last executing test programs:

18.012318861s ago: executing program 0 (id=1322):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000100)={'wg2\x00', <r2=>0x0})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)={0x24, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_LISTEN_PORT={0x6}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0x24}}, 0x0)

17.343530715s ago: executing program 0 (id=1326):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x22, 0x4, 0x0, 0x2, 0x88, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x18, 0x0, 0x0, 0x9, [0x401, 0x5, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")

14.658474173s ago: executing program 0 (id=1330):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x5517, &(0x7f0000005840)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x100000, &(0x7f0000000200)=ANY=[], 0x1, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x10)

8.671782668s ago: executing program 0 (id=1345):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x409, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_LEARNING={0x5}]}}}]}, 0x44}}, 0x0)

8.51678756s ago: executing program 0 (id=1346):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400008169bd6efb2502eaf60d000300020400bf050005001201", 0x2e}], 0x1}, 0x0)

7.379283373s ago: executing program 0 (id=1349):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10)
r1 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r1, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f00000002c0)=ANY=[@ANYBLOB="0200000010"], 0xfe44, 0x0)
r2 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddc1517600"})
r5 = syz_open_pts(r4, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10)
r8 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r8, 0x400455c8, 0x40000000004)
r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r9, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
ioctl$TCXONC(r5, 0x5427, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0xfea0)
ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x3, 0x8000000000000000})
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000080)={0x0, r10})

6.221465016s ago: executing program 3 (id=1356):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc086, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x77)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000080000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000040008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b700000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000400)={0x2c, &(0x7f0000000140)={0x20, 0x0, 0x8, {0x8, 0x0, "b3bc2219642f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

4.571809s ago: executing program 1 (id=1358):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

4.425607951s ago: executing program 1 (id=1361):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10)
syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f0000000180)={0x0, 0x22, 0xa, {[@local=@item_4={0x3, 0x2, 0x0, "e636a333"}, @local=@item_4={0x3, 0x2, 0x0, "4148abc6"}]}}, 0x0}, 0x0)

4.032132573s ago: executing program 2 (id=1362):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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")
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

3.791181143s ago: executing program 3 (id=1363):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='sched_switch\x00', r2}, 0x10)
socket$inet6(0xa, 0x0, 0x0)
rt_sigaction(0x22, &(0x7f0000000100)={&(0x7f00000002c0)="2437460f1c2bdfd5c4a2f10027c6c43b660f12eb28c4217d7fc341a4a4a978cbe32665d2950e000000dbf5", 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000380))
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300))
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
mkdir(&(0x7f00000002c0)='./file1\x00', 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=@can_delroute={0x154, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_CS_XOR={0x8, 0x5, {0x0, 0x8}}, @CGW_CS_CRC8={0x11e, 0x6, {0xfc, 0x0, 0x0, 0x0, 0x0, "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", 0x0, "dbf6ad242710a12236ec1625ac06613fc5f12f67"}}, @CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "2dc85f04a912dea2"}, 0x1}}]}, 0x154}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0}, 0x10)

3.670037983s ago: executing program 2 (id=1364):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000020000807b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='kmem_cache_free\x00', r4}, 0x10)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000013000/0x18000)=nil, &(0x7f0000000540)=[@textreal={0x8, 0x0}], 0x1, 0x0, &(0x7f0000000580)=[@efer={0x2, 0x800}], 0x1)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r5, 0x0)

3.135935526s ago: executing program 2 (id=1366):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000180)=0x8)
sendmsg$sock(r0, &(0x7f00000004c0)={&(0x7f0000000500)=@l2={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x6}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000240)="1ca8953a877319cfae7adcc8d68eee9204400d4fb1af11044f8f307d078936ff2918af280593073f429c0ea40559e8dd623da0469c321ca8bd9f4a6ef4bbf82084fe700abfd165b456934a7bc497101ab8dea20c6b9c1a5e191cfc990cdc03e49b2ca4bd8d3ce7b6b5101cbf2fcb37388b33d16b24b9", 0x76}, {&(0x7f00000003c0)}], 0x2}, 0x44)
epoll_create1(0x0)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
eventfd(0x0)
add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xfffffffffffffff8)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
open_tree(0xffffffffffffff9c, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1a17018b8eda53da1556e472c9a3b8318b2ddaf896091935d894b4e2196d1244a2ac0d08aea881d0197ff72162f01e20606c1e29475d51ab09c49682f51c9660b3a0e9973b5d34069ff93ba580cdc8bfc3037ea1118e984deb476d618bc74c58fd0237e644f7c8f4d66a6b4a58b825e4a385c225a1ecc363aaa60fcbe50a21bb925c252481e75acb0bbecdec509fb041ac85459ce07374ebd228298e262910e7d39959", @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_i', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])
r8 = syz_open_procfs(0x0, &(0x7f0000000440)='net/fib_triestat\x00')
read$FUSE(r8, &(0x7f0000007700)={0x2020}, 0x2020)

2.46898038s ago: executing program 3 (id=1368):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newspdinfo={0x1c, 0x24, 0x21, 0x0, 0x0, 0x0, [@XFRMA_SPD_IPV6_HTHRESH={0x6}]}, 0x1c}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x8, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r2, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000080)="88", 0x1c}], 0x1}}], 0x1, 0x0)

2.34016908s ago: executing program 3 (id=1369):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = accept4(r0, &(0x7f00000000c0)=@in={0x2, 0x0, @loopback}, &(0x7f0000000000)=0x80, 0x80000)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
socket$unix(0x1, 0x2, 0x0)
gettid()
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000740)=ANY=[@ANYBLOB="88008000080211000001080211000000505050505050d0ffebe5a5e0483c8ca4688a000000000000"], 0x28)
bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140), 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x0, 0x0, @loopback}], 0x1c)
syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f00000008c0)=ANY=[], 0x3c)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0)
r4 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000080)={0x0, 'team0\x00'})
ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'team0\x00'})
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000180), 0x0)
bind$l2tp(r1, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x35}, 0x1}, 0x10)
close(r0)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000000700)={'veth1_macvtap\x00', 0x8000})
sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
listen(r6, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000000f0, &(0x7f00000002c0)=[0x0, 0x0], ""/16, <r7=>0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0], 0x0, 0x281, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x4e, 0x8, 0x8, &(0x7f0000000540)}}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f00000004c0)={'syztnl0\x00', r7, 0x2f, 0xff, 0x40, 0x9, 0x41, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x40, 0x0, 0x7}})
socket$inet_smc(0x2b, 0x1, 0x0)
unshare(0x0)
socket$igmp6(0xa, 0x3, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)

2.33998794s ago: executing program 4 (id=1370):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000003e0095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='contention_begin\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)={0x14, 0x0, 0x2, 0x5}, 0x14}}, 0x0)

2.236659409s ago: executing program 1 (id=1371):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x802, &(0x7f0000000140)={[{@codepage={'codepage', 0x3d, 'macgaelic'}}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x3}}, {@file_umask={'file_umask', 0x3d, 0x6}}, {@gid}]}, 0x7, 0x2db, &(0x7f0000000240)="$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")
sched_setscheduler(0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r3 = openat$full(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0)
read$rfkill(r3, &(0x7f0000000080), 0xffffff1c)

2.236395079s ago: executing program 4 (id=1372):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x1, 0x8, 0x8}, 0x48)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="180300000005000000000000000000001801000011af000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000180100002020752500000000806020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r3, 0x3)
syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x14, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

2.231892619s ago: executing program 2 (id=1373):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x21, 0x4, 0x0, 0x2, 0x84, 0x67, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x9, [0x401, 0x5, 0x5, 0x0]}, @timestamp_prespec={0x44, 0x44, 0xc0, 0x3, 0x0, [{@private=0xa010102}, {@multicast1}, {@remote, 0x8000}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x65c}, {@broadcast}, {@empty}, {@multicast1, 0xffd200}, {@private=0xa010100}]}, @noop, @noop, @noop, @end, @rr={0x7, 0x13, 0x0, [@dev, @remote, @multicast1, @private]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_mount_image$vfat(&(0x7f0000000400), &(0x7f0000000280)='./file0\x00', 0x414, &(0x7f0000000000)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000"], 0x1, 0x2a1, &(0x7f0000000f40)="$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")

2.182756743s ago: executing program 4 (id=1374):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ACTIVE_PATH_TIMEOUT={0x8}]}]}, 0x28}}, 0x0)

2.052285054s ago: executing program 4 (id=1375):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f0000000140), 0x1, 0x784, &(0x7f00000007c0)="$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")
open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0)
r0 = open(&(0x7f0000000040)='./bus\x00', 0x10103e, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setuid(r2)
ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611)

1.506309958s ago: executing program 4 (id=1376):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x48}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c40), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000c80)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_DEL_INTERFACE(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000cc0)={0x1c, r2, 0x201, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0)

1.267762127s ago: executing program 3 (id=1377):
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000004c0)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@sysvgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@user_xattr}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x2, 0x56a, &(0x7f0000000a40)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0)
r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x18)
renameat2(r3, &(0x7f0000000080)='./file1\x00', r2, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000005c0)='./bus\x00')
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, 0x0, 0x0)
r5 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
renameat2(r4, &(0x7f0000000100)='./file0\x00', r5, &(0x7f0000000580)='./bus\x00', 0x0)

1.004575559s ago: executing program 2 (id=1378):
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10)
r2 = accept4(r1, 0x0, 0x0, 0x0)
sendmmsg$inet6(r2, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0xfdef}], 0x1, 0x0, 0x0, 0x7000000}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}, 0xff03}], 0x4000070, 0x8000)

936.220314ms ago: executing program 4 (id=1379):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file2\x00', 0x3008000, &(0x7f0000000980)=ANY=[], 0x1, 0x6260, &(0x7f000000c300)="$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")
open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.bfq.io_queued_recursive\x00', 0x275a, 0x0)

733.517431ms ago: executing program 2 (id=1380):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0xa082, 0x0)
write$binfmt_script(r1, &(0x7f0000000240), 0x208e24b)

448.003144ms ago: executing program 3 (id=1381):
fcntl$setown(0xffffffffffffffff, 0x8, 0xffffffffffffffff)
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000000))
syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES8], 0xb, 0x29f, &(0x7f0000000440)="$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")
setsockopt$rose(0xffffffffffffffff, 0x104, 0x0, &(0x7f0000000040), 0x4)
r1 = creat(0x0, 0x0)
close(0xffffffffffffffff)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f00000000c0))
ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, &(0x7f0000000140)={0x0, 0x0, [0x37, 0x9, 0x107, 0x0, 0xffff0002, 0x0, 0x1, 0x6]})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
syz_mount_image$exfat(&(0x7f0000000380), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x151b, &(0x7f0000002ac0)="$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")
chdir(0x0)
chdir(&(0x7f0000000240)='./file0\x00')
r2 = socket$kcm(0x10, 0x2, 0x4)
close(r2)
socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$inet(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000140)}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
ioprio_get$uid(0x0, 0xffffffffffffffff)
r4 = creat(&(0x7f0000000040)='./bus\x00', 0x40)
ftruncate(r4, 0x800)
lseek(r4, 0x200, 0x0)
r5 = open(&(0x7f0000000000)='./bus\x00', 0x24000, 0x0)
sendfile(r4, r5, 0x0, 0x1dd00)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)

189.404785ms ago: executing program 1 (id=1382):
r0 = socket$alg(0x26, 0x5, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff030}, {0x80000006}]}, 0x10)

