last executing test programs:

10.437422716s ago: executing program 1 (id=396):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000000)=0x1)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
r2 = open(&(0x7f0000000200)='./bus\x00', 0x10107e, 0x0)
fallocate(r2, 0x0, 0x0, 0x1000f8)
fallocate(r1, 0x0, 0x0, 0x9000f4)

9.752667494s ago: executing program 1 (id=397):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x810, &(0x7f00000002c0)={[{@noacl}, {@nodatacow}, {@notreelog}, {@nossd_spread}, {@discard}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@user_subvol_rm}, {@nossd_spread}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

8.811437274s ago: executing program 1 (id=398):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
brk(0x80000000007)

7.806179778s ago: executing program 2 (id=406):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000040)="aefdda9d240303005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28011, r1, 0x0)
ftruncate(r1, 0x801da)
read(r0, &(0x7f0000000080)=""/42, 0xffffff9b)

7.603879246s ago: executing program 0 (id=410):
r0 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000040)={0x9}, 0x0, 0x0, 0x0, 0x0)
bind$inet6(r0, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
sendto$inet6(r0, 0x0, 0x0, 0x8001, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
write$binfmt_misc(r0, &(0x7f0000000e80)=ANY=[], 0xffdc)

7.269836784s ago: executing program 2 (id=412):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000080)='./file1\x00', 0x810, &(0x7f00000002c0)={[{@noacl}, {@nodatacow}, {@notreelog}, {@nossd_spread}, {@discard}, {@compress_force_algo={'compress-force', 0x3d, 'zstd'}}, {@user_subvol_rm}, {@nossd_spread}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
renameat2(r0, &(0x7f0000000380)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

7.263279105s ago: executing program 1 (id=414):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0xba770000)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
unshare(0x22020600)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0)
syz_clone3(&(0x7f0000000700)={0x2000a0080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58)

6.595558771s ago: executing program 0 (id=418):
set_mempolicy(0x3, &(0x7f0000000040)=0x9, 0x5)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x0, 0x1a, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018200000", @ANYRES32, @ANYBLOB="00000000000000001801000020696c5a06fcdf00002020207b1af8ff00400000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006dadff8468f1c0010000000bf91"], 0x0}, 0x90)
write$UHID_CREATE2(r0, &(0x7f00000002c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
ioctl$SG_NEXT_CMD_LEN(r1, 0xc0481273, &(0x7f0000000000)=0x7c)

6.267005049s ago: executing program 0 (id=419):
r0 = syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r1, 0x0)
fallocate(r1, 0x0, 0x0, 0x1001f0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000000c0)={0x8})
fcntl$getownex(r0, 0x10, &(0x7f0000000040))

6.266794869s ago: executing program 1 (id=420):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000cc0)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)={0x40, 0x13, 0x6, @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000001740)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)={0x40, 0x19, 0x2, "b3f0"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000d00)={0x44, &(0x7f0000000300)=ANY=[@ANYBLOB="000001000000aa"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

5.330157858s ago: executing program 2 (id=422):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
brk(0x80000000007)

5.329149449s ago: executing program 0 (id=432):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x20081e, &(0x7f00000020c0), 0x1, 0x4ef, &(0x7f0000000a00)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfe6f)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0), 0xfea7)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x2})

4.623883218s ago: executing program 4 (id=424):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xa9b, 0x5}, 0x48)
bpf$OBJ_PIN_MAP(0x6, &(0x7f00000001c0)=@generic={0x0, r2}, 0x18)

1.956957534s ago: executing program 0 (id=425):
sched_setscheduler(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000010, &(0x7f0000001580), 0xfd, 0x577, &(0x7f00000005c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2fd600, 0x0)
linkat(r0, &(0x7f0000000180)='./file1\x00', r0, &(0x7f00000001c0)='./file3\x00', 0x0)

1.833436745s ago: executing program 4 (id=426):
r0 = socket$inet(0x2, 0x3, 0x8d)
ioctl$BTRFS_IOC_ADD_DEV(0xffffffffffffffff, 0x5000940a, 0x0)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={<r1=>0x0, @local, @local}, &(0x7f0000000140)=0xc)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private2, 0x0, r1})
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'ip6tnl0\x00', &(0x7f00000020c0)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @private2, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}}})

1.663032559s ago: executing program 2 (id=428):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=")
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000005840)={0x1ff})

1.52858114s ago: executing program 4 (id=429):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = syz_open_dev$media(&(0x7f00000010c0), 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{}, {}, {0x0, <r2=>0x80000000}, {}], 0x0, 0x0, 0x0})
r3 = syz_open_dev$media(&(0x7f00000010c0), 0x2, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r3, 0xc0487c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000440)=[{}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000700)={{}, {r2, r4}})

1.453430587s ago: executing program 3 (id=430):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000002c0)={'bridge0\x00', &(0x7f00000001c0)=@ethtool_drvinfo={0x3, "5a5cc70719ec1396cc1579fdb93846b70295e1184df796ab6f74a0dcfa265f9c", "4a9a413b262324b47dd7a44d007163c3dd1f4e304f23f3a6532785cf61cd140f", "00ab8becab70539403bb779d61ce1b2e5bba4dca2e7c5374033317d831eca981", "c3f83c8cad5d519baf6d601b2591736f41fdb6092f12ab875d30f6a144a44a55", "e0ff0c205e836463a69eedece6506088d3870986f52b8a8895676913738748e7", "064c286138de58b12a5921ce"}})
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_MSRS(r4, 0x4138ae84, &(0x7f00000000c0)=ANY=[])

1.249832634s ago: executing program 4 (id=431):
openat$ptp0(0xffffffffffffff9c, &(0x7f0000005340), 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, "a05c7b5d00008023e9c5bcf5ff7700"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000240)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}})

1.142874693s ago: executing program 3 (id=433):
r0 = socket$rds(0x15, 0x5, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)

1.012891684s ago: executing program 1 (id=434):
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000600)='fd/4\x00')
read$FUSE(r1, &(0x7f0000001900)={0x2020}, 0x2020)

1.012658084s ago: executing program 0 (id=435):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x17ef, 0x6047, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xc}}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x57, {0x57, 0x0, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

958.414469ms ago: executing program 2 (id=436):
syz_mount_image$reiserfs(&(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x1000098, &(0x7f00000002c0), 0x1, 0x10f6, &(0x7f00000022c0)="$eJzs2LFqFEEYB/D/7J6C1cmkXwJaKEhIOF8ghcI1FtZ2h5WdVyn3OD6OpLIPeYAUAXtlb10NIki4JQfH7wfL7vyZb76dciYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQmyUPkxw1SR2zJklJuu5ieZWkG/PHX9smJW/fL9evPi5er4dp6bMmpa/ajuvZk1oXdVHP6suj86d1/enzh/ZWy5Iulzeb1aM315Nupe/dTroiAAAAHIYfO5vvuT8AAADwP5NdJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMoI4fTZKSdN3F8ipJt9/fAgAAAHZU0uTd/F/5cA3wx4t8m5dtPvpe+jmn+TLUP7979wd3LwEAAIADVW6dx59l9vtc3mfHmeXkZBj/euX6PGmTnP61zuXNZrV9jjercp8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB+sgPHAgAAAADC/K3T6NgAAAAAAAAAAAAAAACAqQIAAP//I7HRJg==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0)
ftruncate(r0, 0x1fa0000)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mkdir(&(0x7f0000000480)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})

912.799122ms ago: executing program 3 (id=437):
mmap(&(0x7f0000009000/0x3000)=nil, 0x3000, 0x0, 0x2172, 0xffffffffffffffff, 0x0)
pipe(&(0x7f0000001800)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58)
r3 = accept4$alg(r2, 0x0, 0x0, 0x0)
write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0xfffffdea)
splice(r0, 0x0, r3, 0x0, 0x2000000000000005, 0x0)

661.482644ms ago: executing program 3 (id=438):
r0 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x41}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f00000000c0)={0x41, 0x0, 0x3}, 0x10)
setsockopt$TIPC_GROUP_LEAVE(r1, 0x10f, 0x88)

574.137981ms ago: executing program 3 (id=439):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
pselect6(0x40, &(0x7f0000000180)={0x1f}, 0x0, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000540)={0x10, 0x0, &(0x7f0000000480)=[@request_death], 0x0, 0x0, 0x0})

368.334128ms ago: executing program 3 (id=440):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000240), 0x21, 0x4a6, &(0x7f0000000a40)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r0, 0x0)
ftruncate(r0, 0x9e5d)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000500)={r1, 0x20, &(0x7f00000004c0)={&(0x7f0000004000)=""/4096, 0x1000, 0x0, 0x0}}, 0x10)

223.141041ms ago: executing program 4 (id=441):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "2af01c3d0040fbffffffffffffff00"})
r1 = syz_open_pts(r0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x13)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
ioctl$TCSETA(r1, 0x5406, &(0x7f00000001c0)={0xffff, 0x0, 0x0, 0x38f, 0x0, "a0590469a322d928"})
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000140)=0x4)

81.162433ms ago: executing program 2 (id=442):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lx, {}, {}, {0x7, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffff6}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f00000000c0)='GPL\x00', 0x7, 0xfed, &(0x7f00000005c0)=""/4077, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3d, 0x0, 0x0, 0x10, 0xc845}, 0x90)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x24, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_TOKEN={0x8}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x24}}, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4010000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x101}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000800)

0s ago: executing program 4 (id=443):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x20)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r2, &(0x7f0000000300), 0x20000000}, 0x20)
close(r0)
bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000300)={r2, &(0x7f0000000240), 0x0}, 0x20)

kernel console output (not intermixed with test programs):

