last executing test programs:

34.178804822s ago: executing program 0 (id=595):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r1, r0, 0x2, 0x0, 0x4000, @void, @value}, 0x10)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
socket$kcm(0x2, 0x2, 0x73)

34.006942487s ago: executing program 0 (id=597):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

33.414936476s ago: executing program 0 (id=601):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000002a80)=""/4094, 0xffe, 0x0, 0x0, 0x0)

24.314560657s ago: executing program 0 (id=601):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000002a80)=""/4094, 0xffe, 0x0, 0x0, 0x0)

14.343414651s ago: executing program 0 (id=601):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000002a80)=""/4094, 0xffe, 0x0, 0x0, 0x0)

4.528894631s ago: executing program 2 (id=798):
r0 = memfd_create(&(0x7f0000000200)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\x91\xfdy\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0`\xaa8\xc7\xc8\x9d\xfdA\b\x10\x92(c\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=w=\xcdI\x83\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7 \x1d\xa1\xce\x8b\xac \xe8\x80\xdc\x02\xd7\x04\x9b\x9aL\x9f([4\x81\xf6\xb6\xdf\x16J\xab\xecC\xe2{\xfd\x8a\xb4\x8e\x9c\xfb\xf6\xe9\xd8]B6{\xf0(\xaeW;)\x9f\x9cR\xae\x12G\xd8\xa4y', 0x0)
r1 = dup(r0)
write$cgroup_pid(r1, &(0x7f0000000000)=0xffffffffffffffff, 0x12)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0xd5267855721e363d, 0x11, r0, 0x0)
sendfile(r0, r1, &(0x7f0000000100), 0x6c03)
futimesat(0xffffffffffffff9c, 0x0, &(0x7f0000000080))

4.18143862s ago: executing program 2 (id=802):
r0 = socket(0x40000000002, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000440)=0x185, 0x4)
r1 = socket(0x40000000002, 0x3, 0x80000000002)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10)
sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e)
recvmmsg(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)

4.136781414s ago: executing program 2 (id=803):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='sched_switch\x00', r0}, 0x10)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x11)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000140))
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x2)

4.039947502s ago: executing program 3 (id=804):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(r0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, <r2=>0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r2}, &(0x7f0000000140), &(0x7f0000000200)=r0}, 0x20)

3.917525272s ago: executing program 3 (id=805):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e5cf01406e0510401c20000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="00000100000024"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000740)=ANY=[@ANYBLOB="20059f0000009db73e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

3.742441927s ago: executing program 4 (id=806):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
writev(r2, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}, {0x0}], 0x2)

3.381682877s ago: executing program 2 (id=808):
r0 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c)
listen(r0, 0x80080400)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10)
getsockopt$inet_int(r1, 0x10d, 0xd2, &(0x7f0000000180), &(0x7f0000000080)=0x4)

3.381542167s ago: executing program 0 (id=601):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
sendto$inet6(r0, &(0x7f0000000e80)="0d0ad7c36d6617110e434332d6ac582208222cfb7c37ce1148f448455bc37f5f70c92774dcb201629979039d7c8943b207e5bdf9ab8eed9ace110469c51f4f211dd9fad815eb5b273ac04e1edc679bcdf0a0d24482de5454be9003cb80714a95e136bb704ee58e707d1e69b3c3a1c2c37f9c0402e14abdeb32086a49aff25e5c0f0131d59b4783316b9fa2c71c51ce76942d5f519145c9e3bf0d4182b4a62970b2ce81d35a7afc8384b387b8e21f2051d90d92323a710cabe5275d335b64453e759251a140de480541d8dd7662a14296a59eba99b95bfdf5b22992c323865b471d13ad79867e2692fd4eece299a81e2b33336b6801f51c2ae8d73e4df90c9bd70cd535b72cbdf67754acdc44b3780450308d9c5527c3314eb7b2cc38b61e96403a30a8ba0c8a357aa04d3c62bc51bcf55cf214f44a909b29c30c18c3a43c86472612086664a80f2aa8490e58352732acb96eb46deab42895d1957a6029ad86e7a5ced6bde89c158aaee721954beeebe5973059007f7dd5459029af6d3f1d73d35f07d19b7cedfc80d1d7ef37f8b113f564afd0f093202929fef43e788619ca522c7f679dd2f27949d879b4dab46581a0e054b4ed1db37e43f528748b56ec5a54b7af198d4ae551046f7814fe3a5cbc1cc7cb6655fc198939b049f3c02443148c588e34d6ebef81096b4e48f468016d2bde0828664c0874d71e2d88b3bc04079d4a504255a83c3f07a4f1c3e5a4c66f55f36e51e344392487c8299d8d1bfb568780c0d57df48990cb5d6b35c3f7445f80312186d8598faf61072d4eefc961fb5a7e72b971c8f94a8346effd27362cee8d72a98b55e317de280d2d63ee83ca7140b7913122d402c536d914c8510c81d08f0ad1c952f5b7ad5e7ef72d7c58cb4d5bafbea535b381df6ebe94c62cf782cf7ab81c017c296a88ca91d641b45748d230cf5e87e5dbee4764ea4d131ae022e6bbf3ffc3ea7b264737d9db44354bfffa63d79bc403d3ac23fb615edc382d18b0daf1bbb2fbd708d1830ddac1c3f098b8cb1ef9a0019d804bf5d953110f12f3b9a8b9b7e0c61cb5d34116add1fc9a92721ffa5fdc83e1488cf88aa6e56ad2dd55e0aadd827cc7b4e7242f01241f49e905e5e7451092c28c3f6560a6a0002e5d91fc253a5a8fd8f27e42f4f02f5849528b7d93df9b0c568022acaff410e797e88d2f8eeadbba66e423335b843df734d203fa62a861b712da8f33d5ea721767871aa2cd53e659e505507de9a54d7e6fa3c20bbfb28cd6dd2b314dabbb59e9ce15c0a94ec3b3efc54eaaa27bd7576a687dcaf58dc182662539943014a02e76dc89f48c9f83cc7199038418f965ad3dc866098b89cabcac8691b0f51ffb71902337e49293309c4480a8f1b32411cc1b55a0ec0fe2c2572fe9d488a25bfc12ba74048e1d7beee93321c7aa49ea17cb9728dc46e5272154b3b995feacbacb8885621b335274af4df9365f8c8121ff323b572d320c8fc46acd6218b9579d43005e7b0506ccb14d9a0dac4cc6efaf5366c44342eaea8b5a11457f5afbea913ce4975ab67e6a85bc46e714ca5741da38a7cceb9e85d77fd03f83f7a5ecc7241e69e2bda327f769b48ba5f13662585c72778d12bd0e9a62a3d0dbe376d1aee81e6845c2cf23f42c458ae5668c8d387bf9ab224bc9703f1c08347be810d2f19278fe8d97560b3c9f1816667d0461a25e778eb1404dcaac1ed0a6a0745f3a5d2dc1b6babf98f5135d531cb26334ef2fec4c78c95b7193935139664fc65f17b047eb3dc39e251ba52ce33f8099719f1a789db1690347355e7b02d4c522692b9597fd31abb90f973ae4eb0bd0d900cdd887ff01d4845d7f0aee39b220a65a5aeee0fd386054070723c841c042d5339cc6325f07f0f733d124c6524f388ef7419f42c06278b8fceaa3a16b202dfb539b129762397e29cdd679ca6240272fa0c3e2e8c0a27aaa407f30b4024d0638dfca1bc9483db3ccc2880f", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38)
sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvfrom(r0, &(0x7f0000002a80)=""/4094, 0xffe, 0x0, 0x0, 0x0)

2.840918832s ago: executing program 1 (id=809):
prctl$PR_SET_SECCOMP(0x16, 0x0, &(0x7f00000001c0)={0x1, &(0x7f00000000c0)=[{0x200000000006}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_aout(r0, &(0x7f0000000000)=ANY=[], 0xc1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000005, 0x13, r0, 0x0)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r1, 0x10d, 0x89, 0x0, &(0x7f00000000c0))

2.839827953s ago: executing program 2 (id=810):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x94b}], 0x1}, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d2200000000000001090224000100000000090400000103000000092100000001220500090581"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000600), 0x6828, 0x0)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000100)=""/224)

2.838513353s ago: executing program 4 (id=811):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x0)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000000)={0x0, 0x8, &(0x7f00000010c0)="f39561fc17b7f981"})
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x6a, 0x2}, @cond})
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSMASK(r0, 0x40104593, &(0x7f0000000180)={0x1, 0x0, 0x0})
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2250)

2.768684199s ago: executing program 4 (id=812):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x1000000, &(0x7f0000000280)={[{@noquota}, {@nombcache}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@nombcache}, {@noinit_itable}, {@nomblk_io_submit}, {@init_itable_val={'init_itable', 0x3d, 0x9}}, {@usrquota}, {@errors_continue}]}, 0xfe, 0x55d, &(0x7f0000000f00)="$eJzs3d9rW1UcAPDvTX/sp66DMdQHKezByVy6tv6Y4MN8FB0O9H2G9q6Mpsto0rHWgduDe9mLDEHEgfgH+O7j8B/wrxjoYMgo+uBL5aY3XbYmbZZlSzSfD9ztnPuj55yce07OyUm4AQytyeyfQsSrEfFNEnGo6dho5AcnN89bf3htLtuS2Nj47M8kknxf4/wk//9AHnklIn79OuJEYXu61dW1xVK5nC7n8ana0uWp6urayYtLpYV0Ib00Mzt7+p3Zmfffe7dnZX3z3N/ff3r3o9O3jq1/9/P9w7eTOBMH82PN5XgG15sjkzGZvyZjceaJE6d7kNggSfqdAboykrfzscj6gEMxkrd64P/vq4jYAIZUov3DkGqMAxpz+x7Ng/8zHny4OQHaXv7Rzc9GYm99brR/PXlsZpTNdyd6kH6Wxi9/3LmdbdG7zyEAdnX9RkScGh3d3v8lef/XvVMdnPNkGvo/eHHuZuOft1qNfwpb459oMf450KLtdmP39l+43+KypFefUmfjvw9ajn+3Fq0mRvLYS/Ux31hy4WI5zfq2lyPieIztyeI7reecXr+30e5Y8/gv27L0G2PBPB/3R/c8fs18qVZ6ljI3e3Aj4rWW499kq/6TFvWfvR7nOkzjaHrn9XbHdi//87XxU8QbLev/0YpWsvP65FT9fphq3BXb/XXz6G/t0u93+bP6379z+SeS5vXa6tOn8ePef9J2x7q9/8eTz+vh8Xzf1VKttjwdMZ58sn3/zKNrG/HG+Vn5jx/buf9rdf/vi4gvOiz/zSM32546CPU//1T1//SBex9/+UO79Dur/7froeP5nk76v04z+CyvHQAAAAAAAAyaQkQcjKRQ3AoXCsXi5vc7jsT+QrlSrZ24UFm5NB/138pOxFihsdJ9qOn7ENP592Eb8Zkn4rMRcTgivh3ZV48X5yrl+X4XHgAAAAAAAAAAAAAAAAAAAAbEgTa//8/8PtLykvEXm0PgufLIbxheu7b/XjzpCRhI3v9heHXV/vf1Ph/Ai+f9H4bUWL8zAPST938YXto/DC/tH4aX9g8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9de7s2WzbWH94bS6Lz19ZXVmsXDk5n1YXi0src8W5yvLl4kKlslBOi3OVpd3+XrlSuTw9EytXp2pptTZVXV07v1RZuVQ7f3GptJCeTz1tCAAAAAAAAAAAAAAAAAAAALarrq4tlsrldFlAoKvA6GBkQ6ApcKsHrbvPHRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANPk3AAD//0unNek=")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './bus'}, 0x9)
r1 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r1, 0x20, 0x8000, 0x10000)

2.74242212s ago: executing program 1 (id=813):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r2}, 0x14)
getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@RTM_NEWMDB={0x38, 0x55, 0x25, 0x0, 0x0, {0x7, r3}, [@MDBA_SET_ENTRY={0x20, 0x1, {r3}}]}, 0x38}, 0x1, 0xf00}, 0x0)

2.674460516s ago: executing program 1 (id=814):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket(0x1, 0x803, 0x0)
vmsplice(r1, &(0x7f0000000a40)=[{&(0x7f0000000240)="ac", 0x1}], 0x1, 0xa)
splice(r0, 0x0, r2, 0x0, 0xfdef, 0x0)

2.541525898s ago: executing program 1 (id=815):
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000040))
r1 = memfd_create(&(0x7f0000002200)='\x00', 0x0)
copy_file_range(r1, 0x0, r0, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x76, 0xd5, 0x78, 0x40, 0xf11, 0x2000, 0x61d7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x87, 0x98, 0x63}}]}}]}}, 0x0)

2.454715785s ago: executing program 4 (id=816):
syz_mount_image$udf(&(0x7f0000000a40), &(0x7f0000000000)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4400, &(0x7f0000000100)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRESHEX, @ANYRES64=0x0], 0x1, 0xa1a, &(0x7f0000001540)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
unlink(&(0x7f00000002c0)='./file1\x00')

1.981378934s ago: executing program 4 (id=817):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c0000000a01000001"], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000bc0)={r2, 0x0, 0x0}, 0x10)