319.31µs ago: executing program 1 (id=1383):
r0 = socket$kcm(0xa, 0x2, 0x88)
sendmsg$inet(r0, &(0x7f0000001600)={&(0x7f0000001340)={0x2, 0x2, @multicast2}, 0x10, 0x0, 0x0, &(0x7f0000001580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2f}, @multicast1}}}], 0x20}, 0x8000)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001380)=[{&(0x7f0000000080)="0d3cf41ddb9e617d3e9c4ac2f56d74702157f56871194fd55853e52d21b692e314a78b3e5322645f0ca09d60b80b402f46c522cc880bea0386da014f0fbf7ddcbcc117cf3a0e0d3536ecd29b9604e3c7d0a1246b3a90f80bc3ce23e9dc92a7fad4936eef2796df89ecec1069c27d6fb0347e959f8cbb67694e0f1a78dfabf75261695bac4f4d5ec60dc802fd7fe3028daec2e761f61e3017bedec1a6c3649e2e83d961c53029fd075b88dca3e6b98f7a682a28614b631571aeec4100ce42fdd971237dd152bf98e1889faf18c80fa963ece7fc047e8138fbc6eacae1838baa65251024e5c95b564b9de09021d60c638107bd9acc5dabe1d49ed1049b22f6342d257d190d71da655d3b803b4ff9af25af80689ce4bb6b141e3b11521857a0553a6f622ebc84d0341590548ce7a2467f3522e227c68006cbe07171075440245af81892eb29cead83040bc8538cb0ddcc61fb2d4bbcb82e312dca16240cb3f43861df01a700b74fae0773cf71ccde6a3afa95c06c08281e6353db4993bbb024fc5606fd17e3a4f0c400a71b214594dad8587530f035eb5cb00e5cb0778995370cfc271056693fea3703a181a31747cf490e0b639c7adfee9738508edd1ad8d3bb5baa31b691b4c7f493f07a393ec1386cd80b987d0033d532e6007813f67108e2374e66142ff0253ae43e1c64d8448e51c47743932d0d35a67d7d54d55723d074c703c0286db444b01729ab2fff4a626b82a4d0f0a5ed09e04d62ef1d43d8552b6e3fdbf848f7ca816906c4015e9f4bb2fe3b09fcc5f4e77f91517e5c1079322438f11cdd88eed14f30159d0ca76b51cce124377b4213fba3bfb1ba7006111a85d99eef4b265b19ac70c914d8197928645ab9d56a191a0624075a59fc9282714d4ea121febf2a8c7d6ff478a94bc7f053431b28c9a0ef8ff34bdba96b300412b6951a8cff2b43f892e7fa2f4c0e8d79ffdd9e4b7c91f937f5fad2c46a80aaefc91da27953c410be77832561f8a0974783f0d940d0434c1b3042a30bf319e9b98bce426745cd4d919c3fae027692d9739691fa35c80a4d203cf8c3ffc3273ce3bcd59ed909c3570b3d02055af8bc10b24adcf12c2274d0cab55e046aacfe42473bdca622a1436485ea68ed1207e65282b917553be076c930c54853d1a684e949b1d70e5fefc5204a321c71e2a0331dddb32cf68be93a33d0a6ed021a382f9ea07ff15e3d45ec1c7859de40ed096ab637c906423ad406916f38e8811b2d30bacf63d4bce791eee94f1cb55be7419ed802a67031c8e87ec5f66deee0fccde96f21e96bd60751984e7394fe132e351b0ed174b1c36549b85a74255cfd1e3bff02c6dbdfdf454c33e0a83e69c9439049ebe4e95fde0e817be2741152ccb81da9c4949e89edf1247533111cd85ec45087f4c21100ff339d302afd9ff8f0268c0ccae66fbda2509f07f48424de7a66170af686f1c7393b54e8b1ee438d90e375d08fcc0ef50ea7bdd73cc45ea6d93da96d36af2046742422d518976cebe1000978ef35ba077e696ad09b04140465b8a9eb133b0e291aa28dfcfbc7c7b0714739c30391a4b7ed1ff89e7ee3e8cf99311a8391092323c24ee332f5fdc5bccd5e30e2c0e1a509e13a83cbd113d93fad837acc7c6dce9edeb8ac86d669e06e33b8f7bad0fd3b978c0e50d6501426838ceda3393a3c020ea351496594f13245b88335473594aa12a10f8ba4d106e5ef71d638b528672094b5495e663a05af99c2c5d613bb39328a80ddcdac085fe306cb7503e49a18d7bab2b7921305275cf781c9f55599ab582b8cfe5ee128bce499273c351a86cac30e091ee2983fea7ff6a2e5e7c1f9c0a494418cff64a7297169ee89830d1813bce835deea0af36d0701b2cc579227c17e62aebaf16f66b4d61aed5793e2eb85c7b43d4673b7f1d8fcd70428dfe6cecf10ac022366e50738c9cd0a6a034a764e6e95e40f94c9683442ec3a452f5ccbcce5c945639147b8e066b2ced545836579f9fa44c1b14cfc975c2c10530763162d44dcfecd7ecdd008865151d3eb159784293122754884a6f602289dc51c41d9ba2d614c", 0x5c1}], 0x1}, 0x0)

0s ago: executing program 1 (id=1384):
syz_mount_image$jfs(&(0x7f0000000140), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0xfe, 0x61d3, &(0x7f0000008140)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x81000)
renameat2(r0, &(0x7f0000000140)='./file1\x00', r0, &(0x7f0000000980)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

kernel console output (not intermixed with test programs):