ANGE): vxcan1: link becomes ready
[   65.301134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.325731][ T3644] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.363648][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.374300][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.428272][ T3654] device veth0_vlan entered promiscuous mode
[   65.463415][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   65.479499][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.500241][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.509707][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.531851][ T3653] device veth0_vlan entered promiscuous mode
[   65.557354][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.574262][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.593269][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.613283][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.633163][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.643743][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.660926][ T3654] device veth1_vlan entered promiscuous mode
[   65.685570][ T3653] device veth1_vlan entered promiscuous mode
[   65.762740][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.777235][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.790604][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.801042][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   65.810082][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.818874][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.836864][ T3654] device veth0_macvtap entered promiscuous mode
[   65.859982][ T3643] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.877685][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   65.895665][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   65.905241][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   65.916291][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   65.925025][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   65.934329][ T3654] device veth1_macvtap entered promiscuous mode
[   65.975318][ T3650] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.988246][ T3653] device veth0_macvtap entered promiscuous mode
[   66.000176][ T3653] device veth1_macvtap entered promiscuous mode
[   66.010786][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.021315][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.030342][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.039840][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.049207][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.070890][ T3653] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.086383][ T3653] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.100668][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.111670][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.127149][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.145318][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.155394][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.165952][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.174845][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.184785][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.194150][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.206879][ T3653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.216397][ T3653] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.225595][ T3653] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.236073][ T3653] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.253513][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.261967][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.275539][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.283666][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.294242][ T3654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.305413][ T3654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.316872][ T3654] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.327263][ T3643] device veth0_vlan entered promiscuous mode
[   66.382745][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.391433][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.404459][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.414468][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.423401][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.432017][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.442915][ T3654] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.451634][ T3654] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.460752][ T3654] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.474506][ T3654] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.491019][ T3643] device veth1_vlan entered promiscuous mode
[   66.550317][ T3643] device veth0_macvtap entered promiscuous mode
[   66.556835][ T3660] Bluetooth: hci0: command tx timeout
[   66.557066][ T3662] Bluetooth: hci4: command tx timeout
[   66.562238][ T3660] Bluetooth: hci1: command tx timeout
[   66.567879][ T3661] Bluetooth: hci2: command tx timeout
[   66.567950][ T3661] Bluetooth: hci3: command tx timeout
[   66.588245][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.609963][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.622154][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.638519][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.647570][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.657206][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.665978][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.675216][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.683458][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.706990][ T3643] device veth1_macvtap entered promiscuous mode
[   66.717636][ T3644] device veth0_vlan entered promiscuous mode
[   66.728656][ T3650] device veth0_vlan entered promiscuous mode
[   66.736334][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.745545][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.754194][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.791917][ T3644] device veth1_vlan entered promiscuous mode
[   66.815554][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.824338][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.832070][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.841289][ T3650] device veth1_vlan entered promiscuous mode
[   66.866338][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.878837][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.891526][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.904853][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.916540][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.946127][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.952965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.955937][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.963720][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.979958][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.988403][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.997251][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.006205][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.021264][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.033580][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.043992][ T3643] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.054750][ T3643] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.066448][ T3643] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.088837][ T3644] device veth0_macvtap entered promiscuous mode
[   67.105435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.124418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.133707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.142296][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.152496][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.165032][ T3650] device veth0_macvtap entered promiscuous mode
[   67.175267][ T3650] device veth1_macvtap entered promiscuous mode
[   67.186382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.197965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.207288][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.221266][ T3644] device veth1_macvtap entered promiscuous mode
[   67.235777][ T3643] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.244882][ T3643] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.253980][ T3643] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.266461][ T3643] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.285057][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.293418][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.320591][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.332185][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.361199][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.375776][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.386056][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.396838][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.406960][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.417531][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.430310][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.446154][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.456860][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.469237][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.479778][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.489785][ T3650] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.500349][ T3650] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.511451][ T3650] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.542894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.557469][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.567100][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.576292][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.584954][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.600094][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.611159][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.616096][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.620236][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.630478][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.648139][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.658481][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.668970][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.690649][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.701433][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.713554][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.725086][ T3650] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.734295][ T3650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.743220][ T3650] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.752015][ T3650] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.792921][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.801385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.810697][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.821973][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.834316][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.844906][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.844939][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.856108][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.870645][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.874955][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.891828][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.901703][ T3644] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.914658][ T3644] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.926086][ T3644] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.955972][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.969635][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.993792][ T3713] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.006029][ T3644] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.018315][ T3644] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.028816][ T3644] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.037826][ T3644] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.052052][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.060674][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.130817][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.230836][ T3713] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.266468][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.275863][ T3713] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.292900][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.332822][ T3697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.333913][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.349754][ T3697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.390106][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.409184][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.502090][ T3697] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.521154][ T3697] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.565170][ T3735] capability: warning: `syz.3.6' uses deprecated v2 capabilities in a way that may be insecure
[   68.588485][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.621754][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.633042][ T3662] Bluetooth: hci4: command tx timeout
[   68.633061][ T3660] Bluetooth: hci3: command tx timeout
[   68.638447][ T3662] Bluetooth: hci2: command tx timeout
[   68.643828][ T3660] Bluetooth: hci0: command tx timeout
[   68.643855][ T3660] Bluetooth: hci1: command tx timeout
[   68.674188][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.686186][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.387372][ T3752] Illegal XDP return value 4294967294 on prog  (id 2) dev N/A, expect packet loss!
[   69.561851][ T3754] loop3: detected capacity change from 0 to 256
[   69.572950][ T3740] loop1: detected capacity change from 0 to 32768
[   69.606439][ T3754] exfat: Deprecated parameter 'utf8'
[   69.676305][ T3754] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x30100f94, utbl_chksum : 0xe619d30d)
[   69.720808][ T3740] XFS (loop1): Mounting V5 Filesystem
[   69.751762][ T3763] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   69.871496][ T3740] XFS (loop1): Ending clean mount
[   69.943081][ T3754] loop3: detected capacity change from 256 to 0
[   69.953642][    C0] I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   69.963072][ T3769] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5)
[   69.996343][ T3748] loop0: detected capacity change from 0 to 32768
[   70.068697][ T3748] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.9 (3748)
[   70.116355][ T3748] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   70.146293][    C1] I/O error, dev loop3, sector 128 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[   70.156116][ T3653] exFAT-fs (loop3): error, failed to access to FAT (entry 0x00000005, err:-5)
[   70.190092][ T3748] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   70.204333][    C0] I/O error, dev loop3, sector 168 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.222711][ T3748] BTRFS info (device loop0): enabling disk space caching
[   70.225256][    C0] I/O error, dev loop3, sector 169 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.239529][    C0] I/O error, dev loop3, sector 170 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.249291][    C0] I/O error, dev loop3, sector 171 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.249637][ T3748] BTRFS info (device loop0): force clearing of disk cache
[   70.259007][    C0] I/O error, dev loop3, sector 172 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.259041][    C0] I/O error, dev loop3, sector 173 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.259071][    C0] I/O error, dev loop3, sector 174 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.259113][    C0] I/O error, dev loop3, sector 175 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   70.309926][ T3643] XFS (loop1): Unmounting Filesystem
[   70.391391][ T3748] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   70.404045][ T3748] BTRFS info (device loop0): use zstd compression, level 3
