last executing test programs:

13.191828011s ago: executing program 3:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x2, 0x10, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x33, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@multicast1, @in=@dev}}]}, 0x50}}, 0x0)

13.060580771s ago: executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2c, r3, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x2c}}, 0x0)

12.801071441s ago: executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})

12.281413762s ago: executing program 2:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYRES32=r1, @ANYBLOB="95000000140001"], 0x38}}, 0x0)

12.158544741s ago: executing program 3:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, 0x0, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xe0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x8001, 0x2, 0xffffffff, 0x7, 0x5, 0x0, 0x6289, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x962de18c4049910f}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x3}}}]}, 0x48}}, 0x0)

12.102681769s ago: executing program 2:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x200, 0x0, 0x0, 0xfff, 0x0, "a05c7b55000080ffa5f2dd932bbc145c00"})
r1 = syz_open_pts(r0, 0x8000)
r2 = dup3(r1, r0, 0x0)
io_setup(0xbc, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x0, 0x0, r2, 0x0}])
bind$inet6(r2, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000800)={@multicast1, @rand_addr=0x64010102, 0x0, "fab2a9b652ba66b0c8c0ca0b0933785fdbeb05bad5299eee3e20638f3204f793", 0x2, 0x5, 0x1, 0x5}, 0x3c)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6d}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x90)
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000740)=r6)
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYRES16], 0x1, 0x220, &(0x7f00000005c0)="$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")
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)

11.551143215s ago: executing program 3:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f00000004c0)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2c, r3, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x2c}}, 0x0)

11.304565993s ago: executing program 3:
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48)
r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x3, 0x1, 0x0, r2}, @call={0x85, 0x0, 0x0, 0x2b}]}, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r3}, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r1, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r0}, 0x20)
shutdown(r0, 0x0)
recvmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000540)=""/93, 0x5d}], 0x1}, 0x2)

10.809374569s ago: executing program 0:
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
fdatasync(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

10.706908765s ago: executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x13, &(0x7f0000002940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0800000000400000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000540), &(0x7f0000000040)=0x4)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000000480), 0x8, 0x0)

10.630528477s ago: executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})

9.96634872s ago: executing program 2:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x5, 0x0)

9.371353232s ago: executing program 2:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2})
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)

9.056667241s ago: executing program 2:
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
write$binfmt_script(r0, 0x0, 0x0)
fdatasync(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

7.612271894s ago: executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x43451)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})

6.752705767s ago: executing program 0:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0xb3, 0x7f}, 0x48)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001180)='ns/time\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
io_uring_setup(0x1610, &(0x7f00000003c0))
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
io_uring_setup(0x66de, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000380))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd)

5.976271387s ago: executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2})
write$binfmt_script(r2, &(0x7f0000000100), 0xfecc)

5.445690909s ago: executing program 0:
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
r1 = open(&(0x7f0000000840)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)

5.083088024s ago: executing program 1:
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2c, r3, 0x0, 0x0, 0x0, {{}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}]}]}]}, 0x2c}}, 0x0)

4.98506532s ago: executing program 0:
socket$nl_route(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0x13, &(0x7f0000002940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32, @ANYBLOB="0800000000400000b7020000000000008500000017000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
getsockopt$ax25_int(r0, 0x101, 0x0, &(0x7f0000000540), &(0x7f0000000040)=0x4)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(r1, &(0x7f0000000480), 0x8, 0x0)

4.860778539s ago: executing program 1:
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x43451)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})

4.133900172s ago: executing program 1:
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32=r1, @ANYBLOB="95000000140001"], 0x38}}, 0x0)

3.992774873s ago: executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x200, 0x0, 0x0, 0xfff, 0x0, "a05c7b55000080ffa5f2dd932bbc145c00"})
r1 = syz_open_pts(r0, 0x8000)
r2 = dup3(r1, r0, 0x0)
io_setup(0xbc, &(0x7f0000000280)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000b80)=[&(0x7f0000000380)={0x503, 0x0, 0x0, 0x0, 0x0, r2, 0x0}])
bind$inet6(r2, 0x0, 0x0)
setsockopt$MRT_DEL_MFC_PROXY(r2, 0x0, 0xd3, &(0x7f0000000800)={@multicast1, @rand_addr=0x64010102, 0x0, "fab2a9b652ba66b0c8c0ca0b0933785fdbeb05bad5299eee3e20638f3204f793", 0x2, 0x5, 0x1, 0x5}, 0x3c)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000140)=@raw=[@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x6d}, @exit], &(0x7f0000000200)='GPL\x00'}, 0x90)
r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r4, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0)
r6 = eventfd(0x0)
ioctl$VHOST_SET_VRING_ADDR(r5, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000740)=r6)
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file2\x00', 0x2000000, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=r1, @ANYRES16], 0x1, 0x220, &(0x7f00000005c0)="$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")
listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$cgroup(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000140), 0x12)

3.290579482s ago: executing program 1:
syz_emit_ethernet(0xf2, &(0x7f0000000100)={@broadcast, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x67, 0x0, @rand_addr, @broadcast}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x32, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @rand_addr, {[@ra={0x94, 0x4}, @cipso={0x86, 0x18, 0x0, [{0x0, 0x12, "968d000000f100ee71aab02d9dd93da5"}]}, @cipso={0x86, 0x29, 0x0, [{0x0, 0x7, "26432dce7c"}, {0x0, 0x7, "b8f1175d40"}, {0x0, 0xd, "20b6b891c59f73c096881d"}, {0x0, 0x8, "91e52ace58bf"}]}, @cipso={0x86, 0x39, 0x0, [{0x0, 0xe, "f144ec96f65b4c4607c6ccdb"}, {0x0, 0x12, "0dcdc2f22d2c3b8a6c43102208ab9d50"}, {0x0, 0xc, "ccfe2d5997920c150595"}, {0x0, 0x5, "d427f0"}, {0x0, 0x2}]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@multicast1}, {@empty}, {@broadcast}]}, @lsrr={0x83, 0x17, 0x0, [@dev, @multicast1, @private, @local, @empty]}, @end, @end]}}}}}}}, 0x0)

2.940780586s ago: executing program 4:
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
writev(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r1 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@private0, 0x0, 0x33}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x7}}, 0xe8)
sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0)

2.892537714s ago: executing program 1:
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x58, 0x24, 0xe0b, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xffffffff, 0x8001, 0x2, 0xffffffff, 0x7, 0x5, 0x0, 0x6289, 0x5}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x962de18c4049910f}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x3}}}]}, 0x48}}, 0x0)

1.68860588s ago: executing program 4:
mkdir(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@private, 0x0, 0x32}, 0x0, @in=@dev, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x5, 0x0)

1.179711358s ago: executing program 4:
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x0, 0xb3, 0x7f}, 0x48)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001180)='ns/time\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_mptcp(0x2, 0x1, 0x106)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
io_uring_setup(0x1610, &(0x7f00000003c0))
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
io_uring_setup(0x66de, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000380))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
socket$qrtr(0x2a, 0x2, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x10002})
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES32=r2, @ANYRES16=r1], 0x20}, 0x1, 0xc00000000000000}, 0x0)
bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd)

995.770187ms ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$BINDER_GET_FROZEN_INFO(0xffffffffffffffff, 0xc00c620f, &(0x7f0000000040))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$vim2m(&(0x7f0000000140), 0x8000, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2})
write$binfmt_script(r1, &(0x7f0000000100), 0xfecc)

0s ago: executing program 4:
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file2\x00', 0x1c802, &(0x7f0000000ec0)=ANY=[], 0x1, 0x5ea7, &(0x7f00000085c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
r1 = open(&(0x7f0000000840)='./file1\x00', 0x145142, 0x0)
ftruncate(r1, 0x2007ffc)
sendfile(r1, r1, 0x0, 0x800000009)

kernel console output (not intermixed with test programs):