robe of 4-1:0.0 failed with error -5
[  294.042390][ T8218] sysv_count_free_inodes: unable to read inode table
[  294.118495][ T7499] sysv_free_block: trying to free block not in datazone
[  294.137468][ T7499] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  294.215691][ T3939] radio-raremono 4-1:0.0: Thanko's Raremono connected: (10C4:818A)
[  294.983282][ T8214] loop2: detected capacity change from 0 to 32768
[  295.025568][ T3939] radio-raremono 4-1:0.0: raremono_cmd_main failed (-71)
[  295.042040][ T3939] radio-raremono 4-1:0.0: V4L2 device registered as radio32
[  295.051158][ T3939] usb 4-1: USB disconnect, device number 25
[  295.057538][ T3939] radio-raremono 4-1:0.0: Thanko's Raremono disconnected
[  295.096150][ T8214] XFS: attr2 mount option is deprecated.
[  295.146887][ T8214] XFS: noikeep mount option is deprecated.
[  295.328672][ T8238] loop4: detected capacity change from 0 to 512
[  295.357691][ T8214] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  295.441042][ T8238] EXT4-fs (loop4): Unrecognized mount option "nojournal_checksum"oldalloc" or missing value
[  295.456091][ T8214] XFS (loop2): Quotacheck needed: Please wait.
[  295.527610][  T144] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  295.537643][ T8252] loop1: detected capacity change from 0 to 128
[  295.568048][ T8252] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  295.583985][  T144] XFS (loop2): Unmount and run xfs_repair
[  295.595676][ T8252] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  295.627060][  T144] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  295.658247][  T144] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  295.735769][  T144] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  295.745129][  T144] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  295.785130][  T144] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  295.809139][  T144] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  295.818430][  T144] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  295.828041][  T144] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  295.866205][  T144] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  295.892771][  T144] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  295.935087][  T144] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  296.006178][  T144] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  296.062347][ T8239] loop3: detected capacity change from 0 to 32768
[  296.079322][ T8214] XFS (loop2): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  296.120214][ T8266] loop4: detected capacity change from 0 to 64
[  296.157298][ T7233] XFS (loop2): Unmounting Filesystem
[  296.375749][ T8239] XFS (loop3): Mounting V5 Filesystem
[  296.445478][ T3939] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  296.495613][ T8239] XFS (loop3): Ending clean mount
[  296.503297][ T8239] XFS (loop3): Quotacheck needed: Please wait.
[  296.637166][ T8239] XFS (loop3): Quotacheck: Done.
[  296.655769][ T3939] usb 1-1: device descriptor read/64, error -71
[  296.781948][   T26] audit: type=1804 audit(1720342294.540:112): pid=8239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1045" name="/newroot/43/file0/bus" dev="loop3" ino=9291 res=1 errno=0
[  296.817063][ T8284] loop2: detected capacity change from 0 to 512
[  296.879630][ T8284] EXT4-fs (loop2): Ignoring removed orlov option
[  296.886326][ T8284] EXT4-fs (loop2): Test dummy encryption mode enabled
[  296.937497][ T8284] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  296.950017][ T3939] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  296.991673][ T8284] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002]
[  297.010322][ T8284] System zones: 1-12
[  297.028728][ T8284] EXT4-fs error (device loop2): ext4_orphan_get:1397: inode #15: comm syz.2.1053: casefold flag without casefold feature
[  297.104435][ T8284] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: inode #12: comm syz.2.1053: missing EA_INODE flag
[  297.146130][ T8284] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.1053: error while reading EA inode 12 err=-117
[  297.158585][ T3939] usb 1-1: device descriptor read/64, error -71
[  297.214568][ T8284] EXT4-fs (loop2): 1 orphan inode deleted
[  297.234778][ T8284] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none.
[  297.261127][ T7195] XFS (loop3): Unmounting Filesystem
[  297.275713][ T3939] usb usb1-port1: attempt power cycle
[  298.426904][ T3939] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  298.457445][ T8293] loop3: detected capacity change from 0 to 512
[  298.515653][ T3939] usb 1-1: device descriptor read/8, error -71
[  298.547260][ T8293] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.1054: iget: bogus i_mode (0)
[  298.563973][ T8293] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.1054: couldn't read orphan inode 17 (err -117)
[  298.609751][ T8293] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  298.683287][   T26] audit: type=1326 audit(1720342296.440:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8300 comm="syz.4.1057" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f371c5c4bd9 code=0x0
[  298.790477][ T3939] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  298.895682][ T3939] usb 1-1: device descriptor read/8, error -71
[  299.015608][ T3939] usb usb1-port1: unable to enumerate USB device
[  299.024428][ T8310] loop2: detected capacity change from 0 to 8192
[  299.085270][ T8312] loop3: detected capacity change from 0 to 8192
[  299.133105][ T8310] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  299.155675][ T8310] REISERFS (device loop2): using ordered data mode
[  299.162232][ T8310] reiserfs: using flush barriers
[  299.217208][ T8310] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  299.255980][ T8312] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  299.265263][ T8312] REISERFS (device loop3): using ordered data mode
[  299.305586][ T8312] reiserfs: using flush barriers
[  299.312140][ T8310] REISERFS (device loop2): checking transaction log (loop2)
[  299.321716][ T8312] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  299.385930][ T8312] REISERFS (device loop3): checking transaction log (loop3)
[  299.563083][ T8310] REISERFS (device loop2): Using tea hash to sort names
[  299.601664][ T8310] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  299.631050][ T8322] loop4: detected capacity change from 0 to 512
[  299.671185][ T8322] EXT4-fs (loop4): Ignoring removed orlov option
[  299.678452][ T8310] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  299.695783][ T8322] EXT4-fs (loop4): Test dummy encryption mode enabled
[  299.718555][ T8322] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  299.744681][ T8324] loop3: detected capacity change from 0 to 128
[  299.785646][ T8322] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a040e01c, mo2=0002]
[  299.844089][ T8322] System zones: 1-12
[  299.845224][ T8314] loop1: detected capacity change from 0 to 32768
[  299.876829][ T8322] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1066: casefold flag without casefold feature
[  299.896658][ T8314] XFS: attr2 mount option is deprecated.
[  299.902361][ T8314] XFS: noikeep mount option is deprecated.
[  299.955813][ T8322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #12: comm syz.4.1066: missing EA_INODE flag
[  300.040334][ T8322] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1066: error while reading EA inode 12 err=-117
[  300.111332][ T8322] EXT4-fs (loop4): 1 orphan inode deleted
[  300.117360][ T8322] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,orlov,errors=continue,test_dummy_encryption,auto_da_alloc,nodiscard,,errors=continue. Quota mode: none.
[  300.322018][ T8314] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  300.532005][ T8341] loop2: detected capacity change from 0 to 256
[  300.580705][ T8314] XFS (loop1): Quotacheck needed: Please wait.
[  300.588535][ T8341] FAT-fs (loop2): Unrecognized mount option "sys€=£DËþÒÈäR_immutable" or missing value
[  300.618625][ T3767] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  300.634358][ T3767] XFS (loop1): Unmount and run xfs_repair
[  300.661422][ T3767] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  300.928871][ T3767] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  300.988700][ T3767] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  301.017491][ T3767] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  301.026582][ T3767] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  301.242110][ T3767] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  301.255082][ T3767] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  301.268088][ T3767] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  301.277928][ T3767] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  301.305605][ T3767] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  301.396980][ T3767] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  301.452045][ T3767] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  301.522279][ T8314] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  301.674178][ T7499] XFS (loop1): Unmounting Filesystem
[  301.679045][ T8370] loop4: detected capacity change from 0 to 128
[  301.815480][ T5108] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  301.929081][ T8367] loop2: detected capacity change from 0 to 8192
[  302.012738][ T8367] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  302.050818][ T8367] REISERFS (device loop2): using ordered data mode
[  302.058088][ T8367] reiserfs: using flush barriers
[  302.067581][ T8367] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  302.164706][ T8367] REISERFS (device loop2): checking transaction log (loop2)
[  302.216736][ T5108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  302.257936][ T5108] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  302.270729][ T5108] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  302.290206][ T5108] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  302.307565][ T5108] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  302.353382][ T5108] usb 1-1: config 0 descriptor??
[  302.689706][ T8375] FAULT_INJECTION: forcing a failure.
[  302.689706][ T8375] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  302.703438][ T8375] CPU: 0 PID: 8375 Comm: syz.2.1079 Not tainted 5.15.162-syzkaller #0
[  302.711600][ T8375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  302.721654][ T8375] Call Trace:
[  302.724952][ T8375]  <TASK>
[  302.727884][ T8375]  dump_stack_lvl+0x1e3/0x2d0
[  302.732581][ T8375]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  302.738212][ T8375]  ? panic+0x860/0x860
[  302.742289][ T8375]  should_fail+0x38a/0x4c0
[  302.746726][ T8375]  _copy_from_user+0x2d/0x170
[  302.751399][ T8375]  __se_sys_memfd_create+0x19f/0x590
[  302.756678][ T8375]  ? vtime_user_exit+0x2d1/0x400
[  302.761612][ T8375]  ? __x64_sys_memfd_create+0x60/0x60
[  302.767207][ T8375]  ? syscall_enter_from_user_mode+0x2e/0x240
[  302.773223][ T8375]  ? lockdep_hardirqs_on+0x94/0x130
[  302.778431][ T8375]  ? syscall_enter_from_user_mode+0x2e/0x240
[  302.784418][ T8375]  do_syscall_64+0x3b/0xb0
[  302.788860][ T8375]  ? clear_bhb_loop+0x15/0x70
[  302.793534][ T8375]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  302.799428][ T8375] RIP: 0033:0x7f61f0238bd9
[  302.803842][ T8375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  302.823448][ T8375] RSP: 002b:00007f61eecb8e28 EFLAGS: 00000206 ORIG_RAX: 000000000000013f
[  302.831864][ T8375] RAX: ffffffffffffffda RBX: 000000000001272b RCX: 00007f61f0238bd9
[  302.839829][ T8375] RDX: 00007f61eecb8f00 RSI: 0000000000000000 RDI: 00007f61f02a6d24
[  302.847799][ T8375] RBP: 0000000020014bc0 R08: 00007f61eecb8bc7 R09: 00007f61eecb8e50
[  302.855771][ T8375] R10: 000000000000000a R11: 0000000000000206 R12: 0000000020000100
[  302.863740][ T8375] R13: 00007f61eecb8f00 R14: 00007f61eecb8ec0 R15: 0000000020000140
[  302.871743][ T8375]  </TASK>
[  302.887776][ T5108] plantronics 0003:047F:FFFF.0007: No inputs registered, leaving
[  302.915273][ T5108] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  303.189258][ T8377] loop2: detected capacity change from 0 to 32768
[  303.304872][ T8377] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  303.313687][ T8377] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  303.375276][ T8377] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  303.389284][ T5108] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  303.425912][ T5108] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  303.504167][ T5108] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 78ms
[  303.530599][ T5108] gfs2: fsid=syz:syz.0: jid=0: Done
[  303.546724][ T8377] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  303.883049][ T8373] loop1: detected capacity change from 0 to 32768
[  304.051889][ T8373] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1078 (8373)
[  304.822221][ T8373] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  304.839508][ T8373] BTRFS error (device loop1): support for check_integrity* not compiled in!
[  304.885667][   T23] usb 1-1: reset high-speed USB device number 21 using dummy_hcd
[  304.945654][ T8373] BTRFS error (device loop1): open_ctree failed
[  305.765941][ T3939] usb 1-1: USB disconnect, device number 21
[  305.858021][ T8412] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  305.911088][ T8406] cgroup: noprefix used incorrectly
[  306.037410][ T8406] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  306.716793][ T8425] loop1: detected capacity change from 0 to 64
[  306.904981][ T8393] loop2: detected capacity change from 0 to 32768
[  307.065142][ T8398] loop3: detected capacity change from 0 to 32768
[  307.087390][ T8398] XFS: attr2 mount option is deprecated.
[  307.093174][ T8398] XFS: noikeep mount option is deprecated.
[  307.154018][ T8393] XFS (loop2): Mounting V5 Filesystem
[  307.209082][ T8398] XFS (loop3): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  307.318803][ T8398] XFS (loop3): Quotacheck needed: Please wait.
[  307.362906][ T8393] XFS (loop2): Ending clean mount
[  307.397857][ T8393] XFS (loop2): Quotacheck needed: Please wait.
[  307.458636][    T9] XFS (loop3): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  307.524630][ T8393] XFS (loop2): Quotacheck: Done.
[  307.524759][    T9] XFS (loop3): Unmount and run xfs_repair
[  307.537336][    T9] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  307.545192][    T9] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  307.579711][    T9] 00000010: 00 00 02 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  307.728837][   T26] audit: type=1804 audit(1720342305.490:114): pid=8453 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1081" name="/newroot/48/file0/bus" dev="loop2" ino=9291 res=1 errno=0
[  307.873305][    T9] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  307.932535][    T9] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  307.953632][ T7233] XFS (loop2): Unmounting Filesystem
[  307.992489][    T9] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  308.061612][    T9] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  308.134767][    T9] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  308.225467][    T9] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  308.235017][    T9] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  308.356012][    T9] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  308.401504][    T9] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  308.477543][ T8425] loop1: detected capacity change from 0 to 32768
[  308.479677][ T8398] XFS (loop3): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  308.554451][ T7195] XFS (loop3): Unmounting Filesystem
[  308.706848][ T8425] XFS (loop1): Mounting V5 Filesystem
[  308.854800][ T8472] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  308.894551][ T8425] XFS (loop1): Ending clean mount
[  309.097594][   T26] audit: type=1804 audit(1720342306.860:115): pid=8425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1096" name="/newroot/37/file0/file1" dev="loop1" ino=4422 res=1 errno=0
[  309.221200][ T7499] XFS (loop1): Unmounting Filesystem
[  310.033095][ T8496] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1112'.
[  310.259626][ T8455] loop4: detected capacity change from 0 to 65536
[  311.183266][ T8506] loop4: detected capacity change from 0 to 8192
[  311.211807][ T8501] loop3: detected capacity change from 0 to 32768
[  311.271724][ T8506] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  311.315811][ T8506] REISERFS (device loop4): using ordered data mode
[  311.322627][ T8506] reiserfs: using flush barriers
[  311.329866][ T8506] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  311.346787][ T8506] REISERFS (device loop4): checking transaction log (loop4)
[  311.452276][ T8501] XFS (loop3): Mounting V5 Filesystem
[  311.499613][ T8512] loop1: detected capacity change from 0 to 8192
[  311.522540][ T8529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1120'.
[  311.641279][ T8501] XFS (loop3): Ending clean mount
[  311.659355][ T8535] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  311.714161][ T8501] XFS (loop3): Quotacheck needed: Please wait.
[  311.761675][ T8512] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  311.777677][ T8512] REISERFS (device loop1): using ordered data mode
[  311.785731][ T8512] reiserfs: using flush barriers
[  311.793371][ T8512] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  311.836485][ T8512] REISERFS (device loop1): checking transaction log (loop1)
[  311.998900][ T8501] XFS (loop3): Quotacheck: Done.
[  312.017770][ T3939] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  312.134174][ T8544] QAT: Device 0 not found
[  312.155299][   T26] audit: type=1804 audit(1720342309.910:116): pid=8501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1113" name="/newroot/57/file0/bus" dev="loop3" ino=9291 res=1 errno=0
[  312.210301][ T8540] loop4: detected capacity change from 0 to 8192
[  312.262497][ T7195] XFS (loop3): Unmounting Filesystem
[  312.289623][ T8540] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  312.301434][ T8551] loop1: detected capacity change from 0 to 64
[  312.316363][ T8540] REISERFS (device loop4): using ordered data mode
[  312.343324][ T8540] reiserfs: using flush barriers
[  312.396244][ T8540] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  312.441347][ T8551] MINIX-fs: bad superblock