[   70.427751][ T3748] BTRFS info (device loop0): turning on sync discard
[   70.457858][ T3748] BTRFS info (device loop0): disk space caching is enabled
[   70.509273][ T3779] loop2: detected capacity change from 0 to 256
[   70.709218][ T3748] BTRFS info (device loop0): enabling ssd optimizations
[   70.779154][   T11] loop: Write error at byte offset 9223372036854775807, length 512.
[   70.802283][ T3748] BTRFS info (device loop0): rebuilding free space tree
[   70.824854][    C1] Buffer I/O error on dev loop3, logical block 0, lost sync page write
[   70.836527][ T3653] syz-executor (3653) used greatest stack depth: 18368 bytes left
[   70.923407][   T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   70.991723][ T3748] BTRFS info (device loop0): disabling free space tree
[   71.013715][ T3748] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   71.073954][ T3748] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   71.088545][   T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.117041][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[   71.123966][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[   71.144744][ T3802] loop1: detected capacity change from 0 to 4096
[   71.274252][   T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.343131][ T3808] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.405903][   T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   71.512994][ T3811] Zero length message leads to an empty skb
[   71.633135][ T3802] loop1: detected capacity change from 4096 to 0
[   71.742796][ T3813] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[   71.878435][ T3813] Remounting filesystem read-only
[   71.917919][ T3650] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[   72.177698][ T3643] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   72.220076][ T3803] loop4: detected capacity change from 0 to 32768
[   72.230861][ T3803] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.23 (3803)
[   72.262540][ T3643] NILFS (loop1): discard dirty page: offset=0, ino=2
[   72.269605][ T3643] NILFS (loop1): discard dirty block: blocknr=14, size=4096
[   72.323120][ T3643] NILFS (loop1): discard dirty page: offset=0, ino=6
[   72.340078][ T3643] NILFS (loop1): discard dirty block: blocknr=23, size=4096
[   72.381742][ T3803] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   72.400200][ T3643] NILFS (loop1): discard dirty page: offset=4096, ino=6
[   72.430462][ T3803] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   72.441190][ T3643] NILFS (loop1): discard dirty block: blocknr=24, size=4096
[   72.476609][ T3643] NILFS (loop1): discard dirty page: offset=8192, ino=6
[   72.492032][ T3803] BTRFS info (device loop4): using free space tree
[   72.508386][ T3646] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   72.519569][ T3646] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   72.527520][ T3646] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   72.528783][ T3643] NILFS (loop1): discard dirty block: blocknr=25, size=4096
[   72.544788][ T3660] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   72.558203][ T3660] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   72.566012][ T3660] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   72.802557][ T3803] BTRFS info (device loop4): enabling ssd optimizations
[   72.887624][   T26] audit: type=1800 audit(1724379954.156:2): pid=3803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.23" name="bus" dev="loop4" ino=263 res=0 errno=0
[   72.974948][ T3867] 9pnet: p9_errstr2errno: server reported unknown error õ’ô7j1¡Ž'œì	/È!�6V©6§ã—Œ5Ä~X
[   72.994814][ T3803] loop4: detected capacity change from 32768 to 11
[   73.053253][ T3868] syz.4.23: attempt to access beyond end of device
[   73.053253][ T3868] loop4: rw=34817, sector=10464, nr_sectors = 128 limit=11
[   73.161128][ T3868] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[   73.252578][ T3868] BTRFS warning (device loop4): direct IO failed ino 263 rw 1,34817 sector 0x28e0 len 65536 err no 10
[   73.316213][ T3875] loop1: detected capacity change from 0 to 256
[   73.341286][ T3875] FAT-fs (loop1): Directory bread(block 64) failed
[   73.350637][ T3875] FAT-fs (loop1): Directory bread(block 65) failed
[   73.380693][ T3875] FAT-fs (loop1): Directory bread(block 66) failed
[   73.399515][ T3875] FAT-fs (loop1): Directory bread(block 67) failed
[   73.431110][ T3875] FAT-fs (loop1): Directory bread(block 68) failed
[   73.463044][ T3872] loop2: detected capacity change from 0 to 8192
[   73.483371][ T3875] FAT-fs (loop1): Directory bread(block 69) failed
[   73.520153][ T3875] FAT-fs (loop1): Directory bread(block 70) failed
[   73.536595][ T3872] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   73.606809][ T3875] FAT-fs (loop1): Directory bread(block 71) failed
[   73.619481][ T3872] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[   73.637275][ T3875] FAT-fs (loop1): Directory bread(block 72) failed
[   73.652666][ T3875] FAT-fs (loop1): Directory bread(block 73) failed
[   73.656178][ T3837] loop0: detected capacity change from 0 to 32768
[   73.679179][ T3660] kworker/u5:7: attempt to access beyond end of device
[   73.679179][ T3660] loop4: rw=6145, sector=10448, nr_sectors = 8 limit=11
[   73.694287][ T3660] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[   73.694810][ T3872] REISERFS (device loop2): using ordered data mode
[   73.713882][ T3644] BTRFS: error (device loop4: state A) in __btrfs_run_delayed_items:1158: errno=-5 IO failure
[   73.724944][ T3644] BTRFS info (device loop4: state EA): forced readonly
[   73.731940][ T3644] BTRFS warning (device loop4: state EA): Skipping commit of aborted transaction.
[   73.742101][ T3644] BTRFS: error (device loop4: state EA) in cleanup_transaction:1994: errno=-5 IO failure
[   73.753724][ T3644] BTRFS info (device loop4: state EA): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   73.753789][ T3872] reiserfs: using flush barriers
[   73.774869][ T3872] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   73.786043][ T3837] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.28 (3837)
[   73.791860][ T3872] REISERFS (device loop2): checking transaction log (loop2)
[   73.884966][ T3840] chnl_net:caif_netlink_parms(): no params data found
[   73.914644][ T3837] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   73.981918][ T3837] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   73.994301][ T3837] BTRFS info (device loop0): setting nodatacow, compression disabled
[   74.009616][ T3837] BTRFS info (device loop0): disabling tree log
[   74.016157][ T3837] BTRFS info (device loop0): turning on sync discard
[   74.110840][ T3837] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   74.172453][ T3837] BTRFS info (device loop0): force zstd compression, level 3
[   74.189686][ T3872] REISERFS (device loop2): Using tea hash to sort names
[   74.191892][ T3697] kworker/u4:5: attempt to access beyond end of device
[   74.191892][ T3697] loop1: rw=1, sector=1224, nr_sectors = 4 limit=256
[   74.200190][ T3872] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[   74.226411][ T3837] BTRFS info (device loop0): using free space tree
[   74.281514][ T3872] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[   74.497469][   T46] device hsr_slave_0 left promiscuous mode
[   74.514326][   T46] device hsr_slave_1 left promiscuous mode
[   74.528360][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   74.577325][ T3872] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 5) not found (pos 2)
[   74.592699][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[   74.604938][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   74.612763][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[   74.622685][ T3837] BTRFS info (device loop0): enabling ssd optimizations
[   74.630577][   T46] device bridge_slave_1 left promiscuous mode
[   74.642526][ T3660] Bluetooth: hci3: command tx timeout
[   74.687175][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   74.763175][   T46] device bridge_slave_0 left promiscuous mode
[   74.770175][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   75.005361][   T46] device veth1_macvtap left promiscuous mode
[   75.011839][   T46] device veth0_macvtap left promiscuous mode
[   75.042546][   T46] device veth1_vlan left promiscuous mode
[   75.082906][   T46] device veth0_vlan left promiscuous mode
[   75.485857][ T3650] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   75.718282][ T3945] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[   76.282910][   T14] cfg80211: failed to load regulatory.db
[   76.634137][   T26] audit: type=1326 audit(1724379957.906:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   76.722662][ T3660] Bluetooth: hci3: command tx timeout
[   76.768672][   T26] audit: type=1326 audit(1724379957.936:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   76.879805][   T26] audit: type=1326 audit(1724379957.936:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   76.903320][   T26] audit: type=1326 audit(1724379957.936:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   76.948300][   T26] audit: type=1326 audit(1724379957.936:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   76.950000][ T3937] loop2: detected capacity change from 0 to 40427
[   77.060459][   T26] audit: type=1326 audit(1724379957.936:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   77.130430][   T46] team0 (unregistering): Port device team_slave_1 removed
[   77.135096][ T3939] loop1: detected capacity change from 0 to 40427
[   77.167852][   T26] audit: type=1326 audit(1724379957.936:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   77.190839][ T3939] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   77.202832][   T26] audit: type=1326 audit(1724379957.936:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   77.207324][ T3937] F2FS-fs (loop2): Found nat_bits in checkpoint
[   77.225863][   T26] audit: type=1326 audit(1724379957.956:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3958 comm="syz.0.45" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4eb5179e79 code=0x7ffc0000
[   77.263461][ T3939] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   77.312712][   T46] team0 (unregistering): Port device team_slave_0 removed
[   77.340980][ T3939] F2FS-fs (loop1): Found nat_bits in checkpoint
[   77.363290][ T3965] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   77.370540][ T3965] overlayfs: failed to set xattr on upper
[   77.402767][ T3965] overlayfs: ...falling back to index=off,metacopy=off.
[   77.411252][ T3937] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   77.420008][ T3965] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   77.439182][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   77.448237][ T3937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   77.516518][ T3939] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   77.525287][ T3939] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   77.585471][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   77.726519][ T3975] loop0: detected capacity change from 0 to 1024
[   78.012622][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   78.052645][ T3654] syz-executor: attempt to access beyond end of device
[   78.052645][ T3654] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   78.793991][ T3660] Bluetooth: hci3: command tx timeout
[   78.855049][   T46] bond0 (unregistering): Released all slaves
[   79.099844][ T3840] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.120081][ T3840] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.136520][ T3840] device bridge_slave_0 entered promiscuous mode
[   79.206075][ T3840] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.233601][ T3840] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.271401][ T3840] device bridge_slave_1 entered promiscuous mode
[   79.397609][ T3840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.430717][ T3840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.606371][ T3840] team0: Port device team_slave_0 added
[   79.634794][ T3840] team0: Port device team_slave_1 added
[   79.741985][ T3840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.772855][ T3840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.903761][ T3840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.994555][ T3840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   80.001561][ T3840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   80.027446][    C1] vkms_vblank_simulate: vblank timer overrun
[   80.054117][ T4016] loop1: detected capacity change from 0 to 1024
[   80.204091][ T3840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   80.216935][   T26] kauditd_printk_skb: 7 callbacks suppressed
[   80.216951][   T26] audit: type=1326 audit(1724379961.486:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4018 comm="syz.2.61" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf5cb79e79 code=0x0
[   80.394959][ T3840] device hsr_slave_0 entered promiscuous mode
[   80.444864][ T3840] device hsr_slave_1 entered promiscuous mode
[   80.527553][ T4028] loop1: detected capacity change from 0 to 128
[   80.616332][ T4028] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   80.708673][ T4028] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038 (0x7fffffff)
[   80.884239][ T3660] Bluetooth: hci3: command tx timeout
[   80.897977][ T4037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.64'.
[   81.065520][ T3643] EXT4-fs (loop1): unmounting filesystem.
[   81.253313][ T4041] loop0: detected capacity change from 0 to 256
[   81.361139][ T4041] =======================================================
[   81.361139][ T4041] WARNING: The mand mount option has been deprecated and
[   81.361139][ T4041]          and is ignored by this kernel. Remove the mand
[   81.361139][ T4041]          option from the mount to silence this warning.
[   81.361139][ T4041] =======================================================
[   81.496937][ T4041] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[   81.704077][ T4031] loop4: detected capacity change from 0 to 32768
[   81.739198][ T4031] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop4 scanned by syz.4.63 (4031)
[   81.802574][ T4031] BTRFS info (device loop4): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   81.845387][ T4031] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   81.884442][ T4031] BTRFS info (device loop4): using free space tree
[   82.228121][ T4031] BTRFS info (device loop4): enabling ssd optimizations
[   82.338712][   T26] audit: type=1804 audit(1724379963.606:20): pid=4031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.63" name="/newroot/17/file0/file1" dev="loop4" ino=260 res=1 errno=0
[   82.428278][ T3840] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   82.435550][   T26] audit: type=1804 audit(1724379963.706:21): pid=4031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.63" name="/newroot/17/file0/file1" dev="loop4" ino=260 res=1 errno=0
[   82.472194][ T3840] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   82.526656][ T3840] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   82.574456][ T3840] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   82.699483][ T3644] BTRFS info (device loop4): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   82.776535][ T4079] loop2: detected capacity change from 0 to 64
[   82.889202][ T4079] hfs: invalid gid -1
[   82.908091][ T4079] hfs: unable to parse mount options
[   82.952642][ T3662] Bluetooth: hci3: command tx timeout
[   82.980260][ T3840] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.009399][ T3840] 8021q: adding VLAN 0 to HW filter on device team0
[   83.016446][ T4045] loop1: detected capacity change from 0 to 32768
[   83.022970][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   83.044007][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   83.108268][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   83.183261][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   83.209596][ T4045] XFS (loop1): Mounting V5 Filesystem
[   83.234315][ T4089] loop4: detected capacity change from 0 to 2048
