last executing test programs:

11.541538493s ago: executing program 1 (id=412):
r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x14000200)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
inotify_rm_watch(r1, r0)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x7, 0x100)
signalfd4(r1, &(0x7f0000000080)={[0x8da]}, 0x8, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000080, &(0x7f0000000500), 0x1, 0x47a, &(0x7f0000000900)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000440), 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x6611)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x4e23, 0x1, 0xa}, {}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r6, &(0x7f00000000c0), 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240), 0x78}}, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r10, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)
setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000201000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b43a409aa81aaaaaa06df3b6371164ce6f1181caaaa0008004500001c000400000001907800000000ff"], 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x9}}}]}]}]}}]}, 0x5c}}, 0x4000000)

8.727517644s ago: executing program 1 (id=426):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_io_uring_setup(0xe80, &(0x7f00000003c0), &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index})
syz_io_uring_setup(0x49a1, &(0x7f0000000280), &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340))
syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000180)=""/151, 0x97})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0)

7.991240034s ago: executing program 3 (id=428):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x43, &(0x7f00000007c0)={[{@test_dummy_encryption}, {@noauto_da_alloc}, {@dioread_lock}, {@norecovery}, {@dioread_nolock}, {@lazytime}, {@nodelalloc}, {@oldalloc}, {@resgid}]}, 0xfc, 0x558, &(0x7f0000000240)="$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")
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="180000000000000000000000a5b6c6f572000000008400000000000000a6000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000001940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x9c, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_LABELS_MASK={0x8, 0x17, [0x95fd]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

7.791797421s ago: executing program 1 (id=431):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x10, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x90)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb26fc000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, 0x0, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xe, 0x6e}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r7, 0x400455c8, 0x0)
ioctl$sock_bt_hci(r2, 0x400448ca, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

5.958857471s ago: executing program 4 (id=434):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0)
setsockopt$ax25_int(r0, 0x101, 0xa, &(0x7f0000000080)=0xbb1e, 0x4)

5.72836617s ago: executing program 4 (id=435):
r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x14000200)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
inotify_rm_watch(r1, r0)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x7, 0x100)
signalfd4(r1, &(0x7f0000000080)={[0x8da]}, 0x8, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000080, &(0x7f0000000500), 0x1, 0x47a, &(0x7f0000000900)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000440), 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x6611)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x4e23, 0x1, 0xa}, {}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r6, &(0x7f00000000c0), 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240), 0x78}}, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r10, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)
setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000201000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b43a409aa81aaaaaa06df3b6371164ce6f1181caaaa0008004500001c000400000001907800000000ff"], 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x9}}}]}]}]}}]}, 0x5c}}, 0x4000000)

5.599119941s ago: executing program 0 (id=437):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'syztnl0\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xad}})

4.307414007s ago: executing program 2 (id=438):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8)
bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r7, 0x8208200)
r8 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r8, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x10c8)

2.792358051s ago: executing program 4 (id=439):
syz_usb_connect(0x0, 0x24, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x8b, 0x86, 0xd3, 0x10, 0x46d, 0x8b5, 0xd701, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7b, 0xd1, 0x51}}]}}]}}, 0x0)

2.791142391s ago: executing program 2 (id=440):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_team\x00', 0x400})

2.732640966s ago: executing program 0 (id=441):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
r1 = syz_io_uring_setup(0xe80, &(0x7f00000003c0), &(0x7f0000000140)=<r2=>0x0, &(0x7f0000000380)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000040)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x0, @fd_index})
syz_io_uring_setup(0x49a1, &(0x7f0000000280), &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000340))
syz_io_uring_submit(r4, r3, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x5, 0x0, &(0x7f0000000180)=""/151, 0x97})
io_uring_enter(r1, 0x2, 0x0, 0x0, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x1418, 0x1}, 0x10}}, 0x0)

2.641392773s ago: executing program 0 (id=442):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x3, 0x0, 0x1, 0x2}})

2.502929425s ago: executing program 2 (id=443):
r0 = openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BLKROSET(r0, 0x80041285, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x800000, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x0)
sendmmsg$alg(r6, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4e32dd2b696733552eca3e954943a18709f72fbd259a936c67ebe806ab21823f4a0c47bff45323c2b30982dfc67b46cc9a5a07c33fc", 0xff6d}, {&(0x7f0000000100)="3a10bd003aba0c7026336b", 0xb}], 0x2, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x60}], 0x1, 0x8001)
sendto$inet(r6, &(0x7f0000000440)="be1847462502500a6b", 0x9, 0x0, 0x0, 0x0)
setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000000380), 0x4)
recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000001c0)=""/156, 0xff78}, {&(0x7f0000000300)=""/92, 0x33}], 0x2}}], 0x1, 0x0, 0x0)