[  312.446300][ T3939] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  312.463127][ T3939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.481979][ T8540] REISERFS (device loop4): checking transaction log (loop4)
[  312.497298][ T3939] usb 3-1: config 0 descriptor??
[  312.504375][ T8540] REISERFS (device loop4): Using r5 hash to sort names
[  312.548325][ T3939] cp210x 3-1:0.0: cp210x converter detected
[  312.569334][ T8540] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  312.577890][ T8540] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  312.585450][ T8540] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  312.592064][ T8540] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  312.598850][ T8540] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  312.600691][ T8551] loop1: detected capacity change from 0 to 512
[  312.605351][ T8540] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  312.618062][ T8540] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  312.624584][ T8540] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  312.631177][ T8540] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  312.637683][ T8540] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  312.714905][ T8540] reiserfs: enabling write barrier flush mode
[  312.772142][ T8540] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  312.789812][ T8551] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  312.804302][ T8551] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038 (0x7fffffff)
[  312.846453][   T26] audit: type=1800 audit(1720342310.610:117): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1126" name="memory.events" dev="loop4" ino=2 res=0 errno=0
[  312.981703][   T26] audit: type=1804 audit(1720342310.690:118): pid=8540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.1126" name="/newroot/49/file0/memory.events" dev="loop4" ino=2 res=1 errno=0
[  313.324295][ T8571] binder: Binderfs stats mode cannot be changed during a remount
[  313.351990][ T8573] loop4: detected capacity change from 0 to 1024
[  313.371445][ T3939] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  313.386661][ T3939] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  313.429786][ T3939] usb 3-1: cp210x converter now attached to ttyUSB0
[  313.446225][ T3939] usb 3-1: USB disconnect, device number 16
[  313.489369][ T3939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  313.513131][ T8579] loop1: detected capacity change from 0 to 1024
[  313.514788][ T3939] cp210x 3-1:0.0: device disconnected
[  313.784283][    T9] hfsplus: b-tree write err: -5, ino 4
[  313.867641][ T8583] loop4: detected capacity change from 0 to 512
[  313.957288][ T8583] loop4: detected capacity change from 0 to 1024
[  314.069428][ T8583] EXT4-fs (loop4): Ignoring removed orlov option
[  314.095753][ T8585] loop1: detected capacity change from 0 to 1024
[  314.142980][ T8583] EXT4-fs (loop4): mounted filesystem without journal. Opts: barrier=0x0000000000000000,debug_want_extra_isize=0x000000000000007a,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000001,data_err=abort,,errors=continue. Quota mode: writeback.
[  314.199740][ T8587] loop3: detected capacity change from 0 to 8192
[  314.251617][ T8587] Dev loop3: RDB in block 1 has bad checksum
[  314.305173][ T2963] Dev loop3: RDB in block 1 has bad checksum
[  314.407151][ T8591] syz.1.1141 (8591) used greatest stack depth: 19200 bytes left
[  314.416346][ T7499] hfsplus: bad catalog entry type
[  314.658374][ T8595] loop4: detected capacity change from 0 to 1024
[  314.786998][ T8595] FAULT_INJECTION: forcing a failure.
[  314.786998][ T8595] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  314.875703][ T8595] CPU: 1 PID: 8595 Comm: syz.4.1144 Not tainted 5.15.162-syzkaller #0
[  314.883907][ T8595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  314.893982][ T8595] Call Trace:
[  314.897286][ T8595]  <TASK>
[  314.900269][ T8595]  dump_stack_lvl+0x1e3/0x2d0
[  314.904985][ T8595]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  314.910650][ T8595]  ? panic+0x860/0x860
[  314.914757][ T8595]  ? __lock_acquire+0x1ff0/0x1ff0
[  314.919824][ T8595]  should_fail+0x38a/0x4c0
[  314.924265][ T8595]  strncpy_from_user+0x32/0x370
[  314.929147][ T8595]  getname_flags+0xf5/0x4e0
[  314.933690][ T8595]  do_sys_openat2+0xd2/0x500
[  314.938303][ T8595]  ? read_lock_is_recursive+0x10/0x10
[  314.943690][ T8595]  ? do_sys_open+0x220/0x220
[  314.948305][ T8595]  __x64_sys_openat+0x243/0x290
[  314.953170][ T8595]  ? __ia32_sys_open+0x270/0x270
[  314.958116][ T8595]  ? syscall_enter_from_user_mode+0x2e/0x240
[  314.964100][ T8595]  ? lockdep_hardirqs_on+0x94/0x130
[  314.969306][ T8595]  ? syscall_enter_from_user_mode+0x2e/0x240
[  314.975293][ T8595]  do_syscall_64+0x3b/0xb0
[  314.979710][ T8595]  ? clear_bhb_loop+0x15/0x70
[  314.984389][ T8595]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  314.990284][ T8595] RIP: 0033:0x7f371c5c4bd9
[  314.994705][ T8595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  315.014312][ T8595] RSP: 002b:00007f371b045048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  315.022830][ T8595] RAX: ffffffffffffffda RBX: 00007f371c752f60 RCX: 00007f371c5c4bd9
[  315.030900][ T8595] RDX: 0000000000000000 RSI: 0000000020000400 RDI: ffffffffffffff9c
[  315.038874][ T8595] RBP: 00007f371b0450a0 R08: 0000000000000000 R09: 0000000000000000
[  315.047173][ T8595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  315.055160][ T8595] R13: 000000000000000b R14: 00007f371c752f60 R15: 00007ffdb7566828
[  315.063157][ T8595]  </TASK>
[  315.148693][ T6080] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.160142][    T9] hfsplus: b-tree write err: -5, ino 4
[  315.188258][ T1436] hfsplus: b-tree write err: -5, ino 4
[  315.270435][ T6080] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.370262][ T8601] loop3: detected capacity change from 0 to 128
[  315.392529][ T6080] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.452106][ T8601] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  315.484030][ T8601] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  315.531268][ T6080] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.602143][ T8596] chnl_net:caif_netlink_parms(): no params data found
[  315.903487][ T8617] loop4: detected capacity change from 0 to 512
[  315.957995][ T8620] loop3: detected capacity change from 0 to 4096
[  315.996274][ T8620] ntfs3: Bad value for 'gid'
[  316.069205][ T8617] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors
[  316.083524][ T8596] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.116909][ T8596] bridge0: port 1(bridge_slave_0) entered disabled state
[  316.142783][ T8617] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 2)!
[  316.161360][ T8596] device bridge_slave_0 entered promiscuous mode
[  316.176560][ T8617] EXT4-fs (loop4): group descriptors corrupted!
[  316.189430][ T3939] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  316.215697][ T3939] Bluetooth: hci4: Injecting HCI hardware error event
[  316.256328][ T3518] Bluetooth: hci4: hardware error 0x00
[  316.394294][ T8596] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.404414][ T8596] bridge0: port 2(bridge_slave_1) entered disabled state
[  316.422737][ T8596] device bridge_slave_1 entered promiscuous mode
[  316.496909][ T8617] loop4: detected capacity change from 0 to 512
[  316.559931][ T8617] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  316.589929][ T8617] EXT4-fs (loop4): test_dummy_encryption requires encrypt feature
[  316.675953][ T8596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  316.828217][ T4459] Bluetooth: hci1: command 0x0409 tx timeout
[  316.875715][ T8596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  316.953109][ T8605] chnl_net:caif_netlink_parms(): no params data found
[  317.056523][ T8596] team0: Port device team_slave_0 added
[  317.103288][ T8596] team0: Port device team_slave_1 added
[  317.109034][ T4459] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  317.136933][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  317.143757][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  317.171626][ T8652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1156'.
[  317.221875][ T8652] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1156'.
[  317.249160][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_0
[  317.266839][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.364032][ T8596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  317.406719][ T8617] loop4: detected capacity change from 0 to 32768
[  317.429056][ T8596] batman_adv: batadv0: Adding interface: batadv_slave_1
[  317.436185][ T8596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  317.503672][ T8617] jfs_rename did not expect dtDelete to return rc = -2
[  317.514169][ T8617] ERROR: (device loop4): jfs_rename: 
[  317.514169][ T8617] 
[  317.524678][ T8596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  317.535480][ T5108] Bluetooth: hci2: command 0x0409 tx timeout
[  317.552086][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  317.573051][ T4459] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  317.585703][ T4459] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  317.594788][ T4459] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  317.610706][ T4459] usb 1-1: config 0 descriptor??
[  317.662019][ T8605] bridge0: port 1(bridge_slave_0) entered blocking state
[  317.686049][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state
[  317.701439][ T8605] device bridge_slave_0 entered promiscuous mode
[  317.711214][ T8605] bridge0: port 2(bridge_slave_1) entered blocking state
[  317.745200][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state
[  317.762887][ T8605] device bridge_slave_1 entered promiscuous mode
[  317.868068][ T8596] device hsr_slave_0 entered promiscuous mode
[  317.875356][ T8596] device hsr_slave_1 entered promiscuous mode
[  317.883932][ T8596] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  317.922135][ T8596] Cannot create hsr debugfs directory
[  317.974903][ T8682] loop3: detected capacity change from 0 to 4096
[  318.022286][ T8682] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  318.043681][ T8682] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  318.062595][ T8605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  318.317926][ T8605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  318.327422][ T4459] hid-led: probe of 0003:27B8:01ED.0008 failed with error -71
[  318.422137][ T4459] usb 1-1: USB disconnect, device number 22
[  318.723298][ T8605] team0: Port device team_slave_0 added
[  318.807411][ T8704] loop4: detected capacity change from 0 to 128
[  318.826058][ T8605] team0: Port device team_slave_1 added
[  318.876457][ T6080] device hsr_slave_0 left promiscuous mode
[  318.906663][ T4459] Bluetooth: hci1: command 0x041b tx timeout
[  318.939333][ T6080] device hsr_slave_1 left promiscuous mode
[  318.957485][ T8704] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  318.984309][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  318.996017][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0
[  319.003526][ T8704] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  319.022595][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  319.044808][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1
[  319.087453][ T6080] device bridge_slave_0 left promiscuous mode
[  319.093720][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[  319.128120][ T6080] device veth1_macvtap left promiscuous mode
[  319.137042][ T6080] device veth0_macvtap left promiscuous mode
[  319.143175][ T6080] device veth1_vlan left promiscuous mode
[  319.149670][ T6080] device veth0_vlan left promiscuous mode
[  319.240915][ T8712] tipc: Can't bind to reserved service type 1
[  319.601599][ T6080] team0 (unregistering): Port device team_slave_1 removed
[  319.615711][ T3939] Bluetooth: hci2: command 0x041b tx timeout
[  319.628405][ T6080] team0 (unregistering): Port device team_slave_0 removed
[  319.643486][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  319.662046][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  319.804337][ T6080] bond0 (unregistering): Released all slaves
[  319.937629][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  319.939162][    C0] Illegal XDP return value 1603896156, expect packet loss!
[  319.968779][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  319.976717][ T8716] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  319.988940][ T8716] net_ratelimit: 48 callbacks suppressed
[  319.988959][ T8716] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  320.167429][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.204203][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.250007][ T8605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.308106][    T9] ntfs3: loop3: ntfs3_write_inode r=5 failed, -22.
[  320.458803][ T8605] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.474894][ T8605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.536120][ T8605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  320.579712][ T8729] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  320.732963][ T8605] device hsr_slave_0 entered promiscuous mode
[  320.755197][ T8605] device hsr_slave_1 entered promiscuous mode
[  320.766934][ T8605] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  320.774825][ T8605] Cannot create hsr debugfs directory
[  320.976002][ T4459] Bluetooth: hci1: command 0x040f tx timeout
[  321.104179][ T8747] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[  321.332322][ T8596] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  321.364307][ T8605] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.390889][ T8596] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  321.416343][ T8596] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  321.445919][ T8596] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  321.500310][ T8605] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.611132][ T8605] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.705721][ T4459] Bluetooth: hci2: command 0x040f tx timeout
[  321.724518][ T8605] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  321.900511][ T8596] 8021q: adding VLAN 0 to HW filter on device bond0
[  321.976991][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  321.996305][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  322.029626][ T8596] 8021q: adding VLAN 0 to HW filter on device team0
[  322.103090][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  322.116359][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  322.127338][ T8773] loop4: detected capacity change from 0 to 1024
[  322.153005][ T3554] bridge0: port 1(bridge_slave_0) entered blocking state
[  322.160228][ T3554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  322.188895][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  322.206173][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  322.225072][ T3554] bridge0: port 2(bridge_slave_1) entered blocking state
[  322.232248][ T3554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  322.256391][ T3554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  322.274287][ T8773] EXT4-fs (loop4): Test dummy encryption mode enabled
[  322.300141][ T8773] EXT4-fs (loop4): Ignoring removed orlov option
[  322.379688][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  322.403306][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  322.405597][ T8773] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x000000000000007a,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  322.412454][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  322.448924][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  322.457790][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  322.467076][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  322.485044][ T8596] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  322.591344][ T8596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  322.637655][ T8605] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  322.656895][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  322.664876][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  322.716171][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  322.745266][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  322.762309][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  322.786865][ T8605] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  322.820197][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  322.844822][ T8605] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  322.889458][ T8605] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  323.056120][ T4459] Bluetooth: hci1: command 0x0419 tx timeout
[  323.245060][ T8605] 8021q: adding VLAN 0 to HW filter on device bond0
[  323.325720][ T8596] 8021q: adding VLAN 0 to HW filter on device batadv0
[  323.337203][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  323.375895][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  323.394293][ T8605] 8021q: adding VLAN 0 to HW filter on device team0
[  323.456886][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  323.464994][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  323.518472][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  323.536117][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  323.544607][ T4457] bridge0: port 1(bridge_slave_0) entered blocking state
[  323.551795][ T4457] bridge0: port 1(bridge_slave_0) entered forwarding state
[  323.635964][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  323.644764][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  323.658602][ T8804] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1175'.
[  323.693347][ T4457] bridge0: port 2(bridge_slave_1) entered blocking state
[  323.700492][ T4457] bridge0: port 2(bridge_slave_1) entered forwarding state
[  323.736046][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  323.761954][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  323.793435][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  323.838755][ T4459] Bluetooth: hci2: command 0x0419 tx timeout
[  323.868515][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  323.880748][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  323.922590][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  323.951543][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  323.990940][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  324.017974][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  324.061145][ T8596] device veth0_vlan entered promiscuous mode
