075786][ T4976] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  163.121546][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.128812][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.129745][ T5629] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  163.176161][ T5608] device bridge_slave_0 entered promiscuous mode
[  163.196503][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.207102][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.215829][ T5608] device bridge_slave_1 entered promiscuous mode
[  163.305186][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  163.312315][ T3629] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[  163.320955][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  163.328053][ T3539] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  163.390477][ T5608] team0: Port device team_slave_0 added
[  163.425624][ T5608] team0: Port device team_slave_1 added
[  163.500055][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[  163.507269][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.533518][    C1] vkms_vblank_simulate: vblank timer overrun
[  163.544317][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.609476][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.616476][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.644266][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.682057][ T5608] device hsr_slave_0 entered promiscuous mode
[  163.697765][ T5608] device hsr_slave_1 entered promiscuous mode
[  163.708377][ T5608] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.720595][ T5608] Cannot create hsr debugfs directory
[  163.779142][ T5621] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  163.812454][ T5608] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.896927][ T5608] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  163.967332][ T5608] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.029877][ T5608] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.125186][ T5608] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  164.134161][ T5608] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  164.144668][ T5608] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  164.149251][ T5621] usb 1-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.162841][ T5621] usb 1-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.167414][ T5608] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  164.173146][ T5621] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  164.189283][ T5621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.260817][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[  164.276123][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  164.284565][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  164.303474][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[  164.328597][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  164.338548][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  164.347832][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.355184][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  164.382590][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  164.393097][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  164.411326][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  164.426536][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.433740][ T4709] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.449962][ T4709] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  164.520171][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  165.005481][ T5621] kye 0003:0458:501A.0018: unknown main item tag 0x0
[  165.111560][ T5621] kye 0003:0458:501A.0018: unknown main item tag 0x0
[  165.259093][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  165.270774][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  165.304416][ T5621] kye 0003:0458:501A.0018: item fetching failed at offset 2/11
[  165.353915][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  165.363620][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  165.372118][ T5621] kye 0003:0458:501A.0018: parse failed
[  165.372212][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  165.388892][ T5640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  165.391071][ T5608] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  165.409455][ T4709] Bluetooth: hci0: command 0x0409 tx timeout
[  165.427510][ T5608] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  165.433838][ T5621] kye: probe of 0003:0458:501A.0018 failed with error -22
[  165.435104][ T4709] Bluetooth: hci3: command 0x0406 tx timeout
[  165.452750][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  165.465059][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  165.495255][ T5621] usb 1-1: USB disconnect, device number 12
[  165.637734][ T5669] sctp: [Deprecated]: syz-executor.3 (pid 5669) Use of struct sctp_assoc_value in delayed_ack socket option.
[  165.637734][ T5669] Use struct sctp_sack_info instead
[  165.700167][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.717382][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  165.735363][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  165.741313][ T5669] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  165.756316][ T5669] PKCS7: Only support pkcs7_signedData type
[  165.862379][ T5621] kernel write not supported for file /vcsu1 (pid: 5621 comm: kworker/0:17)
[  165.893968][   T25] kauditd_printk_skb: 20 callbacks suppressed
[  165.893982][   T25] audit: type=1800 audit(1717785537.994:25): pid=5675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1958 res=0 errno=0
[  166.014950][ T5686] netlink: 2036 bytes leftover after parsing attributes in process `syz-executor.3'.
[  166.045159][ T5686] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  166.075323][ T5657] loop1: detected capacity change from 0 to 32768
[  166.148330][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  166.158119][ T1065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  166.186297][ T5608] device veth0_vlan entered promiscuous mode
[  166.195374][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  166.203357][ T5657] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5657)
[  166.221312][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  166.234732][ T5608] device veth1_vlan entered promiscuous mode
[  166.255450][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.266289][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  166.280078][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  166.299247][ T5657] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  166.308293][ T5657] BTRFS info (device loop1): using free space tree
[  166.316045][ T5657] BTRFS info (device loop1): has skinny extents
[  166.323809][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  166.332846][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  166.339194][ T3569] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  166.351929][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  166.363527][ T5608] device veth0_macvtap entered promiscuous mode
[  166.377687][ T5608] device veth1_macvtap entered promiscuous mode
[  166.414028][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.431947][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.447540][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.463096][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.481050][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.491730][ T5657] BTRFS info (device loop1): enabling ssd optimizations
[  166.502817][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.515110][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.526239][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.536228][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.546915][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.570581][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[  166.589322][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  166.597482][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  166.619296][ T3569] usb 1-1: Using ep0 maxpacket: 32
[  166.635744][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  166.652944][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  166.690169][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.779147][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.789646][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.803819][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.816027][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.864721][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.894883][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  166.928048][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.954602][ T5608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.006750][ T5608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.034406][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.069450][ T3569] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=99.d3
[  167.128760][ T3569] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.129504][ T3569] usb 1-1: Product: syz
[  167.129759][ T3569] usb 1-1: Manufacturer: syz
[  167.130270][ T3569] usb 1-1: SerialNumber: syz
[  167.512113][ T4703] Bluetooth: hci0: command 0x041b tx timeout
[  167.720739][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  167.732838][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.800673][ T3569] usb 1-1: config 0 descriptor??
[  167.805399][ T5608] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.859883][ T3569] radio-si470x 1-1:0.0: could not find interrupt in endpoint
[  167.867447][ T3569] radio-si470x: probe of 1-1:0.0 failed with error -5
[  167.880612][ T5608] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.901667][ T5608] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.923079][ T5608] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.940035][ T5732] sctp: [Deprecated]: syz-executor.3 (pid 5732) Use of struct sctp_assoc_value in delayed_ack socket option.
[  167.940035][ T5732] Use struct sctp_sack_info instead
[  167.976605][ T5728] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[  167.987938][ T5732] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  168.041230][ T5734] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3702941173 (3702941173 ns) > initial count (2209245800 ns). Using initial count to start timer.
[  168.050373][ T5732] PKCS7: Only support pkcs7_signedData type
[  168.079202][ T3569] radio-raremono 1-1:0.0: Thanko's Raremono connected: (10C4:818A)
[  168.100540][ T4512] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.121755][ T4512] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.158750][ T4511] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  168.161885][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  168.174072][ T4511] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.207470][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.229621][   T26] kernel write not supported for file /vcsu1 (pid: 26 comm: kworker/1:1)
[  168.300196][ T3569] radio-raremono 1-1:0.0: V4L2 device registered as radio32
[  168.317110][ T5740] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  168.516946][   T26] usb 1-1: USB disconnect, device number 13
[  168.533730][   T26] radio-raremono 1-1:0.0: Thanko's Raremono disconnected
[  168.558929][ T5751] netlink: 2036 bytes leftover after parsing attributes in process `syz-executor.2'.