2.502605425s ago: executing program 0 (id=444):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007"], 0xd)

2.43550673s ago: executing program 3 (id=445):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r2, @ANYBLOB="00ff000000000020180034801400350073"], 0x38}}, 0x0)

2.259654025s ago: executing program 3 (id=446):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x8000, 0x800, 0xfffff224, 0x1}, 0x20)

2.257961175s ago: executing program 0 (id=447):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
syz_emit_ethernet(0x42, &(0x7f0000000240)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0x0, 0x80}]}}}}}}}, 0x0)

2.030942844s ago: executing program 3 (id=448):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$packet(0x11, 0x3, 0x300)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002140)={0x1, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x7fff0200}]})
keyctl$reject(0xe, 0x0, 0x0, 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001240)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r3, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(0xffffffffffffffff, &(0x7f0000001ff0), 0x10)
r4 = accept4(r1, &(0x7f00000002c0)=@in6={0xa, 0x0, 0x0, @dev}, &(0x7f0000000000)=0x80, 0x80800)
sendmsg$key(r4, 0x0, 0x8000)
pipe(&(0x7f0000000040))
pipe2$watch_queue(&(0x7f0000000180), 0x80)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={[{@mpol={'mpol', 0x3d, {'bind', '=static'}}}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0)

1.415793004s ago: executing program 2 (id=449):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = dup2(r1, r0)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000700)={0x2, &(0x7f0000000000)=[{0x50}, {0x6}]}, 0x10)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)

729.17365ms ago: executing program 0 (id=450):
r0 = inotify_add_watch(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x14000200)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
inotify_rm_watch(r1, r0)
sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0x7, 0x100)
signalfd4(r1, &(0x7f0000000080)={[0x8da]}, 0x8, 0x0)
r2 = socket(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket(0x10, 0x803, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x1000080, &(0x7f0000000500), 0x1, 0x47a, &(0x7f0000000900)="$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")
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000440), 0x4)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x6611)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = socket$inet6(0xa, 0x80803, 0x87)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in, 0x0, 0x0, 0x4e23, 0x1, 0xa}, {}, {0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@private1, 0x0, 0x33}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x5}}, 0xe8)
r7 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r7, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc)
connect$inet6(r6, &(0x7f00000000c0), 0x1c)
syz_genetlink_get_family_id$mptcp(&(0x7f00000007c0), r4)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r8=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000240), 0x78}}, 0x0)
r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$inet6(0xa, 0x400000000001, 0x0)
bind$inet6(r10, &(0x7f0000fa0fe4)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}}, 0x1c)
setsockopt$inet_buf(r9, 0x0, 0x8008000000010, &(0x7f00000000c0)="170000000200010000ffbe8c5ee17688a2003c000201000a000002a257fc5ad90200bb6a880000d6c8db000000df018002000000fc0607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dfc060115003901000000000000ea000000000000000062068f5ee50ce5af9b1c568302ffff02ff030000ba000840024f0298e9e90539062a80e605007f71174aa951f3c63e5a1b47b63a6323ded2231454668492f9c681a6a9fc", 0xb8)
syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="9b43a409aa81aaaaaa06df3b6371164ce6f1181caaaa0008004500001c000400000001907800000000ff"], 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {}, {0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x100}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x0, 0x1, 0x9}}}]}]}]}}]}, 0x5c}}, 0x4000000)

619.332829ms ago: executing program 1 (id=451):
r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0)
bind$llc(r0, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10)
r1 = syz_init_net_socket$llc(0x1a, 0x802, 0x0)
bind$llc(r1, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10)
syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b11300001142"], 0x0)

555.575125ms ago: executing program 2 (id=452):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f0000000080))
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', <r1=>0x0})
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, 0x0, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000d80)={'ip6tnl0\x00', &(0x7f0000000d00)={'syztnl0\x00', r1, 0x29, 0x0, 0x0, 0x0, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0xad}})

489.97508ms ago: executing program 3 (id=453):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'veth1_to_team\x00', 0x400})

459.657773ms ago: executing program 4 (id=454):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r0, 0x40485404, &(0x7f0000000080)={{0x3, 0x0, 0x1, 0x2}})