[  324.110381][ T8605] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  324.125150][ T8820] program syz.0.1177 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  324.155406][ T8605] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  324.206552][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  324.214697][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  324.264588][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  324.474932][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  324.484508][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  324.493614][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  324.512804][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  324.541891][ T8596] device veth1_vlan entered promiscuous mode
[  325.131142][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  325.156665][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  325.164584][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  325.208763][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  325.355912][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  325.364706][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  325.438614][ T8596] device veth0_macvtap entered promiscuous mode
[  325.481265][ T8596] device veth1_macvtap entered promiscuous mode
[  325.589737][ T8854] loop4: detected capacity change from 0 to 512
[  325.592012][ T8605] 8021q: adding VLAN 0 to HW filter on device batadv0
[  325.620255][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.640791][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.654570][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.673973][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.699407][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.721958][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.734127][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  325.752845][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.764531][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_0
[  325.786443][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.806354][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.824047][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.843461][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.853927][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.872062][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.882432][ T8596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  325.901246][ T8596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  325.925440][ T8596] batman_adv: batadv0: Interface activated: batadv_slave_1
[  325.939390][ T8596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  325.948701][ T8596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  325.958646][ T8596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  325.967810][ T8596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  325.982833][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  325.995272][ T8856] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  325.996096][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  326.016906][ T8854] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  326.024511][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  326.042439][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  326.050839][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  326.059927][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  326.069083][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  326.078063][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  326.176665][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  326.200813][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  326.366508][ T8858] device geneve2 entered promiscuous mode
[  326.435598][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  326.444046][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  326.470260][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  326.487658][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  326.514375][ T8605] device veth0_vlan entered promiscuous mode
[  326.551031][ T8605] device veth1_vlan entered promiscuous mode
[  326.579929][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.631395][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.672874][ T8605] device veth0_macvtap entered promiscuous mode
[  326.681350][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  326.691854][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  326.709496][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  326.723207][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  326.734200][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  326.756065][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  326.756955][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  326.774201][ T3516] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  326.791732][ T8605] device veth1_macvtap entered promiscuous mode
[  326.849893][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.860256][ T8864] loop4: detected capacity change from 0 to 256
[  326.888252][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.906081][ T8864] exfat: Deprecated parameter 'namecase'
[  326.914137][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.925472][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.941646][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.942096][ T8864] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  326.952585][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.981919][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  326.993997][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.004206][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  327.021400][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.036795][ T7195] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  327.047599][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_0
[  327.061642][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  327.070804][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  327.082379][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  327.091694][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  327.110722][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.129471][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.183343][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.229478][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.249178][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.260032][ T8869] loop4: detected capacity change from 0 to 1024
[  327.262424][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.278217][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.289078][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.301111][ T8605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  327.311768][ T8605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  327.323497][ T8605] batman_adv: batadv0: Interface activated: batadv_slave_1
[  327.353427][ T8869] EXT4-fs (loop4): Test dummy encryption mode enabled
[  327.372232][ T8869] EXT4-fs (loop4): Ignoring removed orlov option
[  327.412870][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  327.418369][ T8869] EXT4-fs (loop4): mounted filesystem without journal. Opts: test_dummy_encryption,debug_want_extra_isize=0x000000000000007a,stripe=0x0000000000000007,commit=0x0000000000000005,orlov,barrier=0x0000000000000005,max_batch_time=0x0000000000000000,data_err=abort,,errors=continue. Quota mode: writeback.
[  327.422316][ T5109] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  327.495313][ T8872] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1189'.
[  327.530233][ T8605] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  327.537993][ T3554] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  327.541023][ T8605] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  327.555261][ T8605] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  327.564252][ T8605] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  327.885208][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  327.925812][ T3554] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  327.925844][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  327.942886][ T3554] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.984206][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  328.005616][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  328.008481][ T3554] usb 4-1: config 0 descriptor??
[  328.058205][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  328.098063][ T3554] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  328.104522][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  328.280926][ T8899] loop1: detected capacity change from 0 to 2048
[  328.385545][ T3550] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  328.385693][ T8899] NILFS (loop1): unrecognized mount option ""
[  328.464161][ T6080] device hsr_slave_0 left promiscuous mode
[  328.471609][ T6080] device hsr_slave_1 left promiscuous mode
[  328.489875][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  328.510976][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_0
[  328.541645][ T6080] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  328.543883][ T8899] input: syz0 as /devices/virtual/input/input15
[  328.551111][ T6080] batman_adv: batadv0: Removing interface: batadv_slave_1
[  328.571605][ T6080] device bridge_slave_1 left promiscuous mode
[  328.580750][ T3550] usb 3-1: device descriptor read/64, error -71
[  328.593694][ T6080] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.604574][ T6080] device bridge_slave_0 left promiscuous mode
[  328.615990][ T5104] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  328.632117][ T6080] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.692545][ T6080] device veth1_macvtap left promiscuous mode
[  328.706255][ T6080] device veth0_macvtap left promiscuous mode
[  328.733303][ T6080] device veth1_vlan left promiscuous mode
[  328.755955][ T6080] device veth0_vlan left promiscuous mode
[  329.530948][ T3550] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  329.575782][ T3554] gspca_stv06xx: HDCS-1000/1100 sensor detected
[  329.696985][ T5104] usb 1-1: config 0 has an invalid interface number: 86 but max is 0
[  329.715454][ T5104] usb 1-1: config 0 has no interface number 0
[  329.722311][ T5104] usb 1-1: config 0 interface 86 altsetting 254 endpoint 0xC has invalid wMaxPacketSize 0
[  329.732633][ T3550] usb 3-1: device descriptor read/64, error -71
[  329.754093][ T5104] usb 1-1: config 0 interface 86 altsetting 254 endpoint 0x2 has invalid wMaxPacketSize 0
[  329.771495][ T5104] usb 1-1: config 0 interface 86 altsetting 254 has an invalid endpoint with address 0x0, skipping
[  329.783126][ T5104] usb 1-1: config 0 interface 86 has no altsetting 0
[  329.800913][ T5104] usb 1-1: New USB device found, idVendor=12d1, idProduct=7d48, bcdDevice=44.8e
[  329.814295][ T5104] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  329.832550][ T5104] usb 1-1: config 0 descriptor??
[  329.857401][ T3550] usb usb3-port1: attempt power cycle
[  329.878083][ T5104] option 1-1:0.86: GSM modem (1-port) converter detected
[  329.885677][ T3554] STV06xx: probe of 4-1:0.0 failed with error -71
[  329.904650][ T3554] usb 4-1: USB disconnect, device number 26
[  330.079799][ T6080] team0 (unregistering): Port device team_slave_1 removed
[  330.116437][ T6080] team0 (unregistering): Port device team_slave_0 removed
[  330.154594][ T6080] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  330.184964][ T6080] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  330.265529][ T3550] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  330.319977][ T6080] bond0 (unregistering): Released all slaves
[  330.365668][ T3550] usb 3-1: device descriptor read/8, error -71
[  330.428653][ T8911] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1199'.
[  330.432000][ T4459] usb 1-1: USB disconnect, device number 23
[  330.452255][ T4459] option 1-1:0.86: device disconnected
[  330.649612][ T3550] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  330.701720][ T8909] loop4: detected capacity change from 0 to 40427
[  330.756588][ T3550] usb 3-1: device descriptor read/8, error -71
[  330.801521][ T8909] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  330.826486][ T8909] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  330.845135][ T8931] program syz.3.1205 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  330.863719][ T8909] F2FS-fs (loop4): invalid crc value
[  330.895797][ T3550] usb usb3-port1: unable to enumerate USB device
[  330.918950][ T8909] F2FS-fs (loop4): Found nat_bits in checkpoint
[  330.929376][ T8936] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  331.045552][ T8929] loop1: detected capacity change from 0 to 128
[  331.113259][ T8909] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  331.133199][ T8929] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  331.155628][ T8909] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  331.205710][ T8929] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  331.217012][ T8933] attempt to access beyond end of device
[  331.217012][ T8933] loop4: rw=2049, want=45112, limit=40427
[  331.325516][ T4459] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  331.475665][ T4460] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  331.638885][ T8945] loop1: detected capacity change from 0 to 1024
[  331.695660][ T4460] usb 3-1: device descriptor read/64, error -71
[  331.729573][ T8945] hfsplus: Filesystem is marked locked, mounting read-only.
[  331.946148][ T4459] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=97.58
[  331.965939][ T4459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.979788][ T4460] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  332.019287][ T4459] usb 1-1: Product: syz
[  332.023509][ T4459] usb 1-1: Manufacturer: syz
[  332.038994][ T8936] loop3: detected capacity change from 0 to 40427
[  332.048847][ T4459] usb 1-1: SerialNumber: syz
[  332.076546][ T4459] usb 1-1: config 0 descriptor??
[  332.127724][ T8936] F2FS-fs (loop3): invalid crc value
[  332.137250][ T4459] usb 1-1: active config #0 != 1 ??
[  332.195680][ T4460] usb 3-1: device descriptor read/64, error -71
[  332.203453][ T8936] F2FS-fs (loop3): Found nat_bits in checkpoint
[  332.215637][   T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  332.316060][ T4460] usb usb3-port1: attempt power cycle
[  332.357597][ T8936] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  332.386851][ T8936] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  332.452978][ T8955] udc-core: couldn't find an available UDC or it's busy
[  332.480888][   T23] usb 2-1: Using ep0 maxpacket: 32
[  332.484166][ T8931] attempt to access beyond end of device
[  332.484166][ T8931] loop3: rw=2049, want=45112, limit=40427
[  332.497166][ T8955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  332.645541][   T23] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 39081, setting to 1024
[  332.657216][ T5111] usb 1-1: USB disconnect, device number 24
[  332.682851][   T23] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024
[  332.753567][ T4460] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  332.839455][ T8960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1213'.
[  332.857186][ T4460] usb 3-1: device descriptor read/8, error -71
[  332.906164][   T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  332.926360][   T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  332.945661][   T23] usb 2-1: Product: syz
[  332.955249][   T23] usb 2-1: Manufacturer: syz
[  332.966507][   T23] usb 2-1: SerialNumber: syz
[  333.025818][ T8945] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  333.147344][ T4460] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  333.242123][ T8962] loop3: detected capacity change from 0 to 256
[  333.275741][ T4460] usb 3-1: device descriptor read/8, error -71
[  333.303870][   T23] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  333.399470][ T8962] FAT-fs (loop3): error, fat_free: invalid cluster chain (i_pos 196)
[  333.415912][ T4460] usb usb3-port1: unable to enumerate USB device
[  333.545773][    C1] usblp0: nonzero write bulk status received: -71
[  333.561661][ T3550] usb 2-1: USB disconnect, device number 14
[  333.610823][ T8971] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000a87)
[  333.638802][ T3550] usblp0: removed
[  333.697588][ T8971] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000a87)
[  333.955452][ T5109] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  334.245632][ T5109] usb 4-1: Using ep0 maxpacket: 8
[  334.386552][ T5109] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  334.441092][ T5109] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  334.540091][ T5109] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  334.612552][ T8988] loop4: detected capacity change from 0 to 256
[  334.619130][ T5109] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  334.706241][ T8988] exfat: Deprecated parameter 'namecase'
[  334.709318][ T5109] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  334.736579][ T5109] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  334.756920][ T5109] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.783374][ T8988] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  334.937019][ T8994] program syz.0.1222 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  334.989489][ T8991] loop2: detected capacity change from 0 to 128
[  335.005685][ T8997] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  335.045588][ T5109] usb 4-1: usb_control_msg returned -32
[  335.051493][ T5109] usbtmc 4-1:16.0: can't read capabilities
[  335.073215][ T8991] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  335.132508][ T8991] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  335.185575][ T5111] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  335.475754][ T5111] usb 2-1: too many configurations: 65, using maximum allowed: 8
[  335.565856][ T5111] usb 2-1: config 0 has no interfaces?
[  335.655856][ T5111] usb 2-1: config 0 has no interfaces?
[  335.735715][ T4459] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  335.746300][ T5111] usb 2-1: config 0 has no interfaces?
[  335.831829][ T5111] usb 2-1: config 0 has no interfaces?
[  335.916435][ T5111] usb 2-1: config 0 has no interfaces?