[  168.587242][ T5751] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  168.779279][ T3569] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  168.785990][ T5746] loop4: detected capacity change from 0 to 32768
[  168.865472][ T5746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5746)
[  168.916564][ T5746] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  168.927858][ T5746] BTRFS info (device loop4): using free space tree
[  168.942303][ T5746] BTRFS info (device loop4): has skinny extents
[  169.003578][ T5746] BTRFS info (device loop4): enabling ssd optimizations
[  169.208301][ T3569] usb 4-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.224121][ T3569] usb 4-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  169.234952][ T3569] usb 4-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  169.251798][ T3569] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.491695][ T5794] sctp: [Deprecated]: syz-executor.2 (pid 5794) Use of struct sctp_assoc_value in delayed_ack socket option.
[  169.491695][ T5794] Use struct sctp_sack_info instead
[  169.513143][ T5793] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  169.521817][ T5793] PKCS7: Only support pkcs7_signedData type
[  169.589856][ T5787] Bluetooth: hci0: command 0x040f tx timeout
[  169.756357][ T5625] kernel write not supported for file /vcsu1 (pid: 5625 comm: kworker/0:19)
[  170.526229][ T3569] kye 0003:0458:501A.0019: unknown main item tag 0x0
[  170.593432][ T5812] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  170.605175][ T3569] kye 0003:0458:501A.0019: unknown main item tag 0x0
[  170.612710][ T3569] kye 0003:0458:501A.0019: item fetching failed at offset 2/11
[  170.624475][ T3569] kye 0003:0458:501A.0019: parse failed
[  170.630632][ T3569] kye: probe of 0003:0458:501A.0019 failed with error -22
[  170.670623][ T3569] usb 4-1: USB disconnect, device number 13
[  170.673499][ T5810] loop0: detected capacity change from 0 to 1024
[  170.897121][ T3629] hfsplus: b-tree write err: -5, ino 4
[  170.909108][ T5833] netlink: 2036 bytes leftover after parsing attributes in process `syz-executor.1'.
[  170.918620][ T5833] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  171.008108][ T3569] kernel write not supported for file /vcsu1 (pid: 3569 comm: kworker/1:5)
[  171.124361][ T5840] sctp: [Deprecated]: syz-executor.0 (pid 5840) Use of struct sctp_assoc_value in delayed_ack socket option.
[  171.124361][ T5840] Use struct sctp_sack_info instead
[  171.231785][ T5840] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  171.243957][ T5840] PKCS7: Only support pkcs7_signedData type
[  171.682290][ T5789] Bluetooth: hci0: command 0x0419 tx timeout
[  171.829925][ T3569] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  172.237463][ T5859] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  172.377830][ T5865] loop0: detected capacity change from 0 to 1024
[  172.439277][ T3569] usb 3-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.458276][ T3569] usb 3-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  172.501901][ T3569] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  172.511612][ T3569] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.528441][ T3945] hfsplus: b-tree write err: -5, ino 4
[  172.577578][ T5824] loop3: detected capacity change from 0 to 32768
[  172.625306][ T5824] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5824)
[  172.672546][ T5824] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  172.682090][ T5824] BTRFS info (device loop3): using free space tree
[  172.689787][ T5622] kernel write not supported for file /vcsu1 (pid: 5622 comm: kworker/0:18)
[  172.710347][ T5824] BTRFS info (device loop3): has skinny extents
[  172.826325][ T5824] BTRFS info (device loop3): enabling ssd optimizations
[  172.851856][ T5884] sctp: [Deprecated]: syz-executor.0 (pid 5884) Use of struct sctp_assoc_value in delayed_ack socket option.
[  172.851856][ T5884] Use struct sctp_sack_info instead
[  172.899384][ T5884] PKCS7: Unknown OID: [4] 5.25.264.112.81.102.117
[  172.914737][ T5884] PKCS7: Only support pkcs7_signedData type
[  173.056535][ T3569] kye 0003:0458:501A.001A: unknown main item tag 0x0
[  173.069409][ T3569] kye 0003:0458:501A.001A: unknown main item tag 0x0
[  173.076129][ T3569] kye 0003:0458:501A.001A: item fetching failed at offset 2/11
[  173.084445][ T3569] kye 0003:0458:501A.001A: parse failed
[  173.090579][ T3569] kye: probe of 0003:0458:501A.001A failed with error -22
[  174.109854][ T5845] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  174.156657][ T5907] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  174.168869][ T5911] netlink: 2036 bytes leftover after parsing attributes in process `syz-executor.3'.
[  174.183576][ T5621] usb 3-1: USB disconnect, device number 11
[  174.207877][ T5911] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  174.385588][ T5920] loop1: detected capacity change from 0 to 1024
[  174.500582][ T3945] hfsplus: b-tree write err: -5, ino 4
[  175.033447][ T5939] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  175.944590][ T5922] loop0: detected capacity change from 0 to 40427
[  176.031118][ T5922] F2FS-fs (loop0): Found nat_bits in checkpoint
[  176.061094][ T5950] loop2: detected capacity change from 0 to 1024
[  176.174941][ T3629] hfsplus: b-tree write err: -5, ino 4
[  176.185354][ T5922] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  176.287039][ T4976] attempt to access beyond end of device
[  176.287039][ T4976] loop0: rw=2049, want=45104, limit=40427
[  176.377488][ T5927] loop1: detected capacity change from 0 to 32768
[  176.480009][ T5927] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5927)
[  176.617006][ T5927] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  176.673266][ T5979] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  176.717286][ T5927] BTRFS info (device loop1): using free space tree
[  176.746866][ T5927] BTRFS info (device loop1): has skinny extents
[  177.736315][ T5927] BTRFS error (device loop1): open_ctree failed
[  177.893063][ T6005] loop2: detected capacity change from 0 to 1024
[  178.045568][ T5000] hfsplus: b-tree write err: -5, ino 4
[  178.359080][ T5625] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  178.695123][ T6041] loop2: detected capacity change from 0 to 1024
[  178.737686][ T5625] usb 1-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.754718][ T5625] usb 1-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  178.788847][ T5625] usb 1-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  178.793291][ T6008] loop1: detected capacity change from 0 to 40427
[  178.807390][ T5625] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.844420][ T3882] hfsplus: b-tree write err: -5, ino 4
[  178.971357][ T6008] F2FS-fs (loop1): Found nat_bits in checkpoint
[  179.235656][ T6008] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  179.382308][ T5159] attempt to access beyond end of device
[  179.382308][ T5159] loop1: rw=2049, want=45104, limit=40427
[  179.391430][ T5625] kye 0003:0458:501A.001B: unknown main item tag 0x0
[  179.433166][ T5625] kye 0003:0458:501A.001B: unknown main item tag 0x0