359.515831ms ago: executing program 2 (id=455):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
timer_settime(0x0, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4400ae8f, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x43, &(0x7f00000007c0)={[{@test_dummy_encryption}, {@noauto_da_alloc}, {@dioread_lock}, {@norecovery}, {@dioread_nolock}, {@lazytime}, {@nodelalloc}, {@oldalloc}, {@resgid}]}, 0xfc, 0x558, &(0x7f0000000240)="$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")
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x5, &(0x7f0000001800)=ANY=[@ANYBLOB="180000000000000000000000a5b6c6f572000000008400000000000000a6000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x3, 0xf4240, &(0x7f0000000100)=""/147}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r5, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000001940)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001900)={&(0x7f0000001840)={0x9c, 0x1, 0x1, 0x801, 0x0, 0x0, {0x5, 0x0, 0x7}, [@CTA_LABELS_MASK={0x8, 0x17, [0x95fd]}, @CTA_TUPLE_MASTER={0x70, 0xe, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, 0x0)
getdents(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="18"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r6}, 0x10)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')

334.050133ms ago: executing program 1 (id=456):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="380000006d000100"/20, @ANYRES32=r2, @ANYBLOB="00ff000000000020180034801400350073"], 0x38}}, 0x0)

303.458636ms ago: executing program 4 (id=457):
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10)
bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007"], 0xd)

187.358415ms ago: executing program 3 (id=458):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f0000002480)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f614d2a6093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae"], 0x1, 0x11f4, &(0x7f0000001280)="$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")
r0 = gettid()
syz_mount_image$minix(&(0x7f0000000540), &(0x7f00000002c0)='./file0\x00', 0x208040, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], 0x0, 0x1d0, &(0x7f0000000300)="$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")
mount(&(0x7f00000005c0)=@filename='./file0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ubifs\x00', 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x275a, 0x0)
clock_gettime(0x0, &(0x7f0000000040)={<r2=>0x0, <r3=>0x0})
mq_timedsend(r1, &(0x7f0000000500)="7be2ae4cafb3ef158f591b704ec3091ff80aa40c0e04bc12b206452e5b547f0d7060f8bf52f97f2baa4bcee53ccfe975f111bdd03055d1a088846dbe46877b4144c69b631f0bd3d2278299bfb2cd9b1e773f9a1f83f21639a6531822faeacf253e0d20cf415115b97c26d7f99eebb2618423fdecd62d0e399cb79b472a6234eb54ba0eb63b6e0d57", 0x88, 0x6, &(0x7f0000000100)={r2, r3+60000000})
ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000400)={0x0, 0x1dfbdaa7})
r4 = socket$tipc(0x1e, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r5 = socket$rxrpc(0x21, 0x2, 0x2)
sendmsg(r5, &(0x7f00000018c0)={&(0x7f0000000300)=@phonet={0x21}, 0x80, 0x0}, 0x0)
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x204819, &(0x7f0000001100)=ANY=[@ANYBLOB="757466382c63727566742c6d6f64653d3078303030303030303030303030303030392c756e686964652c636865636b3d72656c617865642c6d6f64653d3078303030303030303030303030303032302c6d61703d61636f726e2c00177eec514ac4b00ccc082c285fe4f2234ca3c0c08eff1e0a8315998db4759a88a1e9a5de64e93c46bd"], 0x0, 0x53e, &(0x7f0000000800)="$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")
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x5a042, 0x0)
unshare(0x400)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
recvmsg$can_bcm(r1, &(0x7f0000000f80)={&(0x7f0000000680)=@ieee802154, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000700)=""/180, 0xb4}], 0x1, &(0x7f0000000f00)=""/106, 0x6a}, 0x2062)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8903, 0xffffffffffffffff)
writev(0xffffffffffffffff, 0x0, 0x0)
r6 = socket$tipc(0x1e, 0x2, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
dup3(r6, r4, 0x80000)

125.1587ms ago: executing program 1 (id=459):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000100)={[{}, {@gid}, {@nobarrier}, {@barrier}, {@force}, {}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@nobarrier}, {@type={'type', 0x3d, "666b6e99"}}]}, 0x1, 0x6dd, &(0x7f0000000240)="$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")