[  335.995825][ T5111] usb 2-1: config 0 has no interfaces?
[  336.085938][ T5111] usb 2-1: config 0 has no interfaces?
[  336.166112][ T5111] usb 2-1: config 0 has no interfaces?
[  336.171656][ T5111] usb 2-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  336.190825][ T5111] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  336.204856][ T5111] usb 2-1: config 0 descriptor??
[  336.306287][ T4459] usb 3-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=97.58
[  336.325681][ T4459] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.333727][ T4459] usb 3-1: Product: syz
[  336.350916][ T9010] loop4: detected capacity change from 0 to 32768
[  336.395839][ T4459] usb 3-1: Manufacturer: syz
[  336.400825][ T9010] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1228 (9010)
[  336.413841][ T4459] usb 3-1: SerialNumber: syz
[  336.429570][ T4459] usb 3-1: config 0 descriptor??
[  336.449834][ T9010] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  336.468952][ T4460] usb 4-1: USB disconnect, device number 27
[  336.488747][ T9010] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  336.502293][ T4459] usb 3-1: active config #0 != 1 ??
[  336.536372][ T9010] BTRFS info (device loop4): use zstd compression, level 3
[  336.544203][ T1436] attempt to access beyond end of device
[  336.544203][ T1436] loop3: rw=1, want=86224, limit=256
[  336.607110][ T9010] BTRFS info (device loop4): using free space tree
[  336.624123][ T9010] BTRFS info (device loop4): has skinny extents
[  336.688649][ T7195] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000a87)
[  336.898276][ T9023] input: syz1 as /devices/virtual/input/input17
[  336.904879][ T9023] input: failed to attach handler leds to device input17, error: -6
[  337.402815][ T9010] BTRFS info (device loop4): enabling ssd optimizations
[  337.435058][ T9010] BTRFS info (device loop4): checking UUID tree
[  337.512264][ T9040] udc-core: couldn't find an available UDC or it's busy
[  337.524729][ T9040] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  337.589722][    T9] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.821568][    T9] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.980252][    T9] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  337.999789][ T9000] loop2: detected capacity change from 0 to 256
[  338.095814][    T9] bridge0: port 3(netdevsim0) entered disabled state
[  338.110826][ T9000] FAT-fs (loop2): Unrecognized mount option "utf" or missing value
[  338.126517][    T9] device netdevsim0 left promiscuous mode
[  338.133540][    T9] bridge0: port 3(netdevsim0) entered disabled state
[  338.153448][    T9] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  338.346526][ T4447] usb 2-1: USB disconnect, device number 15
[  338.453414][ T9045] chnl_net:caif_netlink_parms(): no params data found
[  338.468418][ T5111] usb 3-1: USB disconnect, device number 25
[  338.761402][ T9045] bridge0: port 1(bridge_slave_0) entered blocking state
[  338.769484][ T9045] bridge0: port 1(bridge_slave_0) entered disabled state
[  338.783070][ T9045] device bridge_slave_0 entered promiscuous mode
[  338.827953][ T9073] loop1: detected capacity change from 0 to 8
[  338.847265][ T9045] bridge0: port 2(bridge_slave_1) entered blocking state
[  338.854609][ T9045] bridge0: port 2(bridge_slave_1) entered disabled state
[  338.899118][ T9045] device bridge_slave_1 entered promiscuous mode
[  338.931400][ T9073] SQUASHFS error: lzo decompression failed, data probably corrupt
[  338.948420][ T9073] SQUASHFS error: Failed to read block 0x91: -5
[  338.995843][ T9073] SQUASHFS error: Unable to read metadata cache entry [8f]
[  339.003096][ T9073] SQUASHFS error: Unable to read inode 0x11f
[  339.043777][ T9045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  339.061266][ T9045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  339.162119][ T9086] program syz.1.1240 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  339.246628][ T9088] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  339.262852][ T9045] team0: Port device team_slave_0 added
[  339.324584][ T9045] team0: Port device team_slave_1 added
[  339.477137][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_0
[  339.515402][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.593620][ T9045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  339.679823][ T9045] batman_adv: batadv0: Adding interface: batadv_slave_1
[  339.695446][ T9045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  339.766090][ T9045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  339.874481][ T4460] Bluetooth: hci0: command 0x0409 tx timeout
[  339.929171][ T9045] device hsr_slave_0 entered promiscuous mode
[  339.949998][ T9045] device hsr_slave_1 entered promiscuous mode
[  340.277810][ T9089] loop2: detected capacity change from 0 to 32768
[  340.375602][ T9089] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1241 (9089)
[  340.457154][ T9089] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  340.472023][    T9] device hsr_slave_0 left promiscuous mode
[  340.486147][ T9089] BTRFS info (device loop2): setting nodatacow, compression disabled
[  340.494382][ T9089] BTRFS info (device loop2): setting datacow
[  340.535456][ T9089] BTRFS info (device loop2): doing ref verification
[  340.542114][ T9089] BTRFS info (device loop2): force clearing of disk cache
[  340.565547][    T9] device hsr_slave_1 left promiscuous mode
[  340.582383][ T9089] BTRFS info (device loop2): turning off barriers
[  340.592640][ T9088] loop1: detected capacity change from 0 to 40427
[  340.622332][ T9089] BTRFS info (device loop2): enabling ssd optimizations
[  340.630089][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  340.642712][ T9089] BTRFS info (device loop2): using spread ssd allocation scheme
[  340.643876][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  340.673239][ T9089] BTRFS info (device loop2): not using ssd optimizations
[  340.711434][ T9088] F2FS-fs (loop1): invalid crc value
[  340.719037][ T9089] BTRFS info (device loop2): not using spread ssd allocation scheme
[  340.735749][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  340.743303][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  340.759705][ T9089] BTRFS info (device loop2): using free space tree
[  340.804306][ T9088] F2FS-fs (loop1): Found nat_bits in checkpoint
[  340.811504][    T9] device bridge_slave_1 left promiscuous mode
[  340.825120][ T9089] BTRFS info (device loop2): has skinny extents
[  340.826066][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  340.864221][    T9] device bridge_slave_0 left promiscuous mode
[  340.886141][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  340.986254][ T9088] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  340.996664][    T9] device veth1_macvtap left promiscuous mode
[  341.002945][    T9] device veth0_macvtap left promiscuous mode
[  341.022256][    T9] device veth1_vlan left promiscuous mode
[  341.029960][ T9088] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  341.077352][ T9089] BTRFS info (device loop2): clearing free space tree
[  341.084935][ T9089] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  341.097821][    T9] device veth0_vlan left promiscuous mode
[  341.188084][ T9089] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  341.217938][ T9086] attempt to access beyond end of device
[  341.217938][ T9086] loop1: rw=2049, want=45112, limit=40427
[  341.363345][ T9089] BTRFS info (device loop2): creating free space tree
[  341.390232][ T9089] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  341.422136][ T9089] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  341.936345][   T23] Bluetooth: hci0: command 0x041b tx timeout
[  342.045681][ T9137] loop1: detected capacity change from 0 to 512
[  342.206026][ T9137] EXT4-fs (loop1): Ignoring removed nobh option
[  342.212497][ T9137] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  342.296960][ T9137] EXT4-fs (loop1): 1 truncate cleaned up
[  342.302668][ T9137] EXT4-fs (loop1): mounted filesystem without journal. Opts: i_version,nobh,data_err=ignore,nolazytime,init_itable=0x0000000000000004,acl,,errors=continue. Quota mode: none.
[  342.347884][    T9] team0 (unregistering): Port device team_slave_1 removed
[  342.378045][    T9] team0 (unregistering): Port device team_slave_0 removed
[  342.392387][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  342.461412][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  342.693015][    T9] bond0 (unregistering): Released all slaves
[  342.730835][ T9148] loop2: detected capacity change from 0 to 128
[  342.816590][ T9148] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  342.882602][ T9148] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  343.283341][ T9151] loop2: detected capacity change from 0 to 1024
[  343.493940][ T9045] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  343.562926][ T9045] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  343.685879][ T9045] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  343.745654][ T9045] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  343.798796][ T9159] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1251'.
[  344.036837][ T4460] Bluetooth: hci0: command 0x040f tx timeout
[  344.126160][ T9137] loop_set_status: loop1 () has still dirty pages (nrpages=2)
[  344.136988][   T23] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  344.273837][ T9045] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.333405][ T9045] 8021q: adding VLAN 0 to HW filter on device team0
[  344.388377][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  344.406161][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  344.414125][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  344.456305][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  344.464837][ T5103] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.471992][ T5103] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.536324][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  344.563135][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  344.585577][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  344.593735][ T5103] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.603673][ T5103] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.618219][ T9183] loop4: detected capacity change from 0 to 512
[  344.635536][   T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  344.650165][ T8605] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /10/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  344.665442][   T23] usb 3-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  344.683404][ T9181] overlayfs: failed to get index nlink (file1/bus, err=-61)
[  344.691656][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.701691][   T23] usb 3-1: config 0 descriptor??
[  344.706367][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  344.742950][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  344.752546][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  344.766853][ T8605] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  344.791762][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  344.808654][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  344.823615][ T8605] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /10/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  344.847194][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  344.862981][ T9183] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  344.863162][ T8605] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  344.874281][ T9183] ext4 filesystem being mounted at /85/bus supports timestamps until 2038 (0x7fffffff)
[  344.910438][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  344.936856][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  344.984387][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  345.016828][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  345.106075][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  345.114579][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  345.119368][ T8605] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /10/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  345.164432][ T9045] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  345.344143][ T8605] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  345.366154][   T23] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0
[  345.374300][   T23] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0
[  345.468148][   T23] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0
[  345.502823][ T8605] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /10/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  345.552168][   T23] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0
[  345.615893][   T23] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0
[  345.661458][   T23] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0
[  345.672034][ T8605] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  345.714305][   T23] logitech-djreceiver 0003:046D:C71B.0009: unknown main item tag 0x0
[  345.746606][ T8605] EXT4-fs error (device loop1): ext4_readdir:260: inode #11: block 54: comm syz-executor: path /10/bus/lost+found: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=1024 fake=0
[  345.784794][   T23] usb 3-1: USB disconnect, device number 26
[  345.799075][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  345.807363][ T3548] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  345.830649][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv0
[  345.925960][ T8605] EXT4-fs error (device loop1): ext4_empty_dir:3131: inode #11: block 54: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=5120, inode=0, rec_len=0, size=1024 fake=0
[  346.007378][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  346.030062][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  346.087622][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  346.133930][ T4447] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  346.148836][ T9045] device veth0_vlan entered promiscuous mode
[  346.209990][ T9045] device veth1_vlan entered promiscuous mode
[  346.229490][ T4457] Bluetooth: hci0: command 0x0419 tx timeout
[  346.285877][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  346.293850][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  346.362813][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  346.449059][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  346.477397][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  346.512114][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  346.588433][ T9045] device veth0_macvtap entered promiscuous mode
[  347.533694][ T9245] loop4: detected capacity change from 0 to 2048
[  347.613589][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  347.651880][ T9045] device veth1_macvtap entered promiscuous mode
[  347.657350][ T9245] EXT4-fs (loop4): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none.
[  347.696471][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.715632][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.755471][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.816520][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  347.863834][ T9258] loop2: detected capacity change from 0 to 2048
[  347.893690][   T26] audit: type=1800 audit(1720342345.650:119): pid=9245 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1270" name="file2" dev="loop4" ino=16 res=0 errno=0
[  347.899967][ T9261] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  347.925428][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  347.983868][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.021342][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  348.051373][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.082005][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.122594][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  348.156214][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  348.186611][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.243920][ T9258] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none.
[  348.294749][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.349972][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.360932][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.424379][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.456589][   T26] audit: type=1800 audit(1720342346.210:120): pid=9258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1273" name="file2" dev="loop2" ino=16 res=0 errno=0
[  348.482672][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.489440][ T9279] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  348.512143][ T9045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  348.533146][ T9045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  348.552590][ T9045] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.607293][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  348.626369][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  348.668346][ T9045] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.725569][ T9045] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.748356][ T9045] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.775431][ T9045] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.164680][ T3972] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.201682][ T3972] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.322047][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  349.364818][ T3972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.403348][ T3972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.434836][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  349.758686][    T9] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.833129][    T9] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  349.934064][ T9292] chnl_net:caif_netlink_parms(): no params data found
[  350.004592][    T9] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.032714][ T9325] loop4: detected capacity change from 0 to 128
[  350.127810][ T9325] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  350.158039][ T9329] loop2: detected capacity change from 0 to 2048
[  350.193591][ T9325] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  350.231639][    T9] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.362155][ T9329] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none.