[   83.259637][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.266852][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.281316][ T4089] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   83.325751][ T4089] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[   83.363050][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   83.388611][ T4045] XFS (loop1): Ending clean mount
[   83.418732][ T4096] loop2: detected capacity change from 0 to 1024
[   83.446541][ T4089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   83.479912][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   83.525162][ T4045] XFS (loop1): Quotacheck needed: Please wait.
[   83.552949][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   83.560128][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.627759][ T4045] XFS (loop1): Quotacheck: Done.
[   83.650713][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   83.719995][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   83.779907][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   83.815274][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   83.861161][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   83.923858][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   83.968128][ T3840] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   84.018160][ T3840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   84.061844][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   84.086008][ T3643] XFS (loop1): Unmounting Filesystem
[   84.093466][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   84.106076][ T4104] loop2: detected capacity change from 0 to 8
[   84.118032][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   84.178761][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   84.210630][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   84.292911][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   84.343983][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   84.388199][ T4104] SQUASHFS error: Unable to read directory block [631:72]
[   84.462522][ T4104] SQUASHFS error: Unable to read directory block [631:72]
[   84.841734][ T4113] loop4: detected capacity change from 0 to 8192
[   84.917450][ T4113] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   84.986094][ T4113] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[   85.019562][ T4113] REISERFS (device loop4): using ordered data mode
[   85.026239][ T4113] reiserfs: using flush barriers
[   85.032806][ T3662] Bluetooth: hci3: command tx timeout
[   85.055254][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.073278][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.097558][ T3840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.102056][ T4113] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   85.139825][ T4113] REISERFS (device loop4): checking transaction log (loop4)
[   85.173550][ T4113] REISERFS (device loop4): Using r5 hash to sort names
[   85.181657][ T4113] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   85.195321][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   85.196010][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   85.203732][ T4136] loop2: detected capacity change from 0 to 128
[   85.217781][ T4113] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[   85.254935][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   85.270816][ T4136] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   85.290985][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   85.321453][ T3840] device veth0_vlan entered promiscuous mode
[   85.340180][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   85.350020][ T4136] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   85.370862][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   85.371124][ T4113] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   85.409826][ T3840] device veth1_vlan entered promiscuous mode
[   85.490805][ T4113] REISERFS warning (device loop4): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[   85.558351][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   85.571512][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   85.595342][ T4113] REISERFS warning (device loop4): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[   85.597864][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   85.620336][  T102] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   85.684288][ T3840] device veth0_macvtap entered promiscuous mode
[   85.710364][ T3840] device veth1_macvtap entered promiscuous mode
[   85.779254][  T102] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   85.809850][ T3840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.852089][ T3840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.881540][ T3840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.932376][ T3840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   85.942228][ T3840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   85.948946][ T4156] loop2: detected capacity change from 0 to 512
[   85.982523][ T3840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.012580][ T3840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   86.037417][ T4156] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[   86.041146][ T3840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.065327][ T3840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.074863][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   86.082637][ T4156] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038 (0x7fffffff)
[   86.124856][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   86.183291][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   86.231146][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   86.278525][ T3840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.313546][ T3840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.343730][ T3840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.402502][ T3840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.413204][ T3840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.424001][ T3840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.434300][ T3840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   86.445561][ T3840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   86.464690][ T3840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.473574][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   86.492317][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   86.532020][ T3840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.566041][ T3840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.589468][ T3840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.604793][ T3840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.661796][ T3654] EXT4-fs (loop2): unmounting filesystem.
[   86.863734][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.916668][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.928017][ T4162] loop0: detected capacity change from 0 to 32768
[   86.984285][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.993301][ T4179] UBIFS error (pid: 4179): cannot open "./file0", error -22
[   87.019881][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.048661][ T4162] XFS (loop0): Mounting V5 Filesystem
[   87.078208][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.164827][ T4195] process 'syz.2.94' launched '/dev/fd/6' with NULL argv: empty string added
[   87.184845][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   87.215157][ T4198] netlink: 'syz.1.96': attribute type 10 has an invalid length.
[   87.303766][ T4162] XFS (loop0): Ending clean mount
[   87.315419][ T4162] XFS (loop0): Quotacheck needed: Please wait.
[   87.410854][ T4198] team0: Device veth1_vlan failed to register rx_handler
[   87.441225][ T4162] XFS (loop0): Quotacheck: Done.
[   87.732027][ T3650] XFS (loop0): Unmounting Filesystem
[   87.873767][ T4216] loop3: detected capacity change from 0 to 512
[   87.912595][ T4216] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   87.942539][ T4216] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   88.060133][ T4216] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   88.174666][ T4216] EXT4-fs (loop3): 1 truncate cleaned up
[   88.180351][ T4216] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   88.398202][ T4231] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   88.447067][ T3840] EXT4-fs (loop3): unmounting filesystem.
[   88.622167][ T4236] loop3: detected capacity change from 0 to 256
[   89.116372][ T4214] loop2: detected capacity change from 0 to 32768
[   89.138588][ T4214] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.101 (4214)
[   89.168333][ T4214] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   89.184680][ T4214] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   89.199206][ T4214] BTRFS info (device loop2): using free space tree
[   89.244157][ T4222] loop0: detected capacity change from 0 to 32768
[   89.275463][ T4222] XFS: ikeep mount option is deprecated.
[   89.281530][ T4222] XFS: noikeep mount option is deprecated.
[   89.395062][ T4222] XFS (loop0): Mounting V5 Filesystem
[   89.531929][ T4279] loop3: detected capacity change from 0 to 1024
[   89.532589][ T4214] BTRFS info (device loop2): enabling ssd optimizations
[   89.612217][ T4288] loop1: detected capacity change from 0 to 2048
[   89.627955][ T4279] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   89.642699][ T4222] XFS (loop0): Ending clean mount
[   89.668508][ T4222] XFS (loop0): Quotacheck needed: Please wait.
[   89.749060][ T4288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   89.870515][ T4222] XFS (loop0): Quotacheck: Done.
[   90.114220][ T3650] XFS (loop0): Unmounting Filesystem
[   90.154319][ T3643] EXT4-fs (loop1): unmounting filesystem.
[   90.192895][ T4305] loop3: detected capacity change from 0 to 2048
[   90.224801][ T4305] EXT4-fs: Ignoring removed orlov option
[   90.275297][ T3878] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[   90.389948][ T4305] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   90.447960][ T4305] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   90.528192][ T3654] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.548458][ T4305] EXT4-fs (loop3): Remounting filesystem read-only
[   90.561284][ T4318] loop0: detected capacity change from 0 to 128
[   90.569354][ T4318] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   90.628456][ T4320] fuse: root generation should be zero
[   90.651467][ T3840] EXT4-fs (loop3): unmounting filesystem.
[   90.721360][ T4321] UDF-fs: error (device loop0): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   91.006406][ T4327] loop0: detected capacity change from 0 to 256
[   91.075166][ T4327] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   92.243950][ T3692] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.589039][   T26] audit: type=1326 audit(1724379973.856:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4373 comm="syz.3.135" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f66c5b79e79 code=0x0
[   92.626965][ T3692] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   92.638601][ T3692] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[   92.802798][ T3692] usb 2-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=cd.43
[   92.817974][ T3692] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.827057][ T3692] usb 2-1: Product: syz
[   92.831258][ T3692] usb 2-1: Manufacturer: syz
[   92.842561][ T3692] usb 2-1: SerialNumber: syz
[   92.894353][ T3692] usb 2-1: config 0 descriptor??
[   92.997735][ T3692] gspca_main: spca501-2.14.0 probing 0497:c001
[   93.264304][ T3692] gspca_spca501: reg write: error -71
[   93.271321][ T3692] spca501 2-1:0.0: Reg write failed for 0x02,0x07,0x05
[   93.283421][ T3692] spca501: probe of 2-1:0.0 failed with error -22
[   93.345700][ T3692] usb 2-1: USB disconnect, device number 2
[   94.004124][ T4356] netlink: 16 bytes leftover after parsing attributes in process `syz.0.133'.
[   94.072647][    C1] eth0: bad gso: type: 1, size: 1408
[   94.206928][ T4394] loop1: detected capacity change from 0 to 64
[   94.481678][ T3660] Bluetooth: hci5: sending frame failed (-49)
[   94.489557][ T3662] Bluetooth: hci5: Opcode 0x1003 failed: -49
[   94.537199][ T4408] 9pnet: p9_errstr2errno: server reported unknown error Ýï——ÿÙ5ÇØdf³äæ-É`5ƒõÔ¶¼e¶¬tMsS^u¿U bäÏÞ§Î)&3"Ꭹt
[   94.537199][ T4408] ¨,
[   94.765080][ T4411] loop1: detected capacity change from 0 to 8
[   94.880407][ T4413] loop2: detected capacity change from 0 to 128
[   94.920001][ T4411] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[   94.945024][ T4413] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   95.087532][ T4413] UDF-fs: error (device loop2): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[   95.112579][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.232933][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   95.526341][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   95.566884][ T4423] tipc: Started in network mode
[   95.608664][ T4423] tipc: Node identity ac1414aa, cluster identity 4711
[   95.634870][ T4423] tipc: Enabled bearer <udp:syz2>, priority 10
[   95.789203][ T4422] loop2: detected capacity change from 0 to 4096
[   95.848884][ T4422] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   96.243135][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[   96.687122][ T4440] netlink: 8 bytes leftover after parsing attributes in process `syz.2.161'.
[   96.744007][ T4416] loop0: detected capacity change from 0 to 40427
[   96.754712][ T3886] tipc: Node number set to 2886997162
[   96.802511][ T3725] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   96.831376][ T4416] F2FS-fs (loop0): Found nat_bits in checkpoint
[   96.861712][ T4448] loop2: detected capacity change from 0 to 16
[   96.943205][ T4448] erofs: (device loop2): mounted with root inode @ nid 36.
[   97.027302][ T4416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   97.071211][ T4453] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app
[   97.111592][   T26] audit: type=1800 audit(1724379978.376:23): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.151" name="bus" dev="loop0" ino=10 res=0 errno=0
[   97.185114][   T26] audit: type=1800 audit(1724379978.406:24): pid=4416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.151" name="bus" dev="loop0" ino=10 res=0 errno=0
[   97.248620][ T3725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.282419][ T3725] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.303862][ T3725] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   97.327417][ T3725] usb 4-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[   97.342502][ T3725] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.356504][ T4462] loop1: detected capacity change from 0 to 2048
[   97.368128][ T3725] usb 4-1: config 0 descriptor??
[   97.378988][ T3650] syz-executor: attempt to access beyond end of device
[   97.378988][ T3650] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   97.455599][ T4462] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   97.480341][ T4470] netlink: 'syz.4.171': attribute type 4 has an invalid length.
[   97.566993][ T4462] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[   97.590337][ T4462] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[   97.603486][ T4462] EXT4-fs (loop1): This should not happen!! Data will be lost
[   97.603486][ T4462] 
[   97.613383][ T4462] EXT4-fs (loop1): Total free blocks count 0
[   97.651406][ T4462] EXT4-fs (loop1): Free/Dirty block details
[   97.668695][ T4462] EXT4-fs (loop1): free_blocks=2415919104
[   97.690726][ T4462] EXT4-fs (loop1): dirty_blocks=32
[   97.704808][ T4462] EXT4-fs (loop1): Block reservation details
[   97.718102][ T4462] EXT4-fs (loop1): i_reserved_data_blocks=2
[   97.811793][ T3643] EXT4-fs (loop1): unmounting filesystem.
[   97.908328][ T3725] waltop 0003:172F:0038.0001: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.3-1/input0
[   97.922469][ T3694] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   98.037430][ T4476] loop0: detected capacity change from 0 to 64
[   98.184112][ T4436] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   98.195573][ T4476] loop0: detected capacity change from 64 to 0
[   98.231122][ T4436] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.257679][ T3820] usb 4-1: USB disconnect, device number 2