1.470630947s ago: executing program 4 (id=818):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc)
r1 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00')
preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000180)=""/79, 0x4f}, {&(0x7f0000000200)=""/184, 0xb8}], 0x3, 0x0, 0x0)

1.302077271s ago: executing program 3 (id=820):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000001980)='./file0\x00', 0x1000000, &(0x7f0000001c00)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB=',discard,dmask=00000000000000000000011,discard,namecase=1,fmask=00000000000000000000002,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c616c6c6f775f7574696d653d30303030303030303030303030303030303030303032322c757466382c696f636861727365743d64656661756c742c00b3f745934550b4fafd14dd4644ff2e5e5f46", @ANYRESDEC, @ANYRES64, @ANYRES32, @ANYRES32, @ANYRES8], 0x3, 0x1507, &(0x7f0000000440)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0)

992.862647ms ago: executing program 3 (id=821):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x1, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r1}, &(0x7f0000000580)=0x2, &(0x7f00000005c0)=r0}, 0x20)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f0300", 0x4}], 0x1}, 0x0)
bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000080)={r1, &(0x7f0000000040)}, 0x20)

869.610937ms ago: executing program 3 (id=822):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x42, &(0x7f00000000c0)=ANY=[@ANYBLOB="6673796e635f6d6f64653d706f7369782c6e6f696e6c696e655f646174612c6469736361726400aa19fd46b492dc6cf59d696e6c696e655f64656e7472792c00"], 0x1, 0x54f3, &(0x7f000000ab40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, 0x0)

823.201491ms ago: executing program 2 (id=823):
syz_mount_image$reiserfs(&(0x7f0000000100), &(0x7f00000002c0)='./file1\x00', 0x98, &(0x7f0000000440), 0x1, 0x10f8, &(0x7f0000001140)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r0, 0x1362001)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000500)='b', 0x1}], 0x1, 0xfff, 0x1, 0x10)
fchown(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)

794.130744ms ago: executing program 1 (id=824):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file1\x00', 0x10, &(0x7f0000000680), 0x1, 0x254, &(0x7f00000006c0)="$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")
r0 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
r1 = open$dir(&(0x7f0000000400)='./file0\x00', 0x0, 0x4)
write(r0, &(0x7f0000002200)="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"/3584, 0xe00)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000003000)=0x100)
sendfile(r0, r1, 0x0, 0x11f06)

205.208473ms ago: executing program 1 (id=825):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r0, &(0x7f00000017c0)=ANY=[], 0xff2e)
syz_usb_connect(0x0, 0x3fb, &(0x7f0000000e00)=ANY=[@ANYBLOB="12011001c55236409911099006d5010203010902"], 0x0)
syz_open_procfs(0x0, 0x0)
io_submit(0x0, 0x0, 0x0)
ioctl$TCSETA(r0, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x7, 0x0, "fb99101719afec01"})

0s ago: executing program 3 (id=826):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000140))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f00000003c0)=@x86={0xc, 0x10, 0xf, 0x0, 0x5, 0x9, 0x3, 0xe8, 0xb, 0x3, 0x5, 0x81, 0x0, 0xfff, 0x9, 0x6, 0x7, 0xff, 0x3, '\x00', 0xc0, 0x3})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