[  350.445069][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  350.544405][ T9292] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.584590][ T9292] bridge0: port 1(bridge_slave_0) entered disabled state
[  350.597741][ T9340] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  350.610506][ T9292] device bridge_slave_0 entered promiscuous mode
[  350.612936][   T26] audit: type=1800 audit(1720342348.360:121): pid=9329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1284" name="file2" dev="loop2" ino=16 res=0 errno=0
[  350.696304][ T9292] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.757222][ T9292] bridge0: port 2(bridge_slave_1) entered disabled state
[  350.806849][ T9292] device bridge_slave_1 entered promiscuous mode
[  350.977083][ T9292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  351.016842][ T9344] loop2: detected capacity change from 0 to 2048
[  351.048613][ T9292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  351.056048][ T5103] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  351.145411][ T3516] Bluetooth: hci2: command 0x0409 tx timeout
[  351.177139][ T9314] loop3: detected capacity change from 0 to 40427
[  351.184411][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  351.209829][ T9344] EXT4-fs (loop2): mounted filesystem without journal. Opts: commit=0x0000000000000005,,errors=continue. Quota mode: none.
[  351.276803][ T9314] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  351.284587][ T9314] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  351.320180][ T9292] team0: Port device team_slave_0 added
[  351.367862][ T3662] udevd[3662]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  351.399996][ T9314] F2FS-fs (loop3): invalid crc value
[  351.414718][ T9292] team0: Port device team_slave_1 added
[  351.436527][ T9354] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  351.455918][ T5103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  351.479957][ T5103] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  351.491486][ T9314] F2FS-fs (loop3): Found nat_bits in checkpoint
[  351.499593][ T5103] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  351.519654][   T26] audit: type=1800 audit(1720342349.280:122): pid=9344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1286" name="file2" dev="loop2" ino=16 res=0 errno=0
[  351.546590][ T5103] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.568625][ T5103] usb 5-1: config 0 descriptor??
[  351.580700][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_0
[  351.614367][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.697740][ T9292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  351.702606][ T9314] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  351.718081][ T9314] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  351.728070][ T9292] batman_adv: batadv0: Adding interface: batadv_slave_1
[  351.735167][ T9292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  351.762346][ T9292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  351.880732][ T7095] udevd[7095]: symlink '../../loop3' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:3' failed: Read-only file system
[  351.947670][ T9372] syz.3.1280[9372] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  351.947769][ T9372] syz.3.1280[9372] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  352.018165][ T9292] device hsr_slave_0 entered promiscuous mode
[  352.041729][ T9292] device hsr_slave_1 entered promiscuous mode
[  352.051816][ T5103] logitech-hidpp-device 0003:046D:C086.000A: item fetching failed at offset 2/5
[  352.064523][ T5103] logitech-hidpp-device 0003:046D:C086.000A: hidpp_probe:parse failed
[  352.082826][ T5103] logitech-hidpp-device: probe of 0003:046D:C086.000A failed with error -22
[  352.098774][ T9292] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  352.106442][ T9292] Cannot create hsr debugfs directory
[  352.245624][ T5103] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  352.269127][ T3551] usb 5-1: USB disconnect, device number 12
[  352.279925][ T3509] Bluetooth: Unknown BR/EDR signaling command 0x36
[  352.292240][ T9378] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  352.296786][ T3509] Bluetooth: Wrong link type (-22)
[  352.319490][ T9378] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  352.442453][  T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  352.465522][  T154] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  352.625810][ T5103] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  352.639175][ T9392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1290'.
[  352.655173][ T5103] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  352.675911][ T9392] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1290'.
[  352.679202][ T5103] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  352.705778][ T5103] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  352.715111][ T5103] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.740820][ T5103] usb 1-1: config 0 descriptor??
[  352.765787][ T9374] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  353.150262][ T9408] loop2: detected capacity change from 0 to 2048
[  353.225985][ T4457] Bluetooth: hci2: command 0x041b tx timeout
[  353.248373][ T9408] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096)
[  353.265291][ T5858] udevd[5858]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  353.378043][ T5103] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0
[  353.406164][ T5103] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving
[  353.466256][ T5103] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  353.714811][   T23] usb 5-1: new low-speed USB device number 13 using dummy_hcd
[  354.187396][ T5110] usb 1-1: USB disconnect, device number 25
[  354.191358][ T9425] loop2: detected capacity change from 0 to 2048
[  354.230625][ T9425] EXT4-fs (loop2): cluster size (2048) smaller than block size (4096)
[  354.322120][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  354.394204][   T23] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  354.550537][   T23] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  354.562347][   T23] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 is Bulk; changing to Interrupt
[  354.572652][   T23] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  354.592951][   T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  355.073457][ T9292] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  355.152470][ T9409] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  355.217932][   T23] hub 5-1:1.0: bad descriptor, ignoring hub
[  355.223901][   T23] hub: probe of 5-1:1.0 failed with error -5
[  355.244879][   T23] cdc_wdm 5-1:1.0: skipping garbage
[  355.261227][   T23] cdc_wdm 5-1:1.0: skipping garbage
[  355.287411][ T9292] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  355.295589][ T4447] Bluetooth: hci2: command 0x040f tx timeout
[  355.331054][   T23] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  355.338494][ T9292] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  355.356214][   T23] cdc_wdm 5-1:1.0: Unknown control protocol
[  355.410493][    T9] device hsr_slave_0 left promiscuous mode
[  355.458559][    T9] device hsr_slave_1 left promiscuous mode
[  355.500902][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  355.525926][    T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[  355.551493][    T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  355.574810][    T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[  355.609755][    T9] device bridge_slave_1 left promiscuous mode
[  355.637480][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.679627][    T9] device bridge_slave_0 left promiscuous mode
[  355.716861][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.753199][    T9] device veth1_macvtap left promiscuous mode
[  355.760774][    T9] device veth0_macvtap left promiscuous mode
[  355.780112][    T9] device veth1_vlan left promiscuous mode
[  355.789791][    T9] device veth0_vlan left promiscuous mode
[  356.451984][ T9443] loop2: detected capacity change from 0 to 32768
[  356.515842][ T5110] usb 5-1: USB disconnect, device number 13
[  356.608423][    T9] team0 (unregistering): Port device team_slave_1 removed
[  356.632000][    T9] team0 (unregistering): Port device team_slave_0 removed
[  356.655260][    T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  356.707660][ T5858] udevd[5858]: symlink '../../loop2' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:2' failed: Read-only file system
[  356.747616][    T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  356.761134][ T9443] XFS (loop2): Mounting V5 Filesystem
[  356.935422][ T9443] XFS (loop2): Ending clean mount
[  357.064173][ T9443] XFS (loop2): Quotacheck needed: Please wait.
[  357.375676][ T4447] Bluetooth: hci2: command 0x0419 tx timeout
[  357.493273][ T9443] XFS (loop2): Quotacheck: Done.
[  357.523862][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-uuid/d7dc424e-7990-42cb-9f91-9cb7200a101d.tmp-b7:2' failed: Read-only file system
[  357.560690][    T9] bond0 (unregistering): Released all slaves
[  357.610107][ T8596] XFS (loop2): Unmounting Filesystem
[  357.765976][ T9292] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  357.775260][ T9450] device hsr0 entered promiscuous mode
[  357.786840][ T9451] device hsr_slave_0 left promiscuous mode
[  357.793647][ T9451] device hsr_slave_1 left promiscuous mode
[  358.157633][ T9479] loop3: detected capacity change from 0 to 4096
[  358.213741][ T9292] 8021q: adding VLAN 0 to HW filter on device bond0
[  358.255649][ T9479] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  358.329955][ T3662] udevd[3662]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  358.345937][ T9292] 8021q: adding VLAN 0 to HW filter on device team0
[  358.356718][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  358.374096][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  358.413821][ T3662] udevd[3662]: symlink '../../loop3' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:3' failed: Read-only file system
[  358.515648][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  358.525191][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  358.582007][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state
[  358.589191][ T5112] bridge0: port 1(bridge_slave_0) entered forwarding state
[  358.631533][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  358.651871][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  358.675985][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state
[  358.683106][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state
[  358.714438][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  358.747980][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  358.756656][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  358.776315][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  358.813732][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  358.840935][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  358.900465][ T3551] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  358.961910][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  358.975307][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  358.996481][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  359.015177][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  359.083028][ T5112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  359.111833][ T9292] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  359.330643][ T9510] loop3: detected capacity change from 0 to 128
[  359.347340][ T5112] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  359.419446][ T9510] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  359.502292][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  359.510318][ T9510] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  359.513567][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  359.552383][ T9526] loop2: detected capacity change from 0 to 16
[  359.574844][ T9292] 8021q: adding VLAN 0 to HW filter on device batadv0
[  359.647089][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  359.678571][ T9526] erofs: (device loop2): check_layout_compatibility: unidentified incompatible feature 38, please upgrade kernel version
[  359.701449][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:2' failed: Read-only file system
[  359.715790][ T5112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  359.718151][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  359.761437][ T9292] device veth0_vlan entered promiscuous mode
[  359.775074][ T5112] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  359.793190][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  359.809104][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  359.831401][ T5112] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  359.840673][ T9526] loop2: detected capacity change from 0 to 512
[  359.858400][ T9292] device veth1_vlan entered promiscuous mode
[  359.907823][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  359.942200][ T9526] EXT4-fs (loop2): corrupt root inode, run e2fsck
[  359.952894][ T5112] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  359.974312][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  359.982958][ T9526] EXT4-fs (loop2): mount failed
[  360.033646][ T5112] usb 5-1: config 0 descriptor??
[  360.055243][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  360.148131][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  360.289708][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  360.402703][ T9544] program syz.3.1310 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  361.097571][ T5112] hid-thrustmaster 0003:044F:B65D.000C: unknown main item tag 0x0
[  361.119482][ T5112] hid-thrustmaster 0003:044F:B65D.000C: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  361.167848][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  361.181812][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  361.204597][ T9292] device veth0_macvtap entered promiscuous mode
[  361.228204][ T5112] hid-thrustmaster 0003:044F:B65D.000C: Wrong number of endpoints?
[  361.258181][ T5112] usb 5-1: USB disconnect, device number 14
[  361.275447][    C0] hid-thrustmaster 0003:044F:B65D.000C: URB to get model id failed with error -2
[  361.290126][ T9292] device veth1_macvtap entered promiscuous mode
[  361.472235][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.572892][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.766366][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.795455][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.840866][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.879971][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  361.922444][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  361.959184][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.025047][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_0
[  362.214713][ T9551] block nbd3: shutting down sockets
[  362.290703][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  362.301177][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  362.320514][ T4459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  362.366533][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.410825][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.461498][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.512630][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.542509][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.707151][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  362.818248][ T9292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  362.951239][ T9292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.076036][ T9292] batman_adv: batadv0: Interface activated: batadv_slave_1
[  363.087114][ T9594] wireguard: wg2: Could not create IPv4 socket
[  363.108206][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  363.128935][ T5103] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  363.283077][ T9292] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  363.294023][ T9292] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  363.316702][ T9292] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  363.330117][ T9292] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  363.359516][ T9605] loop3: detected capacity change from 0 to 64
[  363.401229][ T9606] loop4: detected capacity change from 0 to 1024
[  363.463569][ T3662] udevd[3662]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  363.714016][ T5858] udevd[5858]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  365.518475][ T9605] sched: RT throttling activated
[  365.584832][ T9606] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,journal_ioprio=0x0000000000000003,resuid=0x0000000000000000,i_version,data=ordered,nombcache,barrier=0x0000000000000648,barrier=0x0000000000000007,,errors=continue. Quota mode: writeback.
[  365.650699][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.720756][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  365.731783][ T9620] loop2: detected capacity change from 0 to 8
[  365.849616][ T5858] udevd[5858]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  365.870819][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  365.894020][ T9620] unable to read xattr id index table
[  365.920435][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  365.993454][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  366.064830][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  366.194628][ T9623] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  366.246563][   T26] audit: type=1326 audit(1720342364.010:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2a6f5bd9 code=0x7ffc0000
[  366.331866][   T26] audit: type=1326 audit(1720342364.040:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fcd2a6f5bd9 code=0x7ffc0000
[  366.485515][   T26] audit: type=1326 audit(1720342364.040:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9626 comm="syz.1.1278" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd2a6f5bd9 code=0x7ffc0000
[  366.686913][ T9638] loop3: detected capacity change from 0 to 64
[  366.824161][ T3662] udevd[3662]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  366.870487][ T9639] loop1: detected capacity change from 0 to 2048
[  367.003311][ T3662] udevd[3662]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  367.094508][ T9639] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  367.272363][ T9645] wireguard: wg2: Could not create IPv4 socket