[  179.461454][ T5625] kye 0003:0458:501A.001B: item fetching failed at offset 2/11
[  179.492449][ T5625] kye 0003:0458:501A.001B: parse failed
[  179.503735][ T5625] kye: probe of 0003:0458:501A.001B failed with error -22
[  179.718129][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  179.745435][ T5614] usb 1-1: USB disconnect, device number 14
[  180.475610][ T6123] loop2: detected capacity change from 0 to 1024
[  180.720166][ T3945] hfsplus: b-tree write err: -5, ino 4
[  180.876115][   T25] audit: type=1107 audit(1717785552.974:26): pid=6130 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  181.466133][ T6112] loop1: detected capacity change from 0 to 40427
[  181.529338][ T5625] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  181.575428][ T6112] F2FS-fs (loop1): Found nat_bits in checkpoint
[  181.698211][ T6112] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  181.806718][ T5159] attempt to access beyond end of device
[  181.806718][ T5159] loop1: rw=2049, want=45104, limit=40427
[  181.909884][ T5625] usb 3-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.941403][ T5625] usb 3-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.968246][ T5625] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  182.010405][ T5625] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.092509][ T6170] loop4: detected capacity change from 0 to 1024
[  182.254209][  T154] hfsplus: b-tree write err: -5, ino 4
[  182.724015][ T5625] kye 0003:0458:501A.001C: unknown main item tag 0x0
[  182.786619][ T5625] kye 0003:0458:501A.001C: unknown main item tag 0x0
[  182.794457][ T5625] kye 0003:0458:501A.001C: item fetching failed at offset 2/11
[  182.808482][ T5625] kye 0003:0458:501A.001C: parse failed
[  182.815377][ T5625] kye: probe of 0003:0458:501A.001C failed with error -22
[  183.184836][ T6147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  183.222850][ T5625] usb 3-1: USB disconnect, device number 12
[  183.405760][   T25] audit: type=1107 audit(1717785555.504:27): pid=6182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  183.534975][ T4511] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.644262][ T4511] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  183.892113][ T4511] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.725986][ T6208] loop2: detected capacity change from 0 to 1024
[  184.746293][ T4511] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.987484][ T3882] hfsplus: b-tree write err: -5, ino 4
[  185.145453][ T6221] loop2: detected capacity change from 0 to 256
[  185.312159][ T6233] loop1: detected capacity change from 0 to 512
[  185.387827][ T6233] EXT4-fs (loop1): error: journal path ./file1 is not a block device
[  185.507339][ T6241] loop2: detected capacity change from 0 to 8
[  185.561840][ T6200] chnl_net:caif_netlink_parms(): no params data found
[  185.629304][ T6233] loop1: detected capacity change from 0 to 1024
[  185.741122][ T6233] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback.
[  185.759661][ T6197] loop0: detected capacity change from 0 to 40427
[  185.900199][ T6233] EXT4-fs error (device loop1): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor.1: corrupted in-inode xattr
[  185.909822][ T5614] Bluetooth: hci0: command 0x0409 tx timeout
[  185.942059][ T6197] F2FS-fs (loop0): Found nat_bits in checkpoint
[  185.977627][ T6233] EXT4-fs (loop1): Remounting filesystem read-only
[  186.019764][ T6233] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 2. Delete some EAs or run e2fsck.
[  186.068192][ T6200] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.078026][ T6259] EXT4-fs error (device loop1): ext4_xattr_ibody_list:748: inode #2: comm syz-executor.1: corrupted in-inode xattr
[  186.079129][ T6200] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.105893][   T25] audit: type=1326 audit(1717785558.204:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6224 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f079c8f2f69 code=0x0
[  186.144655][ T6200] device bridge_slave_0 entered promiscuous mode
[  186.168012][ T6200] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.168060][ T6197] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  186.176347][ T6200] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.199978][ T6200] device bridge_slave_1 entered promiscuous mode
[  186.213108][ T6265] loop3: detected capacity change from 0 to 8
[  186.293423][ T6265] SQUASHFS error: Failed to read block 0x62: -5
[  186.326422][ T6200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.328517][ T4976] attempt to access beyond end of device
[  186.328517][ T4976] loop0: rw=2049, want=45104, limit=40427
[  186.351105][ T6265] squashfs image failed sanity check
[  186.406074][ T6200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  187.019871][ T6200] team0: Port device team_slave_0 added
[  187.026168][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  187.119553][ T6200] team0: Port device team_slave_1 added
[  187.457205][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_0
[  187.467565][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.540543][ T6200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  187.613248][ T6200] batman_adv: batadv0: Adding interface: batadv_slave_1
[  187.653601][ T6200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  187.679692][    C1] vkms_vblank_simulate: vblank timer overrun
[  187.744494][ T6200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  187.904481][ T6298] device vlan0 entered promiscuous mode
[  188.025382][ T3568] Bluetooth: hci0: command 0x041b tx timeout
[  188.768435][ T6299] device vlan0 left promiscuous mode
[  188.911279][ T6200] device hsr_slave_0 entered promiscuous mode
[  188.924392][ T6200] device hsr_slave_1 entered promiscuous mode
[  188.968341][ T6200] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  188.979776][ T6200] Cannot create hsr debugfs directory
[  189.018568][ T4511] device hsr_slave_0 left promiscuous mode
[  189.027828][ T4511] device hsr_slave_1 left promiscuous mode
[  189.039720][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  189.047141][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0
[  189.056839][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.064480][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.074436][ T4511] device bridge_slave_1 left promiscuous mode
[  189.082819][ T3537] Bluetooth: Unexpected continuation frame (len 18)
[  189.083021][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state
[  189.123159][ T4511] device bridge_slave_0 left promiscuous mode
[  189.131320][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state
[  189.153701][ T4511] device veth1_macvtap left promiscuous mode
[  189.159924][ T4511] device veth0_macvtap left promiscuous mode
[  189.166070][ T4511] device veth1_vlan left promiscuous mode
[  189.175298][ T4511] device veth0_vlan left promiscuous mode
[  189.262487][ T6318] loop2: detected capacity change from 0 to 512
[  189.304856][ T6318] EXT4-fs (loop2): error: journal path ./file1 is not a block device
[  189.487090][ T6318] loop2: detected capacity change from 0 to 1024
[  189.578469][ T6318] EXT4-fs (loop2): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback.