v: batadv0: Interface activated: batadv_slave_0
[  128.853435][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  128.872525][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  128.883594][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  128.922277][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  128.942032][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  128.982182][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.021677][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.042577][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.062793][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.083355][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.102358][ T5630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.114006][ T5630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.142928][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.178180][ T5633] device veth0_macvtap entered promiscuous mode
[  129.198924][ T5919] device veth1_to_team entered promiscuous mode
[  129.213617][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  129.233190][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.253588][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  129.273359][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  129.283657][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  129.301532][ T5909] loop0: detected capacity change from 0 to 40427
[  129.314746][ T5630] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.326792][ T5630] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.335834][ T5630] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.350209][ T5630] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  129.397779][ T5918] device veth1_to_team left promiscuous mode
[  129.410099][ T5909] F2FS-fs (loop0): invalid crc value
[  129.415235][ T5633] device veth1_macvtap entered promiscuous mode
[  129.499925][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.525255][ T5909] F2FS-fs (loop0): Found nat_bits in checkpoint
[  129.539862][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.553954][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.564818][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.582838][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.594794][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.598102][ T5909] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  129.612796][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.632338][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.648604][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.688925][ T5944] device vlan1 entered promiscuous mode
[  129.698511][   T26] audit: type=1804 audit(1729292537.794:19): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.479" name="/newroot/11/file1/bus" dev="loop0" ino=10 res=1 errno=0
[  129.703482][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  129.729675][ T5909] attempt to access beyond end of device
[  129.729675][ T5909] loop0: rw=10241, want=45104, limit=40427
[  129.730106][   T26] audit: type=1800 audit(1729292537.794:20): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.479" name="bus" dev="loop0" ino=10 res=0 errno=0
[  129.753812][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  129.774174][ T5909] attempt to access beyond end of device
[  129.774174][ T5909] loop0: rw=2049, want=45104, limit=40427
[  129.778598][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  129.810203][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.821210][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.831443][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.843381][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.853518][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.866229][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.877794][ T5633] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  129.891833][ T5633] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.903521][ T5472] attempt to access beyond end of device
[  129.903521][ T5472] loop0: rw=2049, want=45112, limit=40427
[  129.904042][ T5633] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.942807][ T5936] device vlan1 left promiscuous mode
[  129.980479][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  129.999297][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.032342][ T5633] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.057874][ T5633] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.076836][ T5633] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.077864][ T5951] loop1: detected capacity change from 0 to 512
[  130.093083][ T5633] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.227523][ T3630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.233315][ T5951] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a802c01c, mo2=0002]
[  130.242972][ T3630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.286050][ T5951] System zones: 0-2, 18-18, 34-35
[  130.344349][ T5951] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  130.363778][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.372569][ T1396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.406348][ T5951] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.413247][ T1396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.432131][ T5911] chnl_net:caif_netlink_parms(): no params data found
[  130.501950][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.511039][ T4003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.548694][ T4003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.633204][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.643984][ T1396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.652685][ T1396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.793592][ T4603] Bluetooth: hci3: command 0x0409 tx timeout
[  130.808880][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.882824][ T5911] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.889936][ T5911] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.965618][ T5911] device bridge_slave_0 entered promiscuous mode
[  131.022799][ T5911] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.086126][ T5911] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.113831][ T5911] device bridge_slave_1 entered promiscuous mode
[  131.169794][ T5996] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  131.231176][ T5993] loop2: detected capacity change from 0 to 4096
[  131.274228][ T5911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  131.351521][ T5911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  131.420809][ T6005] loop1: detected capacity change from 0 to 47
[  131.460896][ T5993] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  131.496001][ T5911] team0: Port device team_slave_0 added
[  131.542070][ T5911] team0: Port device team_slave_1 added
[  131.621019][ T6005] attempt to access beyond end of device
[  131.621019][ T6005] loop1: rw=2049, want=50, limit=47
[  131.648710][ T6005] Buffer I/O error on dev loop1, logical block 24, lost async page write
[  131.661230][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.669409][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.713131][ T6005] attempt to access beyond end of device
[  131.713131][ T6005] loop1: rw=2049, want=52, limit=47
[  131.754044][ T6005] Buffer I/O error on dev loop1, logical block 25, lost async page write
[  131.767555][ T5911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.813553][ T5911] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.820534][ T5911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.882972][ T5911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  132.072572][ T5911] device hsr_slave_0 entered promiscuous mode
[  132.094077][ T6014] loop1: detected capacity change from 0 to 2048
[  132.123610][ T5911] device hsr_slave_1 entered promiscuous mode
[  132.180730][ T5979] loop0: detected capacity change from 0 to 40427
[  132.198200][ T6014] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.331898][ T5979] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  132.352393][ T6023] netlink: 'syz.3.495': attribute type 1 has an invalid length.
[  132.360036][ T5979] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  132.403046][ T5979] F2FS-fs (loop0): Found nat_bits in checkpoint
[  132.403090][ T6023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.495'.
[  132.514436][ T5911] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.588127][ T6034] netlink: 'syz.3.499': attribute type 5 has an invalid length.
[  132.631902][ T5979] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  132.647561][ T5911] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.668144][ T5979] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  132.714068][ T1386] ieee802154 phy0 wpan0: encryption failed: -22
[  132.720413][ T1386] ieee802154 phy1 wpan1: encryption failed: -22
[  132.764574][ T5911] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.882751][ T1074] Bluetooth: hci3: command 0x041b tx timeout
[  133.045286][ T5911] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.265626][ T6044] loop1: detected capacity change from 0 to 1024
[  133.331351][ T5911] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  133.359360][ T5911] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  133.396777][ T6044] EXT4-fs (loop1): Ignoring removed oldalloc option
[  133.432427][ T5911] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  133.491161][ T6044] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000003,noauto_da_alloc,jqfmt=vfsold,data_err=ignore,noauto_da_alloc,delalloc,resuid=0x0000000000000000,oldalloc,jqfmt=vfsv1,,errors=continue. Quota mode: none.
[  133.517481][ T5911] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  133.897016][ T5911] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.013687][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  134.022693][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  134.066816][ T5911] 8021q: adding VLAN 0 to HW filter on device team0
[  134.095910][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  134.129111][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  134.169002][ T1167] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.176135][ T1167] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.322608][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  134.383722][ T6063] netlink: 'syz.2.509': attribute type 4 has an invalid length.
[  134.384422][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  134.444079][ T6068] input: syz0 as /devices/virtual/input/input10
[  134.456315][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  134.469290][ T1167] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.476454][ T1167] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.507407][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  134.579967][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  134.624231][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  134.666469][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.690485][ T6074] loop3: detected capacity change from 0 to 1024
[  134.734177][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  134.768287][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  134.798892][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  134.827959][ T6074] EXT4-fs (loop3): Ignoring removed orlov option
[  134.837912][ T6083] loop0: detected capacity change from 0 to 512
[  134.844734][ T6074] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  134.855671][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  134.877056][  T263] block nbd1: Attempted send on invalid socket
[  134.884046][  T263] blk_update_request: I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0
[  134.893789][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  134.918503][ T5911] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  134.941435][ T6074] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  134.964986][ T1074] Bluetooth: hci3: command 0x040f tx timeout
[  134.996288][ T6083] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  135.015735][ T5911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  135.045119][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.061825][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.143534][ T6083] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  135.228340][ T6083] EXT4-fs (loop0): 1 truncate cleaned up
[  135.234532][ T6083] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.261253][ T6083] EXT4-fs (loop0): shut down requested (2)
[  135.331503][ T6097] input: syz1 as /devices/virtual/input/input11
[  135.442272][ T5911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.469128][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  135.496692][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  135.559841][ T6106] device gtp0 entered promiscuous mode
[  135.611763][ T6108] input: syz1 as /devices/virtual/input/input12
[  135.827143][ T6123] loop2: detected capacity change from 0 to 512
[  135.844229][ T6120] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  135.869508][ T6117] loop0: detected capacity change from 0 to 4096
[  135.889009][ T6123] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  135.958579][ T6123] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  135.968177][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  135.982332][ T6123] EXT4-fs (loop2): 1 truncate cleaned up
[  135.988889][ T6123] EXT4-fs (loop2): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000068,lazytime,block_validity,quota,,errors=continue. Quota mode: writeback.
[  135.991383][ T1396] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.027062][ T6117] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  136.097199][ T5911] device veth0_vlan entered promiscuous mode
[  136.105297][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  136.116365][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  136.150628][ T5911] device veth1_vlan entered promiscuous mode
[  136.159424][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  136.179784][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  136.201654][ T6117] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  136.222304][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  136.362905][ T1074] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  136.385254][ T6140] TCP: tcp_parse_options: Illegal window scaling value 129 > 14 received
[  136.387578][ T5911] device veth0_macvtap entered promiscuous mode
[  136.411641][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  136.421241][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  136.435886][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  136.445244][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  136.468817][ T5911] device veth1_macvtap entered promiscuous mode
[  136.491221][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.502972][ T4022] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  136.508803][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.529818][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.540611][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.561932][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.579866][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.590048][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.607654][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.619811][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  136.638325][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.651130][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  136.662760][ T1074] usb 2-1: Using ep0 maxpacket: 16
[  136.679547][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  136.691978][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  136.707863][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  136.730812][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.747292][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.759256][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.774112][ T6142] loop0: detected capacity change from 0 to 32768
[  136.777013][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.790607][ T1074] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  136.801698][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.812242][ T1074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  136.823426][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.833302][ T1074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  136.843005][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.853527][ T1074] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  136.863246][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.873297][ T1074] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  136.882801][ T5911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  136.896891][ T5911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  136.908103][ T5911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  136.915691][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  136.925478][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  136.940419][ T5911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  136.950067][ T5911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  136.953036][ T4022] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.959161][ T5911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  136.978866][ T1074] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  136.988369][ T1074] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  136.997038][ T5911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.000652][ T4022] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.005931][ T1074] usb 2-1: Manufacturer: syz
[  137.019359][ T4022] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  137.032613][ T1074] usb 2-1: config 0 descriptor??
[  137.038854][ T4022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.039713][ T3738] Bluetooth: hci3: command 0x0419 tx timeout
[  137.059179][ T4022] usb 3-1: config 0 descriptor??
[  137.069768][ T6142] XFS (loop0): Mounting V5 Filesystem
[  137.153319][ T1396] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.162661][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.170937][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.193978][ T1396] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.218246][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  137.234631][ T6152] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  137.243846][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  137.297387][ T6142] XFS (loop0): Ending clean mount
[  137.307930][ T6142] XFS (loop0): Quotacheck needed: Please wait.
[  137.357378][ T3728] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[  137.373026][ T1074] rc_core: IR keymap rc-hauppauge not found
[  137.378941][ T1074] Registered IR keymap rc-empty
[  137.385236][ T3728] XFS (loop0): Unmount and run xfs_repair
[  137.405827][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.414262][ T6155] loop3: detected capacity change from 0 to 1024
[  137.419936][ T6160] device gtp0 entered promiscuous mode
[  137.426939][ T3728] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  137.443015][ T3728] 00000000: 58 41 46 ff 07 00 00 00 bf dc 47 fc 10 d8 4e ed  XAF.......G...N.
[  137.456843][ T3728] 00000010: a5 62 11 a8 31 b3 f7 91 00 00 00 00 00 00 00 00  .b..1...........
[  137.466265][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.474680][ T3728] 00000020: a5 3b c8 8a ff ff ff ff 00 00 00 07 00 00 00 08  .;..............
[  137.484825][ T3728] 00000030: 00 00 00 09 00 00 00 0a 00 00 00 0b 00 00 00 0c  ................
[  137.505181][ T3728] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  137.521089][ T1074] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  137.534845][ T3728] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  137.546196][ T1074] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input13