0s ago: executing program 4 (id=460):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb}, 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r4, 0x28, 0x1, &(0x7f0000000100)=0x80000001, 0x8)
bind$vsock_stream(r4, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)={[{@huge_within_size}]})
chdir(&(0x7f0000000140)='./file0\x00')
r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r7, 0x8208200)
r8 = open(&(0x7f0000000780)='./bus\x00', 0x14117e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x604100, 0x7ffffe, 0x4002011, r8, 0x0)
r9 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='smaps\x00')
read$FUSE(r9, &(0x7f0000002140)={0x2020}, 0x10c8)

kernel console output (not intermixed with test programs):

 the MTU to 1560 would solve the problem.
[   88.643576][ T3687] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.656433][ T4031] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[   88.656707][ T3687] usb 3-1: Product: syz
[   88.674494][ T3687] usb 3-1: Manufacturer: syz
[   88.689693][ T3687] usb 3-1: SerialNumber: syz
[   88.696602][ T4031] usb 2-1: USB disconnect, device number 4
[   88.704501][ T3687] usb 3-1: config 0 descriptor??
[   88.709612][ T4159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.712063][ T4248] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   88.764313][ T3687] cdc_phonet: probe of 3-1:0.0 failed with error -22
[   88.811205][ T4244] kvm: emulating exchange as write
[   88.871477][ T4159] device hsr_slave_0 entered promiscuous mode
[   88.884461][ T4159] device hsr_slave_1 entered promiscuous mode
[   88.905358][ T4159] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   88.922919][ T4159] Cannot create hsr debugfs directory
[   89.042884][ T3650] Bluetooth: hci1: command tx timeout
[   89.044722][   T27] usb 3-1: USB disconnect, device number 2
[   89.105839][ T4252] device netdevsim0 entered promiscuous mode
[   89.112075][ T4252] device macsec1 entered promiscuous mode
[   89.121393][ T4252] device netdevsim0 left promiscuous mode
[   89.350704][ T4159] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   89.710114][ T4269] loop2: detected capacity change from 0 to 1764
[   89.798497][ T4269] iso9660: Corrupted directory entry in block 2 of inode 1920
[   89.852456][ T4159] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.015346][ T4159] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.110244][ T4280] loop1: detected capacity change from 0 to 512
[   90.145423][ T4159] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.160196][ T4280] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[   90.327859][ T4264] loop3: detected capacity change from 0 to 32768
[   90.343063][ T3777] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   90.388431][ T4264] XFS (loop3): Mounting V5 Filesystem
[   90.451360][ T4264] XFS (loop3): Ending clean mount
[   90.459065][ T4264] XFS (loop3): Quotacheck needed: Please wait.
[   90.506517][ T4159] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   90.513045][ T3653] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   90.524976][ T4264] XFS (loop3): Quotacheck: Done.
[   90.544983][ T4290] device netdevsim0 entered promiscuous mode
[   90.552610][ T4290] device macsec1 entered promiscuous mode
[   90.569285][ T4290] device netdevsim0 left promiscuous mode
[   90.572315][   T26] audit: type=1800 audit(1721959879.531:4): pid=4264 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.114" name="bus" dev="loop3" ino=9291 res=0 errno=0
[   90.612910][ T4159] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   90.639190][ T4159] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   90.657152][ T4159] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   90.702951][ T3777] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   90.733100][ T3777] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   90.756581][ T3966] XFS (loop3): Unmounting Filesystem
[   90.887138][ T3653] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[   90.912955][ T3653] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8D has invalid maxpacket 60258, setting to 1024
[   90.933155][ T3777] usb 3-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[   90.943255][ T3653] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 1024
[   90.955765][ T3777] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.967835][ T3777] usb 3-1: Product: syz
[   90.972103][ T3653] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[   90.981767][ T3777] usb 3-1: Manufacturer: syz
[   90.987543][ T3777] usb 3-1: SerialNumber: syz
[   91.002788][ T3653] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.015050][ T3777] usb 3-1: config 0 descriptor??
[   91.053077][ T4280] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[   91.066639][ T3777] ims_pcu 3-1:0.0: Missing CDC union descriptor
[   91.078034][ T3653] usb 2-1: invalid MIDI out EP 0
[   91.088016][ T4159] 8021q: adding VLAN 0 to HW filter on device bond0
[   91.095515][ T3777] ims_pcu: probe of 3-1:0.0 failed with error -22
[   91.123331][ T3649] Bluetooth: hci1: command tx timeout
[   91.151831][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   91.162376][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   91.173876][ T4159] 8021q: adding VLAN 0 to HW filter on device team0
[   91.200340][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   91.209844][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   91.220580][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.227744][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.260495][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   91.269942][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   91.315094][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   91.348342][ T3921] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.355520][ T3921] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.370236][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   91.381591][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   91.397985][ T3653] snd-usb-audio: probe of 2-1:27.0 failed with error -22
[   91.407935][ T3653] usb 2-1: USB disconnect, device number 5
[   91.452604][   T27] usb 3-1: USB disconnect, device number 3