4274] loop1: detected capacity change from 0 to 512
[  118.668397][ T4274] EXT4-fs: Ignoring removed oldalloc option
[  118.713591][ T4274] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  118.755602][ T4274] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  118.840030][ T4274] EXT4-fs (loop1): 1 truncate cleaned up
[  118.905315][ T4274] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  118.985119][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  119.033443][ T3619] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  119.089260][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  119.220284][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  119.230966][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  119.249232][ T4052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  119.265382][ T4274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  119.306341][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  119.339913][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.403046][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.421066][ T3572] EXT4-fs error (device loop1): mb_free_blocks:1815: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt.
[  119.421899][ T3803] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.437093][ T3619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  119.477670][ T3619] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  119.522966][ T3619] usb 3-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  119.535236][ T4052] device veth0_vlan entered promiscuous mode
[  119.554493][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.573398][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.592667][ T3619] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.595974][ T4052] device veth1_vlan entered promiscuous mode
[  119.618546][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  119.642724][ T3619] usb 3-1: config 0 descriptor??
[  119.768912][ T4052] device veth0_macvtap entered promiscuous mode
[  119.787181][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  119.797554][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  119.812519][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  119.821479][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.836898][ T4052] device veth1_macvtap entered promiscuous mode
[  119.854871][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  119.874228][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  119.937066][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.958449][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.969490][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.988781][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.009236][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.026137][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.069527][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.106411][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.127208][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.146203][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  120.155558][ T3619] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[  120.157323][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  120.179257][ T3619] logitech-djreceiver 0003:046D:C534.0001: unknown main item tag 0x0
[  120.204980][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.236407][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.278301][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.298285][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.319354][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.347065][   T26] usb 3-1: USB disconnect, device number 6
[  120.359308][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.389321][ T4052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.411323][ T4052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.448267][ T4052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.466196][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  120.487564][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  120.519816][ T4052] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.538518][ T4052] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.557626][ T4052] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.580919][ T4052] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  121.641051][   T33] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.695633][   T33] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.831888][   T26] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.075893][ T3605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.114805][ T3605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.152811][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.107768][ T4398] Bluetooth: MGMT ver 1.22
[  124.639882][ T4417] sched: RT throttling activated
[  125.566693][ T4436] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET)
[  125.770915][ T4440] loop0: detected capacity change from 0 to 764
[  125.832665][ T4440] rock: directory entry would overflow storage
[  125.839266][ T4440] rock: sig=0x4654, size=5, remaining=4
[  126.340869][ T4432] loop2: detected capacity change from 0 to 32768
[  127.473246][   T22] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  128.012351][   T22] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.023617][   T22] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  128.037420][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.186895][   T22] usb 2-1: config 0 descriptor??
[  128.753561][   T22] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[  128.865177][   T22] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0002/input/input6
[  128.915103][ T4494] netlink: 'syz-executor.0': attribute type 10 has an invalid length.
[  128.963277][ T4469] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.980475][ T4469] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.038821][ T4494] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  129.079304][   T22] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  129.472122][ T3653] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  129.918617][ T4508] vivid-000: kernel_thread() failed
[  129.932071][ T3653] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  129.969259][ T3653] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  130.023069][   T22] usb 2-1: USB disconnect, device number 2
[  130.078150][ T3653] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  130.108486][ T3653] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.199781][ T3653] usb 4-1: config 0 descriptor??
[  130.230840][ T4516] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'.
[  130.275070][ T3653] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  130.372212][   T26] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  130.447519][ T4500] loop2: detected capacity change from 0 to 32768
[  130.485772][ T4500] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4500)
[  130.603470][ T4500] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.622188][ T4500] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  130.640153][ T4500] BTRFS info (device loop2): using free space tree
[  130.662026][ T4525] device team_slave_0 entered promiscuous mode
[  130.668719][ T4525] device team_slave_1 entered promiscuous mode
[  130.676417][ T4525] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  130.687531][ T4525] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  130.822394][   T26] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  130.842597][   T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  130.909672][   T26] usb 5-1: config 0 descriptor??
[  131.032232][ T4500] BTRFS info (device loop2): enabling ssd optimizations
[  131.069845][ T4548] syz-executor.1 (4548): attempted to duplicate a private mapping with mremap.  This is not supported.
[  131.119557][ T3574] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  136.669877][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  136.764085][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  136.787714][ T4555] usb 4-1: USB disconnect, device number 4
[  136.875851][   T26] usb 5-1: Cannot set autoneg
[  136.881379][   T26] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[  136.941148][   T26] usb 5-1: USB disconnect, device number 2
[  139.842784][ T4555] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  141.612183][ T3624] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  141.849477][ T4628] random: crng reseeded on system resumption
[  142.211742][ T4633] loop1: detected capacity change from 0 to 40427
[  142.240860][ T4633] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  142.249416][ T4633] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  142.283194][ T4633] F2FS-fs (loop1): invalid crc value
[  142.305110][ T4636] loop0: detected capacity change from 0 to 64
[  142.321900][ T4633] F2FS-fs (loop1): Found nat_bits in checkpoint
[  142.383531][ T4633] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  142.390942][ T4633] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  143.773297][ T3624] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  143.796085][ T3624] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  143.859321][ T3624] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  144.809757][ T3624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.359080][ T3624] usb 3-1: config 0 descriptor??
[  146.563742][ T3624] usb 3-1: can't set config #0, error -71
[  146.631624][ T3624] usb 3-1: USB disconnect, device number 7
[  146.924230][   T27] audit: type=1800 audit(1718951746.402:10): pid=4655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file0" dev="sda1" ino=1961 res=0 errno=0
[  147.520868][ T4660] loop2: detected capacity change from 0 to 128
[  148.901817][ T4668] device bridge_slave_1 left promiscuous mode
[  148.908330][ T4668] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.605563][ T4670] loop0: detected capacity change from 0 to 512
[  149.717048][ T4670] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  149.737560][ T4670] ext4 filesystem being mounted at /root/syzkaller-testdir1431044644/syzkaller.DJH5z6/16/file0 supports timestamps until 2038 (0x7fffffff)
[  149.987866][ T4052] EXT4-fs (loop0): unmounting filesystem.
[  150.436190][ T4690] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  151.680844][ T4707] loop1: detected capacity change from 0 to 64
[  152.126266][ T4709] syz-executor.1: attempt to access beyond end of device
[  152.126266][ T4709] loop1: rw=34817, sector=39, nr_sectors = 30 limit=64
[  152.222945][ T4709] syz-executor.1: attempt to access beyond end of device
[  152.222945][ T4709] loop1: rw=34817, sector=72, nr_sectors = 2 limit=64
[  152.547811][ T4731] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  152.728195][ T4709] syz-executor.1: attempt to access beyond end of device
[  152.728195][ T4709] loop1: rw=34817, sector=76, nr_sectors = 500 limit=64
[  152.897372][ T4738] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  154.012193][ T3803] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  154.522401][ T3803] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[  154.557737][ T3803] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  154.705757][ T3803] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  154.745962][ T3803] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.790294][ T3803] usb 1-1: config 0 descriptor??
[  154.844474][ T3803] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  155.119321][ T4751] loop2: detected capacity change from 0 to 512
[  156.100408][ T4653] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  156.694583][ T4767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  156.727450][ T4767] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  156.891510][ T4555] usb 1-1: USB disconnect, device number 2
[  156.952209][ T4603] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  157.332600][ T4603] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[  157.356419][ T4603] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  157.519586][ T4603] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  157.582855][ T4603] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  157.590916][ T4603] usb 3-1: Manufacturer: syz
[  157.637290][ T4603] usb 3-1: config 0 descriptor??
[  157.822118][ T4800] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  157.833684][ T4800] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'.
[  158.026415][ T4803] loop3: detected capacity change from 0 to 64
[  158.784162][ T4603] rc_core: IR keymap rc-hauppauge not found
[  158.790139][ T4603] Registered IR keymap rc-empty
[  158.829428][ T4603] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  158.885358][ T4603] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input7
[  158.967834][ T4603] usb 3-1: USB disconnect, device number 8
[  158.994114][ T4805] syz-executor.3: attempt to access beyond end of device
[  158.994114][ T4805] loop3: rw=34817, sector=39, nr_sectors = 30 limit=64
[  159.021247][ T4773] loop1: detected capacity change from 0 to 32768
[  159.051367][ T4805] syz-executor.3: attempt to access beyond end of device
[  159.051367][ T4805] loop3: rw=34817, sector=72, nr_sectors = 2 limit=64
[  159.240869][ T4773] find_entry called with index = 0
[  159.344505][ T4773] read_mapping_page failed!
[  159.376150][ T4773] ERROR: (device loop1): txCommit: 
[  159.376150][ T4773] 
[  159.386627][ T4805] syz-executor.3: attempt to access beyond end of device
[  159.386627][ T4805] loop3: rw=34817, sector=76, nr_sectors = 473 limit=64
[  159.459128][ T4820] jfs_unlink: dtDelete returned -116
[  159.530300][ T4820] jfs_unlink: dtDelete returned -116
[  161.331591][ T4810] loop2: detected capacity change from 0 to 32768
[  161.486934][   T27] audit: type=1800 audit(1718951760.962:11): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=8 res=0 errno=0
[  161.616810][ T4851] loop4: detected capacity change from 0 to 256
[  161.750481][   T27] audit: type=1800 audit(1718951761.222:12): pid=4851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048599 res=0 errno=0
[  161.905797][ T4829] loop0: detected capacity change from 0 to 32768
[  162.119507][   T27] audit: type=1800 audit(1718951761.592:13): pid=4829 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=4 res=0 errno=0
[  162.413597][ T4864] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  167.478489][   T22] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  167.992278][   T22] usb 2-1: Using ep0 maxpacket: 8
[  168.047265][ T4900] loop4: detected capacity change from 0 to 32768
[  168.108127][   T27] audit: type=1800 audit(1718951767.582:14): pid=4900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=4 res=0 errno=0
[  168.122383][   T22] usb 2-1: New USB device found, idVendor=0403, idProduct=f0c8, bcdDevice= 2.56
[  168.166325][   T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.208845][   T22] usb 2-1: config 0 descriptor??
[  168.224345][   T27] audit: type=1326 audit(1718951767.692:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  168.293537][   T22] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  168.313581][   T22] ftdi_sio ttyUSB0: unknown device type: 0x256
[  168.341108][   T27] audit: type=1326 audit(1718951767.732:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  168.577968][   T27] audit: type=1326 audit(1718951767.732:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  169.361992][   T27] audit: type=1326 audit(1718951767.732:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  169.522108][   T27] audit: type=1326 audit(1718951767.732:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  169.545054][   T27] audit: type=1326 audit(1718951767.732:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  169.586934][   T27] audit: type=1326 audit(1718951767.732:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  169.635094][ T4936] loop3: detected capacity change from 0 to 16
[  169.649211][ T3803] usb 2-1: USB disconnect, device number 3
[  169.676659][   T27] audit: type=1326 audit(1718951767.732:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  169.703886][ T3803] ftdi_sio 2-1:0.0: device disconnected