[   98.292663][ T3694] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   98.327844][ T3694] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.349101][ T3694] usb 5-1: config 0 descriptor??
[   99.945883][ T3694] usb 5-1: Cannot set autoneg
[   99.961586][ T3694] MOSCHIP usb-ethernet driver: probe of 5-1:0.0 failed with error -71
[   99.993137][ T3694] usb 5-1: USB disconnect, device number 2
[  100.069718][ T4492] loop1: detected capacity change from 0 to 32768
[  100.161560][ T4492] XFS (loop1): Mounting V5 Filesystem
[  100.260503][ T4492] XFS (loop1): Ending clean mount
[  100.282909][ T4492] XFS (loop1): Quotacheck needed: Please wait.
[  100.355978][ T4492] XFS (loop1): Quotacheck: Done.
[  100.540054][ T4523] loop3: detected capacity change from 0 to 256
[  100.573353][ T4523] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  100.585835][ T3820] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  100.720487][ T3643] XFS (loop1): Unmounting Filesystem
[  100.873856][ T3820] usb 1-1: Using ep0 maxpacket: 8
[  101.003317][ T3820] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  101.029344][ T3820] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  101.057010][ T3820] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  101.092400][ T3820] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  101.130192][ T3820] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  101.157096][ T3820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.442591][ T3820] usb 1-1: usb_control_msg returned -32
[  101.448223][ T3820] usbtmc 1-1:16.0: can't read capabilities
[  101.578746][   T26] audit: type=1326 audit(1724379982.846:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4542 comm="syz.4.197" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff26a979e79 code=0x0
[  101.731199][ T4528] loop3: detected capacity change from 0 to 40427
[  101.814905][ T4528] F2FS-fs (loop3): Found nat_bits in checkpoint
[  101.906550][ T4528] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  102.017730][ T3840] syz-executor: attempt to access beyond end of device
[  102.017730][ T3840] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  102.036367][ T3692] usb 1-1: USB disconnect, device number 2
[  102.042974][ T4548] usbtmc 1-1:16.0: usbtmc_ioctl_request failed -71
[  102.541680][ T4556] loop4: detected capacity change from 0 to 1024
[  103.107565][    C1] eth0: bad gso: type: 1, size: 1408
[  103.168590][ T4576] loop3: detected capacity change from 0 to 128
[  103.293755][ T4576] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  103.333575][ T4576] ext4 filesystem being mounted at /30/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  103.352661][ T3694] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  103.508245][ T4576] syz.3.206 (pid 4576) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  103.553178][ T4590] loop4: detected capacity change from 0 to 256
[  103.612594][ T3694] usb 2-1: Using ep0 maxpacket: 8
[  103.732756][ T3694] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  103.741156][ T3694] usb 2-1: config 179 has no interface number 0
[  103.764856][ T3694] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  103.801895][ T3694] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  103.822412][ T3692] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  103.840513][ T3694] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  103.872470][ T3694] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  103.892777][ T3694] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  103.912100][ T3694] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.941988][ T4576] fscrypt: Adiantum using implementation "adiantum(xchacha12-simd,aes-aesni,nhpoly1305-avx2)"
[  103.953583][ T4572] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  104.028904][ T3840] EXT4-fs (loop3): unmounting filesystem.
[  104.067222][ T4602] input: syz0 as /devices/virtual/input/input5
[  104.072782][ T3692] usb 1-1: Using ep0 maxpacket: 8
[  104.134825][ T4605] loop3: detected capacity change from 0 to 512
[  104.147982][ T4605] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  104.170591][ T4605] EXT4-fs (loop3): 1 truncate cleaned up
[  104.200127][ T4605] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  104.241859][ T3694] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input6
[  104.330923][ T3840] EXT4-fs error (device loop3): ext4_map_blocks:634: inode #2: block 13: comm syz-executor: lblock 0 mapped to illegal pblock 13 (length 1)
[  104.369184][ T3840] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5879: Out of memory
[  104.382793][ T3692] usb 1-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e
[  104.414049][ T3692] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.425251][ T3820] usb 2-1: USB disconnect, device number 3
[  104.442392][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  104.452401][ T3840] EXT4-fs error (device loop3): ext4_dirty_inode:6083: inode #2: comm syz-executor: mark_inode_dirty error
[  104.464343][ T3820] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  104.473813][ T3692] usb 1-1: Product: syz
[  104.485192][ T3692] usb 1-1: Manufacturer: syz
[  104.500118][ T3692] usb 1-1: SerialNumber: syz
[  104.518928][ T3692] usb 1-1: config 0 descriptor??
[  104.574618][ T3692] gspca_main: spca500-2.14.0 probing 046d:0900
[  104.609710][ T3840] EXT4-fs (loop3): unmounting filesystem.
[  104.803554][ T4614] binder: 4613:4614 ioctl c018620c 20000000 returned -22
[  104.830726][    C1] eth0: bad gso: type: 1, size: 1408
[  104.921036][ T4618] loop2: detected capacity change from 0 to 128
[  104.950561][ T4618] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  104.983379][ T4618] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  105.077470][   T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.263977][ T3654] EXT4-fs (loop2): unmounting filesystem.
[  105.302554][ T3692] gspca_spca500: reg write: error -71
[  105.322533][ T3692] gspca_spca500: reg write: error -71
[  105.342495][ T3692] gspca_spca500: reg write: error -71
[  105.365727][ T3692] gspca_spca500: reg write: error -71
[  105.388726][ T3692] gspca_spca500: reg write: error -71
[  105.422607][ T3692] gspca_spca500: reg write: error -71
[  105.443111][ T3692] gspca_spca500: reg write: error -71
[  105.467065][ T3692] gspca_spca500: reg write: error -71
[  105.492601][ T3692] gspca_spca500: reg write: error -71
[  105.512718][ T3692] gspca_spca500: reg write: error -71
[  105.542535][ T3692] gspca_spca500: reg write: error -71
[  105.571155][ T4628] netlink: 'syz.4.229': attribute type 4 has an invalid length.
[  105.584865][ T3692] gspca_spca500: reg write: error -71
[  105.598078][ T4628] netlink: 'syz.4.229': attribute type 1 has an invalid length.
[  105.618303][ T4628] netlink: 5 bytes leftover after parsing attributes in process `syz.4.229'.
[  105.629339][ T3692] usb 1-1: USB disconnect, device number 3
[  105.638559][ T3694] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  105.683954][ T4629] loop4: detected capacity change from 0 to 512
[  105.767952][ T4629] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  105.802630][ T4629] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  105.827116][ T4629] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  105.892820][ T3694] usb 3-1: Using ep0 maxpacket: 32
[  105.906370][ T4629] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  105.916526][ T3660] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  105.934907][ T3660] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  105.943620][ T3660] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  105.952251][ T3660] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  105.960289][ T3660] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  105.968479][ T3646] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  105.988856][ T4629] [EXT4 FS bs=4096, gc=2, bpg=34, ipg=32, mo=c040e118, mo2=0000]
[  106.000579][ T4629] EXT4-fs (loop4): orphan cleanup on readonly fs
[  106.016058][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  106.036234][ T3694] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.046271][ T4629] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.229: bg 0: block 34: padding at end of block bitmap is not set
[  106.046311][ T3694] usb 3-1: New USB device found, idVendor=046d, idProduct=011c, bcdDevice= 0.40
[  106.060562][ T3694] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.092057][ T4629] Quota error (device loop4): write_blk: dquota write failed
[  106.096781][ T3694] usb 3-1: config 0 descriptor??
[  106.101078][ T4629] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  106.135562][ T4629] EXT4-fs error (device loop4): ext4_acquire_dquot:6777: comm syz.4.229: Failed to acquire dquot type 1
[  106.154905][ T3694] hub 3-1:0.0: USB hub found
[  106.173992][ T4629] EXT4-fs (loop4): 1 truncate cleaned up
[  106.221184][ T4629] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  106.294777][ T3644] EXT4-fs (loop4): unmounting filesystem.
[  106.372563][ T3694] hub 3-1:0.0: 1 port detected
[  106.517083][ T4643] loop0: detected capacity change from 0 to 8192
[  106.545545][ T4643] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  106.575551][ T4643] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  106.587093][ T4643] REISERFS (device loop0): using ordered data mode
[  106.606608][ T4643] reiserfs: using flush barriers
[  106.618939][ T4643] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  106.662062][ T4643] REISERFS (device loop0): checking transaction log (loop0)
[  106.684507][ T4643] REISERFS (device loop0): Using r5 hash to sort names
[  106.706724][ T4643] REISERFS (device loop0): using 3.5.x disk format
[  106.729695][ T4643] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  106.846057][ T4643] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2
[  106.862442][ T4643] REISERFS error (device loop0): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  106.875710][ T4643] REISERFS (device loop0): Remounting filesystem read-only
[  106.884641][ T4643] REISERFS error (device loop0): vs-13050 reiserfs_update_sd_size: i/o failure occurred trying to update [2 3 0x0 SD] stat data
[  106.888583][ T4641] loop4: detected capacity change from 0 to 32768
[  106.921738][ T4641] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.232 (4641)
[  106.977144][ T4641] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.015864][ T4641] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  107.057123][ T4641] BTRFS info (device loop4): using free space tree
[  107.137736][ T3091] udevd[3091]: worker [3815] terminated by signal 33 (Unknown signal 33)
[  107.147024][ T3091] udevd[3091]: worker [3815] failed while handling '/devices/virtual/block/loop4'
[  107.223203][ T4641] BTRFS info (device loop4): enabling ssd optimizations
[  107.362655][ T3943] hub 3-1:0.0: activate --> -90
[  107.383059][ T3644] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.641501][ T3820] usb 3-1: USB disconnect, device number 2
[  107.799605][ T4673] capability: warning: `syz.4.237' uses 32-bit capabilities (legacy support in use)
[  108.032145][ T4670] loop0: detected capacity change from 0 to 32768
[  108.039503][ T4670] XFS: ikeep mount option is deprecated.
[  108.074771][ T3646] Bluetooth: hci3: command tx timeout
[  108.092086][ T4670] XFS (loop0): Mounting V5 Filesystem
[  108.288391][ T4670] XFS (loop0): Ending clean mount
[  108.334470][ T4670] XFS (loop0): Quotacheck needed: Please wait.
[  108.416753][ T4670] XFS (loop0): Quotacheck: Done.
[  108.565991][ T4692] loop2: detected capacity change from 0 to 256
[  108.596191][    C1] eth0: bad gso: type: 1, size: 1408
[  108.637183][ T3650] XFS (loop0): Unmounting Filesystem
[  108.812872][    C1] eth0: bad gso: type: 1, size: 1408
[  109.313591][ T4703] loop2: detected capacity change from 0 to 512
[  109.358007][ T4703] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.393481][ T4703] EXT4-fs (loop2): 1 truncate cleaned up
[  109.399190][ T4703] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  109.475802][ T4699] loop0: detected capacity change from 0 to 512
[  109.516844][ T4699] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  109.608217][ T3654] EXT4-fs (loop2): unmounting filesystem.
[  109.608390][ T4699] EXT4-fs (loop0): 1 orphan inode deleted
[  109.631923][ T4699] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  109.658739][   T46] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-5
[  109.674305][   T46] EXT4-fs error (device loop0): ext4_release_dquot:6800: comm kworker/u4:3: Failed to release dquot type 1
[  109.698320][   T46] EXT4-fs (loop0): Remounting filesystem read-only
[  109.703486][ T4699] EXT4-fs (loop0): unmounting filesystem.
[  109.951579][   T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.120851][   T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.152761][ T3646] Bluetooth: hci3: command tx timeout
[  110.216422][ T4714] loop4: detected capacity change from 0 to 4096
[  110.278112][   T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.293890][ T4714] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  110.805534][ T4730] loop1: detected capacity change from 0 to 128
[  110.852704][ T4730] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  110.943541][ T4718] loop0: detected capacity change from 0 to 32768
[  110.963460][ T4730] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  110.978582][ T4718] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.251 (4718)
[  111.000898][ T4631] chnl_net:caif_netlink_parms(): no params data found
[  111.055608][ T4718] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.100171][ T4718] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  111.152753][ T4718] BTRFS info (device loop0): using free space tree
[  111.485167][ T3882] kernel write not supported for file /135/timerslack_ns (pid: 3882 comm: kworker/0:9)
[  111.553361][ T4631] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.560492][ T4631] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.592736][ T4718] BTRFS info (device loop0): enabling ssd optimizations
[  111.596322][ T4631] device bridge_slave_0 entered promiscuous mode
[  111.757625][ T4631] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.776268][ T4631] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.805994][ T4767] loop1: detected capacity change from 0 to 512
[  111.822879][ T4631] device bridge_slave_1 entered promiscuous mode
[  111.861517][ T4767] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  111.947246][ T3650] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.950971][ T4767] EXT4-fs (loop1): 1 truncate cleaned up
[  111.972530][ T4767] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  111.998918][ T4732] loop4: detected capacity change from 0 to 40427
[  112.146797][ T4631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  112.226264][ T4732] F2FS-fs (loop4): Found nat_bits in checkpoint
[  112.232581][ T3646] Bluetooth: hci3: command tx timeout
[  112.266281][ T4631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  112.356636][ T3643] EXT4-fs (loop1): unmounting filesystem.
[  112.439491][ T4728] loop2: detected capacity change from 0 to 32768
[  112.451723][ T4732] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  112.551956][ T4732] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  112.592272][ T4631] team0: Port device team_slave_0 added
[  112.601407][ T4631] team0: Port device team_slave_1 added
[  112.655484][ T4631] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.673767][ T4631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.685674][ T4728] XFS (loop2): Mounting V5 Filesystem
[  112.768676][ T4631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.948026][ T4728] XFS (loop2): Ending clean mount
[  112.988822][ T4631] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.993308][ T4728] XFS (loop2): Quotacheck needed: Please wait.
[  113.024310][ T4631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  113.066192][ T4728] XFS (loop2): Quotacheck: Done.
[  113.146664][ T4631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.197295][ T3644] syz-executor: attempt to access beyond end of device
[  113.197295][ T3644] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  113.280370][    C1] eth0: bad gso: type: 1, size: 1408