[  189.614530][ T6324] loop1: detected capacity change from 0 to 8
[  189.721453][ T6324] SQUASHFS error: Failed to read block 0x62: -5
[  189.727748][ T6324] squashfs image failed sanity check
[  189.739973][ T6327] EXT4-fs error (device loop2): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor.2: corrupted in-inode xattr
[  189.784954][ T6327] EXT4-fs (loop2): Remounting filesystem read-only
[  189.807552][ T4511] team0 (unregistering): Port device team_slave_1 removed
[  189.816152][ T6318] EXT4-fs error (device loop2): ext4_xattr_ibody_list:748: inode #2: comm syz-executor.2: corrupted in-inode xattr
[  189.848339][ T4511] team0 (unregistering): Port device team_slave_0 removed
[  189.868169][   T25] audit: type=1326 audit(1717785561.964:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6317 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f753c1f9f69 code=0x0
[  189.961985][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  189.989400][ T6320] loop3: detected capacity change from 0 to 40427
[  190.007207][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  190.063312][ T6320] F2FS-fs (loop3): Found nat_bits in checkpoint
[  190.150649][ T6320] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  190.233281][ T3539] attempt to access beyond end of device
[  190.233281][ T3539] loop3: rw=2049, want=45104, limit=40427
[  190.238737][ T4511] bond0 (unregistering): Released all slaves
[  190.730998][ T5625] Bluetooth: hci0: command 0x040f tx timeout
[  191.433236][ T3568] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  191.617549][ T3568] Bluetooth: hci4: Injecting HCI hardware error event
[  191.660632][ T3537] Bluetooth: hci4: hardware error 0x00
[  191.999053][ T5614] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  192.024215][ T3536] Bluetooth: hci4: unexpected event for opcode 0x2010
[  192.170638][ T3531] syz-executor.2 (3531) used greatest stack depth: 19256 bytes left
[  192.369987][ T5614] usb 2-1: config 64 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.394881][ T5614] usb 2-1: config 64 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.418477][ T5614] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  192.434326][ T5614] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.505976][ T6353] chnl_net:caif_netlink_parms(): no params data found
[  192.722065][ T6200] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  192.789265][ T5625] Bluetooth: hci0: command 0x0419 tx timeout
[  192.809776][ T6200] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  192.851200][ T6200] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  192.887325][ T6353] bridge0: port 1(bridge_slave_0) entered blocking state
[  192.895193][ T6353] bridge0: port 1(bridge_slave_0) entered disabled state
[  192.929414][ T6353] device bridge_slave_0 entered promiscuous mode
[  192.951617][ T5614] kye 0003:0458:501A.001D: unknown main item tag 0x0
[  192.958343][ T5614] kye 0003:0458:501A.001D: unknown main item tag 0x0
[  192.967574][ T6200] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  192.990149][ T6353] bridge0: port 2(bridge_slave_1) entered blocking state
[  192.996651][ T6387] loop3: detected capacity change from 0 to 512
[  193.001621][ T6353] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.006085][ T5614] kye 0003:0458:501A.001D: item fetching failed at offset 2/11
[  193.027820][ T6353] device bridge_slave_1 entered promiscuous mode
[  193.029599][ T5614] kye 0003:0458:501A.001D: parse failed
[  193.044747][ T5614] kye: probe of 0003:0458:501A.001D failed with error -22
[  193.164351][ T6387] EXT4-fs (loop3): error: journal path ./file1 is not a block device
[  193.170484][ T6353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  193.221364][ T6353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  193.313142][ T6353] team0: Port device team_slave_0 added
[  193.316811][ T6344] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  193.323213][ T6200] 8021q: adding VLAN 0 to HW filter on device bond0
[  193.370296][ T5625] usb 2-1: USB disconnect, device number 8
[  193.442335][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  193.457053][ T6387] loop3: detected capacity change from 0 to 1024
[  193.590695][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  193.600361][ T6353] team0: Port device team_slave_1 added
[  193.608586][ T6200] 8021q: adding VLAN 0 to HW filter on device team0
[  193.629289][ T6387] EXT4-fs (loop3): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,noblock_validity,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000006,data_err=abort,. Quota mode: writeback.
[  193.693775][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  193.736045][ T6387] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2739: inode #2: comm syz-executor.3: corrupted in-inode xattr
[  193.739650][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  193.758384][ T6387] EXT4-fs (loop3): Remounting filesystem read-only
[  193.765904][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.773033][ T5787] bridge0: port 1(bridge_slave_0) entered forwarding state
[  193.780378][ T6387] EXT4-fs error (device loop3): ext4_xattr_ibody_list:748: inode #2: comm syz-executor.3: corrupted in-inode xattr
[  193.795698][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  193.814817][ T5787] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  193.833827][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.840979][ T5787] bridge0: port 2(bridge_slave_1) entered forwarding state
[  193.849321][   T25] audit: type=1326 audit(1717785565.954:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6385 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5350038f69 code=0x0
[  193.860030][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_0
[  193.900605][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  193.930372][ T6353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  193.948273][ T5788] Bluetooth: hci2: command 0x0409 tx timeout
[  193.966360][ T6379] chnl_net:caif_netlink_parms(): no params data found
[  193.985779][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  193.998447][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.013980][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.028718][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.055119][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.072886][ T1377] ieee802154 phy0 wpan0: encryption failed: -22
[  194.079329][ T1377] ieee802154 phy1 wpan1: encryption failed: -22
[  194.090455][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.114270][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.124863][ T6353] batman_adv: batadv0: Adding interface: batadv_slave_1
[  194.209370][ T6353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  194.320131][ T6353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  194.626120][ T6413] loop3: detected capacity change from 0 to 256
[  194.685872][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.700948][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.714501][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.725502][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.735401][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.805852][ T5625] Bluetooth: hci3: command 0x0409 tx timeout
[  194.810004][ T6200] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.949100][ T6421] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  195.018394][ T6421] device vlan2 entered promiscuous mode
[  195.042958][ T6421] device syz_tun entered promiscuous mode
[  195.129268][ T6353] device hsr_slave_0 entered promiscuous mode
[  195.199514][ T6353] device hsr_slave_1 entered promiscuous mode
[  195.218642][ T6353] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  195.249216][ T6353] Cannot create hsr debugfs directory
[  195.666592][ T6450] device vlan0 entered promiscuous mode
[  195.745128][ T6454] device vlan0 left promiscuous mode
[  195.766335][ T6379] bridge0: port 1(bridge_slave_0) entered blocking state
[  195.773965][ T6379] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.784670][ T6379] device bridge_slave_0 entered promiscuous mode
[  195.834331][ T6200] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.864481][ T6379] bridge0: port 2(bridge_slave_1) entered blocking state
[  195.872371][ T6379] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.917480][ T6379] device bridge_slave_1 entered promiscuous mode
[  195.974339][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.985411][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.989438][ T5625] Bluetooth: hci2: command 0x041b tx timeout
[  196.040733][ T6379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.152395][ T6379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.261661][ T6353] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.334188][ T4511] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.381880][ T6379] team0: Port device team_slave_0 added
[  196.426986][ T6353] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.501202][ T6379] team0: Port device team_slave_1 added
[  196.532880][ T4511] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.627687][ T6353] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.681669][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  196.696368][ T5614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  196.777641][ T6353] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.803404][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.828146][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.869219][ T5616] Bluetooth: hci3: command 0x041b tx timeout
[  196.889479][ T6379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.920411][ T4511] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.966294][ T6379] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.971051][ T6516] loop1: detected capacity change from 0 to 512
[  196.982439][ T6379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  197.000276][ T6483] loop3: detected capacity change from 0 to 32768
[  197.018499][ T6379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.053926][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  197.071783][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  197.081342][ T6483] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6483)
[  197.106060][ T6200] device veth0_vlan entered promiscuous mode
[  197.126853][ T6483] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  197.151208][ T4511] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  197.165002][ T6516] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz-executor.1: casefold flag without casefold feature
[  197.208327][ T6483] BTRFS info (device loop3): using free space tree
[  197.216162][ T6483] BTRFS info (device loop3): has skinny extents
[  197.216631][ T6516] EXT4-fs error (device loop1): ext4_xattr_inode_iget:404: inode #2: comm syz-executor.1: missing EA_INODE flag
[  197.250838][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  197.259631][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  197.266561][ T6516] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz-executor.1: error while reading EA inode 2 err=-117
[  197.306974][ T6516] EXT4-fs (loop1): 1 orphan inode deleted
[  197.317013][ T6516] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  197.329558][ T6483] BTRFS info (device loop3): enabling ssd optimizations
[  197.346905][ T6200] device veth1_vlan entered promiscuous mode
[  197.371317][ T6379] device hsr_slave_0 entered promiscuous mode
[  197.397633][ T6379] device hsr_slave_1 entered promiscuous mode
[  197.419446][ T6379] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.427034][ T6379] Cannot create hsr debugfs directory
[  197.503043][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  197.744743][ T6544] loop1: detected capacity change from 0 to 512
[  197.860401][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.874781][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.937747][ T6200] device veth0_macvtap entered promiscuous mode
[  197.946130][ T6544] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  198.002917][ T6200] device veth1_macvtap entered promiscuous mode