[  169.776713][ T4936] erofs: (device loop3): mounted with root inode @ nid 36.
[  169.792249][   T27] audit: type=1326 audit(1718951767.742:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4927 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcbae27cf29 code=0x7ffc0000
[  171.036095][ T5003] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  171.672367][ T5042] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  172.708113][ T5077] loop3: detected capacity change from 0 to 512
[  172.728173][ T5077] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  172.841077][ T5077] EXT4-fs (loop3): 1 truncate cleaned up
[  172.851809][ T5077] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  172.904871][ T5077] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.3: corrupted in-inode xattr
[  172.939008][ T5077] EXT4-fs warning (device loop3): ext4_xattr_set_entry:1745: inode #15: comm syz-executor.3: unable to update i_inline_off
[  172.961754][ T5077] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2810: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  173.015997][ T5077] syz-executor.3 (5077) used greatest stack depth: 19248 bytes left
[  173.080721][ T3580] EXT4-fs (loop3): unmounting filesystem.
[  173.088237][ T5084] loop4: detected capacity change from 0 to 512
[  173.144702][ T5084] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  173.164388][ T5084] ext4 filesystem being mounted at /root/syzkaller-testdir1977519290/syzkaller.cC9Lyw/97/file0 supports timestamps until 2038 (0x7fffffff)
[  173.341741][ T3573] EXT4-fs (loop4): unmounting filesystem.
[  173.445226][ T5095] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  174.205074][ T5120] loop4: detected capacity change from 0 to 512
[  174.472878][ T5120] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  174.577163][ T5120] ext4 filesystem being mounted at /root/syzkaller-testdir1977519290/syzkaller.cC9Lyw/100/file0 supports timestamps until 2038 (0x7fffffff)
[  174.701855][ T5128] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  174.862578][ T3573] EXT4-fs (loop4): unmounting filesystem.
[  175.090396][ T5139] syz-executor.4[5139] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.090569][ T5139] syz-executor.4[5139] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  175.457840][ T5155] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  175.527413][ T5158] loop3: detected capacity change from 0 to 512
[  175.620777][ T5158] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  175.633549][ T5158] ext4 filesystem being mounted at /root/syzkaller-testdir2600461959/syzkaller.HvtY4C/67/file0 supports timestamps until 2038 (0x7fffffff)
[  175.801500][ T5164] loop2: detected capacity change from 0 to 256
[  176.291541][ T5164] FAT-fs (loop2): Directory bread(block 64) failed
[  176.416039][ T5164] FAT-fs (loop2): Directory bread(block 65) failed
[  176.478978][ T5164] FAT-fs (loop2): Directory bread(block 66) failed
[  176.514219][ T3580] EXT4-fs (loop3): unmounting filesystem.
[  176.522212][ T5164] FAT-fs (loop2): Directory bread(block 67) failed
[  176.528991][ T5164] FAT-fs (loop2): Directory bread(block 68) failed
[  176.620929][ T5164] FAT-fs (loop2): Directory bread(block 69) failed
[  176.651504][ T5164] FAT-fs (loop2): Directory bread(block 70) failed
[  176.681877][ T5164] FAT-fs (loop2): Directory bread(block 71) failed
[  176.688906][ T5164] FAT-fs (loop2): Directory bread(block 72) failed
[  176.712080][ T5164] FAT-fs (loop2): Directory bread(block 73) failed
[  177.080258][ T5176] loop3: detected capacity change from 0 to 512
[  177.453561][ T5186] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  177.494565][ T5153] loop0: detected capacity change from 0 to 32768
[  177.603665][ T5188] loop3: detected capacity change from 0 to 8
[  177.737679][ T5186] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  177.759187][ T5189] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  177.928901][ T5192] loop4: detected capacity change from 0 to 512
[  178.089992][ T5192] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  178.232319][ T5192] ext4 filesystem being mounted at /root/syzkaller-testdir1977519290/syzkaller.cC9Lyw/106/file0 supports timestamps until 2038 (0x7fffffff)
[  179.359915][ T5218] loop1: detected capacity change from 0 to 256
[  179.400892][ T3573] EXT4-fs (loop4): unmounting filesystem.
[  179.411246][ T5220] loop3: detected capacity change from 0 to 256
[  179.476047][ T5218] FAT-fs (loop1): Directory bread(block 64) failed
[  179.522232][ T5218] FAT-fs (loop1): Directory bread(block 65) failed
[  179.573260][ T5222] loop4: detected capacity change from 0 to 512
[  179.612176][ T5218] FAT-fs (loop1): Directory bread(block 66) failed
[  179.642120][ T5218] FAT-fs (loop1): Directory bread(block 67) failed
[  179.669713][ T5194] loop2: detected capacity change from 0 to 32768
[  179.678087][ T5218] FAT-fs (loop1): Directory bread(block 68) failed
[  179.693528][ T5218] FAT-fs (loop1): Directory bread(block 69) failed
[  179.702648][ T5194] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5194)
[  179.715592][ T5218] FAT-fs (loop1): Directory bread(block 70) failed
[  179.735768][ T5218] FAT-fs (loop1): Directory bread(block 71) failed
[  179.769147][ T5218] FAT-fs (loop1): Directory bread(block 72) failed
[  179.779615][ T5194] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.803915][ T5218] FAT-fs (loop1): Directory bread(block 73) failed
[  179.819576][ T5194] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  179.852854][ T5194] BTRFS info (device loop2): using free space tree
[  180.075565][ T5194] BTRFS info (device loop2): enabling ssd optimizations
[  180.362978][ T3574] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  180.818103][ T5225] loop3: detected capacity change from 0 to 32768
[  181.462030][ T5251] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  181.517813][ T5265] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  181.922119][ T5251] usb 3-1: config 1 interface 0 altsetting 213 endpoint 0x81 has an invalid bInterval 119, changing to 10
[  181.981376][ T5272] loop1: detected capacity change from 0 to 512
[  181.991504][ T5251] usb 3-1: config 1 interface 0 altsetting 213 bulk endpoint 0x82 has invalid maxpacket 8
[  182.030870][ T5251] usb 3-1: config 1 interface 0 altsetting 213 bulk endpoint 0x3 has invalid maxpacket 64
[  182.770478][ T5251] usb 3-1: config 1 interface 0 has no altsetting 0
[  182.814802][ T5272] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  182.830796][ T5285] loop4: detected capacity change from 0 to 256
[  182.831754][ T5272] ext4 filesystem being mounted at /root/syzkaller-testdir234965775/syzkaller.RC3hQo/108/file0 supports timestamps until 2038 (0x7fffffff)
[  182.919396][ T5285] FAT-fs (loop4): Directory bread(block 64) failed
[  182.943627][ T5285] FAT-fs (loop4): Directory bread(block 65) failed
[  182.958348][ T5285] FAT-fs (loop4): Directory bread(block 66) failed
[  182.968556][ T5251] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  182.978427][ T5285] FAT-fs (loop4): Directory bread(block 67) failed
[  182.986688][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  182.986692][ T5251] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.004654][ T5285] FAT-fs (loop4): Directory bread(block 68) failed
[  183.011390][ T5285] FAT-fs (loop4): Directory bread(block 69) failed
[  183.018659][ T5251] usb 3-1: Product: ᠫ
[  183.025504][ T5285] FAT-fs (loop4): Directory bread(block 70) failed
[  183.032815][ T5251] usb 3-1: Manufacturer: 蕁ꉢ⽕Ṡ䇞喋倢䵤ટ뺉Ꜿ픻̃漿ţ䷕烈㪾㳜脹薼ヺ敀㸤ᖄ␋廆ᵾ볼属쀃牝昮췠鷿䲘颻궇⩤祭쎮⿚풍ऊ쑿鵮㐻㍇ⱨ徤坻㳺㍰颖䂃䇤掱梂戸騸璯냄汳㱌窱깪
[  183.055616][ T5285] FAT-fs (loop4): Directory bread(block 71) failed
[  183.062674][ T5285] FAT-fs (loop4): Directory bread(block 72) failed
[  183.069424][ T5285] FAT-fs (loop4): Directory bread(block 73) failed
[  183.076436][ T5251] usb 3-1: SerialNumber: ᐇ
[  183.112072][ T3653] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  183.120159][ T5258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  183.138095][ T5258] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  183.533782][ T3653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.546993][ T3653] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  183.562943][ T3653] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[  183.575339][ T3653] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.651092][ T3653] usb 1-1: config 0 descriptor??
[  183.734875][ T3653] usbhid 1-1:0.0: can't add hid device: -22
[  183.768207][ T3653] usbhid: probe of 1-1:0.0 failed with error -22
[  183.773682][ T5256] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.792387][ T5256] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.907831][ T5251] cdc_ether: probe of 3-1:1.0 failed with error -71
[  183.923524][ T5251] usb 3-1: USB disconnect, device number 9
[  183.975949][  T935] usb 1-1: USB disconnect, device number 3
[  184.070720][ T5287] loop3: detected capacity change from 0 to 32768
[  184.105746][ T5287] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5287)
[  184.156151][ T5287] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.181015][ T5287] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  184.316693][ T5287] BTRFS info (device loop3): using free space tree
[  185.082699][ T5304] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  185.155145][ T5293] loop1: detected capacity change from 0 to 32768
[  185.200268][ T5309] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  185.300498][ T5309] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  185.342208][ T5287] BTRFS info (device loop3): enabling ssd optimizations
[  186.539273][ T5334] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.547383][ T5334] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.587406][ T5334] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.596354][ T5334] bridge0: port 2(bridge_slave_1) entered forwarding state
[  186.605499][ T5334] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.612727][ T5334] bridge0: port 1(bridge_slave_0) entered forwarding state
[  186.662432][ T3580] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  186.673454][ T5336] loop2: detected capacity change from 0 to 512
[  186.712072][ T5334] device bridge0 entered promiscuous mode
[  186.721390][ T5334] team0: Port device bridge0 added
[  186.725556][ T5336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  186.739680][ T5337] bridge0: port 3(team0) entered blocking state
[  186.764956][ T5336] ext4 filesystem being mounted at /root/syzkaller-testdir1420959007/syzkaller.q02tJr/91/file0 supports timestamps until 2038 (0x7fffffff)
[  186.792862][ T5337] bridge0: port 3(team0) entered disabled state
[  187.058177][ T5345] unsupported nlmsg_type 40
[  187.093622][ T5349] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  187.125233][ T3574] EXT4-fs (loop2): unmounting filesystem.
[  187.743930][ T5354] overlayfs: missing 'lowerdir'
[  187.859810][ T5360] loop0: detected capacity change from 0 to 512
[  187.877409][ T5357] loop3: detected capacity change from 0 to 1024
[  187.971892][ T5360] EXT4-fs error (device loop0): ext4_quota_enable:6964: comm syz-executor.0: Bad quota inum: 3, type: 1
[  188.041867][ T5360] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[  188.175842][ T4554] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  188.227948][ T5360] EXT4-fs (loop0): mount failed
[  188.408720][ T5367] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  188.613531][ T4554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.635378][ T4554] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.650377][ T4554] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[  188.662892][ T4554] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.678489][ T4554] usb 3-1: config 0 descriptor??
[  188.730273][ T4554] usbhid 3-1:0.0: can't add hid device: -22
[  188.747114][ T4554] usbhid: probe of 3-1:0.0 failed with error -22
[  189.733489][ T4554] usb 3-1: USB disconnect, device number 10
[  189.867353][ T5382] device vlan3 entered promiscuous mode
[  190.059467][ T5386] loop4: detected capacity change from 0 to 8
[  190.073252][ T5386] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  190.324957][ T5372] loop1: detected capacity change from 0 to 32768
[  190.367735][ T5372] find_entry called with index = 0
[  190.384736][ T5372] read_mapping_page failed!
[  190.391467][ T5388] loop2: detected capacity change from 0 to 512
[  190.402913][ T5372] ERROR: (device loop1): txCommit: 
[  190.402913][ T5372] 
[  190.426466][ T5389] jfs_unlink: dtDelete returned -116
[  190.440368][ T5389] jfs_unlink: dtDelete returned -116
[  190.456334][ T5388] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  190.489867][ T5388] ext4 filesystem being mounted at /root/syzkaller-testdir1420959007/syzkaller.q02tJr/93/file0 supports timestamps until 2038 (0x7fffffff)
[  190.797268][ T5395] loop3: detected capacity change from 0 to 1024
[  190.929203][ T3574] EXT4-fs (loop2): unmounting filesystem.
[  191.030765][ T5398] loop0: detected capacity change from 0 to 16
[  191.095762][ T5398] erofs: (device loop0): mounted with root inode @ nid 36.
[  191.109776][ T5404] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  191.317873][ T5406] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  191.324966][ T3589] Bluetooth: hci3: command 0x0406 tx timeout
[  191.325280][ T3581] Bluetooth: hci2: command 0x0406 tx timeout
[  191.337601][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  191.345002][ T3584] Bluetooth: hci0: command 0x0406 tx timeout
[  193.071395][ T5418] loop0: detected capacity change from 0 to 1024
[  193.093453][ T5424] loop3: detected capacity change from 0 to 8
[  193.145580][ T5424] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  193.189135][   T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.383434][ T3294] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  193.485447][   T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.613763][   T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.892794][   T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.908190][ T5433] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  193.922106][ T3294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  193.962014][ T3294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  193.994943][ T3294] usb 3-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[  194.021045][ T3294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.070565][ T3294] usb 3-1: config 0 descriptor??
[  194.098030][ T5436] loop1: detected capacity change from 0 to 1024
[  194.128028][ T3294] usbhid 3-1:0.0: can't add hid device: -22
[  194.144468][ T3294] usbhid: probe of 3-1:0.0 failed with error -22
[  194.260403][ T3584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  194.273739][ T3584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  194.288021][ T3584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  194.301734][ T3589] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  194.317151][ T3589] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  194.332461][ T3589] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  194.384001][ T3653] usb 3-1: USB disconnect, device number 11
[  194.625000][ T5445] device veth0_to_team entered promiscuous mode
[  194.709644][ T5444] device veth0_to_team left promiscuous mode
[  195.903845][ T5438] chnl_net:caif_netlink_parms(): no params data found
[  195.923032][ T5462] loop2: detected capacity change from 0 to 1024
[  195.991765][ T5465] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  196.014600][ T5465] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  196.283177][ T3584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  196.294266][ T3584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  196.308374][ T3584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  196.316816][ T5475] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  196.323536][ T3584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  196.331256][ T3584] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  196.338816][ T3584] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  196.372256][   T48] Bluetooth: hci0: command tx timeout