[  113.300881][ T3654] XFS (loop2): Unmounting Filesystem
[  113.492746][   T11] device hsr_slave_0 left promiscuous mode
[  113.514034][   T11] device hsr_slave_1 left promiscuous mode
[  113.559609][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.567434][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.613283][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.620721][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.691101][   T11] device bridge_slave_1 left promiscuous mode
[  113.712756][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.791826][   T11] device bridge_slave_0 left promiscuous mode
[  113.801512][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.943582][   T11] device veth1_macvtap left promiscuous mode
[  113.949666][   T11] device veth0_macvtap left promiscuous mode
[  113.986419][   T11] device veth1_vlan left promiscuous mode
[  114.010123][   T11] device veth0_vlan left promiscuous mode
[  114.050717][ T4807] loop2: detected capacity change from 0 to 256
[  114.116720][ T4807] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  114.154468][ T4798] loop1: detected capacity change from 0 to 32768
[  114.173002][ T4798] XFS: ikeep mount option is deprecated.
[  114.271305][ T4798] XFS (loop1): Mounting V5 Filesystem
[  114.312622][ T3662] Bluetooth: hci3: command tx timeout
[  114.469599][ T4798] XFS (loop1): Ending clean mount
[  114.492546][ T4798] XFS (loop1): Quotacheck needed: Please wait.
[  114.545483][ T4798] XFS (loop1): Quotacheck: Done.
[  114.729141][ T3643] XFS (loop1): Unmounting Filesystem
[  114.800971][ T4800] loop0: detected capacity change from 0 to 40427
[  114.953822][ T4800] F2FS-fs (loop0): Found nat_bits in checkpoint
[  114.998287][ T4811] loop4: detected capacity change from 0 to 512
[  115.086259][ T4811] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  115.152213][ T4811] EXT4-fs (loop4): 1 orphan inode deleted
[  115.156867][ T4800] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  115.166135][ T4646] Quota error (device loop4): do_check_range: Getting block 0 out of range 1-5
[  115.181892][ T4811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  115.199975][ T4646] EXT4-fs error (device loop4): ext4_release_dquot:6800: comm kworker/u4:8: Failed to release dquot type 1
[  115.218926][ T4811] EXT4-fs (loop4): unmounting filesystem.
[  115.222246][ T4800] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  115.225068][ T4646] EXT4-fs (loop4): Remounting filesystem read-only
[  115.721096][ T4847] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  115.762798][ T3650] syz-executor: attempt to access beyond end of device
[  115.762798][ T3650] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  116.024281][    C1] eth0: bad gso: type: 1, size: 1408
[  116.300533][ T4842] loop2: detected capacity change from 0 to 32768
[  116.314958][   T11] team0 (unregistering): Port device team_slave_1 removed
[  116.362574][ T4842] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.269 (4842)
[  116.442099][ T4842] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  116.483676][   T11] team0 (unregistering): Port device team_slave_0 removed
[  116.494149][ T4842] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  116.528731][ T4842] BTRFS info (device loop2): using free space tree
[  116.699734][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.724727][ T4870] loop4: detected capacity change from 0 to 256
[  116.833077][ T4842] BTRFS info (device loop2): enabling ssd optimizations
[  116.843104][ T4870] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  116.866418][ T4854] loop1: detected capacity change from 0 to 40427
[  116.918462][ T4854] F2FS-fs (loop1): Found nat_bits in checkpoint
[  116.988723][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.021334][ T4854] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  117.029720][ T4854] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  117.168686][ T3654] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  117.592085][ T3643] syz-executor: attempt to access beyond end of device
[  117.592085][ T3643] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  117.700244][ T4892] loop2: detected capacity change from 0 to 2048
[  117.739877][ T4892] EXT4-fs: Ignoring removed orlov option
[  117.911683][ T4892] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  118.074263][ T4892] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  118.104925][ T4890] loop4: detected capacity change from 0 to 32768
[  118.142086][ T4890] XFS: ikeep mount option is deprecated.
[  118.163110][ T4892] EXT4-fs (loop2): Remounting filesystem read-only
[  118.246745][ T3654] EXT4-fs (loop2): unmounting filesystem.
[  118.254823][ T4890] XFS (loop4): Mounting V5 Filesystem
[  118.348310][   T11] bond0 (unregistering): Released all slaves
[  118.373868][ T4890] XFS (loop4): Ending clean mount
[  118.380848][ T4890] XFS (loop4): Quotacheck needed: Please wait.
[  118.436356][ T4890] XFS (loop4): Quotacheck: Done.
[  118.480268][ T4631] device hsr_slave_0 entered promiscuous mode
[  118.487433][ T4631] device hsr_slave_1 entered promiscuous mode
[  118.551995][    C1] eth0: bad gso: type: 1, size: 1408
[  118.564974][ T3644] XFS (loop4): Unmounting Filesystem
[  118.949952][ T4911] loop2: detected capacity change from 0 to 512
[  118.982799][ T4911] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  119.038229][ T4911] EXT4-fs (loop2): 1 orphan inode deleted
[  119.044710][ T4911] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  119.054130][ T3713] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-5
[  119.065194][ T4911] EXT4-fs (loop2): unmounting filesystem.
[  119.072979][ T3713] EXT4-fs error (device loop2): ext4_release_dquot:6800: comm kworker/u4:6: Failed to release dquot type 1
[  119.100969][ T3713] EXT4-fs (loop2): Remounting filesystem read-only
[  119.363064][ T4921] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[  120.205178][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  120.514486][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  120.819734][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  121.684617][ T3646] Bluetooth: hci5: sending frame failed (-49)
[  121.692211][ T3662] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  122.092619][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  122.248398][ T4947] loop1: detected capacity change from 0 to 256
[  122.347521][ T4947] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  122.610958][ T4631] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  122.643810][ T4631] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  122.666469][ T4631] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  122.685955][ T4631] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  122.815317][ T4631] 8021q: adding VLAN 0 to HW filter on device bond0
[  122.840437][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  122.849137][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  122.869469][ T4631] 8021q: adding VLAN 0 to HW filter on device team0
[  122.905291][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  122.919507][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  122.930888][ T4646] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.938028][ T4646] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.958302][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  122.982154][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  123.004023][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  123.015340][ T3697] bridge0: port 2(bridge_slave_1) entered blocking state
[  123.022494][ T3697] bridge0: port 2(bridge_slave_1) entered forwarding state
[  123.042920][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  123.067421][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  123.078081][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  123.089645][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  123.107699][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  123.120872][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  123.136422][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  123.148598][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  123.165907][ T4631] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  123.186828][ T4631] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  123.198174][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  123.215548][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  123.230962][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  123.519503][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  123.527864][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  123.547729][ T4631] 8021q: adding VLAN 0 to HW filter on device batadv0
[  123.573665][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  123.592973][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  123.644760][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  123.666433][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  123.677385][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  123.694515][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  123.710004][ T4631] device veth0_vlan entered promiscuous mode
[  123.755242][ T4631] device veth1_vlan entered promiscuous mode
[  123.811761][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.820586][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  123.829186][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  123.850120][ T4646] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  123.864772][ T4631] device veth0_macvtap entered promiscuous mode
[  123.895329][ T4631] device veth1_macvtap entered promiscuous mode
[  123.938247][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.962504][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.974348][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.985762][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.998094][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.008792][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.018714][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  124.029459][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.044145][ T4631] batman_adv: batadv0: Interface activated: batadv_slave_0
[  124.055943][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  124.064676][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  124.073517][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.082806][ T3878] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.094848][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.113031][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.127860][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.139842][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.152784][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.166029][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.176693][ T4631] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.192012][ T4631] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.210424][ T4631] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.229985][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  124.241965][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  124.260124][ T4631] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  124.270283][ T4631] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  124.281686][ T4631] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  124.291219][ T4631] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  124.432027][ T3878] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.453785][ T3878] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.488516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  124.509253][ T3878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  124.519283][ T3878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  124.538566][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  124.695633][ T3646] Bluetooth: hci5: sending frame failed (-49)
[  124.702903][ T3662] Bluetooth: hci5: Opcode 0x1003 failed: -49
[  124.922570][ T3725] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  125.203896][ T5004] loop1: detected capacity change from 0 to 2048
[  125.222748][    T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!!
[  125.252220][ T5004] EXT4-fs: Ignoring removed orlov option
[  125.322914][ T3725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.350435][ T3725] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.376274][ T5004] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  125.421338][ T3725] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.501972][ T5004] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  125.536791][ T3725] usb 5-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  125.547659][ T5004] EXT4-fs (loop1): Remounting filesystem read-only
[  125.581462][ T3725] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.655938][ T3725] usb 5-1: config 0 descriptor??
[  125.751754][ T3643] EXT4-fs (loop1): unmounting filesystem.
[  126.191655][ T3725] waltop 0003:172F:0038.0002: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.4-1/input0
[  126.450654][ T5032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.497402][ T5032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.541056][ T3725] usb 5-1: USB disconnect, device number 3
[  126.808368][ T5010] loop3: detected capacity change from 0 to 40427
[  126.876210][ T5010] F2FS-fs (loop3): Found nat_bits in checkpoint
[  126.951880][ T5010] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[  126.976023][ T5010] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  127.213053][ T4631] syz-executor: attempt to access beyond end of device
[  127.213053][ T4631] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  127.231927][ T5052] loop0: detected capacity change from 0 to 2048
[  127.256043][ T5052] EXT4-fs: Ignoring removed orlov option
[  127.367559][ T5052] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  127.508627][ T5052] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  127.579718][ T5052] EXT4-fs (loop0): Remounting filesystem read-only
[  127.667637][ T3650] EXT4-fs (loop0): unmounting filesystem.
[  127.984957][ T5057] loop4: detected capacity change from 0 to 32768
[  128.099426][ T5057] XFS (loop4): Mounting V5 Filesystem
[  128.202497][ T3725] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  128.244680][ T5057] XFS (loop4): Ending clean mount
[  128.276622][ T5057] XFS (loop4): Quotacheck needed: Please wait.
[  128.341487][ T5057] XFS (loop4): Quotacheck: Done.
[  128.531053][ T3644] XFS (loop4): Unmounting Filesystem
[  128.584639][ T3725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.600855][ T3725] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.612784][ T3725] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  128.626499][ T3725] usb 1-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  128.637746][ T3725] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.658450][ T3725] usb 1-1: config 0 descriptor??
[  129.148086][ T3725] waltop 0003:172F:0038.0003: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.0-1/input0
[  129.425539][ T5099] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  129.444465][ T5099] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.478490][ T3725] usb 1-1: USB disconnect, device number 4
[  129.755056][ T5095] loop1: detected capacity change from 0 to 40427
[  129.826235][ T5095] F2FS-fs (loop1): Found nat_bits in checkpoint
[  129.930028][ T5095] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  129.942792][ T5095] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  130.082403][ T3662] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  130.109258][ T5114] device sit1 entered promiscuous mode
[  130.172257][ T3643] syz-executor: attempt to access beyond end of device
[  130.172257][ T3643] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  130.190942][ T5116] binder: 5115:5116 ioctl c018620c 20000000 returned -22
[  130.232495][    C1] eth0: bad gso: type: 1, size: 1408
[  130.254662][ T5118] tipc: Started in network mode
[  130.259721][ T5118] tipc: Node identity ac1414aa, cluster identity 4711
[  130.290302][ T5118] tipc: Enabled bearer <udp:syz2>, priority 10
[  130.512052][ T5124] loop4: detected capacity change from 0 to 2048