[  198.046135][ T6544] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz-executor.1: iget: bad i_size value: -67835469387268086
[  198.069191][ T5614] Bluetooth: hci2: command 0x040f tx timeout
[  198.099764][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.167970][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.198567][ T6544] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[  198.215589][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.229337][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.247681][ T6544] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  198.258320][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.276857][ T6544] ext2 filesystem being mounted at /root/syzkaller-testdir3219871645/syzkaller.jmpKCD/63/file0 supports timestamps until 2038 (0x7fffffff)
[  198.289335][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.302345][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.316927][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.339918][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  198.364684][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.386687][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_0
[  198.412338][ T6556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  198.429931][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  198.438134][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  198.462598][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  198.488574][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.554892][ T6353] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  198.595279][   T25] audit: type=1800 audit(1717785570.694:31): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1936 res=0 errno=0
[  198.631907][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.635823][   T25] audit: type=1800 audit(1717785570.694:32): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1936 res=0 errno=0
[  198.648859][ T6571] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  198.663947][   T25] audit: type=1800 audit(1717785570.694:33): pid=6569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1936 res=0 errno=0
[  198.694124][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.716854][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.737006][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.754241][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.765459][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.775740][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.786538][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.796728][ T6200] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.813446][ T6200] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.834200][ T6200] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.845189][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  198.960855][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  199.516174][ T5614] Bluetooth: hci3: command 0x040f tx timeout
[  199.531476][ T5616] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  199.542384][ T5616] Bluetooth: hci1: Injecting HCI hardware error event
[  199.551820][ T3536] Bluetooth: hci1: hardware error 0x00
[  199.554949][ T6353] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  199.649997][ T3539] syz-executor.3 (3539) used greatest stack depth: 18208 bytes left
[  199.700029][ T6353] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  199.719348][ T6200] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  199.750285][ T6200] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  199.769012][ T6200] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  199.789112][ T6200] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  199.813943][ T6353] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  200.149118][ T5617] Bluetooth: hci2: command 0x0419 tx timeout
[  200.180875][ T1212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.204032][ T1212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.240419][ T6353] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.257432][ T5612] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  200.301079][ T1212] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  200.314810][ T1212] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  200.367106][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  200.385134][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  200.395937][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  200.407652][ T6353] 8021q: adding VLAN 0 to HW filter on device team0
[  200.430396][ T6379] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  200.499218][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  200.507935][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  200.535926][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.543252][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  200.558763][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  200.587046][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  200.618910][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.626090][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  200.640159][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  200.662842][ T6379] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  200.717725][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  200.730117][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  200.761111][ T6379] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  200.797183][ T6379] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  200.834869][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  200.864584][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  200.881102][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  200.900012][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  200.908588][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  200.939793][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  201.009834][ T6353] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  201.076322][ T6353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  201.097031][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  201.105251][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  201.119788][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  201.135316][ T6616] loop4: detected capacity change from 0 to 1024
[  201.167340][ T6608] loop1: detected capacity change from 0 to 32768
[  201.219058][ T6608] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6608)
[  201.243869][ T4511] device hsr_slave_0 left promiscuous mode
[  201.250331][ T6616] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  201.281145][ T6608] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  201.305429][ T6608] BTRFS info (device loop1): using free space tree
[  201.312647][ T4511] device hsr_slave_1 left promiscuous mode
[  201.320921][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  201.328453][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_0
[  201.331206][ T6616] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor.4: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=65024, size=1024 fake=0
[  201.349077][ T6608] BTRFS info (device loop1): has skinny extents
[  201.364635][ T4511] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  201.373426][ T4511] batman_adv: batadv0: Removing interface: batadv_slave_1
[  201.383037][ T4511] device bridge_slave_1 left promiscuous mode
[  201.389993][ T4511] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.411517][ T4511] device bridge_slave_0 left promiscuous mode
[  201.417846][ T4511] bridge0: port 1(bridge_slave_0) entered disabled state
[  201.492098][ T4511] device veth1_macvtap left promiscuous mode
[  201.498660][ T4511] device veth0_macvtap left promiscuous mode
[  201.515031][ T4511] device veth1_vlan left promiscuous mode
[  201.525669][ T4511] device veth0_vlan left promiscuous mode
[  201.567643][ T6608] BTRFS info (device loop1): enabling ssd optimizations
[  201.589459][ T5616] Bluetooth: hci3: command 0x0419 tx timeout
[  201.866357][ T6200] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir2650964792/syzkaller.v52RSI/4/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=65024, size=1024 fake=0
[  201.897249][ T6200] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor.4: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=65024, size=1024 fake=0
[  201.933855][ T6200] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir2650964792/syzkaller.v52RSI/4/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=65024, size=1024 fake=0
[  201.962585][ T6200] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor.4: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=65024, size=1024 fake=0
[  201.985151][ T6200] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir2650964792/syzkaller.v52RSI/4/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=65024, size=1024 fake=0
[  202.011103][ T5616] Bluetooth: hci4: command 0x0409 tx timeout
[  202.029362][ T6200] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor.4: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=65024, size=1024 fake=0
[  202.087767][ T6200] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir2650964792/syzkaller.v52RSI/4/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=65024, size=1024 fake=0
[  202.125533][ T6200] EXT4-fs error (device loop4): ext4_empty_dir:3131: inode #11: block 34: comm syz-executor.4: bad entry in directory: directory entry overrun - offset=2048, inode=0, rec_len=65024, size=1024 fake=0
[  202.150348][ T6200] EXT4-fs error (device loop4): ext4_readdir:260: inode #11: block 34: comm syz-executor.4: path /root/syzkaller-testdir2650964792/syzkaller.v52RSI/4/file1/lost+found: bad entry in directory: directory entry overrun - offset=0, inode=0, rec_len=65024, size=1024 fake=0
[  202.291859][ T4511] team0 (unregistering): Port device team_slave_1 removed
[  202.316915][ T4511] team0 (unregistering): Port device team_slave_0 removed
[  202.333396][ T4511] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.354123][ T4511] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.457843][ T4511] bond0 (unregistering): Released all slaves
[  202.584143][ T6584] chnl_net:caif_netlink_parms(): no params data found
[  202.727992][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  202.749282][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  202.764453][ T6353] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.793553][ T6379] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.828853][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.837869][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.850874][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.857953][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.899690][ T6584] device bridge_slave_0 entered promiscuous mode
[  202.917856][ T6379] 8021q: adding VLAN 0 to HW filter on device team0
[  202.933886][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.974710][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state
[  203.035445][ T6584] device bridge_slave_1 entered promiscuous mode
[  203.080271][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  203.089500][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  203.159887][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  203.204902][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.230674][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.245983][ T5783] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.253093][ T5783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.312306][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  203.359297][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.368537][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.378337][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.387060][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.394251][ T5788] bridge0: port 2(bridge_slave_1) entered forwarding state
[  203.402765][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  203.415931][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  203.433674][ T6353] device veth0_vlan entered promiscuous mode
[  203.495215][ T6682] netlink: 1086 bytes leftover after parsing attributes in process `syz-executor.1'.