[  196.484233][ T5438] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.491464][ T5438] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.524661][ T5438] device bridge_slave_0 entered promiscuous mode
[  196.641485][ T5438] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.654418][ T5438] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.688370][ T5438] device bridge_slave_1 entered promiscuous mode
[  196.789478][ T5466] loop0: detected capacity change from 0 to 32768
[  196.820484][ T5483] bridge0: port 3(syz_tun) entered blocking state
[  196.833016][ T5483] bridge0: port 3(syz_tun) entered disabled state
[  196.840655][ T5466] find_entry called with index = 0
[  196.854619][ T5466] read_mapping_page failed!
[  196.859222][ T5466] ERROR: (device loop0): txCommit: 
[  196.859222][ T5466] 
[  196.861352][ T5483] device syz_tun entered promiscuous mode
[  196.899531][ T5491] jfs_unlink: dtDelete returned -116
[  196.903757][ T5483] bridge0: port 3(syz_tun) entered blocking state
[  196.911886][ T5483] bridge0: port 3(syz_tun) entered forwarding state
[  196.918092][ T5491] jfs_unlink: dtDelete returned -116
[  197.034206][ T5438] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.085785][   T33] device hsr_slave_0 left promiscuous mode
[  197.116672][   T33] device hsr_slave_1 left promiscuous mode
[  197.147600][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.169650][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  197.184483][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.199713][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  197.219118][   T33] device bridge_slave_0 left promiscuous mode
[  197.227980][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.260774][   T33] device veth1_macvtap left promiscuous mode
[  197.268672][   T33] device veth0_macvtap left promiscuous mode
[  197.277114][   T33] device veth1_vlan left promiscuous mode
[  197.283521][   T33] device veth0_vlan left promiscuous mode
[  197.563202][   T33] team0 (unregistering): Port device team_slave_1 removed
[  197.577767][   T33] team0 (unregistering): Port device team_slave_0 removed
[  197.592619][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  197.611452][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  197.776908][ T5508] loop2: detected capacity change from 0 to 1024
[  197.813736][   T33] bond0 (unregistering): Released all slaves
[  197.874204][ T5438] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.912897][ T5500] device veth0_to_team entered promiscuous mode
[  197.927803][ T5499] device veth0_to_team left promiscuous mode
[  198.057770][ T5438] team0: Port device team_slave_0 added
[  198.081737][ T5438] team0: Port device team_slave_1 added
[  198.087889][ T5512] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  198.277952][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.304212][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.338004][ T5438] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.351385][ T5438] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.354345][ T4554] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  198.365463][ T5438] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.366326][   T48] Bluetooth: hci3: command tx timeout
[  198.391942][    C1] vkms_vblank_simulate: vblank timer overrun
[  198.400348][ T5438] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.443736][   T48] Bluetooth: hci0: command tx timeout
[  198.608224][ T5510] loop2: detected capacity change from 0 to 32768
[  198.655938][   T27] kauditd_printk_skb: 5 callbacks suppressed
[  198.655954][   T27] audit: type=1800 audit(1718951798.132:29): pid=5510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=8 res=0 errno=0
[  198.698101][ T5438] device hsr_slave_0 entered promiscuous mode
[  198.771770][ T5438] device hsr_slave_1 entered promiscuous mode
[  198.783619][ T5438] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  198.802239][ T4554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.822246][ T5438] Cannot create hsr debugfs directory
[  198.832604][ T4554] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.871982][ T4554] usb 1-1: New USB device found, idVendor=056a, idProduct=00f8, bcdDevice= 0.00
[  198.891608][ T4554] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.928218][ T4554] usb 1-1: config 0 descriptor??
[  198.994721][ T4554] usbhid 1-1:0.0: can't add hid device: -22
[  199.025060][ T4554] usbhid: probe of 1-1:0.0 failed with error -22
[  199.079141][ T5473] chnl_net:caif_netlink_parms(): no params data found
[  199.282470][ T4554] usb 1-1: USB disconnect, device number 4
[  199.305740][ T5538] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  199.453966][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  199.460291][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  199.498004][ T5535] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  199.602173][ T5535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  200.168029][ T5473] bridge0: port 1(bridge_slave_0) entered blocking state
[  200.222167][ T5473] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.231236][ T5473] device bridge_slave_0 entered promiscuous mode
[  200.319358][ T5473] bridge0: port 2(bridge_slave_1) entered blocking state
[  200.337210][ T5473] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.355999][ T5473] device bridge_slave_1 entered promiscuous mode
[  200.420494][ T5557] loop0: detected capacity change from 0 to 1024
[  200.442168][   T48] Bluetooth: hci3: command tx timeout
[  200.522143][   T48] Bluetooth: hci0: command tx timeout
[  200.523855][ T5473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  200.625202][ T5558] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  200.658004][ T5473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  200.779602][ T5561] loop0: detected capacity change from 0 to 1024
[  200.839892][ T5473] team0: Port device team_slave_0 added
[  200.881286][ T5473] team0: Port device team_slave_1 added
[  201.030940][ T5567] loop1: detected capacity change from 0 to 1024
[  201.143760][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_0
[  201.150761][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.176712][    C1] vkms_vblank_simulate: vblank timer overrun
[  201.236637][ T5473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  201.254853][ T5473] batman_adv: batadv0: Adding interface: batadv_slave_1
[  201.276568][ T5473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  201.303034][    C1] vkms_vblank_simulate: vblank timer overrun
[  201.351425][ T5473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.511268][ T5575] loop0: detected capacity change from 0 to 1024
[  201.778958][ T5579] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  201.809951][ T5473] device hsr_slave_0 entered promiscuous mode
[  201.893968][ T5473] device hsr_slave_1 entered promiscuous mode
[  201.910498][ T5473] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  201.962675][ T5473] Cannot create hsr debugfs directory
[  202.522190][ T3584] Bluetooth: hci3: command tx timeout
[  202.580703][ T5588] overlayfs: missing 'lowerdir'
[  202.602199][ T3584] Bluetooth: hci0: command tx timeout
[  202.603531][ T5438] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  202.738242][ T5588] loop0: detected capacity change from 0 to 512
[  202.745858][ T5438] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  202.824592][ T5438] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  202.835240][ T5438] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  202.835678][ T5588] EXT4-fs error (device loop0): ext4_quota_enable:6964: comm syz-executor.0: Bad quota inum: 3, type: 1
[  202.902517][ T5588] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[  202.903915][ T5570] loop2: detected capacity change from 0 to 32768
[  202.964640][ T5588] EXT4-fs (loop0): mount failed
[  203.051709][ T5596] loop1: detected capacity change from 0 to 1024
[  203.064056][   T27] audit: type=1800 audit(1718951802.542:30): pid=5570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file2" dev="loop2" ino=8 res=0 errno=0
[  203.275355][ T5473] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.370358][ T5599] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'.
[  203.420431][ T5599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  203.458191][ T5438] 8021q: adding VLAN 0 to HW filter on device bond0
[  203.509805][ T5473] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.572330][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  203.593423][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  203.673872][ T5473] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.747232][ T5438] 8021q: adding VLAN 0 to HW filter on device team0
[  203.777342][ T5610] ALSA: mixer_oss: invalid OSS volume 'ELF'
[  203.782332][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  203.810684][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  203.832664][ T3798] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.841211][ T3798] bridge0: port 1(bridge_slave_0) entered forwarding state
[  203.883876][ T5473] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.927849][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  203.940661][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  203.969030][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  203.990259][ T3797] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.997524][ T3797] bridge0: port 2(bridge_slave_1) entered forwarding state
[  204.048031][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  204.065905][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  204.123096][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  204.154331][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  204.175768][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  204.191023][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  204.242938][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  204.262553][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  204.280296][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  204.290965][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  204.308740][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  204.333994][ T5438] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  204.542215][ T5473] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  204.602376][   T48] Bluetooth: hci3: command tx timeout
[  204.653672][ T5473] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  205.026685][ T5679] loop1: detected capacity change from 0 to 1024
[  205.327195][ T5473] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  205.897897][ T5473] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  206.264480][ T5701] loop0: detected capacity change from 0 to 1024
[  206.513199][ T5473] 8021q: adding VLAN 0 to HW filter on device bond0
[  206.543565][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  206.551722][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  206.579414][ T5438] 8021q: adding VLAN 0 to HW filter on device batadv0
[  206.603609][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  206.615019][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  206.619693][ T5712] loop0: detected capacity change from 0 to 1024
[  206.634212][ T5473] 8021q: adding VLAN 0 to HW filter on device team0
[  206.838019][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  206.851041][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  206.864859][ T5251] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.872151][ T5251] bridge0: port 1(bridge_slave_0) entered forwarding state
[  206.888144][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  206.897621][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  206.907379][ T5251] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.914773][ T5251] bridge0: port 2(bridge_slave_1) entered forwarding state
[  206.924364][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  206.959781][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  206.968553][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  206.987122][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  207.000991][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  207.011010][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  207.022942][ T3653] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  207.048549][ T5473] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  207.062488][ T5473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  207.077811][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  207.090426][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  207.100676][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  207.111861][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  207.121518][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  207.167704][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  207.336811][   T33] device hsr_slave_0 left promiscuous mode
[  207.354605][   T33] device hsr_slave_1 left promiscuous mode
[  207.375766][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.402519][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.419449][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.470475][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.494499][   T33] device bridge_slave_1 left promiscuous mode
[  207.501590][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.514700][ T5725] loop2: detected capacity change from 0 to 1024
[  207.556569][   T33] device bridge_slave_0 left promiscuous mode
[  207.574456][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.603420][   T33] device veth1_macvtap left promiscuous mode
[  207.609489][   T33] device veth0_macvtap left promiscuous mode
[  207.615983][   T33] device veth1_vlan left promiscuous mode
[  207.621861][   T33] device veth0_vlan left promiscuous mode
[  208.149987][   T33] team0 (unregistering): Port device team_slave_1 removed
[  208.187788][   T33] team0 (unregistering): Port device team_slave_0 removed
[  208.221284][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  208.271882][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  208.496198][   T33] bond0 (unregistering): Released all slaves
[  208.620469][ T5743] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  208.684591][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  208.718835][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  208.788297][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  208.810716][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  208.843464][ T5438] device veth0_vlan entered promiscuous mode
[  208.867367][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  208.883964][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  208.915633][ T5438] device veth1_vlan entered promiscuous mode
[  209.018637][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  209.031601][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  209.050349][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  209.072996][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  209.098639][ T5438] device veth0_macvtap entered promiscuous mode
[  209.102152][ T5748] kvm: emulating exchange as write
[  209.159111][ T5473] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.193865][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  209.212670][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  209.220332][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  209.250349][ T5438] device veth1_macvtap entered promiscuous mode