[  137.560315][ T3728] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  137.569880][ T3728] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  137.594707][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.612053][ T3630] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74
[  137.642142][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.652414][ T3658] device hsr_slave_0 left promiscuous mode
[  137.660884][ T3658] device hsr_slave_1 left promiscuous mode
[  137.666934][ T6142] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  137.673195][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.694508][ T4022] microsoft 0003:045E:009D.0008: unbalanced delimiter at end of report description
[  137.703227][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.715556][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.724140][ T4022] microsoft 0003:045E:009D.0008: parse failed
[  137.741298][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.748724][ T4022] microsoft: probe of 0003:045E:009D.0008 failed with error -22
[  137.754686][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.778362][ T6155] EXT4-fs (loop3): Test dummy encryption mode enabled
[  137.788732][ T6155] EXT4-fs (loop3): Invalid want_extra_isize 193
[  137.796247][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.813737][ T3658] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.826210][ T5472] XFS (loop0): Unmounting Filesystem
[  137.832592][ T3658] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.850477][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.865632][ T3658] device bridge_slave_1 left promiscuous mode
[  137.891365][ T3658] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.902947][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.915372][ T3658] device bridge_slave_0 left promiscuous mode
[  137.921762][ T3658] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.967817][ T3658] device veth1_macvtap left promiscuous mode
[  137.972906][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  137.994507][ T3658] device veth0_macvtap left promiscuous mode
[  137.999924][ T3738] usb 3-1: USB disconnect, device number 7
[  138.000792][ T3658] device veth1_vlan left promiscuous mode
[  138.025767][ T1074] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  138.028812][ T3658] device veth0_vlan left promiscuous mode
[  138.074459][ T1074] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[  138.095070][ T1074] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  138.152697][ T1074] usb 2-1: USB disconnect, device number 8
[  138.164562][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.546'.
[  138.449525][ T3658] team0 (unregistering): Port device team_slave_1 removed
[  138.467020][ T3658] team0 (unregistering): Port device team_slave_0 removed
[  138.481088][ T3658] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.496659][ T3658] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.590739][ T3658] bond0 (unregistering): Released all slaves
[  138.633081][ T3738] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  138.769668][ T6189] loop1: detected capacity change from 0 to 2048
[  138.862848][ T3617] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  138.921387][ T6189] EXT4-fs (loop1): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none.
[  139.000831][   T26] audit: type=1804 audit(1729292547.094:21): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.552" name="/newroot/30/file0/file2" dev="loop1" ino=16 res=1 errno=0
[  139.012882][ T3738] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  139.042308][ T3738] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  139.052872][ T3738] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[  139.063450][ T3738] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.138662][ T3617] usb 3-1: Using ep0 maxpacket: 16
[  139.175165][ T6204] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  139.197134][ T3738] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  139.212805][ T3738] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  139.220826][ T3738] usb 1-1: Product: syz
[  139.242768][ T3738] usb 1-1: Manufacturer: syz
[  139.285360][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.293854][ T3738] cdc_wdm 1-1:1.0: skipping garbage
[  139.301777][ T3738] cdc_wdm 1-1:1.0: skipping garbage
[  139.321162][ T3617] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.333541][ T6206] Zero length message leads to an empty skb
[  139.361758][ T3617] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  139.363592][ T3738] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[  139.416483][ T3738] cdc_wdm 1-1:1.0: Unknown control protocol
[  139.423491][ T3617] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  139.462025][ T3617] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.503833][ T3617] usb 3-1: config 0 descriptor??
[  139.655920][ T4016] usb 1-1: USB disconnect, device number 2
[  139.952810][ T6214] loop4: detected capacity change from 0 to 8192
[  139.980763][ T3617] HID 045e:07da: Invalid code 65791 type 1
[  140.002640][ T3617] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0009/input/input14
[  140.040248][ T3617] microsoft 0003:045E:07DA.0009: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  140.078064][ T6214] REISERFS warning (device loop4): super-6519 read_super_block: Unfinished reiserfsck --rebuild-tree run detected. Please run
[  140.078064][ T6214] reiserfsck --rebuild-tree and wait for a completion. If that fails
[  140.078064][ T6214] get newer reiserfsprogs package
[  140.092020][ T6208] loop3: detected capacity change from 0 to 32768
[  140.199776][ T6208] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.559 (6208)
[  140.228396][ T1074] usb 3-1: USB disconnect, device number 8
[  140.305203][ T6208] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  140.323792][ T6208] BTRFS info (device loop3): force clearing of disk cache
[  140.356269][ T6208] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  140.386123][ T6208] BTRFS info (device loop3): use zstd compression, level 3
[  140.409129][ T6208] BTRFS info (device loop3): using free space tree
[  140.431811][ T6208] BTRFS info (device loop3): has skinny extents
[  140.677350][ T6208] BTRFS info (device loop3): enabling ssd optimizations
[  140.703629][ T6208] BTRFS info (device loop3): clearing free space tree
[  140.721095][ T6208] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  140.741769][ T6208] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  140.819824][ T6208] BTRFS info (device loop3): creating free space tree
[  140.844792][ T6208] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  140.874859][ T6208] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  141.052802][ T1074] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  141.218901][ T6250] loop4: detected capacity change from 0 to 2048
[  141.238267][ T6217] loop0: detected capacity change from 0 to 40427
[  141.320576][ T1074] usb 3-1: Using ep0 maxpacket: 32
[  141.359691][ T6250] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  141.409979][ T6217] F2FS-fs (loop0): invalid crc value
[  141.417747][ T6250] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  141.442992][ T1074] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  141.462832][ T1074] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  141.468446][ T6250] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  141.480792][ T6217] F2FS-fs (loop0): Found nat_bits in checkpoint
[  141.563875][ T6250] UDF-fs: Scanning with blocksize 512 failed
[  141.633752][ T1074] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  141.644720][ T6250] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.656335][ T1074] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.682960][ T1074] usb 3-1: Product: syz
[  141.704463][ T6217] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  141.730465][ T1074] usb 3-1: Manufacturer: syz
[  141.745952][   T26] audit: type=1800 audit(1729292549.844:22): pid=6189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.552" name="file2" dev="loop1" ino=16 res=0 errno=0
[  141.746164][ T1074] usb 3-1: SerialNumber: syz
[  141.884284][ T5472] attempt to access beyond end of device
[  141.884284][ T5472] loop0: rw=2049, want=45104, limit=40427
[  141.962607][ T6261] loop3: detected capacity change from 0 to 64
[  142.126240][ T6264] loop4: detected capacity change from 0 to 256
[  142.173037][ T1074] usb 3-1: 0:2 : does not exist
[  142.211743][ T1074] usb 3-1: USB disconnect, device number 9
[  142.442444][ T6266] device vlan0 entered promiscuous mode
[  142.511517][ T6268] loop4: detected capacity change from 0 to 2048
[  142.626002][ T6268] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  142.640668][ T6270] loop0: detected capacity change from 0 to 1024
[  142.666552][ T6268] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  142.671004][ T6266] device vlan0 left promiscuous mode
[  142.806134][ T6270] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsv1,stripe=0x0000000000000008,barrier=0x0000000000000004,norecovery,debug_want_extra_isize=0x0000000000000080,nodiscard,nodelalloc,acl,dioread_lock,,errors=continue. Quota mode: none.
[  142.911524][ T6268] UDF-fs: unknown compression code (0)
[  143.279797][ T6290] loop0: detected capacity change from 0 to 1764
[  143.386024][ T6272] loop1: detected capacity change from 0 to 40427
[  143.469100][ T6272] F2FS-fs (loop1): Invalid SB checksum offset: 0
[  143.482097][ T6272] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  143.550033][ T6272] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  143.723611][ T6284] loop3: detected capacity change from 0 to 32768
[  143.730087][ T6272] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  143.738050][ T6272] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  143.772231][ T6272] attempt to access beyond end of device
[  143.772231][ T6272] loop1: rw=2049, want=53256, limit=40427
[  143.804850][ T6272] attempt to access beyond end of device
[  143.804850][ T6272] loop1: rw=2049, want=53264, limit=40427
[  143.808961][ T6288] loop4: detected capacity change from 0 to 32768
[  143.817591][ T6304] loop0: detected capacity change from 0 to 256
[  143.832022][   T26] audit: type=1804 audit(1729292551.924:23): pid=6272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.572" name="/newroot/31/file1/file1" dev="loop1" ino=10 res=1 errno=0
[  143.836003][ T6272] attempt to access beyond end of device
[  143.836003][ T6272] loop1: rw=0, want=53264, limit=40427
[  143.866140][ T6272] attempt to access beyond end of device
[  143.866140][ T6272] loop1: rw=0, want=53256, limit=40427
[  143.880350][ T6284] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 scanned by syz.3.583 (6284)
[  143.908431][ T6284] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  143.918472][ T6288] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.584 (6288)
[  143.948140][ T6304] FAT-fs (loop0): Directory bread(block 64) failed
[  143.952857][ T6284] BTRFS info (device loop3): using free space tree
[  143.957137][ T6304] FAT-fs (loop0): Directory bread(block 65) failed
[  143.982358][ T6284] BTRFS info (device loop3): has skinny extents
[  143.989523][ T5545] attempt to access beyond end of device
[  143.989523][ T5545] loop1: rw=2049, want=45104, limit=40427
[  144.045339][ T4672] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (4672)
[  144.083908][ T6304] FAT-fs (loop0): Directory bread(block 66) failed
[  144.112906][ T6304] FAT-fs (loop0): Directory bread(block 67) failed
[  144.122268][ T6304] FAT-fs (loop0): Directory bread(block 68) failed
[  144.145794][ T6304] FAT-fs (loop0): Directory bread(block 69) failed
[  144.152530][ T6304] FAT-fs (loop0): Directory bread(block 70) failed
[  144.161123][ T6304] FAT-fs (loop0): Directory bread(block 71) failed
[  144.168168][ T6304] FAT-fs (loop0): Directory bread(block 72) failed
[  144.176533][ T6284] BTRFS info (device loop3): enabling ssd optimizations
[  144.191700][ T6323] loop2: detected capacity change from 0 to 1024
[  144.200537][ T6304] FAT-fs (loop0): Directory bread(block 73) failed
[  144.378717][ T6323] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  144.421399][   T26] audit: type=1800 audit(1729292552.514:24): pid=6304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.589" name="file1" dev="loop0" ino=1048628 res=0 errno=0
[  144.456486][ T6335] loop1: detected capacity change from 0 to 64
[  144.531846][ T6333] loop4: detected capacity change from 0 to 8192
[  144.652203][ T6333] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  144.688173][ T6333] REISERFS (device loop4): using ordered data mode
[  144.720731][ T6333] reiserfs: using flush barriers
[  144.792844][ T6333] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  144.839825][ T6333] REISERFS (device loop4): checking transaction log (loop4)
[  145.084796][ T6341] loop1: detected capacity change from 0 to 512
[  145.169389][ T6333] REISERFS (device loop4): Using tea hash to sort names
[  145.177288][ T6333] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  145.244057][ T1396] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.378807][ T1396] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.461579][ T6357] loop2: detected capacity change from 0 to 256
[  145.472255][ T1396] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.551408][ T1396] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.572966][ T1074] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  145.920487][ T6374] loop3: detected capacity change from 0 to 1024
[  145.933071][ T1074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.964790][ T1074] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.002839][ T1074] usb 2-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  146.049076][ T1074] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.090201][ T1074] usb 2-1: config 0 descriptor??
[  146.098668][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  146.242439][ T6360] chnl_net:caif_netlink_parms(): no params data found
[  146.410868][ T6360] bridge0: port 1(bridge_slave_0) entered blocking state
[  146.418526][ T6360] bridge0: port 1(bridge_slave_0) entered disabled state
[  146.426727][ T6360] device bridge_slave_0 entered promiscuous mode
[  146.467719][ T6360] bridge0: port 2(bridge_slave_1) entered blocking state
[  146.474689][ T6370] loop4: detected capacity change from 0 to 40427
[  146.487764][ T6360] bridge0: port 2(bridge_slave_1) entered disabled state
[  146.500408][ T6360] device bridge_slave_1 entered promiscuous mode
[  146.517189][ T6370] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  146.521510][ T6374] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  146.533059][ T6370] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  146.548253][ T6374] EXT4-fs (loop3): Delayed block allocation failed for inode 16 at logical offset 16 with max blocks 1 with error 28
[  146.589525][ T1074] logitech-hidpp-device 0003:046D:C086.000A: item fetching failed at offset 1/5
[  146.591703][ T6374] EXT4-fs (loop3): This should not happen!! Data will be lost
[  146.591703][ T6374] 
[  146.614111][ T6360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.618238][ T1074] logitech-hidpp-device 0003:046D:C086.000A: hidpp_probe:parse failed
[  146.627362][ T6360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.641780][ T6370] F2FS-fs (loop4): invalid crc value
[  146.647751][ T6374] EXT4-fs (loop3): Total free blocks count 0
[  146.650064][ T1074] logitech-hidpp-device: probe of 0003:046D:C086.000A failed with error -22
[  146.662840][ T6374] EXT4-fs (loop3): Free/Dirty block details
[  146.683900][ T6374] EXT4-fs (loop3): free_blocks=68451041280
[  146.683925][ T6374] EXT4-fs (loop3): dirty_blocks=16
[  146.683939][ T6374] EXT4-fs (loop3): Block reservation details
[  146.683952][ T6374] EXT4-fs (loop3): i_reserved_data_blocks=1
[  146.713780][ T6370] F2FS-fs (loop4): Found nat_bits in checkpoint
[  146.757062][ T6360] team0: Port device team_slave_0 added
[  146.814184][ T6360] team0: Port device team_slave_1 added
[  146.847726][ T6370] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  146.867946][ T4603] usb 2-1: USB disconnect, device number 9
[  146.880270][ T6370] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  146.970994][ T6370] attempt to access beyond end of device
[  146.970994][ T6370] loop4: rw=2049, want=40992, limit=40427
[  146.971942][ T6408] input: syz0 as /devices/virtual/input/input15
[  146.993783][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.009657][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.040212][ T6360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  147.099649][ T6360] batman_adv: batadv0: Adding interface: batadv_slave_1
[  147.116134][ T6360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.193064][ T6360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  147.294846][ T6416] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  147.479870][ T1396] device hsr_slave_0 left promiscuous mode
[  147.503012][ T1396] device hsr_slave_1 left promiscuous mode
[  147.523046][ T1396] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.533983][ T6427] sg_write: data in/out 2012/42 bytes for SCSI command 0x0-- guessing data in;
[  147.533983][ T6427]    program syz.1.620 not setting count and/or reply_len properly
[  147.561156][ T1396] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.593567][ T1396] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.601024][ T1396] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.633467][ T4603] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  147.641893][ T1396] device bridge_slave_1 left promiscuous mode
[  147.649836][ T1396] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.674556][ T1396] device bridge_slave_0 left promiscuous mode
[  147.683342][ T1396] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.721637][ T1396] device veth1_macvtap left promiscuous mode
[  147.743857][ T1396] device veth0_macvtap left promiscuous mode
[  147.752998][ T3728] Bluetooth: hci0: command 0x0409 tx timeout
[  147.764104][ T1396] device veth1_vlan left promiscuous mode
[  147.773949][ T1396] device veth0_vlan left promiscuous mode
[  147.987983][ T1396] team0 (unregistering): Port device team_slave_1 removed
[  148.002205][ T1396] team0 (unregistering): Port device team_slave_0 removed
[  148.003071][ T4603] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  148.019032][ T1396] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.025598][ T4603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.042528][ T4603] usb 4-1: config 0 descriptor??
[  148.055219][ T1396] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.088940][ T4603] cp210x 4-1:0.0: cp210x converter detected
[  148.141850][ T1396] bond0 (unregistering): Released all slaves
[  148.195987][ T6360] device hsr_slave_0 entered promiscuous mode
[  148.206579][ T6360] device hsr_slave_1 entered promiscuous mode
[  148.213563][ T6360] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  148.221137][ T6360] Cannot create hsr debugfs directory
[  148.248755][ T6437] bridge0: port 2(bridge_slave_1) entered disabled state
[  148.257660][ T6437] bridge0: port 1(bridge_slave_0) entered disabled state
[  148.495151][ T6456] loop1: detected capacity change from 0 to 2048
[  148.529608][ T4603] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  148.576427][ T6454] loop4: detected capacity change from 0 to 8192
[  148.604879][ T4603] usb 4-1: cp210x converter now attached to ttyUSB0
[  148.650152][ T6456] Alternate GPT is invalid, using primary GPT.
[  148.670351][ T6456]  loop1: p1 p2 p3
[  148.678202][ T6454] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  148.726387][ T6454] REISERFS (device loop4): using ordered data mode
[  148.754788][ T6454] reiserfs: using flush barriers
[  148.777477][ T6454] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  148.806635][ T6056] udevd[6056]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  148.828599][ T6454] REISERFS (device loop4): checking transaction log (loop4)
[  148.842240][ T4672] udevd[4672]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  148.845473][ T1074] usb 4-1: USB disconnect, device number 4