[  203.529183][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  203.558453][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  203.582793][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  203.589589][ T5616] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  203.599714][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  203.608181][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  203.640274][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  203.659413][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.675329][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  203.695725][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  203.721546][ T6584] team0: Port device team_slave_0 added
[  203.754352][ T6584] team0: Port device team_slave_1 added
[  203.849068][   T25] audit: type=1800 audit(1717785575.944:34): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1942 res=0 errno=0
[  203.878217][   T25] audit: type=1800 audit(1717785575.954:35): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1942 res=0 errno=0
[  203.911918][   T25] audit: type=1800 audit(1717785575.974:36): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1942 res=0 errno=0
[  203.950646][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0
[  203.957691][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.024901][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  204.060232][ T6379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  204.079714][ T6379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  204.079962][ T1291] Bluetooth: hci4: command 0x041b tx timeout
[  204.114495][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.139312][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.148118][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.197897][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.214497][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.252388][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1
[  204.270262][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  204.327377][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  204.354644][ T6353] device veth1_vlan entered promiscuous mode
[  204.485413][ T6584] device hsr_slave_0 entered promiscuous mode
[  204.510262][ T6584] device hsr_slave_1 entered promiscuous mode
[  204.522093][ T6353] device veth0_macvtap entered promiscuous mode
[  204.539201][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  204.549792][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  204.594135][ T6353] device veth1_macvtap entered promiscuous mode
[  204.610525][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  204.707786][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.726654][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.742562][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.754342][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.764509][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.775451][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.785472][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.796329][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.807941][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.818560][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.831311][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_0
[  204.863003][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  204.873340][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  204.882302][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  204.890314][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  204.900278][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.912978][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.923946][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.934724][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.944772][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.962183][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.978180][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  204.992220][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.008357][ T6353] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  205.028999][ T6353] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.040556][ T6353] batman_adv: batadv0: Interface activated: batadv_slave_1
[  205.050667][ T6379] 8021q: adding VLAN 0 to HW filter on device batadv0
[  205.100042][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  205.108704][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  205.131819][ T6353] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  205.160959][ T6353] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  205.181662][ T6353] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  205.196701][ T6353] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  205.347371][ T3538] Bluetooth: hci1: unexpected event for opcode 0x2010
[  205.370817][ T6584] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.389367][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  205.398754][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  205.429670][ T5621] Bluetooth: hci0: command 0x0409 tx timeout
[  205.445741][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  205.456018][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  205.468377][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  205.477765][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  205.507301][ T6584] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.538567][ T6379] device veth0_vlan entered promiscuous mode
[  205.564217][ T6677] chnl_net:caif_netlink_parms(): no params data found
[  205.612593][ T6584] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.654581][ T6379] device veth1_vlan entered promiscuous mode
[  205.690705][ T3883] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.698895][ T3883] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.742721][ T6584] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.787803][ T6379] device veth0_macvtap entered promiscuous mode
[  205.821818][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  205.830639][ T3883] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  205.845173][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  205.854685][ T3883] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  205.890070][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  205.898662][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  205.950373][ T6379] device veth1_macvtap entered promiscuous mode
[  205.960679][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  205.968838][ T5788] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  206.044441][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.079206][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.087831][ T6677] device bridge_slave_0 entered promiscuous mode
[  206.111136][ T4512] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.149494][ T5625] Bluetooth: hci4: command 0x040f tx timeout
[  206.162592][ T3538] Bluetooth: Unexpected continuation frame (len 18)
[  206.178820][ T6741] capability: warning: `syz-executor.1' uses deprecated v2 capabilities in a way that may be insecure
[  206.198438][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.209309][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.219876][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.235980][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.246320][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.250320][ T6744] loop0: detected capacity change from 0 to 256
[  206.257345][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.274506][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.287246][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.297894][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.309562][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.326221][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.337432][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.350176][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.357638][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.366497][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.377894][ T6677] device bridge_slave_1 entered promiscuous mode
[  206.428569][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  206.439159][ T6744] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  206.461426][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  206.473734][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.486691][ T6744] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  206.496997][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.507568][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.518693][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.808168][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.992437][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.116508][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.217563][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.251981][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.262590][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.272751][ T6379] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  207.283364][ T6379] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  207.299681][ T6744] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[  207.299681][ T6744] 
[  207.313266][ T6379] batman_adv: batadv0: Interface activated: batadv_slave_1
[  207.327628][ T6744] exFAT-fs (loop0): Filesystem has been set read-only
[  207.366921][ T6744] exFAT-fs (loop0): error, failed to bmap (inode : ffff8880707d8160 iblock : 0, err : -5)
[  207.381271][ T4512] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.406901][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  207.424036][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  207.436948][ T6379] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  207.460345][ T6379] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  207.473554][ T6379] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  207.486740][ T6379] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.510266][ T6677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.522705][ T5620] Bluetooth: hci0: command 0x041b tx timeout
[  207.545036][ T4512] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.610781][ T6677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.655753][ T6764] loop1: detected capacity change from 0 to 1024
[  207.700440][ T4512] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.718906][ T6764] EXT4-fs (loop1): Ignoring removed orlov option
[  207.763300][ T6677] team0: Port device team_slave_0 added
[  207.804867][ T6677] team0: Port device team_slave_1 added
[  207.845356][ T6764] EXT4-fs (loop1): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000001000,data_err=abort,barrier=0x0000000000000002,jqfmt=vfsv1,block_validity,max_dir_size_kb=0x00000000000007b1,orlov,bsdgroups,max_batch_time=0x0000000000000400,user_xattr,quota,,errors=continue. Quota mode: writeback.