[  367.367490][ T3662] udevd[3662]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  367.422070][   T26] audit: type=1800 audit(1720342365.180:126): pid=9639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1332" name="bus" dev="loop1" ino=18 res=0 errno=0
[  367.515002][   T26] audit: type=1800 audit(1720342365.210:127): pid=9647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1332" name="bus" dev="loop1" ino=18 res=0 errno=0
[  367.669768][ T9648] loop4: detected capacity change from 0 to 2048
[  367.730479][ T9639] overlayfs: './file1' not a directory
[  367.818917][ T3662] udevd[3662]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  367.865927][ T9648] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  367.965212][ T3662] udevd[3662]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  368.157108][ T9655] loop3: detected capacity change from 0 to 64
[  368.304920][ T3662] udevd[3662]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  371.377366][ T4459] Bluetooth: hci3: command 0x0406 tx timeout
[  371.708683][ T3662] udevd[3662]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  371.779522][ T9665] loop1: detected capacity change from 0 to 1024
[  371.843911][ T7095] udevd[7095]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  371.860098][   T26] audit: type=1326 audit(1720342369.620:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c5c4bd9 code=0x7ffc0000
[  371.925135][ T9665] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  371.944361][   T26] audit: type=1326 audit(1720342369.620:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c5c4bd9 code=0x7ffc0000
[  371.973329][ T3662] udevd[3662]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  372.035767][ T3662] udevd[3662]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  372.080004][ T9680] loop2: detected capacity change from 0 to 128
[  372.090918][ T3662] udevd[3662]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  372.130049][   T26] audit: type=1326 audit(1720342369.620:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7f371c5c4bd9 code=0x7ffc0000
[  372.155611][ T9669] ebtables: ebtables: counters copy to user failed while replacing table
[  372.211900][ T9680] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  372.242460][   T26] audit: type=1326 audit(1720342369.620:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c5c4bd9 code=0x7ffc0000
[  372.309644][ T9680] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  372.338079][   T26] audit: type=1326 audit(1720342369.620:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9664 comm="syz.4.1341" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f371c5c4bd9 code=0x7ffc0000
[  373.586855][ T9698] loop2: detected capacity change from 0 to 2048
[  373.615782][ T9696] loop4: detected capacity change from 0 to 256
[  373.688333][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  373.712933][ T9698] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  373.725143][ T9696] FAT-fs (loop4): Directory bread(block 64) failed
[  373.733015][   T26] audit: type=1326 audit(1720342371.490:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9690 comm="syz.1.1347" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcd2a6f5bd9 code=0x0
[  373.809975][ T9705] loop3: detected capacity change from 0 to 1024
[  373.816951][ T9696] FAT-fs (loop4): Directory bread(block 65) failed
[  373.823607][ T9696] FAT-fs (loop4): Directory bread(block 66) failed
[  373.830685][ T9696] FAT-fs (loop4): Directory bread(block 67) failed
[  373.837622][ T9696] FAT-fs (loop4): Directory bread(block 68) failed
[  373.844279][ T9696] FAT-fs (loop4): Directory bread(block 69) failed
[  373.851309][ T9696] FAT-fs (loop4): Directory bread(block 70) failed
[  373.858334][ T9696] FAT-fs (loop4): Directory bread(block 71) failed
[  373.864972][ T9696] FAT-fs (loop4): Directory bread(block 72) failed
[  373.870973][ T9705] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  373.872350][ T9696] FAT-fs (loop4): Directory bread(block 73) failed
[  373.937272][ T5858] udevd[5858]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  373.967159][ T9705] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000003,sysvgroups,grpquota,debug_want_extra_isize=0x0000000000000080,user_xattr,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  374.040812][ T3662] udevd[3662]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  374.151243][ T9711] loop4: detected capacity change from 0 to 64
[  374.172342][ T3662] udevd[3662]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  374.251774][   T26] audit: type=1326 audit(1720342372.010:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0575f2bd9 code=0x7ffc0000
[  374.277774][ T4447] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  374.298305][ T3662] udevd[3662]: symlink '../../loop4' '/dev/disk/by-label/untitled.tmp-b7:4' failed: Read-only file system
[  374.325627][   T26] audit: type=1326 audit(1720342372.010:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0575f2bd9 code=0x7ffc0000
[  374.536046][   T26] audit: type=1326 audit(1720342372.010:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=441 compat=0 ip=0x7fb0575f2bd9 code=0x7ffc0000
[  374.559215][   T26] audit: type=1326 audit(1720342372.010:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9712 comm="syz.3.1354" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0575f2bd9 code=0x7ffc0000
[  374.611170][ T9716] loop1: detected capacity change from 0 to 512
[  374.795692][ T4447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  374.808009][ T4447] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  374.819215][ T4447] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00
[  374.828906][ T4447] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  374.844526][ T4447] usb 3-1: config 0 descriptor??
[  374.849833][ T9716] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  374.873601][ T9716] ext4 filesystem being mounted at /6/bus supports timestamps until 2038 (0x7fffffff)
[  374.885612][ T4459] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  375.533666][ T4447] belkin 0003:1020:0006.000D: item fetching failed at offset 3/5
[  375.572016][ T4447] belkin 0003:1020:0006.000D: parse failed
[  375.595743][ T4459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  375.611856][ T4447] belkin: probe of 0003:1020:0006.000D failed with error -22
[  375.621988][ T4459] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  375.634351][ T4459] usb 4-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  375.645495][ T4459] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.664560][ T4447] Bluetooth: hci5: command 0x1003 tx timeout
[  375.680728][ T3509] Bluetooth: hci5: sending frame failed (-49)
[  375.699095][ T4459] usb 4-1: config 0 descriptor??
[  375.734194][ T4447] usb 3-1: USB disconnect, device number 27
[  376.208398][ T4459] logitech-hidpp-device 0003:046D:C086.000E: unknown main item tag 0x0
[  376.279107][ T4459] logitech-hidpp-device 0003:046D:C086.000E: item fetching failed at offset 2/5
[  376.299065][ T4459] logitech-hidpp-device 0003:046D:C086.000E: hidpp_probe:parse failed
[  376.310695][ T4459] logitech-hidpp-device: probe of 0003:046D:C086.000E failed with error -22
[  376.412093][ T5112] usb 4-1: USB disconnect, device number 28
[  376.561565][ T9739] loop2: detected capacity change from 0 to 128
[  376.655810][ T5103] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  376.664283][ T9739] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  376.694771][ T9739] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  376.862716][ T9744] loop2: detected capacity change from 0 to 2048
[  376.964871][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  377.002094][ T9744] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  377.035744][ T5103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  377.075600][ T5103] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  377.113205][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/syzkaller.tmp-b7:2' failed: Read-only file system
[  377.137722][ T5103] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  377.159016][ T5103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.194706][ T5103] usb 2-1: config 0 descriptor??
[  377.431050][ T9756] loop4: detected capacity change from 0 to 1024
[  377.441343][ T9751] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  377.468477][ T9751] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  377.511215][ T9756] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  377.532301][ T5858] udevd[5858]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  377.587260][ T9756] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000003,sysvgroups,grpquota,debug_want_extra_isize=0x0000000000000080,user_xattr,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  377.667572][ T5103] isku 0003:1E7D:319C.000F: item fetching failed at offset 5/7
[  377.687175][ T5103] isku 0003:1E7D:319C.000F: parse failed
[  377.690937][ T5858] udevd[5858]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  377.692874][ T5103] isku: probe of 0003:1E7D:319C.000F failed with error -22
[  377.706045][ T4459] Bluetooth: hci5: command 0x1001 tx timeout
[  377.719114][ T3509] Bluetooth: hci5: sending frame failed (-49)
[  377.735731][ T9762] loop2: detected capacity change from 0 to 128
[  377.886260][ T5112] usb 2-1: USB disconnect, device number 16
[  377.956799][ T5858] udevd[5858]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system
[  378.007609][ T5858] udevd[5858]: symlink '../../loop2' '/dev/disk/by-uuid/1DD0-AF77.tmp-b7:2' failed: Read-only file system
[  378.040269][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-label/SYZKALLER.tmp-b7:2' failed: Read-only file system
[  378.074280][ T3662] udevd[3662]: symlink '../../loop2' '/dev/disk/by-uuid/1DD0-AF77.tmp-b7:2' failed: Read-only file system
[  378.473188][ T9770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.585607][ T9770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  378.595927][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  378.602267][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  378.612142][ T9776] loop1: detected capacity change from 0 to 64
[  378.775099][ T3662] udevd[3662]: symlink '../../loop1' '/dev/disk/by-label/untitled.tmp-b7:1' failed: Read-only file system
[  378.783379][ T9782] loop4: detected capacity change from 0 to 2048
[  379.047262][ T3662] udevd[3662]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  379.142629][ T9782] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  379.409205][ T9790] loop2: detected capacity change from 0 to 128
[  379.516660][ T9790] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  379.577643][ T9790] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  379.747319][ T9794] loop3: detected capacity change from 0 to 1024
[  379.775550][   T23] Bluetooth: hci5: command 0x1009 tx timeout
[  379.922019][ T9794] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  380.012859][ T9794] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000003,sysvgroups,grpquota,debug_want_extra_isize=0x0000000000000080,user_xattr,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  380.643510][ T9806] loop3: detected capacity change from 0 to 64
[  380.776772][ T9806] hfs: unable to parse mount options
[  380.865872][ T9806] loop3: detected capacity change from 0 to 256
[  380.958613][ T9806] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  381.083317][ T9796] loop4: detected capacity change from 0 to 32768
[  381.207911][ T9796] ================================================================================
[  381.222696][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  381.222713][   T26] audit: type=1804 audit(1720342378.980:139): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1381" name="/newroot/25/file1/file0/bus" dev="loop3" ino=1048684 res=1 errno=0
[  381.263356][ T9796] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_dmap.c:661:7
[  381.322765][ T9796] index 128 is out of range for type 's64[128]' (aka 'long long[128]')
[  381.325890][   T26] audit: type=1800 audit(1720342379.000:140): pid=9813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1381" name="bus" dev="loop3" ino=1048684 res=0 errno=0
[  381.407231][ T9796] CPU: 1 PID: 9796 Comm: syz.4.1379 Not tainted 5.15.162-syzkaller #0
[  381.415451][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  381.425537][ T9796] Call Trace:
[  381.428839][ T9796]  <TASK>
[  381.431789][ T9796]  dump_stack_lvl+0x1e3/0x2d0
[  381.436504][ T9796]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  381.442173][ T9796]  ? panic+0x860/0x860
[  381.446289][ T9796]  ? mutex_lock_io_nested+0x60/0x60
[  381.451539][ T9796]  __ubsan_handle_out_of_bounds+0x118/0x140
[  381.457611][ T9796]  dbNextAG+0x3ef/0x630
[  381.461826][ T9796]  diAlloc+0x6c2/0x1750
[  381.466027][ T9796]  ialloc+0x8b/0x970
[  381.469961][ T9796]  jfs_create+0x1ba/0xbb0
[  381.474328][ T9796]  ? d_splice_alias+0x10f/0x330
[  381.479214][ T9796]  ? jfs_lookup+0x2bc/0x400
[  381.483755][ T9796]  ? jfs_lookup+0x400/0x400
[  381.488288][ T9796]  ? jfs_get_parent+0xa0/0xa0
[  381.493017][ T9796]  ? make_kgid+0x6f0/0x6f0
[  381.497468][ T9796]  ? generic_permission+0x21c/0x4f0
[  381.502708][ T9796]  ? inode_permission+0xf7/0x450
[  381.507682][ T9796]  ? bpf_lsm_inode_create+0x5/0x10
[  381.512824][ T9796]  ? security_inode_create+0xb4/0x100
[  381.518224][ T9796]  ? jfs_lookup+0x400/0x400
[  381.522757][ T9796]  path_openat+0x130a/0x2f20
[  381.527418][ T9796]  ? do_filp_open+0x460/0x460
[  381.532157][ T9796]  do_filp_open+0x21c/0x460
[  381.536699][ T9796]  ? vfs_tmpfile+0x2e0/0x2e0
[  381.541436][ T9796]  ? _raw_spin_unlock+0x24/0x40
[  381.546326][ T9796]  ? alloc_fd+0x594/0x630
[  381.550707][ T9796]  do_sys_openat2+0x13b/0x500
[  381.555425][ T9796]  ? read_lock_is_recursive+0x10/0x10
[  381.560827][ T9796]  ? do_sys_open+0x220/0x220
[  381.565477][ T9796]  __x64_sys_openat+0x243/0x290
[  381.570369][ T9796]  ? __ia32_sys_open+0x270/0x270
[  381.575348][ T9796]  ? syscall_enter_from_user_mode+0x2e/0x240
[  381.581361][ T9796]  ? lockdep_hardirqs_on+0x94/0x130
[  381.586598][ T9796]  ? syscall_enter_from_user_mode+0x2e/0x240
[  381.592621][ T9796]  do_syscall_64+0x3b/0xb0
[  381.597070][ T9796]  ? clear_bhb_loop+0x15/0x70
[  381.600685][ T9812] loop1: detected capacity change from 0 to 32768
[  381.601777][ T9796]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  381.614304][ T9796] RIP: 0033:0x7f371c5c4bd9
[  381.618855][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.638486][ T9796] RSP: 002b:00007f371b045048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  381.646914][ T9796] RAX: ffffffffffffffda RBX: 00007f371c752f60 RCX: 00007f371c5c4bd9
[  381.654907][ T9796] RDX: 000000000000275a RSI: 00000000200005c0 RDI: ffffffffffffff9c
[  381.662883][ T9796] RBP: 00007f371c633aa1 R08: 0000000000000000 R09: 0000000000000000
[  381.670857][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  381.678831][ T9796] R13: 000000000000000b R14: 00007f371c752f60 R15: 00007ffdb7566828
[  381.686821][ T9796]  </TASK>
[  381.695764][ T9796] ================================================================================
[  381.721525][ T9796] Kernel panic - not syncing: UBSAN: panic_on_warn set ...
[  381.728839][ T9796] CPU: 0 PID: 9796 Comm: syz.4.1379 Not tainted 5.15.162-syzkaller #0
[  381.737117][ T9796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  381.747191][ T9796] Call Trace:
[  381.750465][ T9796]  <TASK>
[  381.753395][ T9796]  dump_stack_lvl+0x1e3/0x2d0
[  381.758097][ T9796]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  381.763727][ T9796]  ? panic+0x860/0x860
[  381.767815][ T9796]  panic+0x318/0x860
[  381.771731][ T9796]  ? check_panic_on_warn+0x1d/0xa0
[  381.776844][ T9796]  ? fb_is_primary_device+0xd0/0xd0
[  381.782039][ T9796]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  381.787671][ T9796]  ? check_panic_on_warn+0x1d/0xa0
[  381.792775][ T9796]  ? check_panic_on_warn+0x6a/0xa0
[  381.797884][ T9796]  check_panic_on_warn+0x7e/0xa0
[  381.802816][ T9796]  __ubsan_handle_out_of_bounds+0x138/0x140
[  381.808709][ T9796]  dbNextAG+0x3ef/0x630
[  381.812869][ T9796]  diAlloc+0x6c2/0x1750
[  381.817044][ T9796]  ialloc+0x8b/0x970
[  381.820977][ T9796]  jfs_create+0x1ba/0xbb0
[  381.825331][ T9796]  ? d_splice_alias+0x10f/0x330
[  381.830213][ T9796]  ? jfs_lookup+0x2bc/0x400
[  381.834724][ T9796]  ? jfs_lookup+0x400/0x400
[  381.839243][ T9796]  ? jfs_get_parent+0xa0/0xa0
[  381.843935][ T9796]  ? make_kgid+0x6f0/0x6f0
[  381.848346][ T9796]  ? generic_permission+0x21c/0x4f0
[  381.853547][ T9796]  ? inode_permission+0xf7/0x450
[  381.858484][ T9796]  ? bpf_lsm_inode_create+0x5/0x10
[  381.863597][ T9796]  ? security_inode_create+0xb4/0x100
[  381.868971][ T9796]  ? jfs_lookup+0x400/0x400
[  381.873476][ T9796]  path_openat+0x130a/0x2f20
[  381.878083][ T9796]  ? do_filp_open+0x460/0x460
[  381.882772][ T9796]  do_filp_open+0x21c/0x460
[  381.887292][ T9796]  ? vfs_tmpfile+0x2e0/0x2e0
[  381.891898][ T9796]  ? _raw_spin_unlock+0x24/0x40
[  381.896752][ T9796]  ? alloc_fd+0x594/0x630
[  381.901105][ T9796]  do_sys_openat2+0x13b/0x500
[  381.905780][ T9796]  ? read_lock_is_recursive+0x10/0x10
[  381.911146][ T9796]  ? do_sys_open+0x220/0x220
[  381.915740][ T9796]  __x64_sys_openat+0x243/0x290
[  381.920591][ T9796]  ? __ia32_sys_open+0x270/0x270
[  381.925526][ T9796]  ? syscall_enter_from_user_mode+0x2e/0x240
[  381.931527][ T9796]  ? lockdep_hardirqs_on+0x94/0x130
[  381.936725][ T9796]  ? syscall_enter_from_user_mode+0x2e/0x240
[  381.942705][ T9796]  do_syscall_64+0x3b/0xb0
[  381.947118][ T9796]  ? clear_bhb_loop+0x15/0x70
[  381.951810][ T9796]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  381.957703][ T9796] RIP: 0033:0x7f371c5c4bd9
[  381.962117][ T9796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  381.981725][ T9796] RSP: 002b:00007f371b045048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  381.990147][ T9796] RAX: ffffffffffffffda RBX: 00007f371c752f60 RCX: 00007f371c5c4bd9
[  381.998115][ T9796] RDX: 000000000000275a RSI: 00000000200005c0 RDI: ffffffffffffff9c
[  382.006084][ T9796] RBP: 00007f371c633aa1 R08: 0000000000000000 R09: 0000000000000000
[  382.014051][ T9796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  382.022019][ T9796] R13: 000000000000000b R14: 00007f371c752f60 R15: 00007ffdb7566828
[  382.030027][ T9796]  </TASK>
[  382.033329][ T9796] Kernel Offset: disabled
[  382.038120][ T9796] Rebooting in 86400 seconds..