[  148.873073][ T3563] udevd[3563]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  148.893489][ T1074] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  148.929486][ T1074] cp210x 4-1:0.0: device disconnected
[  148.943091][ T6468] loop2: detected capacity change from 0 to 1764
[  149.065418][ T6454] REISERFS (device loop4): Using tea hash to sort names
[  149.082221][ T6474] device syzkaller1 entered promiscuous mode
[  149.103103][ T6454] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  149.233095][ T6479] loop2: detected capacity change from 0 to 128
[  149.297733][   T26] audit: type=1804 audit(1729292557.394:25): pid=6454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.627" name="/newroot/25/file0/file0" dev="loop4" ino=4 res=1 errno=0
[  149.360433][ T6360] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  149.417001][ T6360] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  149.490800][ T6360] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  149.531146][ T6360] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  149.558907][ T6489] loop3: detected capacity change from 0 to 1024
[  149.586177][ T6483] loop1: detected capacity change from 0 to 8192
[  149.750400][ T6483] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  149.815943][ T6360] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.822198][ T6483] REISERFS (device loop1): using ordered data mode
[  149.838577][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.846009][ T3619] Bluetooth: hci0: command 0x041b tx timeout
[  149.872140][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.880711][ T6483] reiserfs: using flush barriers
[  149.916750][ T6483] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  149.940071][ T6360] 8021q: adding VLAN 0 to HW filter on device team0
[  149.954349][ T6483] REISERFS (device loop1): checking transaction log (loop1)
[  150.005017][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.025187][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.061374][  T144] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.068542][  T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.090055][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  150.114415][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  150.129401][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  150.168706][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.175890][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.192803][ T6483] REISERFS (device loop1): Using tea hash to sort names
[  150.200300][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  150.211773][ T6483] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  150.242602][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  150.258958][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  150.289692][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.302647][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.337341][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  150.356584][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.388185][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.432386][ T6360] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.465340][ T6360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.504094][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.514153][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.533267][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.906456][ T6527] loop1: detected capacity change from 0 to 4096
[  150.922942][ T1074] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  150.954986][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.970251][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.982638][ T6541] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  151.004992][ T6527] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  151.030505][ T6360] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.091335][ T6527] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  151.109652][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  151.154613][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  151.215372][    C1] Illegal XDP return value 1603896156, expect packet loss!
[  151.255089][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.276590][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.293113][ T1074] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  151.302256][ T3658] ntfs3: loop1: ntfs3_write_inode r=1a failed, -22.
[  151.314548][ T6360] device veth0_vlan entered promiscuous mode
[  151.320428][ T5545] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22.
[  151.330713][ T1074] usb 5-1: config 0 has no interface number 0
[  151.349969][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.354792][ T5545] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22.
[  151.368286][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.384608][ T6360] device veth1_vlan entered promiscuous mode
[  151.496473][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  151.513103][ T1074] usb 5-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  151.534645][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  151.543119][ T1074] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.566548][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.568224][ T1074] usb 5-1: Product: syz
[  151.586754][ T1074] usb 5-1: Manufacturer: syz
[  151.598684][ T1074] usb 5-1: SerialNumber: syz
[  151.598917][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.619530][ T1074] usb 5-1: config 0 descriptor??
[  151.631799][ T6360] device veth0_macvtap entered promiscuous mode
[  151.647558][ T6360] device veth1_macvtap entered promiscuous mode
[  151.691676][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.720217][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.750628][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.781742][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.802096][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.822833][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.832812][ T6564] binder: 6561:6564 ioctl c0306201 20001a80 returned -14
[  151.850103][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.903067][ T1074] usb 5-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  151.914385][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.923645][ T4016] Bluetooth: hci0: command 0x040f tx timeout
[  151.932148][ T1074] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  151.949180][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.968232][ T1074] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  151.977824][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.987190][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.011143][ T1074] usb 5-1: media controller created
[  152.025978][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.062841][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.082304][ T1074] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  152.116984][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.137541][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.159300][ T6589] loop3: detected capacity change from 0 to 256
[  152.165652][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.177461][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.191613][ T6360] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.202491][ T6360] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.212934][ T1074] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  152.219062][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888063b31800: rx timeout, send abort
[  152.224411][ T6360] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.231028][    C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888063b31800: 0x0ff00: (3) A timeout occurred and this is the connection abort to close the session.
[  152.243936][ T6360] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.270028][ T1074] usb 5-1: USB disconnect, device number 6
[  152.295216][ T6360] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.295565][ T6594] loop2: detected capacity change from 0 to 512
[  152.322887][ T6360] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.331709][ T6360] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.363123][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  152.411984][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  152.480646][ T6594] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,grpquota,grpid,errors=remount-ro,. Quota mode: writeback.
[  152.561552][ T6594] ext4 filesystem being mounted at /40/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  152.635212][ T5288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.662763][ T5288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.698486][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  152.730393][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.758813][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.768269][ T6594] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #12: comm syz.2.657: Directory hole found for htree leaf block 0
[  152.812430][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  152.850507][ T6606] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.657: Directory hole found for htree leaf block 0
[  152.898325][ T6594] EXT4-fs (loop2): Remounting filesystem read-only
[  152.954775][ T6606] EXT4-fs (loop2): Remounting filesystem read-only
[  153.259094][ T6621] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  153.300491][ T6622] loop4: detected capacity change from 0 to 1024
[  153.378425][ T6622] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  153.410649][ T6622] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  153.445645][ T6622] EXT4-fs error (device loop4): ext4_get_journal_inode:5160: inode #5: comm syz.4.666: unexpected bad inode w/o EXT4_IGET_BAD
[  153.469413][ T6622] EXT4-fs (loop4): no journal found
[  153.479220][ T6622] EXT4-fs (loop4): can't get journal size
[  153.492008][ T6622] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,data_err=abort,norecovery,min_batch_time=0x000000000000071d,abort,,errors=continue. Quota mode: writeback.
[  153.734522][ T6638] netlink: 'syz.4.673': attribute type 10 has an invalid length.
[  153.750961][ T6638] device syz_tun entered promiscuous mode
[  153.822301][ T6638] bond0: (slave syz_tun): Enslaving as an active interface with an up link
[  153.876284][ T6645] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  154.131823][ T6663] loop4: detected capacity change from 0 to 1024
[  154.296204][ T6628] loop2: detected capacity change from 0 to 40427
[  154.359353][ T5288] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.423281][ T6674] netlink: 'syz.4.684': attribute type 29 has an invalid length.
[  154.445273][ T6628] F2FS-fs (loop2): Invalid SB checksum offset: 0
[  154.451644][ T6628] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  154.493169][ T6674] netlink: 'syz.4.684': attribute type 29 has an invalid length.
[  154.532672][ T6628] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 585327988383614437)
[  154.621072][ T6628] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  154.637646][ T6628] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  154.684378][ T6684] loop4: detected capacity change from 0 to 8
[  154.717495][ T6684] squashfs: Unknown parameter '�F���$������d�-��;YD�<�3�X߮�N�q�4�S�ŕ�s۵Z�QP�u���2%l�W\Yf����:?�x�|:�B�����E�}Ce2��f�'
[  154.734690][ T6628] attempt to access beyond end of device
[  154.734690][ T6628] loop2: rw=2049, want=53256, limit=40427
[  154.755832][ T6628] attempt to access beyond end of device
[  154.755832][ T6628] loop2: rw=2049, want=53264, limit=40427
[  154.821954][   T26] audit: type=1804 audit(1729292562.914:26): pid=6689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.670" name="/newroot/43/file1/file1" dev="loop2" ino=10 res=1 errno=0
[  154.859649][ T6628] attempt to access beyond end of device
[  154.859649][ T6628] loop2: rw=0, want=53264, limit=40427
[  154.923552][ T6628] attempt to access beyond end of device
[  154.923552][ T6628] loop2: rw=0, want=53256, limit=40427
[  154.980203][ T6662] loop1: detected capacity change from 0 to 32768
[  155.096781][ T5633] attempt to access beyond end of device
[  155.096781][ T5633] loop2: rw=2049, want=45104, limit=40427
[  155.159228][ T6687] chnl_net:caif_netlink_parms(): no params data found
[  155.206146][ T6676] loop3: detected capacity change from 0 to 40427
[  155.208082][ T6662] XFS (loop1): Mounting V5 Filesystem
[  155.260814][ T6676] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(0) root(3)
[  155.300776][ T6676] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  155.328657][ T6676] F2FS-fs (loop3): invalid crc value
[  155.346485][ T6676] F2FS-fs (loop3): Found nat_bits in checkpoint
[  155.348440][ T6662] XFS (loop1): Ending clean mount
[  155.383878][ T6662] XFS (loop1): Quotacheck needed: Please wait.
[  155.469068][ T6662] XFS (loop1): Quotacheck: Done.
[  155.494769][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.501848][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.509968][ T6676] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  155.516621][ T6687] device bridge_slave_0 entered promiscuous mode
[  155.525553][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.532614][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.539831][ T6676] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  155.549028][ T6687] device bridge_slave_1 entered promiscuous mode
[  155.576661][ T5545] XFS (loop1): Unmounting Filesystem
[  155.686014][ T5288] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.707892][ T6713] loop2: detected capacity change from 0 to 1024
[  155.764316][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  155.784127][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  155.888632][ T5288] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.915717][ T6687] team0: Port device team_slave_0 added
[  156.015835][ T6687] team0: Port device team_slave_1 added
[  156.079593][ T6715] kvm: MONITOR instruction emulated as NOP!
[  156.120082][ T5288] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.182619][ T6718] loop1: detected capacity change from 0 to 128
[  156.212348][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.233209][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.259112][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.309485][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.326323][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.333757][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.334810][ T6710] loop4: detected capacity change from 0 to 32768
[  156.359645][    C0] vkms_vblank_simulate: vblank timer overrun
[  156.370402][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.466831][ T6710] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.690 (6710)
[  156.503898][ T6687] device hsr_slave_0 entered promiscuous mode
[  156.523599][ T6687] device hsr_slave_1 entered promiscuous mode
[  156.543742][ T6687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  156.563887][ T6710] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  156.582350][ T6710] BTRFS info (device loop4): setting nodatacow, compression disabled
[  156.590646][ T6687] Cannot create hsr debugfs directory
[  156.602508][ T6710] BTRFS info (device loop4): disabling tree log
[  156.621232][ T6710] BTRFS info (device loop4): enabling auto defrag
[  156.634987][ T6710] BTRFS info (device loop4): max_inline at 0
[  156.641003][ T6710] BTRFS info (device loop4): using free space tree
[  156.690533][ T6710] BTRFS info (device loop4): has skinny extents
[  156.872966][ T3738] Bluetooth: hci0: command 0x0409 tx timeout
[  157.228424][   T26] audit: type=1804 audit(1729292565.324:27): pid=6772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.690" name="/newroot/39/file1/bus" dev="loop4" ino=263 res=1 errno=0
[  157.450204][ T6778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.707'.
[  157.471600][ T6763] loop2: detected capacity change from 0 to 32768
[  157.531313][ T6720] loop3: detected capacity change from 0 to 32768
[  157.538155][ T6778] device bond1 entered promiscuous mode
[  157.542688][ T6763] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.705 (6763)
[  157.581329][ T6783] device team_slave_1 entered promiscuous mode
[  157.643877][ T6783] team0: Port device team_slave_1 removed
[  157.676314][ T6720] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.693 (6720)
[  157.691427][ T6783] bond1: (slave team_slave_1): Enslaving as an active interface with an up link
[  157.729712][ T6763] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  157.740766][ T6763] BTRFS info (device loop2): turning off barriers
[  157.750677][ T6763] BTRFS info (device loop2): enabling auto defrag
[  157.770747][ T6763] BTRFS info (device loop2): ignoring data csums
[  157.794665][ T6763] BTRFS info (device loop2): force zlib compression, level 3
[  157.845430][ T6763] BTRFS info (device loop2): enabling ssd optimizations
[  157.852411][ T6763] BTRFS info (device loop2): using spread ssd allocation scheme
[  157.879650][ T6763] BTRFS info (device loop2): using free space tree
[  157.886523][ T6791] loop1: detected capacity change from 0 to 256
[  157.897254][ T6763] BTRFS info (device loop2): has skinny extents
[  157.903653][ T6763] workqueue: max_active 2097158 requested for btrfs-worker is out of range, clamping between 1 and 512
[  157.949943][ T6763] workqueue: max_active 2097158 requested for btrfs-worker-high is out of range, clamping between 1 and 512
[  157.985021][ T6763] workqueue: max_active 2097158 requested for btrfs-delalloc is out of range, clamping between 1 and 512
[  158.008154][ T6791] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  158.032223][ T6763] workqueue: max_active 2097158 requested for btrfs-endio is out of range, clamping between 1 and 512
[  158.053096][ T6763] workqueue: max_active 2097158 requested for btrfs-endio-meta is out of range, clamping between 1 and 512
[  158.072671][ T6763] workqueue: max_active 2097158 requested for btrfs-endio-meta-write is out of range, clamping between 1 and 512
[  158.095470][ T6763] workqueue: max_active 2097158 requested for btrfs-endio-raid56 is out of range, clamping between 1 and 512
[  158.101779][ T6720] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  158.114746][ T6763] workqueue: max_active 2097158 requested for btrfs-rmw is out of range, clamping between 1 and 512
[  158.132279][ T6720] BTRFS info (device loop3): setting nodatacow, compression disabled
[  158.176032][ T6763] workqueue: max_active 2097158 requested for btrfs-endio-write is out of range, clamping between 1 and 512
[  158.176901][ T6687] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  158.196731][ T6720] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  158.228410][ T6687] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  158.241711][ T6720] BTRFS info (device loop3): force lzo compression, level 0
[  158.253645][ T6763] workqueue: max_active 2097158 requested for btrfs-readahead is out of range, clamping between 1 and 512
[  158.304716][ T6720] BTRFS info (device loop3): metadata ratio 8
[  158.315396][ T6720] BTRFS info (device loop3): doing ref verification
[  158.322588][ T6720] BTRFS info (device loop3): metadata ratio 32769
[  158.329150][ T6720] BTRFS info (device loop3): turning off barriers
[  158.340999][ T6720] BTRFS info (device loop3): enabling ssd optimizations
[  158.355984][ T6720] BTRFS info (device loop3): using spread ssd allocation scheme
[  158.363856][ T6720] BTRFS info (device loop3): turning on barriers
[  158.370341][ T6720] BTRFS info (device loop3): using free space tree
[  158.377137][ T6720] BTRFS info (device loop3): has skinny extents
[  158.392927][ T6687] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  158.402551][ T6687] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  158.821356][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0
[  158.849006][ T6687] 8021q: adding VLAN 0 to HW filter on device team0