[  209.309134][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.350292][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.390879][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.439105][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.456868][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  209.468085][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.480084][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.500801][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  209.514817][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  209.534329][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  209.593231][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.614200][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.651949][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.681966][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.727745][ T5438] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  209.772032][ T5438] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  209.818405][ T5438] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.850777][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  209.860540][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  209.890335][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  209.910716][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  209.969380][ T5438] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.998816][ T5438] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.035072][ T5438] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.064854][ T5438] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.091278][ T5750] loop0: detected capacity change from 0 to 32768
[  210.105638][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  210.136880][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  210.142088][ T5750] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  210.170344][ T5473] device veth0_vlan entered promiscuous mode
[  210.212173][ T5750] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  210.213500][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  210.262742][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  210.288337][ T5750] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  210.336920][ T3800] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  210.348221][ T5473] device veth1_vlan entered promiscuous mode
[  210.354407][ T3800] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  210.481377][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.493250][ T5473] device veth0_macvtap entered promiscuous mode
[  210.512144][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.585989][ T5473] device veth1_macvtap entered promiscuous mode
[  210.593293][ T3800] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 238ms
[  210.614959][ T5755] loop1: detected capacity change from 0 to 32768
[  210.631425][ T3800] gfs2: fsid=syz:syz.0: jid=0: Done
[  210.643878][ T5677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.657982][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.668611][ T5677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.678890][ T5750] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  210.725901][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.747365][   T27] audit: type=1800 audit(1718951810.222:31): pid=5757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=4 res=0 errno=0
[  210.768245][    C0] vkms_vblank_simulate: vblank timer overrun
[  210.804116][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.842104][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.876301][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  210.910646][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  210.960789][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.022270][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.054597][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.092400][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  211.100682][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  211.133285][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  211.162634][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  211.171035][ T5763] loop2: detected capacity change from 0 to 512
[  211.196556][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  211.222804][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  211.251269][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  211.268437][ T5763] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  211.271843][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  211.286740][ T5763] ext4 filesystem being mounted at /root/syzkaller-testdir1420959007/syzkaller.q02tJr/117/file0 supports timestamps until 2038 (0x7fffffff)
[  211.297590][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  211.335448][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.394270][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.443935][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.487022][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.518565][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.520355][ T5768] loop1: detected capacity change from 0 to 512
[  211.539636][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.560183][ T5473] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.642613][ T5768] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  211.643415][ T5473] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.651654][ T5768] ext4 filesystem being mounted at /root/syzkaller-testdir234965775/syzkaller.RC3hQo/145/file0 supports timestamps until 2038 (0x7fffffff)
[  211.670107][ T5473] batman_adv: batadv0: Interface activated: batadv_slave_1
[  211.684823][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  211.693767][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  211.702665][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  211.716298][ T5473] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  211.731128][ T3574] EXT4-fs (loop2): unmounting filesystem.
[  211.777818][ T5473] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  211.841996][ T5473] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  211.850830][ T5473] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.143765][ T5777] devpts: called with bogus options
[  212.170516][ T2474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.197016][ T5773] loop2: detected capacity change from 0 to 16
[  212.213527][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  212.222438][ T2474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.296707][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.314863][ T5773] erofs: (device loop2): mounted with root inode @ nid 36.
[  212.328086][ T5670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.383006][ T5670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.400600][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  212.433091][ T5781] device veth0_to_team entered promiscuous mode
[  212.478257][ T5780] device veth0_to_team left promiscuous mode
[  212.645997][ T5783] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  212.685123][ T5783] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  215.226691][ T5796] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  215.250454][ T5798] loop0: detected capacity change from 0 to 64
[  216.838944][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.846732][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.986396][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.993955][ T5817] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.003491][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.012275][ T5817] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.067377][ T5820] devpts: called with bogus options
[  217.212763][ T5817] team0: Port device bridge0 added
[  217.295125][ T5818] bridge0: port 3(team0) entered blocking state
[  217.312119][ T5818] bridge0: port 3(team0) entered disabled state
[  217.435799][ T3584] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  217.452130][ T3584] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  217.460912][ T3584] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  217.474363][ T3584] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  217.482241][ T3584] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  217.489705][ T3584] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  217.947476][   T33] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.087406][ T5821] chnl_net:caif_netlink_parms(): no params data found
[  218.121004][ T5829] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  218.188565][   T33] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.549651][   T33] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.562646][ T5838] loop0: detected capacity change from 0 to 64
[  218.671400][   T33] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.439506][ T5821] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.511117][ T5821] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.573506][ T3584] Bluetooth: hci0: command tx timeout
[  219.589899][ T5821] device bridge_slave_0 entered promiscuous mode
[  219.633740][ T5821] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.640986][ T5821] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.680527][ T5821] device bridge_slave_1 entered promiscuous mode
[  219.691399][ T3584] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  219.704934][ T3584] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  219.722834][ T3584] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  219.732124][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state
[  219.739577][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state
[  219.748010][ T3584] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  219.762708][ T3584] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  219.770134][ T3584] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  219.839528][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[  219.847769][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  219.857513][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[  219.864945][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  219.928343][ T5850] team0: Port device bridge0 added
[  220.218693][ T5866] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  220.249672][ T5821] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.308153][ T5821] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.438676][ T5873] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  220.449365][ T5873] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  220.489383][   T33] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  221.467170][ T5821] team0: Port device team_slave_0 added
[  221.643494][   T48] Bluetooth: hci0: command tx timeout
[  221.807627][ T3584] Bluetooth: hci2: command tx timeout
[  221.961699][ T5821] team0: Port device team_slave_1 added
[  221.978712][   T33] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.165800][   T33] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  222.188398][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_0
[  222.203460][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  222.420359][ T5821] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  222.577916][ T5821] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.051996][ T5821] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.127018][ T5893] loop1: detected capacity change from 0 to 64
[  223.159414][ T5821] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.259380][   T33] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  223.507806][ T5903] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  223.608143][ T5821] device hsr_slave_0 entered promiscuous mode
[  223.657253][ T5821] device hsr_slave_1 entered promiscuous mode
[  223.688092][ T5910] overlayfs: missing 'lowerdir'
[  223.694493][ T5821] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  223.716307][ T5821] Cannot create hsr debugfs directory
[  223.723376][ T3584] Bluetooth: hci0: command tx timeout
[  223.922203][ T3584] Bluetooth: hci2: command tx timeout
[  223.980163][ T5915] loop1: detected capacity change from 0 to 512
[  224.047617][ T5915] EXT4-fs error (device loop1): ext4_quota_enable:6964: comm syz-executor.1: Bad quota inum: 3, type: 1
[  224.060432][ T5915] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[  224.105214][ T5915] EXT4-fs (loop1): mount failed
[  224.260278][ T5845] chnl_net:caif_netlink_parms(): no params data found
[  224.554850][ T5934] loop1: detected capacity change from 0 to 512
[  224.686196][ T5934] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  224.704863][ T5934] ext4 filesystem being mounted at /root/syzkaller-testdir234965775/syzkaller.RC3hQo/159/file0 supports timestamps until 2038 (0x7fffffff)
[  224.971161][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  224.979935][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.039821][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.152052][ T5845] device bridge_slave_0 entered promiscuous mode
[  225.241375][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.252216][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.265881][ T5845] device bridge_slave_1 entered promiscuous mode
[  225.437092][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.511870][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.802149][   T48] Bluetooth: hci0: command tx timeout
[  225.839926][ T5845] team0: Port device team_slave_0 added
[  225.853221][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  225.909237][ T5845] team0: Port device team_slave_1 added
[  225.962060][ T3584] Bluetooth: hci2: command tx timeout
[  225.993253][ T5944] loop0: detected capacity change from 0 to 32768
[  226.025538][ T5821] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  226.149388][ T5951] loop1: detected capacity change from 0 to 32768
[  226.195007][   T27] audit: type=1800 audit(1718951825.672:32): pid=5951 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="loop1" ino=8 res=0 errno=0
[  226.215959][ T5821] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  226.292801][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.310105][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.347048][ T5964] loop3: detected capacity change from 0 to 512
[  226.381953][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.418004][ T5821] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  226.447786][ T5964] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  226.461252][   T33] bond0: (slave wlan1): Releasing backup interface
[  226.512207][ T5964] ext4 filesystem being mounted at /root/syzkaller-testdir3755679688/syzkaller.pnOcQx/16/file0 supports timestamps until 2038 (0x7fffffff)
[  226.522789][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.562246][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.677172][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.699475][ T5972] Bluetooth: MGMT ver 1.22
[  226.740226][ T5821] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  226.810355][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  226.858937][ T5977] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  227.567820][ T5845] device hsr_slave_0 entered promiscuous mode
[  227.591377][ T5845] device hsr_slave_1 entered promiscuous mode
[  227.601686][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.635728][ T5845] Cannot create hsr debugfs directory
[  228.042135][ T3584] Bluetooth: hci2: command tx timeout
[  228.869520][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.898421][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  228.979588][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  228.998330][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  229.114800][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[  229.165684][   T33] device hsr_slave_0 left promiscuous mode
[  229.192755][   T33] device hsr_slave_1 left promiscuous mode
[  229.239905][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.260904][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.310406][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.338835][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.379508][   T33] device bridge_slave_1 left promiscuous mode
[  229.386246][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.410863][ T5979] loop3: detected capacity change from 0 to 32768
[  229.425004][   T33] device bridge_slave_0 left promiscuous mode
[  229.431332][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.550835][   T27] audit: type=1800 audit(1718951829.022:33): pid=6011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=4 res=0 errno=0
[  229.595749][   T33] device hsr_slave_0 left promiscuous mode
[  229.604984][ T6010] loop1: detected capacity change from 0 to 512