[  130.643255][ T5124] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  130.749120][ T5124] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  130.808604][ T5124] EXT4-fs (loop4): Delayed block allocation failed for inode 13 at logical offset 16 with max blocks 18 with error 28
[  130.841629][ T5124] EXT4-fs (loop4): This should not happen!! Data will be lost
[  130.841629][ T5124] 
[  130.875665][ T5124] EXT4-fs (loop4): Total free blocks count 0
[  130.885800][ T5124] EXT4-fs (loop4): Free/Dirty block details
[  130.891756][ T5124] EXT4-fs (loop4): free_blocks=2415919104
[  130.931419][ T5124] EXT4-fs (loop4): dirty_blocks=32
[  130.953267][ T5124] EXT4-fs (loop4): Block reservation details
[  130.977303][ T5124] EXT4-fs (loop4): i_reserved_data_blocks=2
[  131.068896][ T3644] EXT4-fs (loop4): unmounting filesystem.
[  131.118096][ T5126] loop3: detected capacity change from 0 to 32768
[  131.199585][ T5126] XFS (loop3): Mounting V5 Filesystem
[  131.312724][ T5126] XFS (loop3): Ending clean mount
[  131.330383][ T5126] XFS (loop3): Quotacheck needed: Please wait.
[  131.368385][ T5126] XFS (loop3): Quotacheck: Done.
[  131.403136][ T3941] tipc: Node number set to 2886997162
[  131.473799][ T5134] loop1: detected capacity change from 0 to 40427
[  131.496736][ T4631] XFS (loop3): Unmounting Filesystem
[  131.531764][ T5134] F2FS-fs (loop1): Found nat_bits in checkpoint
[  131.682513][ T5134] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  131.694201][ T5134] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  132.082892][    C1] eth0: bad gso: type: 1, size: 1408
[  132.099298][ T3643] syz-executor: attempt to access beyond end of device
[  132.099298][ T3643] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  132.144143][ T5161] binder: 5159:5161 ioctl c018620c 20000000 returned -22
[  132.453777][ T5166] device sit1 entered promiscuous mode
[  132.563543][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  132.570027][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  132.601194][ T5169] tipc: Started in network mode
[  132.625847][ T5169] tipc: Node identity ac1414aa, cluster identity 4711
[  132.657008][ T5169] tipc: Enabled bearer <udp:syz2>, priority 10
[  133.162498][  T151] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  133.532672][  T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.564200][  T151] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.598643][  T151] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.638600][  T151] usb 2-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  133.652564][ T3689] tipc: Node number set to 2886997162
[  133.659822][  T151] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.713677][  T151] usb 2-1: config 0 descriptor??
[  133.852403][ T3941] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  133.911328][ T5178] loop0: detected capacity change from 0 to 32768
[  133.986605][ T5178] XFS (loop0): Mounting V5 Filesystem
[  134.102290][ T5178] XFS (loop0): Ending clean mount
[  134.102453][ T3941] usb 3-1: Using ep0 maxpacket: 8
[  134.117488][ T5178] XFS (loop0): Quotacheck needed: Please wait.
[  134.169885][ T5178] XFS (loop0): Quotacheck: Done.
[  134.210301][  T151] waltop 0003:172F:0038.0004: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.1-1/input0
[  134.300263][ T5186] loop4: detected capacity change from 0 to 40427
[  134.333074][ T3650] XFS (loop0): Unmounting Filesystem
[  134.350938][ T5186] F2FS-fs (loop4): Found nat_bits in checkpoint
[  134.389791][ T5200] binder: 5198:5200 ioctl c018620c 20000000 returned -22
[  134.408091][ T3941] usb 3-1: New USB device found, idVendor=046d, idProduct=0900, bcdDevice=66.9e
[  134.427470][ T3941] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.441008][ T3941] usb 3-1: Product: syz
[  134.447739][ T3941] usb 3-1: Manufacturer: syz
[  134.456267][ T3941] usb 3-1: SerialNumber: syz
[  134.459043][ T5186] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  134.477244][ T3941] usb 3-1: config 0 descriptor??
[  134.480711][ T5201] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.510629][ T5201] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.519498][ T5186] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  134.530744][ T3689] usb 2-1: USB disconnect, device number 4
[  134.532817][ T3941] gspca_main: spca500-2.14.0 probing 046d:0900
[  134.843787][ T3644] syz-executor: attempt to access beyond end of device
[  134.843787][ T3644] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  135.154578][ T5210] tipc: Started in network mode
[  135.160127][ T5210] tipc: Node identity ac1414aa, cluster identity 4711
[  135.167595][ T5210] tipc: Enabled bearer <udp:syz2>, priority 10
[  135.200346][ T5214] device sit1 entered promiscuous mode
[  135.264771][ T3941] gspca_spca500: reg write: error -71
[  135.282494][ T3941] gspca_spca500: reg write: error -71
[  135.304723][ T3941] gspca_spca500: reg write: error -71
[  135.332652][ T3941] gspca_spca500: reg write: error -71
[  135.355572][ T3941] gspca_spca500: reg write: error -71
[  135.392467][ T3941] gspca_spca500: reg write: error -71
[  135.412475][ T3941] gspca_spca500: reg write: error -71
[  135.432984][ T3941] gspca_spca500: reg write: error -71
[  135.452486][ T3941] gspca_spca500: reg write: error -71
[  135.472551][ T3941] gspca_spca500: reg write: error -71
[  135.492724][ T3941] gspca_spca500: reg write: error -71
[  135.522717][ T3941] gspca_spca500: reg write: error -71
[  135.544079][ T3941] usb 3-1: USB disconnect, device number 3
[  135.899763][ T5213] loop0: detected capacity change from 0 to 40427
[  135.964839][ T5213] F2FS-fs (loop0): Found nat_bits in checkpoint
[  136.024885][ T5235] loop1: detected capacity change from 0 to 128
[  136.088344][ T5235] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  136.089598][ T5213] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  136.109580][ T5235] ext4 filesystem being mounted at /75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  136.123289][ T5241] loop3: detected capacity change from 0 to 8
[  136.178132][ T5213] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  136.186124][ T3725] tipc: Node number set to 2886997162
[  136.208775][ T5241] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  136.252000][ T3643] EXT4-fs (loop1): unmounting filesystem.
[  136.414122][ T5244] input: syz0 as /devices/virtual/input/input7
[  136.628367][ T3650] syz-executor: attempt to access beyond end of device
[  136.628367][ T3650] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  136.629981][ T5252] loop1: detected capacity change from 0 to 128
[  136.670465][ T5252] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  136.702011][ T5252] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  136.734983][   T26] audit: type=1326 audit(1724380018.006:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5253 comm="syz.3.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90e7179e79 code=0x0
[  136.792429][ T3725] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  137.203485][ T3725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  137.214593][ T3725] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  137.224769][ T3725] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  137.237842][ T3725] usb 3-1: New USB device found, idVendor=172f, idProduct=0038, bcdDevice= 0.00
[  137.247166][ T3725] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.257257][ T3725] usb 3-1: config 0 descriptor??
[  137.749873][ T3725] waltop 0003:172F:0038.0005: hidraw0: USB HID v0.00 Device [HID 172f:0038] on usb-dummy_hcd.2-1/input0
[  138.016054][ T5260] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  138.033679][ T5260] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  138.053454][  T151] usb 3-1: USB disconnect, device number 4
[  138.698665][ T5268] loop4: detected capacity change from 0 to 1024
[  138.738356][ T5270] device sit1 entered promiscuous mode
[  139.392172][ T5283] input: syz0 as /devices/virtual/input/input8
[  139.639716][ T5262] loop3: detected capacity change from 0 to 32768
[  139.678264][ T5262] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.371 (5262)
[  139.738921][ T5262] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.776117][ T5262] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  139.811120][ T5267] loop0: detected capacity change from 0 to 40427
[  139.833063][ T5262] BTRFS info (device loop3): setting nodatacow, compression disabled
[  139.841231][ T5262] BTRFS info (device loop3): disabling tree log
[  139.883418][ T5262] BTRFS info (device loop3): turning on sync discard
[  139.901966][ T5262] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  139.904026][ T5293] loop1: detected capacity change from 0 to 128
[  139.926006][ T5262] BTRFS info (device loop3): force zstd compression, level 3
[  139.957209][ T5267] F2FS-fs (loop0): Found nat_bits in checkpoint
[  139.988689][ T5293] EXT4-fs: Ignoring removed nobh option
[  139.992935][ T5262] BTRFS info (device loop3): using free space tree
[  140.061386][ T5267] F2FS-fs (loop0): Cannot turn on quotas: -2 on 2
[  140.072040][ T5267] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  140.094652][ T5307] netlink: 28 bytes leftover after parsing attributes in process `syz.2.383'.
[  140.096747][ T5293] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  140.166551][ T5293] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038 (0x7fffffff)
[  140.331944][ T5262] BTRFS info (device loop3): enabling ssd optimizations
[  140.490615][ T3643] EXT4-fs (loop1): unmounting filesystem.
[  140.595352][ T3650] syz-executor: attempt to access beyond end of device
[  140.595352][ T3650] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.625488][    C1] eth0: bad gso: type: 1, size: 1408
[  140.766983][ T5330] device sit2 entered promiscuous mode
[  140.767509][ T5332] loop1: detected capacity change from 0 to 512
[  140.808265][ T4631] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  140.826579][ T5332] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  140.869350][ T5332] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 1)!
[  140.972449][ T5332] EXT4-fs (loop1): group descriptors corrupted!
[  141.346486][ T5339] loop4: detected capacity change from 0 to 4096
[  141.445205][ T5343] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.493286][  T151] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  141.665949][ T3880] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  141.680897][ T3880] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12)
[  141.701200][ T3880] Remounting filesystem read-only
[  141.707871][ T3880] NILFS (loop4): error -5 truncating bmap (ino=12)
[  141.744389][ T3644] NILFS (loop4): discard dirty page: offset=0, ino=6
[  141.761357][ T3644] NILFS (loop4): discard dirty block: blocknr=23, size=4096
[  141.769019][  T151] usb 4-1: Using ep0 maxpacket: 8
[  141.780188][ T3644] NILFS (loop4): discard dirty page: offset=4096, ino=6
[  141.788045][ T3644] NILFS (loop4): discard dirty block: blocknr=24, size=4096
[  141.801871][ T3644] NILFS (loop4): discard dirty page: offset=8192, ino=6
[  141.807949][ T5351] loop2: detected capacity change from 0 to 1024
[  141.809411][ T3644] NILFS (loop4): discard dirty block: blocknr=25, size=4096
[  141.907226][  T151] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  141.922482][  T151] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  141.952684][  T151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  141.988081][  T151] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  142.020265][  T151] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  142.062434][  T151] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  142.116102][  T151] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.173907][ T5356] loop4: detected capacity change from 0 to 4096
[  142.203687][ T5356] ntfs3: Unknown parameter 'ÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿÿ0x0000000000000000'
[  142.348061][ T5353] overlayfs: upper fs does not support tmpfile.
[  142.412621][  T151] usb 4-1: usb_control_msg returned -32
[  142.421177][  T151] usbtmc 4-1:16.0: can't read capabilities
[  142.499532][ T5346] loop0: detected capacity change from 0 to 32768
[  142.667135][ T5346] XFS (loop0): Mounting V5 Filesystem
[  142.757606][ T5346] XFS (loop0): Ending clean mount
[  142.922429][  T151] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  142.933729][ T3650] XFS (loop0): Unmounting Filesystem
[  143.112544][ T3689] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  143.233161][ T5374] usbtmc 4-1:16.0: usb_clear_halt returned -32
[  143.250917][ T5373] loop1: detected capacity change from 0 to 40427
[  143.278270][ T5373] F2FS-fs (loop1): Found nat_bits in checkpoint
[  143.302699][  T151] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  143.317452][  T151] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.328386][  T151] usb 5-1: config 0 descriptor??
[  143.335709][ T5373] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[  143.343991][ T5373] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  143.362473][ T3689] usb 3-1: Using ep0 maxpacket: 32
[  143.378996][  T151] gspca_main: spca508-2.14.0 probing 8086:0110
[  143.420201][ T3880] usb 4-1: USB disconnect, device number 3
[  143.482493][ T3689] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  143.506468][ T3643] syz-executor: attempt to access beyond end of device
[  143.506468][ T3643] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  143.530222][ T5380] loop0: detected capacity change from 0 to 256
[  143.566667][ T5380] FAT-fs (loop0): Directory bread(block 64) failed
[  143.586071][ T5380] FAT-fs (loop0): Directory bread(block 65) failed
[  143.593434][ T5380] FAT-fs (loop0): Directory bread(block 66) failed
[  143.600118][ T5380] FAT-fs (loop0): Directory bread(block 67) failed
[  143.606905][  T151] gspca_spca508: reg_read err -32
[  143.612262][ T5380] FAT-fs (loop0): Directory bread(block 68) failed
[  143.619024][ T5380] FAT-fs (loop0): Directory bread(block 69) failed
[  143.626272][ T5380] FAT-fs (loop0): Directory bread(block 70) failed
[  143.633700][ T5380] FAT-fs (loop0): Directory bread(block 71) failed
[  143.640487][ T5380] FAT-fs (loop0): Directory bread(block 72) failed
[  143.647411][  T151] gspca_spca508: reg_read err -32
[  143.653440][ T5380] FAT-fs (loop0): Directory bread(block 73) failed
[  143.655738][ T3689] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  143.678442][ T3689] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  143.692482][  T151] gspca_spca508: reg_read err -32
[  143.705829][ T3689] usb 3-1: Product: syz
[  143.718194][ T3689] usb 3-1: Manufacturer: syz
[  143.724832][ T3689] usb 3-1: SerialNumber: syz
[  143.731208][ T3689] usb 3-1: config 0 descriptor??
[  143.754995][ T5372] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  143.763817][  T151] gspca_spca508: reg_read err -32
[  143.812621][  T151] gspca_spca508: reg_read err -32
[  144.072606][  T151] gspca_spca508: reg write: error -71
[  144.078166][  T151] spca508: probe of 5-1:0.0 failed with error -71
[  144.086276][ T3828] usb 3-1: USB disconnect, device number 5
[  144.120610][  T151] usb 5-1: USB disconnect, device number 4
[  144.229775][ T5383] loop1: detected capacity change from 0 to 32768
[  144.239188][ T5383] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.397 (5383)
[  144.257155][ T5383] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  144.267479][ T5383] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  144.278579][ T5383] BTRFS info (device loop1): setting nodatacow, compression disabled
[  144.292170][ T5383] BTRFS info (device loop1): disabling tree log
[  144.298986][ T5383] BTRFS info (device loop1): turning on sync discard
[  144.310342][ T5383] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  144.327056][ T5383] BTRFS info (device loop1): force zstd compression, level 3
[  144.334785][ T5383] BTRFS info (device loop1): using free space tree
[  144.372382][ T5383] BTRFS info (device loop1): enabling ssd optimizations
[  144.570825][ T5406] loop0: detected capacity change from 0 to 8192
[  144.588532][ T5406] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  144.606207][ T5406] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  144.615637][ T5406] REISERFS (device loop0): using ordered data mode