[  158.863467][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  158.873375][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  158.889928][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  158.900048][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  158.936942][ T3658] bridge0: port 1(bridge_slave_0) entered blocking state
[  158.944117][ T3658] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.131398][ T5090] Bluetooth: hci0: command 0x041b tx timeout
[  159.349670][ T5288] device hsr_slave_0 left promiscuous mode
[  159.365003][ T5288] device hsr_slave_1 left promiscuous mode
[  159.371699][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.379531][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.394591][ T5288] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.411198][ T5288] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.420256][ T5288] device bridge_slave_1 left promiscuous mode
[  159.427444][ T5288] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.444918][ T5288] device bridge_slave_0 left promiscuous mode
[  159.460534][ T5288] bridge0: port 1(bridge_slave_0) entered disabled state
[  159.509499][ T6869] loop3: detected capacity change from 0 to 128
[  159.517058][ T5288] device veth1_macvtap left promiscuous mode
[  159.524549][ T5288] device veth0_macvtap left promiscuous mode
[  159.537869][ T5288] device veth1_vlan left promiscuous mode
[  159.550810][ T5288] device veth0_vlan left promiscuous mode
[  159.569274][ T6869] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  159.596655][ T6869] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.852624][ T5288] team0 (unregistering): Port device team_slave_1 removed
[  159.897205][ T5288] team0 (unregistering): Port device team_slave_0 removed
[  159.927060][ T5288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.976517][ T5288] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.981234][ T6875] loop3: detected capacity change from 0 to 64
[  159.998422][ T6867] loop2: detected capacity change from 0 to 32768
[  160.081535][ T6867] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz.2.717 (6867)
[  160.119000][ T6867] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  160.129392][ T6867] BTRFS info (device loop2): using free space tree
[  160.136393][ T6867] BTRFS info (device loop2): has skinny extents
[  160.168446][ T5288] bond0 (unregistering): Released all slaves
[  160.271994][ T6867] BTRFS info (device loop2): enabling ssd optimizations
[  160.294787][ T6898] loop0: detected capacity change from 0 to 7
[  160.323558][ T6898] Dev loop0: unable to read RDB block 7
[  160.332995][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  160.341006][ T6898]  loop0: AHDI p1 p2
[  160.346744][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  160.358048][ T6898] loop0: partition table partially beyond EOD, truncated
[  160.366541][ T6898] loop0: p1 start 6514546 is beyond EOD, truncated
[  160.381438][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  160.410295][ T3658] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.417476][ T3658] bridge0: port 2(bridge_slave_1) entered forwarding state
[  160.443230][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  160.488688][ T1167] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  160.530402][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  160.590963][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.635787][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  160.697392][ T6687] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  160.797239][ T6687] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  160.829141][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  160.850648][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  160.865896][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  160.885910][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  160.905648][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  160.914374][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  160.928148][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.030841][ T6915] loop2: detected capacity change from 0 to 512
[  161.065854][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  161.083451][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  161.087884][ T6915] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  161.128236][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.130594][ T6915] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  161.183485][ T6915] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  161.202928][ T2722] Bluetooth: hci0: command 0x040f tx timeout
[  161.216429][ T6915] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  161.216750][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  161.232873][ T6915] [EXT4 FS bs=4096, gc=2, bpg=35, ipg=32, mo=e000e118, mo2=0000]
[  161.240184][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  161.240730][ T6915] EXT4-fs (loop2): failed to initialize system zone (-117)
[  161.283579][ T6915] EXT4-fs (loop2): mount failed
[  161.333652][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  161.359470][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  161.405290][ T6687] device veth0_vlan entered promiscuous mode
[  161.423302][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  161.452020][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  161.520514][ T6687] device veth1_vlan entered promiscuous mode
[  161.527543][ T6915] loop2: detected capacity change from 0 to 256
[  161.552683][ T6915] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  161.578191][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  161.593705][ T4003] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  161.614268][ T6687] device veth0_macvtap entered promiscuous mode
[  161.650303][ T6917] loop3: detected capacity change from 0 to 32768
[  161.675428][ T6687] device veth1_macvtap entered promiscuous mode
[  161.708870][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.719512][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.743112][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.755848][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.758543][ T6917] JBD2: Ignoring recovery information on journal
[  161.766377][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.815222][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.835816][ T6917] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  161.837976][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  161.884725][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.896300][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  161.927106][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.937709][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.962151][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  161.978919][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  161.989103][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.006589][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.034141][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  162.073349][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  162.084600][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  162.092096][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  162.112163][ T5630] ocfs2: Unmounting device (7,3) on (node local)
[  162.123466][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  162.155409][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  162.171161][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  162.180511][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  162.222850][ T3575] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  162.226119][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  162.238985][ T6924] loop4: detected capacity change from 0 to 32768
[  162.283779][ T6687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  162.292495][ T6687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  162.320677][ T6932] loop3: detected capacity change from 0 to 256
[  162.327015][ T6687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  162.342294][ T6687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  162.409824][ T6932] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  162.425863][ T6924] XFS (loop4): Mounting V5 Filesystem
[  162.530748][ T3658] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.583569][ T3575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.614579][ T3658] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.633666][ T3575] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.672977][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  162.682565][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  162.690302][ T3575] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  162.710225][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  162.721794][ T6924] XFS (loop4): Ending clean mount
[  162.729582][ T3575] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  162.745874][ T3575] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.746666][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  162.791614][ T3575] usb 3-1: config 0 descriptor??
[  162.803794][ T3585] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[  162.809062][ T3727] Bluetooth: hci5: command 0xfc11 tx timeout
[  163.038039][ T6947] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  163.285403][ T5911] XFS (loop4): Unmounting Filesystem
[  163.287040][ T3575] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  163.303514][ T3575] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  163.317257][ T6954] loop3: detected capacity change from 0 to 512
[  163.338213][ T3575] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  163.451397][ T6954] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  163.596132][ T6954] EXT4-fs (loop3): 1 orphan inode deleted
[  163.601900][ T6954] EXT4-fs (loop3): 1 truncate cleaned up
[  163.618894][ T6954] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,max_dir_size_kb=0x0000000000000004,resgid=0x0000000000000000,inode_readahead_blks=0x0000000000010000,bsdgroups,data_err=abort,init_itable=0x0000000000000008,journal_dev=0x000000007fffffff,auto_da_alloc,,errors=continue. Quota mode: none.
[  163.858795][ T6969] device ipvlan1 entered promiscuous mode
[  164.105306][ T6982] loop1: detected capacity change from 0 to 1024
[  164.146438][ T6982] EXT4-fs (loop1): Test dummy encryption mode enabled
[  164.160866][ T6982] EXT4-fs (loop1): Ignoring removed orlov option
[  164.199352][ T6982] EXT4-fs (loop1): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x0000000000000084,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  164.284208][ T6687] syz-executor (6687) used greatest stack depth: 18744 bytes left
[  164.304556][ T4003] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.371228][ T6977] loop4: detected capacity change from 0 to 40427
[  164.395754][ T6982] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  164.497374][ T6977] F2FS-fs (loop4): invalid crc value
[  164.552234][ T6977] F2FS-fs (loop4): Found nat_bits in checkpoint
[  164.621603][ T6977] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  164.762523][ T6977] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  164.787610][ T6977] overlayfs: conflicting lowerdir path
[  164.799712][ T6990] chnl_net:caif_netlink_parms(): no params data found
[  164.900762][ T5911] attempt to access beyond end of device
[  164.900762][ T5911] loop4: rw=524288, want=45072, limit=40427
[  164.915610][ T5911] attempt to access beyond end of device
[  164.915610][ T5911] loop4: rw=0, want=45072, limit=40427
[  164.930277][ T5093] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  165.020370][ T6990] bridge0: port 1(bridge_slave_0) entered blocking state
[  165.041109][    T9] attempt to access beyond end of device
[  165.041109][    T9] loop4: rw=2049, want=40992, limit=40427
[  165.062066][ T6990] bridge0: port 1(bridge_slave_0) entered disabled state
[  165.071372][ T6990] device bridge_slave_0 entered promiscuous mode
[  165.123210][ T7004] loop3: detected capacity change from 0 to 32768
[  165.153847][ T7004] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.752 (7004)
[  165.178411][ T5911] bond0: (slave syz_tun): Releasing backup interface
[  165.210582][ T7004] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  165.233977][ T6990] bridge0: port 2(bridge_slave_1) entered blocking state
[  165.241080][ T6990] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.258132][ T7004] BTRFS info (device loop3): using free space tree
[  165.258716][ T7010] loop2: detected capacity change from 0 to 8
[  165.268934][ T6990] device bridge_slave_1 entered promiscuous mode
[  165.278011][ T7004] BTRFS info (device loop3): has skinny extents
[  165.329708][ T6990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  165.348399][ T5093] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  165.360017][ T7010] squashfs: Unknown parameter '�F���$������d�-��;YD�<�3�X߮�N�q�4�S�ŕ�s۵Z�QP�u���2%l�W\Yf����:?�x�|:�B�����E�}Ce2��f�'
[  165.377433][ T6990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  165.386662][ T5093] usb 2-1: config 0 interface 0 has no altsetting 0
[  165.430528][ T6990] team0: Port device team_slave_0 added
[  165.439534][ T6990] team0: Port device team_slave_1 added
[  165.474865][ T3735] usb 3-1: USB disconnect, device number 10
[  165.525062][ T7004] BTRFS info (device loop3): enabling ssd optimizations
[  165.562183][ T4003] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.572982][ T5093] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  165.582174][ T5093] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.590349][ T5093] usb 2-1: Product: syz
[  165.595120][ T5093] usb 2-1: Manufacturer: syz
[  165.599915][ T5093] usb 2-1: SerialNumber: syz
[  165.606702][ T5093] usb 2-1: config 0 descriptor??
[  165.647656][ T5093] usb 2-1: selecting invalid altsetting 0
[  165.700206][ T5093] snd-usb-audio: probe of 2-1:0.0 failed with error -2
[  165.737814][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.758277][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.779526][ T3561] udevd[3561]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  165.785671][ T6990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.844759][ T4003] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.880984][ T5093] usb 2-1: USB disconnect, device number 10
[  165.906841][ T6990] batman_adv: batadv0: Adding interface: batadv_slave_1
[  165.923227][ T6990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.951132][ T6990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  165.990788][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.017051][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.034849][ T4003] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.240729][ T6990] device hsr_slave_0 entered promiscuous mode
[  166.255599][ T6990] device hsr_slave_1 entered promiscuous mode
[  166.262352][ T6990] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  166.275830][ T6990] Cannot create hsr debugfs directory
[  166.300769][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.472975][ T3727] Bluetooth: hci0: command 0x0409 tx timeout
[  166.576298][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'.
[  166.620511][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.1.761'.
[  166.835100][ T7055] loop1: detected capacity change from 0 to 1024
[  166.917203][ T7066] netlink: 'syz.2.767': attribute type 4 has an invalid length.
[  167.214319][ T3658] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.240862][ T7038] chnl_net:caif_netlink_parms(): no params data found
[  167.245392][ T3658] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.330174][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  167.583714][ T7038] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.595476][ T7075] loop2: detected capacity change from 0 to 40427
[  167.605764][ T7038] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.614262][ T7038] device bridge_slave_0 entered promiscuous mode
[  167.635670][ T7099] netlink: 4 bytes leftover after parsing attributes in process `syz.1.775'.
[  167.660377][ T7038] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.668400][ T7038] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.676939][ T7038] device bridge_slave_1 entered promiscuous mode
[  167.685624][ T6990] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  167.717641][ T7075] F2FS-fs (loop2): invalid crc value
[  167.738067][ T7075] F2FS-fs (loop2): Found nat_bits in checkpoint
[  167.750419][ T6990] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  167.776298][ T6990] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  167.801631][ T7038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  167.810889][ T3619] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  167.832672][ T7038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  167.836411][ T7104] loop1: detected capacity change from 0 to 128
[  167.851456][ T6990] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  167.880258][ T7075] F2FS-fs (loop2): Cannot turn on quotas: -2 on 0
[  167.891886][ T7075] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  167.944171][ T7075] attempt to access beyond end of device
[  167.944171][ T7075] loop2: rw=2049, want=41000, limit=40427
[  167.987042][ T7104] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  168.004856][ T7038] team0: Port device team_slave_0 added
[  168.016479][ T7104] ext4 filesystem being mounted at /84/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  168.054840][ T7038] team0: Port device team_slave_1 added
[  168.151010][ T4003] device hsr_slave_0 left promiscuous mode
[  168.158078][ T3736] Bluetooth: hci3: command 0x0409 tx timeout
[  168.197881][ T4003] device hsr_slave_1 left promiscuous mode
[  168.227969][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.249526][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.253040][ T3619] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  168.292050][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.304222][ T3619] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  168.331169][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.357204][ T4003] device bridge_slave_1 left promiscuous mode
[  168.381554][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.423145][ T3619] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  168.432938][ T4003] device bridge_slave_0 left promiscuous mode
[  168.439265][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.442549][ T3619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  168.455213][ T7116] loop1: detected capacity change from 0 to 4096
[  168.465758][ T3619] usb 4-1: SerialNumber: syz
[  168.487826][ T4003] device veth1_macvtap left promiscuous mode
[  168.502891][ T4003] device veth0_macvtap left promiscuous mode
[  168.519222][ T4003] device veth1_vlan left promiscuous mode
[  168.539465][ T4003] device veth0_vlan left promiscuous mode
[  168.545570][ T7116] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  168.694706][   T26] audit: type=1804 audit(1729292576.784:28): pid=7116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.778" name="/newroot/85/file2/file1" dev="loop1" ino=30 res=1 errno=0
[  168.776191][ T3619] usb 4-1: 0:2 : does not exist
[  168.844231][ T7128] loop1: detected capacity change from 0 to 256
[  168.855433][ T3619] usb 4-1: USB disconnect, device number 5
[  168.870996][ T4003] team0 (unregistering): Port device team_slave_1 removed
[  168.879331][ T3729] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  168.891430][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  168.905201][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  168.919086][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  168.941901][ T7128] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  168.958630][ T3561] udevd[3561]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.215078][ T4003] bond0 (unregistering): Released all slaves
[  169.402910][ T3729] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  169.411975][ T3729] usb 3-1: New USB device strings: Mfr=210, Product=154, SerialNumber=3