[  229.633559][   T33] device hsr_slave_1 left promiscuous mode
[  229.676122][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  229.692113][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  229.708369][ T6010] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  229.739187][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  229.742327][ T6010] ext4 filesystem being mounted at /root/syzkaller-testdir234965775/syzkaller.RC3hQo/169/file0 supports timestamps until 2038 (0x7fffffff)
[  229.764225][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  229.780737][   T33] device bridge_slave_1 left promiscuous mode
[  229.787382][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  229.848800][   T33] device bridge_slave_0 left promiscuous mode
[  229.855273][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  229.938311][   T33] device veth1_macvtap left promiscuous mode
[  229.942374][ T6018] loop1: detected capacity change from 512 to 64
[  229.954496][   T33] device veth0_macvtap left promiscuous mode
[  229.960676][   T33] device veth1_vlan left promiscuous mode
[  230.012134][   T33] device veth0_vlan left promiscuous mode
[  230.042825][ T6010] syz-executor.1: attempt to access beyond end of device
[  230.042825][ T6010] loop1: rw=2049, sector=176, nr_sectors = 64 limit=64
[  230.064984][   T33] device veth1_macvtap left promiscuous mode
[  230.071095][   T33] device veth0_macvtap left promiscuous mode
[  230.092117][   T33] device veth1_vlan left promiscuous mode
[  230.098019][   T33] device veth0_vlan left promiscuous mode
[  230.151076][ T6010] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 19 starting block 44)
[  230.233807][ T6010] Buffer I/O error on device loop1, logical block 44
[  230.240980][ T6010] Buffer I/O error on device loop1, logical block 45
[  230.274117][ T6010] Buffer I/O error on device loop1, logical block 46
[  230.280884][ T6010] Buffer I/O error on device loop1, logical block 47
[  230.301083][ T6010] Buffer I/O error on device loop1, logical block 48
[  230.307838][ T6010] Buffer I/O error on device loop1, logical block 49
[  230.352099][ T6010] Buffer I/O error on device loop1, logical block 50
[  230.359020][ T6010] Buffer I/O error on device loop1, logical block 51
[  230.397194][ T6010] Buffer I/O error on device loop1, logical block 52
[  230.403946][ T6010] Buffer I/O error on device loop1, logical block 53
[  230.453067][ T6010] syz-executor.1: attempt to access beyond end of device
[  230.453067][ T6010] loop1: rw=2049, sector=80, nr_sectors = 48 limit=64
[  230.498107][ T6010] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 19 starting block 20)
[  230.537090][ T6010] syz-executor.1: attempt to access beyond end of device
[  230.537090][ T6010] loop1: rw=2049, sector=240, nr_sectors = 264 limit=64
[  230.551405][ T6010] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 19 starting block 60)
[  230.589801][ T3572] Quota error (device loop1): find_tree_dqentry: Can't read quota tree block 1
[  230.614718][ T3572] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 983040
[  230.647080][ T3572] EXT4-fs error (device loop1): ext4_acquire_dquot:6777: comm syz-executor.1: Failed to acquire dquot type 1
[  231.770675][   T33] team0 (unregistering): Port device team_slave_1 removed
[  231.809101][   T33] team0 (unregistering): Port device team_slave_0 removed
[  231.860375][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  231.920615][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  232.019113][ T6037] openvswitch: netlink: Key 0 has unexpected len 2 expected 0
[  232.202184][ T3584] Bluetooth: hci4: command 0x0406 tx timeout
[  232.749110][   T33] bond0 (unregistering): Released all slaves
[  232.916704][   T33] team0 (unregistering): Port device team_slave_1 removed
[  232.940526][   T33] team0 (unregistering): Port device team_slave_0 removed
[  232.953614][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  232.969159][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.040685][   T33] bond0 (unregistering): Released all slaves
[  233.137328][ T3572] bridge0: port 3(syz_tun) entered disabled state
[  233.176030][ T3572] device syz_tun left promiscuous mode
[  233.185480][ T3572] bridge0: port 3(syz_tun) entered disabled state
[  233.220095][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  233.247744][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  233.263531][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  233.280340][ T3294] bridge0: port 1(bridge_slave_0) entered blocking state
[  233.287629][ T3294] bridge0: port 1(bridge_slave_0) entered forwarding state
[  233.311204][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  233.320282][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  233.351636][ T3294] bridge0: port 2(bridge_slave_1) entered blocking state
[  233.358877][ T3294] bridge0: port 2(bridge_slave_1) entered forwarding state
[  233.380142][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  233.385032][ T3572] EXT4-fs (loop1): unmounting filesystem.
[  233.415642][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  233.435028][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  233.597666][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  233.626202][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  233.662446][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  233.686887][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  234.028736][ T5821] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  234.070481][ T5821] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.112936][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  234.129528][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  234.153700][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  234.173248][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  234.201019][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  234.560005][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  234.628677][ T6054] loop3: detected capacity change from 0 to 32768
[  234.836404][   T27] audit: type=1800 audit(1718951834.312:34): pid=6077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=4 res=0 errno=0
[  234.955718][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  234.985174][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  234.996107][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  235.008756][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  235.019381][ T3589] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  235.028660][ T3589] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  235.270317][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  235.307915][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  235.376764][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  235.407037][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  235.492196][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.499768][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.592759][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.978756][ T6094] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  236.095095][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[  236.163662][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  236.188102][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  236.216398][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[  236.253327][ T6078] chnl_net:caif_netlink_parms(): no params data found
[  236.286313][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  236.309360][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  236.342696][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.349902][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.395478][ T6102] overlayfs: missing 'lowerdir'
[  236.400999][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  236.440778][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  236.481187][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.488407][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.500116][ T6085] loop0: detected capacity change from 0 to 32768
[  236.598101][ T6103] loop3: detected capacity change from 0 to 512
[  236.657868][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  236.692802][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  236.701776][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  236.711776][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  236.717211][ T6103] EXT4-fs error (device loop3): ext4_quota_enable:6964: comm syz-executor.3: Bad quota inum: 3, type: 1
[  236.722187][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  236.763676][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  236.772902][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  236.783259][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  236.792764][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  236.801365][ T5251] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  236.822718][ T6103] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[  236.840818][ T6103] EXT4-fs (loop3): mount failed
[  236.847772][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  236.880540][ T5845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  236.899218][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  236.908671][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  237.133448][ T6078] bridge0: port 1(bridge_slave_0) entered blocking state
[  237.140889][ T6078] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.163118][ T3584] Bluetooth: hci1: command tx timeout
[  237.183879][ T6078] device bridge_slave_0 entered promiscuous mode
[  237.230734][ T6078] bridge0: port 2(bridge_slave_1) entered blocking state
[  237.292776][ T6078] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.350025][ T6078] device bridge_slave_1 entered promiscuous mode
[  237.555591][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  237.675775][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  237.696049][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  237.722763][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  237.744933][ T5821] device veth0_vlan entered promiscuous mode
[  237.796539][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  237.813019][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  237.841126][ T6078] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  237.898747][ T6078] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  237.993212][ T5821] device veth1_vlan entered promiscuous mode
[  238.027871][ T6078] team0: Port device team_slave_0 added
[  238.048312][ T6078] team0: Port device team_slave_1 added
[  238.192196][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.199796][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.348262][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.375047][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_0
[  238.386157][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  238.634020][ T6078] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  238.779343][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  238.836838][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  238.938494][ T5821] device veth0_macvtap entered promiscuous mode
[  238.983563][ T6078] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.003515][ T6078] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.180723][ T6078] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.214178][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  239.244044][ T3584] Bluetooth: hci1: command tx timeout
[  239.306620][ T5821] device veth1_macvtap entered promiscuous mode
[  239.660337][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.727622][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.745251][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.759571][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.774455][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.790379][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.806620][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.835673][ T6152] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  239.852307][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  239.864186][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  239.883909][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  239.903012][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  239.934882][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.962606][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.988659][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.001143][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.012859][ T5821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  240.024277][ T5821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  240.036596][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.053009][ T6078] device hsr_slave_0 entered promiscuous mode
[  240.076161][ T6078] device hsr_slave_1 entered promiscuous mode
[  240.101090][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  240.116112][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  240.137784][ T5821] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.155075][ T5821] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.177489][ T5821] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.194348][ T5821] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  240.240986][ T5845] device veth0_vlan entered promiscuous mode
[  240.301377][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.317281][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  240.372956][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  240.383111][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  240.421569][ T6148] loop3: detected capacity change from 0 to 32768
[  240.437730][ T5845] device veth1_vlan entered promiscuous mode
[  240.539311][   T27] audit: type=1800 audit(1718951840.012:35): pid=6165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=4 res=0 errno=0
[  240.670248][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  240.683606][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  240.722738][ T5845] device veth0_macvtap entered promiscuous mode
[  240.764717][ T4130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.794305][ T4130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.804684][ T5845] device veth1_macvtap entered promiscuous mode
[  240.893862][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  240.912950][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  240.921223][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  240.963994][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  240.999274][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.029621][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.060912][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.089972][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.117797][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.145775][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.172084][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.210858][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.251512][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  241.261055][ T5686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.282317][ T5686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.290165][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  241.322572][ T3584] Bluetooth: hci1: command tx timeout
[  241.444872][ T6162] loop0: detected capacity change from 0 to 32768
[  241.504202][ T3797] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  241.524192][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.552444][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.568575][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.586922][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.602485][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.619779][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.630467][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  241.641011][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.654471][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.746527][ T6078] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.770127][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  241.786015][ T3800] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  241.803928][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.820801][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.845731][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.872722][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.906208][ T6180] overlayfs: missing 'lowerdir'