[  207.994149][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.017074][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.047868][ T3538] Bluetooth: Unexpected continuation frame (len 18)
[  208.049528][ T6677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.102637][ T6677] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.110359][ T6677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.155682][ T6677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.189639][ T3882] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.197873][ T3882] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.229378][ T5616] Bluetooth: hci4: command 0x0419 tx timeout
[  208.390119][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  208.398685][ T6584] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  208.423296][ T6677] device hsr_slave_0 entered promiscuous mode
[  208.445504][ T6677] device hsr_slave_1 entered promiscuous mode
[  208.478192][  T150] block nbd0: Attempted send on invalid socket
[  208.486688][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  208.499976][ T6677] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.507556][ T6677] Cannot create hsr debugfs directory
[  208.623743][ T6584] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  208.634502][ T5000] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  208.646168][ T5000] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.656136][ T6584] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  208.822406][ T5159] device syz_tun left promiscuous mode
[  208.872738][ T4703] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  208.889380][ T6584] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  209.450763][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.589626][ T5616] Bluetooth: hci0: command 0x040f tx timeout
[  209.630592][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.643964][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.650223][ T6814] loop0: detected capacity change from 0 to 256
[  209.687443][ T6584] 8021q: adding VLAN 0 to HW filter on device team0
[  209.702245][ T6814] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  209.718400][ T6816] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'.
[  209.745964][ T6814] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  209.799772][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.816559][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.852139][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.859278][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.899917][ T6814] exFAT-fs (loop0): error, exfat_alloc_cluster: invalid used clusters(t:15,u:4294930442)
[  209.899917][ T6814] 
[  209.906957][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  209.931014][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  209.948800][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.955925][ T5784] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.956140][ T6814] exFAT-fs (loop0): Filesystem has been set read-only
[  209.976113][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  209.984323][ T6814] exFAT-fs (loop0): error, failed to bmap (inode : ffff888061400e60 iblock : 0, err : -5)
[  210.037347][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  210.060413][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  210.094602][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  210.171755][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  210.207420][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  210.223923][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  210.240118][ T1193] block nbd0: Attempted send on invalid socket
[  210.246347][ T1193] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  210.255840][ T6584] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  210.294446][ T6584] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.362930][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  210.379254][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  210.403640][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  210.413027][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  210.424358][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  210.503476][ T5783] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  210.588037][ T6677] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  210.635200][ T6677] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  210.701699][ T6677] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  210.718444][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  210.727988][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  210.776287][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.799278][ T6677] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  211.089512][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  211.253203][ T6871] loop0: detected capacity change from 0 to 1024
[  211.754423][ T5616] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  211.766339][ T5625] Bluetooth: hci0: command 0x0419 tx timeout
[  211.777675][ T6871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  211.788042][ T6826] chnl_net:caif_netlink_parms(): no params data found
[  212.037590][ T6879] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  212.046421][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  212.076561][ T5625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  212.090123][ T6584] device veth0_vlan entered promiscuous mode
[  212.157852][ T5621] Bluetooth: hci1: command 0x0409 tx timeout
[  212.172394][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  212.180580][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  212.193715][ T6584] device veth1_vlan entered promiscuous mode
[  212.238871][ T6887] loop2: detected capacity change from 0 to 2048
[  212.291454][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.298707][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.308166][ T6826] device bridge_slave_0 entered promiscuous mode
[  212.419104][ T6894] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  212.450564][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.457638][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.542002][ T6826] device bridge_slave_1 entered promiscuous mode
[  212.572887][ T6677] 8021q: adding VLAN 0 to HW filter on device bond0
[  212.676916][ T6584] device veth0_macvtap entered promiscuous mode
[  212.733906][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  212.759940][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  212.770018][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  212.789845][ T3570] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  212.802437][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.844087][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  212.877491][ T6677] 8021q: adding VLAN 0 to HW filter on device team0
[  212.932667][ T4512] device hsr_slave_0 left promiscuous mode
[  212.948249][ T4512] device hsr_slave_1 left promiscuous mode
[  212.972865][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.003307][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.034007][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.073972][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.100560][ T4512] device bridge_slave_1 left promiscuous mode
[  213.106781][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.126033][ T4512] device bridge_slave_0 left promiscuous mode
[  213.132621][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.146099][ T4512] device hsr_slave_0 left promiscuous mode
[  213.161641][ T4512] device hsr_slave_1 left promiscuous mode
[  213.179319][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  213.186781][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_0
[  213.219327][ T4512] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  213.226799][ T4512] batman_adv: batadv0: Removing interface: batadv_slave_1
[  213.243217][ T4512] device bridge_slave_1 left promiscuous mode
[  213.264257][ T6904] loop0: detected capacity change from 0 to 32768
[  213.274081][ T4512] bridge0: port 2(bridge_slave_1) entered disabled state
[  213.294923][ T4512] device bridge_slave_0 left promiscuous mode
[  213.309381][ T4512] bridge0: port 1(bridge_slave_0) entered disabled state
[  213.345554][ T6904] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6904)
[  213.379778][ T4512] device veth1_macvtap left promiscuous mode
[  213.385834][ T4512] device veth0_macvtap left promiscuous mode
[  213.405464][ T6904] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  213.419065][ T4512] device veth1_vlan left promiscuous mode
[  213.424895][ T4512] device veth0_vlan left promiscuous mode
[  213.458190][ T6904] BTRFS info (device loop0): using free space tree
[  213.479416][ T6904] BTRFS info (device loop0): has skinny extents
[  213.487904][ T4512] device veth1_macvtap left promiscuous mode
[  213.501138][ T4512] device veth0_macvtap left promiscuous mode
[  213.507199][ T4512] device veth1_vlan left promiscuous mode
[  213.527681][ T4512] device veth0_vlan left promiscuous mode
[  213.560429][ T6918] loop2: detected capacity change from 0 to 32768
[  213.613371][ T6918] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6918)
[  213.660471][ T6918] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  213.676075][ T6918] BTRFS info (device loop2): using free space tree
[  213.688448][ T6918] BTRFS info (device loop2): has skinny extents
[  213.728437][ T6904] BTRFS info (device loop0): enabling ssd optimizations
[  213.994268][  T406] BTRFS warning (device loop2): checksum verify failed on 1052672 wanted 0x58309832 found 0x04d38776 level 0
[  214.032542][ T6918] BTRFS error (device loop2): failed to read chunk root
[  214.240677][ T5625] Bluetooth: hci1: command 0x041b tx timeout
[  214.380922][ T6918] BTRFS error (device loop2): open_ctree failed
[  215.139622][ T4512] team0 (unregistering): Port device team_slave_1 removed
[  215.150732][ T6982] openvswitch: netlink: Missing key (keys=40, expected=2000)
[  215.202921][ T4512] team0 (unregistering): Port device team_slave_0 removed
[  215.259377][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.278089][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.415354][ T4512] bond0 (unregistering): Released all slaves
[  215.621528][ T6997] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  215.647867][ T6997] CIFS mount error: No usable UNC path provided in device string!