[  169.432841][ T3729] usb 3-1: Product: syz
[  169.437045][ T3729] usb 3-1: Manufacturer: syz
[  169.441726][ T3729] usb 3-1: SerialNumber: syz
[  169.465034][ T3729] usb 3-1: config 0 descriptor??
[  169.913357][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_0
[  169.920347][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  169.962974][ T3729] usb 3-1: atusb_control_msg: req 0x21 val 0x0 idx 0x1e, error -32
[  169.968145][ T7038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  169.971305][ T3729] usb 3-1: Firmware version (0.0) predates our first public release.
[  169.989746][ T3729] usb 3-1: Please update to version 0.2 or newer
[  170.004346][ T7038] batman_adv: batadv0: Adding interface: batadv_slave_1
[  170.011384][ T7038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  170.033022][ T3729] usb 3-1: Firmware: build e
[  170.042643][ T3729] usb 3-1: atusb_probe: initialization failed, error = -32
[  170.046923][ T7038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  170.051299][ T3729] atusb: probe of 3-1:0.0 failed with error -32
[  170.144116][ T7038] device hsr_slave_0 entered promiscuous mode
[  170.150709][ T7038] device hsr_slave_1 entered promiscuous mode
[  170.160609][ T7038] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  170.168315][ T7038] Cannot create hsr debugfs directory
[  170.181232][ T6990] 8021q: adding VLAN 0 to HW filter on device bond0
[  170.232952][ T3729] Bluetooth: hci3: command 0x041b tx timeout
[  170.254614][ T4125] usb 3-1: USB disconnect, device number 11
[  170.264805][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  170.274827][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  170.284960][ T6990] 8021q: adding VLAN 0 to HW filter on device team0
[  170.296922][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  170.310023][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  170.321817][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.328900][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.348595][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  170.358683][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  170.367755][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  170.379184][ T3630] bridge0: port 2(bridge_slave_1) entered blocking state
[  170.386291][ T3630] bridge0: port 2(bridge_slave_1) entered forwarding state
[  170.413394][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  170.433454][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  170.479829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  170.500089][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  170.510219][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.538720][ T7038] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.561230][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  170.578054][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.591107][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.607182][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.620376][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.632497][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.650216][ T6990] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  170.677972][ T7038] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.742545][ T7038] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.829741][ T7038] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  170.896241][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.904459][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.920941][ T6990] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.981931][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  171.003499][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  171.030293][ T7038] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  171.041126][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  171.050809][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  171.060011][ T6990] device veth0_vlan entered promiscuous mode
[  171.067073][ T7038] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  171.077281][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  171.085786][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  171.099262][ T6990] device veth1_vlan entered promiscuous mode
[  171.106985][ T7038] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  171.117670][ T7038] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  171.187953][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  171.205866][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  171.219404][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  171.229073][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  171.241979][ T6990] device veth0_macvtap entered promiscuous mode
[  171.261429][ T7038] 8021q: adding VLAN 0 to HW filter on device bond0
[  171.273156][ T6990] device veth1_macvtap entered promiscuous mode
[  171.315120][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  171.329908][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  171.340580][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  171.359353][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  171.373257][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.392754][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.402616][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.433035][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.449606][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.460143][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.473008][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.484673][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.496033][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.511701][ T7038] 8021q: adding VLAN 0 to HW filter on device team0
[  171.533119][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.542066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.555169][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.566158][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.576185][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.586763][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.598484][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.608989][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.618857][ T6990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  171.629595][ T6990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.641671][ T6990] batman_adv: batadv0: Interface activated: batadv_slave_1
[  171.653443][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  171.673503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  171.712511][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  171.721511][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  171.734000][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  171.741072][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  171.749466][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  171.763559][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  171.771871][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.778945][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.786837][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  171.795768][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  171.807814][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  171.817240][ T6990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  171.826144][ T6990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  171.840123][ T6990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  171.850591][ T6990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  171.880854][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  171.892621][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  171.902694][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  171.911793][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  171.922181][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  171.937548][ T7038] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  171.955570][ T7038] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  171.977492][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  171.986646][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  172.001066][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  172.011228][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  172.025622][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  172.111978][ T5288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.120850][ T5288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.133691][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  172.183323][ T3630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  172.191763][ T3630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  172.193051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  172.210791][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  172.225696][ T7038] 8021q: adding VLAN 0 to HW filter on device batadv0
[  172.257977][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  172.313756][ T3729] Bluetooth: hci3: command 0x040f tx timeout
[  172.414949][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  172.424103][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  172.440046][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  172.451549][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  172.460858][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  172.472458][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  172.490327][ T7038] device veth0_vlan entered promiscuous mode
[  172.502179][ T7038] device veth1_vlan entered promiscuous mode
[  172.520411][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  172.529384][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  172.537966][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  172.546530][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  172.571934][ T7038] device veth0_macvtap entered promiscuous mode
[  172.581706][ T7038] device veth1_macvtap entered promiscuous mode
[  172.595636][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.607522][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.617382][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.627824][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.638140][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.648593][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.659689][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.670588][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.680686][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  172.691153][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.702275][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_0
[  172.716979][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  172.725452][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  172.733980][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  172.742437][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  172.753094][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.766413][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.776857][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.787577][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.799603][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.810072][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.819897][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.830337][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.840174][ T7038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  172.850671][ T7038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  172.862078][ T7038] batman_adv: batadv0: Interface activated: batadv_slave_1
[  172.875754][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  172.892402][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  172.903243][ T7038] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  172.911948][ T7038] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  172.921409][ T7038] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  172.930980][ T7038] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  172.991434][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.007015][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.026826][ T5288] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  173.041248][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.055987][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.069598][ T3658] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.168495][ T7149] loop1: detected capacity change from 0 to 1024
[  173.225430][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  173.254231][ T7149] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  173.289255][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  173.304681][ T7149] EXT4-fs (loop1): mounted filesystem without journal. Opts: nombcache,nobarrier,norecovery,errors=remount-ro,nodiscard,. Quota mode: writeback.
[  173.382331][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  173.406901][ T7162] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  173.567664][ T7168] loop3: detected capacity change from 0 to 1024
[  173.598064][ T4003] device hsr_slave_0 left promiscuous mode
[  173.618753][ T7171] loop1: detected capacity change from 0 to 512
[  173.625341][ T4003] device hsr_slave_1 left promiscuous mode
[  173.632227][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.641179][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.669707][ T7171] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[  173.673395][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.744463][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.758212][    T9] hfsplus: b-tree write err: -5, ino 4
[  173.772692][ T4003] device bridge_slave_1 left promiscuous mode
[  173.784274][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.792320][ T7171] EXT4-fs (loop1): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,min_batch_time=0x0000000000000003,journal_dev=0x0000000000000005,,errors=continue. Quota mode: writeback.
[  173.818139][ T7171] ext4 filesystem being mounted at /90/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  173.829767][ T4003] device bridge_slave_0 left promiscuous mode
[  173.836867][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.850910][ T4003] device veth1_macvtap left promiscuous mode
[  173.877277][ T4003] device veth0_macvtap left promiscuous mode
[  173.893808][ T4003] device veth1_vlan left promiscuous mode
[  173.900342][ T4003] device veth0_vlan left promiscuous mode
[  174.162437][ T7185] loop3: detected capacity change from 0 to 128
[  174.253839][ T7185] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_dev=0x0000000000000000,nouid32,,errors=continue. Quota mode: none.
[  174.302944][ T7185] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.394235][ T3729] Bluetooth: hci3: command 0x0419 tx timeout
[  174.455334][ T4003] team0 (unregistering): Port device team_slave_1 removed
[  174.463846][ T7197] raw_sendmsg: syz.2.802 forgot to set AF_INET. Fix it!
[  174.551077][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  174.597834][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  174.638732][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  174.655284][ T7176] loop4: detected capacity change from 0 to 32768
[  174.732037][ T4003] bond0 (unregistering): Released all slaves
[  174.804552][ T7176] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  174.907467][ T7038] ocfs2: Unmounting device (7,4) on (node local)
[  174.973040][ T2722] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  175.126917][ T7204] Falling back ldisc for ttyS3.
[  175.403118][ T2722] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  175.412244][ T2722] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.433150][ T2722] usb 4-1: config 0 descriptor??
[  175.931404][ T7252] loop4: detected capacity change from 0 to 1024
[  176.027755][ T7252] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  176.097604][ T3732] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  176.123730][ T7252] EXT4-fs (loop4): mounted filesystem without journal. Opts: noquota,nombcache,auto_da_alloc=0x0000000000000002,nombcache,noinit_itable,nomblk_io_submit,init_itable=0x0000000000000009,usrquota,errors=continue,,errors=continue. Quota mode: writeback.
[  176.285937][ T7254] chnl_net:caif_netlink_parms(): no params data found
[  176.358686][ T7265] loop4: detected capacity change from 0 to 1024
[  176.376531][ T3729] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  176.475632][ T7265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.486934][ T3732] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 111, changing to 10
[  176.487567][ T7254] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.498416][ T3732] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  176.515268][ T3732] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.528798][ T3732] usb 3-1: config 0 descriptor??
[  176.607225][ T7254] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.626573][ T7254] device bridge_slave_0 entered promiscuous mode
[  176.680301][ T7254] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.700705][ T7254] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.733980][ T7254] device bridge_slave_1 entered promiscuous mode
[  176.844861][ T7254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.854097][ T2722] pegasus 4-1:0.0: can't reset MAC
[  176.859726][ T2722] pegasus: probe of 4-1:0.0 failed with error -5
[  176.869427][ T7254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.882867][ T2722] usb 4-1: USB disconnect, device number 6
[  176.913211][ T3729] usb 2-1: New USB device found, idVendor=0f11, idProduct=2000, bcdDevice=61.d7
[  176.930265][ T3729] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.939490][ T3729] usb 2-1: Product: syz
[  176.950845][ T3729] usb 2-1: Manufacturer: syz
[  176.956591][ T3729] usb 2-1: SerialNumber: syz
[  176.975561][ T7254] team0: Port device team_slave_0 added
[  176.991885][ T3729] usb 2-1: config 0 descriptor??
[  176.999320][ T3732] cm6533_jd 0003:0D8C:0022.000C: unknown main item tag 0x0
[  177.011942][ T3732] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0D8C:0022.000C/input/input17
[  177.020006][ T7254] team0: Port device team_slave_1 added
[  177.074438][ T3729] ldusb 2-1:0.0: Interrupt in endpoint not found
[  177.091163][ T3732] cm6533_jd 0003:0D8C:0022.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.2-1/input0
[  177.130740][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.137877][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.173140][ T7254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.186234][ T7254] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.193584][ T7254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.226193][ T7254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.252660][ T4125] usb 3-1: USB disconnect, device number 12
[  177.280511][ T3732] usb 2-1: USB disconnect, device number 11
[  177.342553][ T7254] device hsr_slave_0 entered promiscuous mode
[  177.366692][ T7254] device hsr_slave_1 entered promiscuous mode
[  177.377520][ T7272] loop3: detected capacity change from 0 to 256
[  177.473477][ T7272] exfat: Deprecated parameter 'namecase'
[  177.483005][ T7272] exfat: Deprecated parameter 'utf8'
[  177.560634][ T7272] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  177.630754][ T4003] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.711212][ T4003] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.789902][ T4003] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.852883][ T7273] chnl_net:caif_netlink_parms(): no params data found
[  177.899730][ T4003] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  177.901003][ T7284] loop1: detected capacity change from 0 to 128
[  178.063742][ T7284] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  178.072899][ T3732] Bluetooth: hci0: command 0x0409 tx timeout