[  241.991643][ T6078] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.098697][ T6180] loop0: detected capacity change from 0 to 512
[  242.175520][ T6078] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.257854][ T6180] EXT4-fs error (device loop0): ext4_quota_enable:6964: comm syz-executor.0: Bad quota inum: 3, type: 1
[  242.319688][ T6180] EXT4-fs warning (device loop0): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-117, ino=3). Please run e2fsck to fix.
[  242.346134][ T6180] EXT4-fs (loop0): mount failed
[  242.489522][ T6078] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.502310][ T3589] Bluetooth: hci1: command tx timeout
[  244.180140][ T6214] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[  244.216186][ T5661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.414139][ T5661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.529486][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  244.673388][ T5677] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.697119][ T5677] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.745905][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  244.759797][ T6078] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  244.883664][ T6078] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  244.897739][ T6078] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  244.957572][ T6078] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  245.114282][ T6237] loop2: detected capacity change from 0 to 16
[  245.169247][ T6237] erofs: (device loop2): mounted with root inode @ nid 36.
[  245.205580][   T33] device hsr_slave_0 left promiscuous mode
[  245.271567][   T33] device hsr_slave_1 left promiscuous mode
[  245.302380][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.312867][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.349331][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.380244][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.429621][   T33] device bridge_slave_1 left promiscuous mode
[  245.455115][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.506366][   T33] device bridge_slave_0 left promiscuous mode
[  245.555033][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.610138][   T33] device team_slave_0 left promiscuous mode
[  245.616548][   T33] device team_slave_1 left promiscuous mode
[  245.622708][   T33] device bridge0 left promiscuous mode
[  245.852127][   T33] device veth1_macvtap left promiscuous mode
[  245.854157][ T6228] loop4: detected capacity change from 0 to 32768
[  245.858452][   T33] device veth0_macvtap left promiscuous mode
[  245.883126][   T33] device veth1_vlan left promiscuous mode
[  246.359322][ T6225] loop3: detected capacity change from 0 to 32768
[  246.526029][   T27] audit: type=1800 audit(1718951846.002:36): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="loop3" ino=4 res=0 errno=0
[  246.702569][   T33] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[  247.232994][   T33] team0 (unregistering): Port device team_slave_1 removed
[  247.284144][ T6273] loop3: detected capacity change from 0 to 1024
[  247.296336][   T33] team0 (unregistering): Port device team_slave_0 removed
[  247.320999][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  247.509819][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  247.589702][ T6262] loop0: detected capacity change from 0 to 32768
[  247.639277][   T27] audit: type=1800 audit(1718951847.112:37): pid=6262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="loop0" ino=8 res=0 errno=0
[  247.678001][   T33] team0 (unregistering): Port device bridge0 removed
[  247.707529][   T33] bond0 (unregistering): Released all slaves
[  247.788915][ T6255] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  247.822800][ T6271] tipc: Failed to obtain node identity
[  247.828579][ T6271] tipc: Enabling of bearer <ib:caif0> rejected, failed to enable media
[  247.872460][ T6274] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
[  247.989957][ T6078] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.047135][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  248.064537][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  248.113993][ T6078] 8021q: adding VLAN 0 to HW filter on device team0
[  248.118796][ T6282] loop4: detected capacity change from 0 to 64
[  248.143197][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  248.161268][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  248.227771][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.235045][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.313374][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  248.332562][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  248.353623][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  248.380905][ T6288] loop2: detected capacity change from 0 to 512
[  248.388100][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.395285][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.464222][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  248.499970][ T6288] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  248.519976][ T6288] ext4 filesystem being mounted at /root/syzkaller-testdir1140691345/syzkaller.XK9Skw/2/file0 supports timestamps until 2038 (0x7fffffff)
[  248.549767][ T6297] loop4: detected capacity change from 0 to 512
[  248.563106][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  248.666642][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  248.687512][ T6297] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  248.702484][ T6297] ext4 filesystem being mounted at /root/syzkaller-testdir1784640983/syzkaller.RHDiAS/9/file0 supports timestamps until 2038 (0x7fffffff)
[  248.709032][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  248.779410][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  248.825511][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  248.840507][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  248.850223][  T935] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  248.877963][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  248.889411][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  248.929614][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  248.953022][ T6078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  249.006201][ T5845] EXT4-fs (loop2): unmounting filesystem.
[  249.183664][ T5821] EXT4-fs (loop4): unmounting filesystem.
[  249.951059][ T6078] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.884825][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.920997][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  251.619062][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  251.674961][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  251.862901][ T6346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  251.929026][ T6078] device veth0_vlan entered promiscuous mode
[  251.994613][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  252.003960][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  252.053811][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  252.075135][ T3796] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  252.103803][ T6351] loop3: detected capacity change from 0 to 512
[  252.129803][ T6078] device veth1_vlan entered promiscuous mode
[  252.224264][ T6351] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  252.245576][ T6351] ext4 filesystem being mounted at /root/syzkaller-testdir3755679688/syzkaller.pnOcQx/41/file0 supports timestamps until 2038 (0x7fffffff)
[  252.298097][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  252.341126][ T4603] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  252.427003][ T6078] device veth0_macvtap entered promiscuous mode
[  252.480834][ T6078] device veth1_macvtap entered promiscuous mode
[  252.501507][ T6365] loop4: detected capacity change from 0 to 16
[  252.801134][ T6365] erofs: (device loop4): mounted with root inode @ nid 36.
[  252.903067][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.946861][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.957582][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.970413][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.991185][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.004349][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.016776][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.027668][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.048282][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.059150][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  253.076392][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  253.082842][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  253.092547][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  253.232790][ T5250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  253.285716][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.600549][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.715721][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.833433][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.937650][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.040794][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.181970][ T6078] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.302010][ T6078] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.366902][ T6078] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.427068][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  254.443637][ T3801] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  254.755456][ T6078] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.822013][ T6078] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.830865][ T6078] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.862541][ T6078] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  255.061161][ T6391] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  255.139766][ T5661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.206484][ T5661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.254184][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  255.267088][ T5672] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.296448][ T6370] loop2: detected capacity change from 0 to 32768
[  255.312056][ T5672] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.359237][ T3294] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  255.634227][   T27] audit: type=1800 audit(1718951855.112:38): pid=6401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=4 res=0 errno=0
[  255.786605][ T6408] loop0: detected capacity change from 0 to 512
[  257.224520][ T6408] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  257.258359][ T6408] ext4 filesystem being mounted at /root/syzkaller-testdir1431044644/syzkaller.DJH5z6/127/file0 supports timestamps until 2038 (0x7fffffff)
[  257.782644][ T4052] EXT4-fs (loop0): unmounting filesystem.
[  258.533253][ T6438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  259.131863][ T6449] loop4: detected capacity change from 0 to 16
[  259.177691][ T6449] erofs: (device loop4): mounted with root inode @ nid 36.
[  259.770843][ T6460] loop3: detected capacity change from 0 to 512
[  260.036440][ T6460] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  260.069707][ T6460] ext4 filesystem being mounted at /root/syzkaller-testdir3755679688/syzkaller.pnOcQx/50/file0 supports timestamps until 2038 (0x7fffffff)
[  260.252026][ T6460] loop3: detected capacity change from 512 to 64
[  260.334042][ T5473] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5868: Out of memory
[  260.380661][ T5473] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor.3: mark_inode_dirty error
[  260.530848][ T6456] loop4: detected capacity change from 0 to 32768
[  260.663383][   T27] audit: type=1800 audit(1718951860.122:39): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=4 res=0 errno=0
[  260.725092][ T6482] loop2: detected capacity change from 0 to 16
[  260.750940][ T5473] EXT4-fs (loop3): unmounting filesystem.
[  260.763533][ T6482] erofs: (device loop2): mounted with root inode @ nid 36.
[  260.855679][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  260.862977][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  261.025221][ T2474] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.729742][ T2474] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  261.903591][ T2474] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.007170][ T6499] loop2: detected capacity change from 0 to 512
[  262.243934][ T6499] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  262.262192][ T6499] ext4 filesystem being mounted at /root/syzkaller-testdir1140691345/syzkaller.XK9Skw/15/file0 supports timestamps until 2038 (0x7fffffff)
[  262.303757][ T2474] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  262.423100][ T6499] loop2: detected capacity change from 512 to 64
[  262.500376][ T5845] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5868: Out of memory
[  262.562230][ T5845] EXT4-fs error (device loop2): ext4_dirty_inode:6072: inode #2: comm syz-executor.2: mark_inode_dirty error
[  262.854270][ T3589] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  262.869331][ T3589] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  262.880224][ T3589] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  262.899508][ T3589] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  262.910195][ T3589] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  262.917734][ T3589] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  263.003246][ T5845] EXT4-fs (loop2): unmounting filesystem.
[  263.670023][ T6516] chnl_net:caif_netlink_parms(): no params data found
[  263.889517][ T6519] loop1: detected capacity change from 0 to 32768
[  264.100149][   T27] audit: type=1800 audit(1718951863.572:40): pid=6540 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file1" dev="loop1" ino=4 res=0 errno=0
[  264.135750][ T2474] device hsr_slave_0 left promiscuous mode
[  264.166190][ T2474] device hsr_slave_1 left promiscuous mode
[  264.191697][ T2474] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.237905][ T2474] batman_adv: batadv0: Removing interface: batadv_slave_0
[  264.267669][ T6543] loop4: detected capacity change from 0 to 16
[  264.284841][ T2474] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.314938][ T2474] batman_adv: batadv0: Removing interface: batadv_slave_1
[  264.315490][ T6543] erofs: (device loop4): mounted with root inode @ nid 36.
[  264.379711][ T2474] device bridge_slave_1 left promiscuous mode
[  264.398795][ T2474] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.428001][ T3584] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  264.440923][ T3584] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  264.450538][ T3584] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  264.459936][ T3584] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  264.469518][   T48] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  264.478093][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  264.529749][ T2474] device bridge_slave_0 left promiscuous mode
[  264.542346][ T2474] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.684551][ T2474] device veth1_macvtap left promiscuous mode
[  264.697360][ T2474] device veth0_macvtap left promiscuous mode
[  264.728202][ T2474] device veth1_vlan left promiscuous mode
[  264.754189][ T2474] device veth0_vlan left promiscuous mode
[  264.950866][ T6553] loop0: detected capacity change from 0 to 512
[  265.004434][   T48] Bluetooth: hci2: command tx timeout