[   91.475220][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   91.501702][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   91.552244][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   91.578272][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   91.594642][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   91.607632][ T3665] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   91.636752][ T4159] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   91.710420][ T4159] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   91.728055][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   91.744234][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   91.756310][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   91.802997][  T945] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   92.083132][  T945] usb 4-1: Using ep0 maxpacket: 8
[   92.132319][ T4316] loop1: detected capacity change from 0 to 1764
[   92.180998][ T4316] iso9660: Corrupted directory entry in block 2 of inode 1920
[   92.403632][  T945] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[   92.417366][  T945] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.430479][  T945] usb 4-1: Product: syz
[   92.438478][  T945] usb 4-1: Manufacturer: syz
[   92.446779][  T945] usb 4-1: SerialNumber: syz
[   92.466784][  T945] usb 4-1: config 0 descriptor??
[   92.536610][  T945] cdc_phonet: probe of 4-1:0.0 failed with error -22
[   92.775282][ T3733] udevd[3733]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.787079][ T3653] usb 4-1: USB disconnect, device number 2
[   93.017089][   T46] device hsr_slave_0 left promiscuous mode
[   93.048454][   T46] device hsr_slave_1 left promiscuous mode
[   93.066821][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.079654][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.093289][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.108154][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.124917][   T46] device bridge_slave_1 left promiscuous mode
[   93.131379][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.155782][   T46] device bridge_slave_0 left promiscuous mode
[   93.166458][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.217685][   T46] device veth1_macvtap left promiscuous mode
[   93.238287][   T46] device veth0_macvtap left promiscuous mode
[   93.261651][   T46] device veth1_vlan left promiscuous mode
[   93.286183][   T46] device veth0_vlan left promiscuous mode
[   93.522498][ T4351] Bluetooth: MGMT ver 1.22
[   95.415514][ T4341] loop0: detected capacity change from 0 to 32768
[   95.928605][   T46] team0 (unregistering): Port device team_slave_1 removed
[   95.980928][   T46] team0 (unregistering): Port device team_slave_0 removed
[   96.018925][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.050843][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.082862][ T3783] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   96.253461][ T3777] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   96.336797][   T46] bond0 (unregistering): Released all slaves
[   96.452961][ T3783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   96.482951][ T3783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[   96.512815][ T3777] usb 4-1: Using ep0 maxpacket: 8
[   96.528389][ T3783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[   96.563135][ T3783] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[   96.617813][ T4159] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.635706][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   96.656186][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   96.706911][ T3783] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   96.727863][ T3783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   96.746180][ T3783] usb 1-1: SerialNumber: syz
[   96.793311][ T4375] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   96.800563][ T4375] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   96.810026][ T3777] usb 4-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[   96.818047][ T4389] loop2: detected capacity change from 0 to 4096
[   96.831969][ T4389] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[   96.848617][ T3777] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.864494][ T3777] usb 4-1: Product: syz
[   96.868689][ T3777] usb 4-1: Manufacturer: syz
[   96.874761][ T3783] cdc_acm 1-1:1.0: Control and data interfaces are not separated!
[   96.912800][ T3777] usb 4-1: SerialNumber: syz
[   96.927986][ T3777] usb 4-1: config 0 descriptor??
[   96.937013][ T4389] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   96.980711][ T3777] cdc_phonet: probe of 4-1:0.0 failed with error -22
[   96.986630][ T4389] ntfs3: loop2: ino=5, "/" The size of extended attributes must not exceed 64KiB
[   97.092265][    T9] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[   97.112108][ T3865] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[   97.199934][ T3919] usb 4-1: USB disconnect, device number 3
[   97.270946][ T4397] netlink: 'syz.2.156': attribute type 4 has an invalid length.
[   97.313915][ T3783] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[   97.348404][ T3783] usb 1-1: USB disconnect, device number 4
[   97.393538][ T4399] netlink: 'syz.2.156': attribute type 4 has an invalid length.
[   97.472900][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   97.489459][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   97.518827][ T4391] loop1: detected capacity change from 0 to 32768
[   97.539042][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   97.553769][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   97.574705][ T4159] device veth0_vlan entered promiscuous mode
[   97.602769][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   97.611233][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   97.645038][ T4159] device veth1_vlan entered promiscuous mode
[   97.732384][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   97.747929][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   97.823643][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   97.859728][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   98.561687][ T4159] device veth0_macvtap entered promiscuous mode
[   98.576771][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   98.587407][ T4159] device veth1_macvtap entered promiscuous mode