[  215.647867][ T6997] 
[  215.659000][ T6997] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  215.735547][ T4512] team0 (unregistering): Port device team_slave_1 removed
[  215.769591][ T4512] team0 (unregistering): Port device team_slave_0 removed
[  215.784521][ T4512] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.801904][ T4512] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.876395][ T4512] bond0 (unregistering): Released all slaves
[  215.952706][ T6584] device veth1_macvtap entered promiscuous mode
[  215.962433][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  215.973870][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  215.984566][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  215.992957][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  216.031980][ T6826] team0: Port device team_slave_0 added
[  216.043975][ T6826] team0: Port device team_slave_1 added
[  216.060530][ T7001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  216.088624][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.120185][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.141356][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.169091][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.190819][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.218347][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.236292][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.252410][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.270686][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.286751][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.309267][ T5621] Bluetooth: hci1: command 0x040f tx timeout
[  216.309384][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.370441][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  216.392507][ T7019] loop0: detected capacity change from 0 to 256
[  216.399727][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  216.408495][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  216.434278][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  216.442816][ T6974] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  216.464177][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.471391][ T5784] bridge0: port 1(bridge_slave_0) entered forwarding state
[  216.493392][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.505002][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.515402][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.537548][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.554975][ T7019] exFAT-fs (loop0): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  216.567138][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.609009][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.620603][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.633152][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.643598][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  216.655308][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.669840][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.695896][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  216.704338][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  216.714215][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  216.731410][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  216.749470][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  216.767256][ T7025] loop0: detected capacity change from 0 to 1024
[  216.774701][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.781821][ T6545] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.808290][ T6584] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.817903][ T6584] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.826881][ T6584] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.838384][ T6584] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.851509][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  216.858459][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  216.889960][ T6974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.902994][ T7025] EXT4-fs (loop0): Ignoring removed orlov option
[  216.910840][ T6974] usb 3-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  216.929308][ T6974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.929569][ T7025] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[  216.952829][ T6974] usb 3-1: config 0 descriptor??
[  216.967722][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  216.983721][ T5621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  216.999742][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.006685][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.010920][ T6974] usb 3-1: Found UVC 0.00 device <unnamed> (046d:08c1)
[  217.044573][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.072724][ T7025] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  217.136199][ T6974] usb 3-1: No valid video chain found.
[  217.157939][ T7025] EXT4-fs error (device loop0): get_max_inline_xattr_value_size:68: inode #12: comm syz-executor.0: corrupt xattr in inline inode
[  217.219327][ T7025] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #12: comm syz-executor.0: corrupted in-inode xattr
[  217.238291][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  217.253762][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  217.281156][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  217.296884][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  217.298433][ T3627] usb 3-1: USB disconnect, device number 13
[  217.334442][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  217.347156][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  217.356511][ T5784] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  217.375231][ T6353] ==================================================================
[  217.383710][ T6353] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xcd0/0xce0
[  217.391696][ T6353] Read of size 4 at addr ffff88807ce78000 by task syz-executor.0/6353
[  217.399848][ T6353] 
[  217.402180][ T6353] CPU: 1 PID: 6353 Comm: syz-executor.0 Not tainted 5.15.160-syzkaller #0
[  217.410679][ T6353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  217.420759][ T6353] Call Trace:
[  217.424041][ T6353]  <TASK>
[  217.426951][ T6353]  dump_stack_lvl+0x1e3/0x2d0
2024/06/07 18:39:49 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  217.431622][ T6353]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  217.437265][ T6353]  ? _printk+0xd1/0x120
[  217.441435][ T6353]  ? __wake_up_klogd+0xcc/0x100
[  217.446302][ T6353]  ? panic+0x860/0x860
[  217.450375][ T6353]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  217.455845][ T6353]  print_address_description+0x63/0x3b0
[  217.461411][ T6353]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  217.467054][ T6353]  kasan_report+0x16b/0x1c0
[  217.471568][ T6353]  ? ext4_xattr_delete_inode+0xcd0/0xce0
[  217.477215][ T6353]  ext4_xattr_delete_inode+0xcd0/0xce0
[  217.482688][ T6353]  ? ext4_blocks_for_truncate+0x270/0x270
[  217.488416][ T6353]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[  217.494490][ T6353]  ? rcu_read_lock_any_held+0xb3/0x160
[  217.499963][ T6353]  ? ext4_inode_is_fast_symlink+0x262/0x390
[  217.505951][ T6353]  ext4_evict_inode+0xcb7/0x1100
[  217.510894][ T6353]  ? _raw_spin_unlock+0x24/0x40
[  217.515754][ T6353]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  217.521646][ T6353]  ? do_raw_spin_unlock+0x137/0x8b0
[  217.526844][ T6353]  ? _raw_spin_unlock+0x24/0x40
[  217.531694][ T6353]  ? ext4_inode_is_fast_symlink+0x390/0x390
[  217.537599][ T6353]  evict+0x2a4/0x620
[  217.541511][ T6353]  vfs_rmdir+0x33c/0x460
[  217.545762][ T6353]  do_rmdir+0x368/0x670
[  217.549921][ T6353]  ? d_delete_notify+0x150/0x150
[  217.554868][ T6353]  ? strncpy_from_user+0x209/0x370
[  217.559986][ T6353]  ? syscall_enter_from_user_mode+0x2e/0x240
[  217.565970][ T6353]  __x64_sys_unlinkat+0xdc/0xf0
[  217.570822][ T6353]  do_syscall_64+0x3b/0xb0
[  217.575235][ T6353]  ? clear_bhb_loop+0x15/0x70
[  217.579912][ T6353]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  217.585901][ T6353] RIP: 0033:0x7fa251d37747
[  217.590314][ T6353] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  217.609923][ T6353] RSP: 002b:00007ffcaff9c788 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  217.618347][ T6353] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fa251d37747
[  217.626319][ T6353] RDX: 0000000000000200 RSI: 00007ffcaff9d930 RDI: 00000000ffffff9c
[  217.634297][ T6353] RBP: 00007fa251d94636 R08: 0000000000000000 R09: 0000000000000000
[  217.642265][ T6353] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffcaff9d930
[  217.650241][ T6353] R13: 00007fa251d94636 R14: 0000000000034e8b R15: 0000000000000008
[  217.658232][ T6353]  </TASK>
[  217.661252][ T6353] 
[  217.663587][ T6353] Allocated by task 2964:
[  217.667897][ T6353]  ____kasan_kmalloc+0xba/0xf0
[  217.672659][ T6353]  __kmalloc+0x168/0x300
[  217.676901][ T6353]  tomoyo_realpath_from_path+0xd8/0x5e0
[  217.682451][ T6353]  tomoyo_path_perm+0x273/0x6b0
[  217.687295][ T6353]  security_inode_getattr+0xcf/0x120
[  217.692570][ T6353]  vfs_getattr+0x26/0x360
[  217.696894][ T6353]  vfs_statx+0x18f/0x3b0
[  217.701131][ T6353]  __x64_sys_newfstatat+0x12c/0x1b0
[  217.706329][ T6353]  do_syscall_64+0x3b/0xb0
[  217.710738][ T6353]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  217.716622][ T6353] 
[  217.718929][ T6353] Freed by task 2964:
[  217.722888][ T6353]  kasan_set_track+0x4b/0x80
[  217.727476][ T6353]  kasan_set_free_info+0x1f/0x40
[  217.732404][ T6353]  ____kasan_slab_free+0xd8