[  265.047941][ T6553] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  265.060339][ T6553] ext4 filesystem being mounted at /root/syzkaller-testdir1431044644/syzkaller.DJH5z6/137/file0 supports timestamps until 2038 (0x7fffffff)
[  265.182393][ T6553] loop0: detected capacity change from 512 to 64
[  265.715167][ T4052] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Out of memory
[  265.733342][ T4052] EXT4-fs error (device loop0): ext4_dirty_inode:6072: inode #2: comm syz-executor.0: mark_inode_dirty error
[  266.217087][ T2474] team0 (unregistering): Port device team_slave_1 removed
[  266.238115][ T2474] team0 (unregistering): Port device team_slave_0 removed
[  266.255157][ T2474] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  266.284573][ T2474] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  266.438950][ T2474] team0 (unregistering): Port device bridge0 removed
[  266.473961][ T2474] bond0 (unregistering): Released all slaves
[  266.533085][   T48] Bluetooth: hci3: command tx timeout
[  266.637362][ T6516] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.666659][ T6516] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.696974][ T6516] device bridge_slave_0 entered promiscuous mode
[  266.752528][ T6516] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.765378][ T6516] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.799884][ T6516] device bridge_slave_1 entered promiscuous mode
[  266.926520][ T6516] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  266.957309][ T4052] EXT4-fs (loop0): unmounting filesystem.
[  266.982621][ T6516] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.092757][   T48] Bluetooth: hci2: command tx timeout
[  267.448286][ T6516] team0: Port device team_slave_0 added
[  267.519869][ T6516] team0: Port device team_slave_1 added
[  267.768188][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.775946][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.790513][ T6588] loop1: detected capacity change from 0 to 512
[  267.802796][ T6516] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.830144][ T6516] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.865703][ T6516] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.974930][ T6588] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  268.062058][ T6588] ext4 filesystem being mounted at /root/syzkaller-testdir875047337/syzkaller.Jv5pTS/11/file0 supports timestamps until 2038 (0x7fffffff)
[  268.081987][ T6516] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  268.141664][ T6548] chnl_net:caif_netlink_parms(): no params data found
[  268.262147][ T6588] loop1: detected capacity change from 512 to 64
[  268.333590][ T6078] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5868: Out of memory
[  268.357787][ T6516] device hsr_slave_0 entered promiscuous mode
[  268.402464][ T6516] device hsr_slave_1 entered promiscuous mode
[  268.402469][ T6078] EXT4-fs error (device loop1): ext4_dirty_inode:6072: inode #2: comm syz-executor.1: mark_inode_dirty error
[  268.432296][ T6516] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.476799][ T6516] Cannot create hsr debugfs directory
[  268.590172][ T3589] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  268.601541][ T3589] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  268.602256][ T3584] Bluetooth: hci3: command tx timeout
[  268.613536][ T3589] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  268.645516][ T3589] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  268.654252][ T3589] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  268.662923][ T3584] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  268.887862][ T6609] loop4: detected capacity change from 0 to 16
[  268.936469][ T6609] erofs: (device loop4): mounted with root inode @ nid 36.
[  269.035831][ T6548] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.054537][ T6548] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.079039][ T6548] device bridge_slave_0 entered promiscuous mode
[  269.104884][ T6078] EXT4-fs (loop1): unmounting filesystem.
[  269.116872][ T6548] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.144953][ T6548] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.173548][ T3584] Bluetooth: hci2: command tx timeout
[  269.209550][ T6548] device bridge_slave_1 entered promiscuous mode
[  269.465266][ T6548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  269.611051][ T6548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  269.859546][ T6548] team0: Port device team_slave_0 added
[  269.973270][ T6548] team0: Port device team_slave_1 added
[  270.409442][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_0
[  270.432848][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.521927][ T6548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  270.606318][ T6548] batman_adv: batadv0: Adding interface: batadv_slave_1
[  270.650141][ T6548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  270.682218][ T3584] Bluetooth: hci4: command tx timeout
[  270.688613][ T3584] Bluetooth: hci3: command tx timeout
[  270.751000][ T6548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  270.897419][   T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  270.909579][   T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  270.919810][   T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  270.930158][   T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  270.939906][   T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  270.948217][   T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  271.242051][   T48] Bluetooth: hci2: command tx timeout
[  271.325737][ T6548] device hsr_slave_0 entered promiscuous mode
[  271.357368][ T6548] device hsr_slave_1 entered promiscuous mode
[  271.371741][ T6548] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  271.386069][ T6634] Bluetooth: MGMT ver 1.22
[  271.409853][ T6548] Cannot create hsr debugfs directory
[  272.017789][ T6604] chnl_net:caif_netlink_parms(): no params data found
[  272.251546][ T6516] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  272.298078][ T6516] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  272.482057][ T6516] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  272.558713][ T6548] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.626134][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.642064][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state
[  272.651335][ T6604] device bridge_slave_0 entered promiscuous mode
[  272.673594][ T6516] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  272.694085][ T6623] chnl_net:caif_netlink_parms(): no params data found
[  272.720566][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.729310][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state
[  272.748583][ T6604] device bridge_slave_1 entered promiscuous mode
[  272.769772][   T48] Bluetooth: hci3: command tx timeout
[  272.778292][ T3584] Bluetooth: hci4: command tx timeout
[  272.791002][ T6548] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.924941][ T6548] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  272.930630][ T6654] loop4: detected capacity change from 0 to 32768
[  273.002277][ T3584] Bluetooth: hci1: command tx timeout
[  273.032664][   T27] audit: type=1800 audit(1718951872.502:41): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=4 res=0 errno=0
[  273.098296][ T2474] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.129613][ T6654] ================================================================================
[  273.144616][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  273.175815][ T6662] ================================================================================
[  273.190097][ T6548] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.197743][ T6662] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_txnmgr.c:1741:21
[  273.200792][ T6654] UBSAN: array-index-out-of-bounds in fs/jfs/jfs_xtree.c:622:9
2024/06/21 06:37:52 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  273.225852][ T6662] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
[  273.277590][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.312208][ T6662] CPU: 0 PID: 6662 Comm: syz-executor.4 Not tainted 6.1.94-syzkaller #0
[  273.320607][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  273.330713][ T6662] Call Trace:
[  273.334018][ T6662]  <TASK>
[  273.336984][ T6662]  dump_stack_lvl+0x1e3/0x2cb
[  273.341740][ T6662]  ? nf_tcp_handle_invalid+0x642/0x642
[  273.347302][ T6662]  ? panic+0x764/0x764
[  273.351437][ T6662]  __ubsan_handle_out_of_bounds+0x118/0x140
[  273.357479][ T6662]  txCommit+0x3ed5/0x6ba0
[  273.361887][ T6662]  ? trace_contention_end+0x61/0x170
[  273.367229][ T6662]  ? __lock_acquire+0x1f80/0x1f80
[  273.372313][ T6662]  ? txLinelock+0x160/0x160
[  273.376858][ T6662]  ? __mutex_unlock_slowpath+0x218/0x750
[  273.382519][ T6662]  jfs_commit_inode+0x362/0x580
[  273.387389][ T6662]  ? jfs_iget+0x3b0/0x3b0
[  273.391734][ T6662]  ? rcu_is_watching+0x11/0xb0
[  273.396508][ T6662]  ? __mark_inode_dirty+0x430/0xf80
[  273.401734][ T6662]  extAlloc+0xca8/0x1000
[  273.406012][ T6662]  ? jfs_ioc_trim+0x660/0x660
[  273.410720][ T6662]  jfs_get_block+0x417/0xe50
[  273.415415][ T6662]  ? create_page_buffers+0x1d2/0x4b0
[  273.420722][ T6662]  ? jfs_dirty_inode+0x230/0x230
[  273.425680][ T6662]  ? create_page_buffers+0x24e/0x4b0
[  273.430979][ T6662]  __block_write_begin_int+0x544/0x1a30
[  273.436556][ T6662]  ? jfs_dirty_inode+0x230/0x230
[  273.441511][ T6662]  ? page_zero_new_buffers+0x650/0x650
[  273.446988][ T6662]  ? jfs_dirty_inode+0x230/0x230
[  273.451940][ T6662]  block_write_begin+0x98/0x1f0
[  273.456806][ T6662]  ? jfs_write_begin+0x16/0x60
[  273.461584][ T6662]  jfs_write_begin+0x2d/0x60
[  273.466207][ T6662]  generic_perform_write+0x2fc/0x5e0
[  273.471530][ T6662]  ? generic_file_direct_write+0x460/0x460
[  273.477347][ T6662]  ? generic_file_direct_write+0x40b/0x460
[  273.483175][ T6662]  __generic_file_write_iter+0x297/0x400
[  273.488838][ T6662]  generic_file_write_iter+0xab/0x310
[  273.494420][ T6662]  do_iter_write+0x6e6/0xc50
[  273.499056][ T6662]  ? vfs_iter_write+0xa0/0xa0
[  273.503759][ T6662]  ? vfs_iter_write+0x69/0xa0
[  273.508443][ T6662]  iter_file_splice_write+0x830/0xfc0
[  273.513863][ T6662]  ? splice_from_pipe+0x240/0x240
[  273.519006][ T6662]  ? splice_shrink_spd+0xb0/0xb0
[  273.523987][ T6662]  ? common_file_perm+0x17d/0x1d0
[  273.529023][ T6662]  ? splice_from_pipe+0x240/0x240
[  273.534056][ T6662]  direct_splice_actor+0xe3/0x1c0
[  273.539088][ T6662]  splice_direct_to_actor+0x4c7/0xc30
[  273.544478][ T6662]  ? direct_file_splice_eof+0xa0/0xa0
[  273.549860][ T6662]  ? pipe_to_sendpage+0x350/0x350
[  273.554957][ T6662]  ? fsnotify_perm+0x67/0x590
[  273.559638][ T6662]  ? bpf_lsm_file_permission+0x5/0x10
[  273.565026][ T6662]  do_splice_direct+0x2a5/0x3e0
[  273.569896][ T6662]  ? splice_direct_to_actor+0xc30/0xc30
[  273.575448][ T6662]  ? rcu_read_lock_any_held+0xb3/0x160
[  273.580938][ T6662]  ? do_splice_direct+0x3e0/0x3e0
[  273.585985][ T6662]  do_sendfile+0x61c/0xff0
[  273.590422][ T6662]  ? rcu_is_watching+0x11/0xb0
[  273.595205][ T6662]  ? do_pwritev+0x360/0x360
[  273.599717][ T6662]  ? restore_fpregs_from_fpstate+0xfc/0x230
[  273.605814][ T6662]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  273.611812][ T6662]  __se_sys_sendfile64+0x178/0x1e0
[  273.616962][ T6662]  ? __x64_sys_sendfile64+0xa0/0xa0
[  273.622173][ T6662]  ? syscall_enter_from_user_mode+0x2e/0x230
[  273.628253][ T6662]  ? lockdep_hardirqs_on+0x94/0x130
[  273.633480][ T6662]  ? syscall_enter_from_user_mode+0x2e/0x230
[  273.639473][ T6662]  do_syscall_64+0x3b/0xb0
[  273.643905][ T6662]  ? clear_bhb_loop+0x45/0xa0
[  273.648597][ T6662]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  273.654522][ T6662] RIP: 0033:0x7ff9c987cf29
[  273.659136][ T6662] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  273.678765][ T6662] RSP: 002b:00007ff9c83d50c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  273.687195][ T6662] RAX: ffffffffffffffda RBX: 00007ff9c99b4050 RCX: 00007ff9c987cf29
[  273.695180][ T6662] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000005
[  273.703158][ T6662] RBP: 00007ff9c98ec074 R08: 0000000000000000 R09: 0000000000000000
[  273.711327][ T6662] R10: 0000000800000009 R11: 0000000000000246 R12: 0000000000000000
[  273.719563][ T6662] R13: 000000000000006e R14: 00007ff9c99b4050 R15: 00007ffc62a09048
[  273.727559][ T6662]  </TASK>
[  273.778166][ T2474] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.994812][ T2474] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.066937][ T6604] team0: Port device team_slave_0 added
[  274.272578][ T2474] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.332934][ T6654] index 19 is out of range for type 'xad_t[18]' (aka 'struct xad[18]')
[  274.341246][ T6654] CPU: 1 PID: 6654 Comm: syz-executor.4 Not tainted 6.1.94-syzkaller #0
[  274.349616][ T6654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  274.351232][ T6604] team0: Port device team_slave_1 added
[  274.359777][ T6654] Call Trace:
[  274.359791][ T6654]  <TASK>
[  274.359800][ T6654]  dump_stack_lvl+0x1e3/0x2cb
[  274.359840][ T6654]  ? __get_metapage+0x9ae/0x1040
[  274.381919][ T6654]  ? nf_tcp_handle_invalid+0x642/0x642
[  274.387429][ T6654]  ? panic+0x764/0x764
[  274.391558][ T6654]  __ubsan_handle_out_of_bounds+0x118/0x140
[  274.397510][ T6654]  xtInsert+0xf41/0xfa0
[  274.401720][ T6654]  ? xtSearch+0x1ca0/0x1ca0
[  274.406290][ T6654]  ? mark_lock+0x9a/0x340
[  274.410671][ T6654]  ? __dquot_drop+0x420/0x420
[  274.415399][ T6654]  ? rcu_is_watching+0x11/0xb0
[  274.420191][ T6654]  ? __mark_inode_dirty+0x430/0xf80
[  274.425573][ T6654]  extAlloc+0xa70/0x1000
[  274.430063][ T6654]  ? jfs_ioc_trim+0x660/0x660
[  274.434890][ T6654]  jfs_get_block+0x417/0xe50
[  274.439530][ T6654]  ? create_page_buffers+0x1d2/0x4b0
[  274.444869][ T6654]  ? jfs_dirty_inode+0x230/0x230
[  274.449861][ T6654]  ? create_page_buffers+0x24e/0x4b0
[  274.455187][ T6654]  __block_write_begin_int+0x544/0x1a30
[  274.460804][ T6654]  ? jfs_dirty_inode+0x230/0x230
[  274.465795][ T6654]  ? page_zero_new_buffers+0x650/0x650
[  274.471321][ T6654]  ? jfs_dirty_inode+0x230/0x230
[  274.476299][ T6654]  block_write_begin+0x98/0x1f0
[  274.481181][ T6654]  ? jfs_write_begin+0x16/0x60
[  274.485985][ T6654]  jfs_write_begin+0x2d/0x60
[  274.490611][ T6654]  generic_perform_write+0x2fc/0x5e0
[  274.495952][ T6654]  ? generic_file_direct_write+0x460/0x460
[  274.501800][ T6654]  ? __file_remove_privs+0x640/0x640
[  274.507143][ T6654]  ? generic_write_checks+0x15c/0x1c0
[  274.512556][ T6654]  ? clear_nonspinnable+0x60/0x60
[  274.517625][ T6654]  __generic_file_write_iter+0x176/0x400
[  274.523302][ T6654]  generic_file_write_iter+0xab/0x310
[  274.528726][ T6654]  vfs_write+0x7ae/0xba0
[  274.533021][ T6654]  ? file_end_write+0x250/0x250
[  274.537919][ T6654]  ? __fget_files+0x28/0x4a0
[  274.542627][ T6654]  ? __fget_files+0x435/0x4a0
[  274.547344][ T6654]  ? __fdget_pos+0x2ba/0x360
[  274.552005][ T6654]  ? ksys_write+0x77/0x2c0
[  274.556461][ T6654]  ksys_write+0x19c/0x2c0
[  274.561174][ T6654]  ? print_irqtrace_events+0x210/0x210
[  274.566678][ T6654]  ? __ia32_sys_read+0x80/0x80
[  274.571481][ T6654]  ? syscall_enter_from_user_mode+0x2e/0x230
[  274.577596][ T6654]  ? lockdep_hardirqs_on+0x94/0x130
[  274.582849][ T6654]  ? syscall_enter_from_user_mode+0x2e/0x230
[  274.588887][ T6654]  do_syscall_64+0x3b/0xb0
[  274.593344][ T6654]  ? clear_bhb_loop+0x45/0xa0
[  274.598060][ T6654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  274.603988][ T6654] RIP: 0033:0x7ff9c987cf29
[  274.608432][ T6654] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  274.628338][ T6654] RSP: 002b:00007ff9c83f60c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  274.636856][ T6654] RAX: ffffffffffffffda RBX: 00007ff9c99b3f80 RCX: 00007ff9c987cf29
[  274.644956][ T6654] RDX: 000000000208e24b RSI: 0000000020000000 RDI: 0000000000000004
[  274.653042][ T6654] RBP: 00007ff9c98ec074 R08: 0000000000000000 R09: 0000000000000000
[  274.661022][ T6654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  274.669006][ T6654] R13: 000000000000000b R14: 00007ff9c99b3f80 R15: 00007ffc62a09048
[  274.677042][ T6654]  </TASK>