[  178.119826][ T7284] ext4 filesystem being mounted at /99/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.133209][ T7279] loop3: detected capacity change from 0 to 40427
[  178.134166][ T7273] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.160668][ T7283] loop2: detected capacity change from 0 to 8192
[  178.174084][   T26] audit: type=1800 audit(1729292586.274:29): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.824" name="file0" dev="loop1" ino=12 res=0 errno=0
[  178.196697][ T7273] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.208085][ T7273] device bridge_slave_0 entered promiscuous mode
[  178.218172][   T26] audit: type=1804 audit(1729292586.284:30): pid=7284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.824" name="/newroot/99/file1/file0" dev="loop1" ino=12 res=1 errno=0
[  178.235062][ T7273] bridge0: port 2(bridge_slave_1) entered blocking state
[  178.239551][    C1] vkms_vblank_simulate: vblank timer overrun
[  178.249062][ T7273] bridge0: port 2(bridge_slave_1) entered disabled state
[  178.261051][ T7273] device bridge_slave_1 entered promiscuous mode
[  178.289448][ T7283] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  178.299670][ T7283] REISERFS (device loop2): using ordered data mode
[  178.306543][ T7283] reiserfs: using flush barriers
[  178.315604][ T7283] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  178.347727][ T7273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.359530][ T7273] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  178.377165][ T7279] F2FS-fs (loop3): Found nat_bits in checkpoint
[  178.413340][ T7283] REISERFS (device loop2): checking transaction log (loop2)
[  178.446637][ T7254] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  178.531435][ T7279] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  178.718658][ T7273] team0: Port device team_slave_0 added
[  178.747258][ T7273] team0: Port device team_slave_1 added
[  178.758837][ T7283] REISERFS (device loop2): Using tea hash to sort names
[  178.783608][ T7283] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  178.832855][ T3735] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  178.861976][ T7283] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  178.963817][ T7273] batman_adv: batadv0: Adding interface: batadv_slave_0
[  178.970786][ T7273] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.975819][ T7283] 
[  178.998970][ T7283] ======================================================
[  179.005980][ T7283] WARNING: possible circular locking dependency detected
[  179.012991][ T7283] 5.15.168-syzkaller #0 Not tainted
[  179.018190][ T7283] ------------------------------------------------------
[  179.025222][ T7283] syz.2.823/7283 is trying to acquire lock:
[  179.031103][ T7283] ffff8880621e4bc0 (&type->i_mutex_dir_key#18/3){+.+.}-{3:3}, at: open_xa_dir+0x132/0x610
[  179.041026][ T7283] 
[  179.041026][ T7283] but task is already holding lock:
[  179.048371][ T7283] ffff888024d20090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5b/0xd0
[  179.057938][ T7283] 
[  179.057938][ T7283] which lock already depends on the new lock.
[  179.057938][ T7283] 
[  179.068318][ T7283] 
[  179.068318][ T7283] the existing dependency chain (in reverse order) is:
[  179.077311][ T7283] 
[  179.077311][ T7283] -> #1 (&sbi->lock){+.+.}-{3:3}:
[  179.084502][ T7283]        lock_acquire+0x1db/0x4f0
[  179.089514][ T7283]        __mutex_lock_common+0x1da/0x25a0
[  179.095214][ T7283]        mutex_lock_nested+0x17/0x20
[  179.100479][ T7283]        reiserfs_write_lock+0x76/0xd0
[  179.105920][ T7283]        reiserfs_mkdir+0x31d/0x8f0
[  179.111099][ T7283]        open_xa_dir+0x2c9/0x610
[  179.116020][ T7283]        xattr_lookup+0x24/0x280
[  179.120941][ T7283]        reiserfs_xattr_set_handle+0x100/0x10b0
[  179.127163][ T7283]        reiserfs_xattr_set+0x44e/0x570
[  179.132698][ T7283]        __vfs_setxattr+0x3e7/0x420
[  179.137897][ T7283]        __vfs_setxattr_noperm+0x12a/0x5e0
[  179.143694][ T7283]        vfs_setxattr+0x21d/0x420
[  179.148705][ T7283]        setxattr+0x27e/0x2e0
[  179.153363][ T7283]        path_setxattr+0x1bc/0x2a0
[  179.158459][ T7283]        __x64_sys_setxattr+0xb7/0xd0
[  179.163810][ T7283]        do_syscall_64+0x3b/0xb0
[  179.168730][ T7283]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.175130][ T7283] 
[  179.175130][ T7283] -> #0 (&type->i_mutex_dir_key#18/3){+.+.}-{3:3}:
[  179.183809][ T7283]        validate_chain+0x1649/0x5930
[  179.189211][ T7283]        __lock_acquire+0x1295/0x1ff0
[  179.194560][ T7283]        lock_acquire+0x1db/0x4f0
[  179.199562][ T7283]        down_write_nested+0x3b/0x60
[  179.204832][ T7283]        open_xa_dir+0x132/0x610
[  179.209751][ T7283]        reiserfs_for_each_xattr+0x1a4/0xb40
[  179.215715][ T7283]        reiserfs_delete_xattrs+0x1b/0x80
[  179.221414][ T7283]        reiserfs_evict_inode+0x20c/0x460
[  179.227117][ T7283]        evict+0x529/0x930
[  179.231513][ T7283]        reiserfs_create+0x5a7/0x6e0
[  179.236777][ T7283]        path_openat+0x130a/0x2f20
[  179.241866][ T7283]        do_filp_open+0x21c/0x460
[  179.246867][ T7283]        do_sys_openat2+0x13b/0x4f0
[  179.252044][ T7283]        __x64_sys_openat+0x243/0x290
[  179.257529][ T7283]        do_syscall_64+0x3b/0xb0
[  179.262504][ T7283]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.268919][ T7283] 
[  179.268919][ T7283] other info that might help us debug this:
[  179.268919][ T7283] 
[  179.279126][ T7283]  Possible unsafe locking scenario:
[  179.279126][ T7283] 
[  179.286554][ T7283]        CPU0                    CPU1
[  179.291900][ T7283]        ----                    ----
[  179.297246][ T7283]   lock(&sbi->lock);
[  179.301210][ T7283]                                lock(&type->i_mutex_dir_key#18/3);
[  179.309180][ T7283]                                lock(&sbi->lock);
[  179.315659][ T7283]   lock(&type->i_mutex_dir_key#18/3);
[  179.321106][ T7283] 
[  179.321106][ T7283]  *** DEADLOCK ***
[  179.321106][ T7283] 
[  179.329227][ T7283] 3 locks held by syz.2.823/7283:
[  179.334227][ T7283]  #0: ffff88806405c460 (sb_writers#27){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  179.343442][ T7283]  #1: ffff8880621e5260 (&type->i_mutex_dir_key#18){++++}-{3:3}, at: path_openat+0x824/0x2f20
[  179.353950][ T7283]  #2: ffff888024d20090 (&sbi->lock){+.+.}-{3:3}, at: reiserfs_write_lock_nested+0x5b/0xd0
[  179.363935][ T7283] 
[  179.363935][ T7283] stack backtrace:
[  179.369819][ T7283] CPU: 0 PID: 7283 Comm: syz.2.823 Not tainted 5.15.168-syzkaller #0
[  179.377953][ T7283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  179.387996][ T7283] Call Trace:
[  179.391272][ T7283]  <TASK>
[  179.394186][ T7283]  dump_stack_lvl+0x1e3/0x2d0
[  179.398852][ T7283]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  179.404469][ T7283]  ? print_circular_bug+0x12b/0x1a0
[  179.409650][ T7283]  check_noncircular+0x2f8/0x3b0
[  179.414570][ T7283]  ? mark_lock+0x98/0x340
[  179.418879][ T7283]  ? add_chain_block+0x850/0x850
[  179.423898][ T7283]  ? lockdep_lock+0x11f/0x2a0
[  179.428581][ T7283]  ? rcu_is_watching+0x11/0xa0
[  179.433348][ T7283]  validate_chain+0x1649/0x5930
[  179.438193][ T7283]  ? unwind_next_frame+0x1437/0x1fa0
[  179.443465][ T7283]  ? reacquire_held_locks+0x660/0x660
[  179.448821][ T7283]  ? is_bpf_text_address+0x24f/0x260
[  179.454089][ T7283]  ? stack_trace_save+0x1c0/0x1c0
[  179.459095][ T7283]  ? __kernel_text_address+0x94/0x100
[  179.464474][ T7283]  ? look_up_lock_class+0x77/0x120
[  179.469570][ T7283]  ? register_lock_class+0x100/0x9a0
[  179.474839][ T7283]  ? is_dynamic_key+0x1f0/0x1f0
[  179.479670][ T7283]  ? mark_lock+0x98/0x340
[  179.483981][ T7283]  __lock_acquire+0x1295/0x1ff0
[  179.488829][ T7283]  lock_acquire+0x1db/0x4f0
[  179.493311][ T7283]  ? open_xa_dir+0x132/0x610
[  179.497889][ T7283]  ? read_lock_is_recursive+0x10/0x10
[  179.503239][ T7283]  ? validate_chain+0x112/0x5930
[  179.508178][ T7283]  ? __might_sleep+0xc0/0xc0
[  179.512757][ T7283]  down_write_nested+0x3b/0x60
[  179.517506][ T7283]  ? open_xa_dir+0x132/0x610
[  179.522077][ T7283]  open_xa_dir+0x132/0x610
[  179.526477][ T7283]  ? listxattr_filler+0x400/0x400
[  179.531488][ T7283]  ? reiserfs_for_each_xattr+0xb2/0xb40
[  179.537016][ T7283]  reiserfs_for_each_xattr+0x1a4/0xb40
[  179.542461][ T7283]  ? invalidate_inode_page+0x370/0x370
[  179.547905][ T7283]  ? reiserfs_for_each_xattr+0xb40/0xb40
[  179.553523][ T7283]  ? reiserfs_delete_xattrs+0x80/0x80
[  179.558877][ T7283]  ? reiserfs_xattr_init+0x730/0x730
[  179.564153][ T7283]  ? do_raw_spin_unlock+0x137/0x8b0
[  179.569336][ T7283]  reiserfs_delete_xattrs+0x1b/0x80
[  179.574521][ T7283]  reiserfs_evict_inode+0x20c/0x460
[  179.579705][ T7283]  ? entry_points_to_object+0x6f0/0x6f0
[  179.585238][ T7283]  ? do_raw_spin_unlock+0x137/0x8b0
[  179.590424][ T7283]  ? entry_points_to_object+0x6f0/0x6f0
[  179.595951][ T7283]  evict+0x529/0x930
[  179.599833][ T7283]  ? mode_strip_sgid+0x210/0x210
[  179.604753][ T7283]  ? _raw_spin_unlock+0x24/0x40
[  179.609588][ T7283]  ? iput+0x6f5/0x8b0
[  179.613553][ T7283]  reiserfs_create+0x5a7/0x6e0
[  179.618304][ T7283]  ? reiserfs_lookup+0x4b0/0x4b0
[  179.623229][ T7283]  ? inode_permission+0xf7/0x450
[  179.628149][ T7283]  ? open_xa_dir+0x610/0x610
[  179.632724][ T7283]  ? bpf_lsm_inode_create+0x5/0x10
[  179.637817][ T7283]  ? security_inode_create+0xb4/0x100
[  179.643173][ T7283]  ? reiserfs_lookup+0x4b0/0x4b0
[  179.648093][ T7283]  path_openat+0x130a/0x2f20
[  179.652685][ T7283]  ? do_filp_open+0x460/0x460
[  179.657352][ T7283]  do_filp_open+0x21c/0x460
[  179.661836][ T7283]  ? vfs_tmpfile+0x2e0/0x2e0
[  179.666418][ T7283]  ? _raw_spin_unlock+0x24/0x40
[  179.671261][ T7283]  ? alloc_fd+0x598/0x630
[  179.675579][ T7283]  do_sys_openat2+0x13b/0x4f0
[  179.680240][ T7283]  ? do_sys_open+0x220/0x220
[  179.684819][ T7283]  __x64_sys_openat+0x243/0x290
[  179.689652][ T7283]  ? __ia32_sys_open+0x270/0x270
[  179.694575][ T7283]  ? syscall_enter_from_user_mode+0x2e/0x240
[  179.700545][ T7283]  ? lockdep_hardirqs_on+0x94/0x130
[  179.705725][ T7283]  ? syscall_enter_from_user_mode+0x2e/0x240
[  179.711691][ T7283]  do_syscall_64+0x3b/0xb0
[  179.716089][ T7283]  ? clear_bhb_loop+0x15/0x70
[  179.720745][ T7283]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  179.726632][ T7283] RIP: 0033:0x7f87f2cfbff9
[  179.731044][ T7283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  179.750632][ T7283] RSP: 002b:00007f87f1174038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  179.759026][ T7283] RAX: ffffffffffffffda RBX: 00007f87f2eb3f80 RCX: 00007f87f2cfbff9
[  179.766979][ T7283] RDX: 00000000000026e1 RSI: 0000000020000100 RDI: ffffffffffffff9c
[  179.774933][ T7283] RBP: 00007f87f2d6e296 R08: 0000000000000000 R09: 0000000000000000
[  179.782885][ T7283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  179.790836][ T7283] R13: 0000000000000000 R14: 00007f87f2eb3f80 R15: 00007ffe6fc0cdb8
[  179.798798][ T7283]  </TASK>
[  179.806997][ T3729] Bluetooth: hci3: command 0x0409 tx timeout
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  179.807359][ T7273] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.862558][ T7254] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  179.961413][ T7254] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.043020][ T7254] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  180.152924][ T3729] Bluetooth: hci0: command 0x041b tx timeout
[  180.332935][ T3735] usb 2-1: device descriptor read/all, error -71
[  180.834246][ T4003] device hsr_slave_0 left promiscuous mode
[  180.840562][ T4003] device hsr_slave_1 left promiscuous mode
[  180.847720][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.858164][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.866050][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.878837][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.886982][ T4003] device bridge_slave_1 left promiscuous mode
[  180.895694][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.905236][ T4003] device bridge_slave_0 left promiscuous mode
[  180.911398][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.925334][ T4003] device hsr_slave_0 left promiscuous mode
[  180.931591][ T4003] device hsr_slave_1 left promiscuous mode
[  180.940343][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  180.948123][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  180.956114][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.963877][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.971343][ T4003] device bridge_slave_1 left promiscuous mode
[  180.977505][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.985249][ T4003] device bridge_slave_0 left promiscuous mode
[  180.991359][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  181.001297][ T4003] device veth1_macvtap left promiscuous mode
[  181.007312][ T4003] device veth0_macvtap left promiscuous mode
[  181.013343][ T4003] device veth1_vlan left promiscuous mode
[  181.019068][ T4003] device veth0_vlan left promiscuous mode
[  181.025243][ T4003] device veth1_macvtap left promiscuous mode
[  181.031219][ T4003] device veth0_macvtap left promiscuous mode
[  181.038034][ T4003] device veth1_vlan left promiscuous mode
[  181.043858][ T4003] device veth0_vlan left promiscuous mode
[  181.150911][ T4003] team0 (unregistering): Port device team_slave_1 removed
[  181.164888][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  181.174414][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.186078][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.226792][ T4003] bond0 (unregistering): Released all slaves
[  181.301984][ T4003] team0 (unregistering): Port device team_slave_1 removed
[  181.311355][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  181.321811][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  181.335648][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  181.376796][ T4003] bond0 (unregistering): Released all slaves
[  182.297149][ T4003] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.356070][ T4003] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.415918][ T4003] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.457588][ T4003] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.550743][ T4003] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.585833][ T4003] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.646585][ T4003] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.685742][ T4003] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.763308][ T4003] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.796804][ T4003] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.855806][ T4003] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.895454][ T4003] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  184.009650][ T4003] device hsr_slave_0 left promiscuous mode
[  184.017569][ T4003] device hsr_slave_1 left promiscuous mode
[  184.024643][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.032178][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.041742][ T4003] device bridge_slave_1 left promiscuous mode
[  184.048292][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.058429][ T4003] device bridge_slave_0 left promiscuous mode
[  184.064740][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.077512][ T4003] device hsr_slave_0 left promiscuous mode
[  184.083842][ T4003] device hsr_slave_1 left promiscuous mode
[  184.090089][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.099493][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.107349][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.116459][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.124134][ T4003] device bridge_slave_1 left promiscuous mode
[  184.130274][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.138940][ T4003] device bridge_slave_0 left promiscuous mode
[  184.145223][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.155204][ T4003] device hsr_slave_0 left promiscuous mode
[  184.161240][ T4003] device hsr_slave_1 left promiscuous mode
[  184.168008][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.175479][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.183160][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.190547][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.198453][ T4003] device bridge_slave_1 left promiscuous mode
[  184.204616][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.212247][ T4003] device bridge_slave_0 left promiscuous mode
[  184.218509][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.227767][ T4003] device hsr_slave_0 left promiscuous mode
[  184.233903][ T4003] device hsr_slave_1 left promiscuous mode
[  184.239924][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  184.247338][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.254832][ T4003] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  184.262209][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_1
[  184.269735][ T4003] device bridge_slave_1 left promiscuous mode
[  184.276245][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.284264][ T4003] device bridge_slave_0 left promiscuous mode
[  184.290364][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.298461][ T4003] batman_adv: batadv0: Removing interface: batadv_slave_0
[  184.306443][ T4003] device bridge_slave_1 left promiscuous mode
[  184.312549][ T4003] bridge0: port 2(bridge_slave_1) entered disabled state
[  184.320237][ T4003] device bridge_slave_0 left promiscuous mode
[  184.326387][ T4003] bridge0: port 1(bridge_slave_0) entered disabled state
[  184.336930][ T4003] device veth1_macvtap left promiscuous mode
[  184.343080][ T4003] device veth0_macvtap left promiscuous mode
[  184.349073][ T4003] device veth1_vlan left promiscuous mode
[  184.354828][ T4003] device veth0_vlan left promiscuous mode
[  184.360890][ T4003] device veth1_macvtap left promiscuous mode
[  184.366906][ T4003] device veth0_macvtap left promiscuous mode
[  184.373128][ T4003] device veth1_vlan left promiscuous mode
[  184.378861][ T4003] device veth0_vlan left promiscuous mode
[  184.385493][ T4003] device veth1_macvtap left promiscuous mode
[  184.391471][ T4003] device veth0_macvtap left promiscuous mode
[  184.397654][ T4003] device veth1_vlan left promiscuous mode
[  184.403653][ T4003] device veth0_vlan left promiscuous mode
[  184.529288][ T4003] team0 (unregistering): Port device team_slave_1 removed
[  184.541126][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  184.550339][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.561017][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.597928][ T4003] bond0 (unregistering): Released all slaves
[  184.680626][ T4003] team0 (unregistering): Port device team_slave_1 removed
[  184.689971][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  184.699821][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.710695][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.748742][ T4003] bond0 (unregistering): Released all slaves
[  184.795976][ T4003] bond1 (unregistering): (slave team_slave_1): Releasing backup interface
[  184.805016][ T4003] bond1 (unregistering): Released all slaves
[  184.840389][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  184.849489][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  184.860885][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  184.898701][ T4003] bond0 (unregistering): Released all slaves
[  184.980575][ T4003] team0 (unregistering): Port device team_slave_1 removed
[  184.989845][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  185.000506][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.011842][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.051550][ T4003] bond0 (unregistering): Released all slaves
[  185.109153][ T4003] team0 (unregistering): Port device team_slave_1 removed
[  185.118251][ T4003] team0 (unregistering): Port device team_slave_0 removed
[  185.127637][ T4003] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  185.138241][ T4003] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  185.173436][ T4003] bond0 (unregistering): Released all slaves