[  144.622167][ T5406] reiserfs: using flush barriers
[  144.642722][ T5406] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  144.682816][ T5406] REISERFS (device loop0): checking transaction log (loop0)
[  144.767497][ T3643] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  145.071907][ T5406] REISERFS (device loop0): Using tea hash to sort names
[  145.100752][ T5406] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  145.208418][ T5422] loop2: detected capacity change from 0 to 256
[  145.221481][ T5422] exfat: Deprecated parameter 'codepage'
[  145.233605][ T5422] exfat: Bad value for 'codepage'
[  145.289039][ T5250] blk_print_req_error: 12 callbacks suppressed
[  145.289057][ T5250] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  145.559105][ T5429] netlink: 48 bytes leftover after parsing attributes in process `syz.0.405'.
[  145.607913][ T5427] loop2: detected capacity change from 0 to 2048
[  145.803533][ T5427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  146.014940][ T3654] EXT4-fs (loop2): unmounting filesystem.
[  146.400271][ T5450] loop3: detected capacity change from 0 to 128
[  146.578173][ T5431] loop4: detected capacity change from 0 to 40427
[  146.669900][ T5431] F2FS-fs (loop4): Found nat_bits in checkpoint
[  146.844328][ T5431] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[  146.861950][ T5431] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  146.982574][ T3828] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  147.039677][ T5446] loop2: detected capacity change from 0 to 32768
[  147.066195][ T5462] loop0: detected capacity change from 0 to 2048
[  147.093916][ T5446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.412 (5446)
[  147.146922][ T5446] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.177066][ T5446] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  147.199675][ T5446] BTRFS info (device loop2): setting nodatacow, compression disabled
[  147.209978][ T5462] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  147.242620][ T3828] usb 4-1: Using ep0 maxpacket: 8
[  147.268207][ T5446] BTRFS info (device loop2): disabling tree log
[  147.296371][ T5446] BTRFS info (device loop2): turning on sync discard
[  147.303797][ T5446] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  147.316308][ T5446] BTRFS info (device loop2): force zstd compression, level 3
[  147.323991][ T5446] BTRFS info (device loop2): using free space tree
[  147.343033][   T26] audit: type=1804 audit(1724380028.606:27): pid=5462 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.419" name="/newroot/81/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  147.373289][ T3940] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  147.381281][ T3644] syz-executor: attempt to access beyond end of device
[  147.381281][ T3644] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  147.395798][ T3828] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  147.431960][ T3828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  147.453886][ T3828] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  147.472430][ T3828] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  147.485888][ T3828] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  147.495764][ T3828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.521394][ T3650] EXT4-fs (loop0): unmounting filesystem.
[  147.632437][ T3940] usb 2-1: Using ep0 maxpacket: 8
[  147.692833][ T5446] BTRFS info (device loop2): enabling ssd optimizations
[  147.762577][ T3828] usb 4-1: GET_CAPABILITIES returned 0
[  147.762874][ T3940] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  147.768092][ T3828] usbtmc 4-1:16.0: can't read capabilities
[  147.785347][ T3940] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.804174][ T3940] usb 2-1: config 0 descriptor??
[  147.982445][    C1] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  147.994972][ T3828] usb 4-1: USB disconnect, device number 4
[  148.051747][ T5487] loop0: detected capacity change from 0 to 512
[  148.069858][ T3654] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.210151][ T5487] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  148.272523][ T5487] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038 (0x7fffffff)
[  151.288003][ T3650] EXT4-fs (loop0): unmounting filesystem.
[  151.489859][ T5502] loop0: detected capacity change from 0 to 512
[  151.634393][ T5502] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.425: iget: bad extended attribute block 128
[  151.697142][ T5502] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.425: couldn't read orphan inode 16 (err -117)
[  151.757444][ T5512] loop2: detected capacity change from 0 to 512
[  151.778773][ T5502] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  151.804445][ T5502] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038 (0x7fffffff)
[  151.847526][ T5502] Quota error (device loop0): do_check_range: Getting dqdh_entries 964 out of range 0-14
[  151.888518][ T5502] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  151.894861][ T5512] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  151.920034][ T5502] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.425: Failed to acquire dquot type 1
[  151.950124][ T5512] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038 (0x7fffffff)
[  151.980298][ T5520] Quota error (device loop0): do_check_range: Getting dqdh_entries 964 out of range 0-14
[  152.022511][ T5520] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  152.073998][ T5520] EXT4-fs error (device loop0): ext4_acquire_dquot:6777: comm syz.0.425: Failed to acquire dquot type 1
[  152.126023][ T3940] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  152.150132][ T3940] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9
[  152.194489][ T5512] overlayfs: failed to resolve './file0': -2
[  152.214766][ T3940] asix: probe of 2-1:0.0 failed with error -71
[  152.250590][ T3940] usb 2-1: USB disconnect, device number 5
[  152.275920][ T3650] EXT4-fs (loop0): unmounting filesystem.
[  152.317824][ T3654] EXT4-fs (loop2): unmounting filesystem.
[  152.569388][ T5532] loop2: detected capacity change from 0 to 8192
[  152.592874][ T5532] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  152.612013][ T5532] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  152.622697][ T5532] REISERFS (device loop2): using ordered data mode
[  152.629243][ T5532] reiserfs: using flush barriers
[  152.651821][ T5532] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  152.692534][ T5490] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  152.722903][ T5532] REISERFS (device loop2): checking transaction log (loop2)
[  152.864790][ T5532] REISERFS (device loop2): Using tea hash to sort names
[  152.873836][ T5532] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  152.933486][ T5532] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  152.939733][ T5541] loop3: detected capacity change from 0 to 512
[  153.017378][ T5532] overlayfs: upper fs needs to support d_type.
[  153.018175][ T5541] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  153.024080][ T5532] overlayfs: upper fs does not support tmpfile.
[  153.027346][ T5532] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  153.067362][ T5532] overlayfs: failed to set xattr on upper
[  153.073311][ T5532] overlayfs: ...falling back to index=off,metacopy=off.
[  153.092521][ T5490] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  153.101774][ T5541] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038 (0x7fffffff)
[  153.112501][ T5490] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[  153.131132][ T5490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.141899][ T5490] usb 1-1: config 0 descriptor??
[  153.294923][ T3654] 
[  153.297294][ T3654] ======================================================
[  153.304376][ T3654] WARNING: possible circular locking dependency detected
[  153.311409][ T3654] 6.1.106-syzkaller #0 Not tainted
[  153.316571][ T3654] ------------------------------------------------------
[  153.323597][ T3654] syz-executor/3654 is trying to acquire lock:
[  153.329762][ T3654] ffff888072fbc520 (&type->i_mutex_dir_key#10/2){+.+.}-{3:3}, at: delete_one_xattr+0x102/0x2f0
[  153.340167][ T3654] 
[  153.340167][ T3654] but task is already holding lock:
[  153.347541][ T3654] ffff888072fbbe80 (&type->i_mutex_dir_key#10/3){+.+.}-{3:3}, at: reiserfs_for_each_xattr+0x9a4/0xb40
[  153.358546][ T3654] 
[  153.358546][ T3654] which lock already depends on the new lock.
[  153.358546][ T3654] 
[  153.368949][ T3654] 
[  153.368949][ T3654] the existing dependency chain (in reverse order) is:
[  153.377966][ T3654] 
[  153.377966][ T3654] -> #2 (&type->i_mutex_dir_key#10/3){+.+.}-{3:3}:
[  153.386748][ T3654]        lock_acquire+0x1f8/0x5a0
[  153.391807][ T3654]        down_write_nested+0x39/0x60
[  153.397124][ T3654]        open_xa_dir+0x132/0x610
[  153.402078][ T3654]        xattr_lookup+0x24/0x280
[  153.407014][ T3654]        reiserfs_xattr_set_handle+0xf8/0xdc0
[  153.413077][ T3654]        reiserfs_xattr_set+0x44e/0x570
[  153.418662][ T3654]        __vfs_setxattr+0x3e7/0x420
[  153.423897][ T3654]        __vfs_setxattr_noperm+0x12a/0x5e0
[  153.429715][ T3654]        vfs_setxattr+0x21d/0x420
[  153.434762][ T3654]        setxattr+0x250/0x2b0
[  153.439462][ T3654]        path_setxattr+0x1bc/0x2a0
[  153.444579][ T3654]        __x64_sys_lsetxattr+0xb4/0xd0
[  153.450089][ T3654]        do_syscall_64+0x3b/0xb0
[  153.455036][ T3654]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.461454][ T3654] 
[  153.461454][ T3654] -> #1 (&type->i_mutex_dir_key#10){++++}-{3:3}:
[  153.469969][ T3654]        lock_acquire+0x1f8/0x5a0
[  153.474995][ T3654]        down_write+0x36/0x60
[  153.480011][ T3654]        vfs_rename+0x814/0x10f0
[  153.484957][ T3654]        do_renameat2+0xde0/0x1440
[  153.490085][ T3654]        __x64_sys_renameat2+0xce/0xe0
[  153.495546][ T3654]        do_syscall_64+0x3b/0xb0
[  153.500504][ T3654]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.507015][ T3654] 
[  153.507015][ T3654] -> #0 (&type->i_mutex_dir_key#10/2){+.+.}-{3:3}:
[  153.515740][ T3654]        validate_chain+0x1661/0x5950
[  153.521102][ T3654]        __lock_acquire+0x125b/0x1f80
[  153.526472][ T3654]        lock_acquire+0x1f8/0x5a0
[  153.531501][ T3654]        down_write_nested+0x39/0x60
[  153.536785][ T3654]        delete_one_xattr+0x102/0x2f0
[  153.542162][ T3654]        reiserfs_for_each_xattr+0x9b2/0xb40
[  153.548177][ T3654]        reiserfs_delete_xattrs+0x1b/0x80
[  153.553894][ T3654]        reiserfs_evict_inode+0x20c/0x460
[  153.559610][ T3654]        evict+0x2a4/0x620
[  153.564024][ T3654]        vfs_rmdir+0x381/0x4b0
[  153.568783][ T3654]        do_rmdir+0x3a2/0x590
[  153.573453][ T3654]        __x64_sys_unlinkat+0xdc/0xf0
[  153.578841][ T3654]        do_syscall_64+0x3b/0xb0
[  153.583776][ T3654]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  153.590191][ T3654] 
[  153.590191][ T3654] other info that might help us debug this:
[  153.590191][ T3654] 
[  153.600412][ T3654] Chain exists of:
[  153.600412][ T3654]   &type->i_mutex_dir_key#10/2 --> &type->i_mutex_dir_key#10 --> &type->i_mutex_dir_key#10/3
[  153.600412][ T3654] 
[  153.616429][ T3654]  Possible unsafe locking scenario:
[  153.616429][ T3654] 
[  153.623890][ T3654]        CPU0                    CPU1
[  153.629267][ T3654]        ----                    ----
[  153.634632][ T3654]   lock(&type->i_mutex_dir_key#10/3);
[  153.640144][ T3654]                                lock(&type->i_mutex_dir_key#10);
[  153.647971][ T3654]                                lock(&type->i_mutex_dir_key#10/3);
[  153.655990][ T3654]   lock(&type->i_mutex_dir_key#10/2);
[  153.661483][ T3654] 
[  153.661483][ T3654]  *** DEADLOCK ***
[  153.661483][ T3654] 
[  153.669625][ T3654] 3 locks held by syz-executor/3654:
[  153.674931][ T3654]  #0: ffff888079f0e460 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  153.684169][ T3654]  #1: ffff888072fbaaa0 (&type->i_mutex_dir_key#10/1){+.+.}-{3:3}, at: do_rmdir+0x251/0x590
[  153.694304][ T3654]  #2: ffff888072fbbe80 (&type->i_mutex_dir_key#10/3){+.+.}-{3:3}, at: reiserfs_for_each_xattr+0x9a4/0xb40
[  153.705749][ T3654] 
[  153.705749][ T3654] stack backtrace:
[  153.711640][ T3654] CPU: 1 PID: 3654 Comm: syz-executor Not tainted 6.1.106-syzkaller #0
[  153.719868][ T3654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  153.729922][ T3654] Call Trace:
[  153.733201][ T3654]  <TASK>
[  153.736126][ T3654]  dump_stack_lvl+0x1e3/0x2cb
[  153.740809][ T3654]  ? nf_tcp_handle_invalid+0x642/0x642
[  153.746278][ T3654]  ? print_circular_bug+0x12b/0x1a0
[  153.751477][ T3654]  check_noncircular+0x2fa/0x3b0
[  153.753592][ T5490] lenovo 0003:17EF:6047.0006: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.0-1/input0
[  153.756406][ T3654]  ? add_chain_block+0x850/0x850
[  153.756431][ T3654]  ? lockdep_lock+0x11f/0x2a0
[  153.777137][ T3654]  ? _find_first_zero_bit+0xd0/0x100
[  153.782450][ T3654]  validate_chain+0x1661/0x5950
[  153.787305][ T3654]  ? reacquire_held_locks+0x660/0x660
[  153.792691][ T3654]  ? reacquire_held_locks+0x660/0x660
[  153.798107][ T3654]  ? __lock_acquire+0x1f80/0x1f80
[  153.803134][ T3654]  ? look_up_lock_class+0x77/0x140
[  153.808253][ T3654]  ? register_lock_class+0x100/0x990
[  153.813545][ T3654]  ? look_up_lock_class+0x77/0x140
[  153.818665][ T3654]  ? register_lock_class+0x100/0x990
[  153.823966][ T3654]  ? is_dynamic_key+0x260/0x260
[  153.828816][ T3654]  ? __mutex_unlock_slowpath+0x218/0x750
[  153.834450][ T3654]  ? reiserfs_write_lock_nested+0x5b/0xd0
[  153.840167][ T3654]  ? mark_lock+0x9a/0x340
[  153.844514][ T3654]  __lock_acquire+0x125b/0x1f80
[  153.849394][ T3654]  lock_acquire+0x1f8/0x5a0
[  153.853900][ T3654]  ? delete_one_xattr+0x102/0x2f0
[  153.858926][ T3654]  ? read_lock_is_recursive+0x10/0x10
[  153.864299][ T3654]  ? __might_sleep+0xb0/0xb0
[  153.868901][ T3654]  ? journal_join_abort+0xe0/0xe0
[  153.873925][ T3654]  ? rwsem_write_trylock+0x166/0x210
[  153.879209][ T3654]  ? mutex_unlock+0x10/0x10
[  153.883731][ T3654]  ? clear_nonspinnable+0x60/0x60
[  153.888759][ T3654]  down_write_nested+0x39/0x60
[  153.893528][ T3654]  ? delete_one_xattr+0x102/0x2f0
[  153.898564][ T3654]  delete_one_xattr+0x102/0x2f0
[  153.903436][ T3654]  reiserfs_for_each_xattr+0x9b2/0xb40
[  153.908893][ T3654]  ? reiserfs_for_each_xattr+0xb40/0xb40
[  153.914520][ T3654]  ? reiserfs_delete_xattrs+0x80/0x80
[  153.919888][ T3654]  ? reiserfs_xattr_init+0x730/0x730
[  153.925174][ T3654]  ? do_raw_spin_unlock+0x137/0x8a0
[  153.930370][ T3654]  reiserfs_delete_xattrs+0x1b/0x80
[  153.935580][ T3654]  reiserfs_evict_inode+0x20c/0x460
[  153.940772][ T3654]  ? entry_points_to_object+0x6f0/0x6f0
[  153.946324][ T3654]  ? do_raw_spin_unlock+0x137/0x8a0
[  153.951538][ T3654]  ? entry_points_to_object+0x6f0/0x6f0
[  153.957086][ T3654]  evict+0x2a4/0x620
[  153.960993][ T3654]  vfs_rmdir+0x381/0x4b0
[  153.965255][ T3654]  do_rmdir+0x3a2/0x590
[  153.969420][ T3654]  ? d_delete_notify+0x150/0x150
[  153.974364][ T3654]  ? syscall_enter_from_user_mode+0x2e/0x230
[  153.980345][ T3654]  __x64_sys_unlinkat+0xdc/0xf0
[  153.985206][ T3654]  do_syscall_64+0x3b/0xb0
[  153.989625][ T3654]  ? clear_bhb_loop+0x45/0xa0
[  153.994335][ T3654]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  154.000264][ T3654] RIP: 0033:0x7faf5cb79457
[  154.004704][ T3654] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.024315][ T3654] RSP: 002b:00007fff230acef8 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[  154.032747][ T3654] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007faf5cb79457
[  154.040724][ T3654] RDX: 0000000000000200 RSI: 00007fff230ae0a0 RDI: 00000000ffffff9c
[  154.048708][ T3654] RBP: 00007faf5cbe77dc R08: 0000555555eda6ab R09: 0000000000000000
[  154.056691][ T3654] R10: 0000000000001000 R11: 0000000000000207 R12: 00007fff230ae0a0
[  154.064659][ T3654] R13: 00007faf5cbe77dc R14: 000000000002534f R15: 00007fff230b1340
[  154.072637][ T3654]  </TASK>
[  154.079923][ T3654] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  154.096469][ T4631] EXT4-fs (loop3): unmounting filesystem.
[  154.745253][ T5490] usb 1-1: USB disconnect, device number 5