[   98.608286][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.618915][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.630421][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.641334][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.651881][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.662420][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.672578][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   98.688065][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.700997][ T4159] batman_adv: batadv0: Interface activated: batadv_slave_0
[   98.710215][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   98.719830][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   98.732022][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.753574][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.772641][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.807306][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.827958][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.852827][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.870557][ T4159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   98.894564][ T4159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   98.922898][ T4159] batman_adv: batadv0: Interface activated: batadv_slave_1
[   98.961185][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   98.985146][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   99.025870][ T4159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.053234][ T4159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.073233][ T4159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.092895][ T4159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.206364][ T4413] loop0: detected capacity change from 0 to 512
[   99.305785][ T4413] EXT4-fs (loop0): 1 orphan inode deleted
[   99.366404][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.398002][ T4413] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[   99.407704][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.428266][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.443204][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.448167][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   99.460762][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   99.468096][ T4413] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038 (0x7fffffff)
[   99.479788][ T4419] loop2: detected capacity change from 0 to 4096
[   99.519792][ T4426] netlink: 'syz.1.166': attribute type 4 has an invalid length.
[   99.532672][ T4413] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5868: Corrupt filesystem
[   99.568515][ T4419] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[   99.597201][ T4427] netlink: 'syz.1.166': attribute type 4 has an invalid length.
[   99.605451][ T4413] EXT4-fs (loop0): Remounting filesystem read-only
[   99.684874][ T4419] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   99.704331][ T3633] EXT4-fs error (device loop0): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[   99.835354][ T4419] ntfs3: loop2: ino=5, "/" The size of extended attributes must not exceed 64KiB
[  100.039395][ T3633] EXT4-fs (loop0): unmounting filesystem.
[  100.046927][ T3994] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[  100.069240][ T3865] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  101.318037][ T3993] Bluetooth: hci0: Frame reassembly failed (-84)
[  101.497746][ T4436] capability: warning: `syz.4.79' uses deprecated v2 capabilities in a way that may be insecure
[  101.792956][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  102.277700][    T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!!
[  102.286487][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  102.302757][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.311066][    T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!!
[  102.319374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  102.327667][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  102.335961][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  102.344274][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  102.352551][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  102.771666][ T4457] loop4: detected capacity change from 0 to 512
[  102.841051][ T4457] EXT4-fs (loop4): 1 orphan inode deleted
[  102.854454][ T4455] loop3: detected capacity change from 0 to 4096
[  102.894657][ T4457] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  102.908497][ T4455] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  102.950623][ T4457] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038 (0x7fffffff)
[  103.244688][ T4466] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5868: Corrupt filesystem
[  103.371596][ T3635] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  103.380433][ T3635] Bluetooth: hci0: command 0x1003 tx timeout
[  103.389854][ T3649] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  103.421958][ T4466] EXT4-fs (loop4): Remounting filesystem read-only
[  103.756033][ T3635] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  103.765428][ T3649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  103.775936][ T3649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  103.783496][ T3635] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  103.790800][ T3635] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  104.065614][   T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.120350][ T4159] EXT4-fs error (device loop4): ext4_map_blocks:607: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  104.164147][ T4159] EXT4-fs (loop4): unmounting filesystem.
[  104.224369][ T4470] loop1: detected capacity change from 0 to 4096
[  104.240620][ T4470] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  104.309280][ T4470] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  104.378935][ T4470] ntfs3: loop1: ino=5, "/" The size of extended attributes must not exceed 64KiB
[  104.393996][   T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.464357][ T3994] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22.
[  104.479609][ T3640] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  104.514616][   T26] audit: type=1800 audit(1721959893.481:5): pid=4477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.186" name="/" dev="fuse" ino=1 res=0 errno=0
[  104.544981][   T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.711474][   T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  104.920161][ T4463] chnl_net:caif_netlink_parms(): no params data found
[  105.072170][ T4493] loop1: detected capacity change from 0 to 4096
[  105.155561][ T4493] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  105.861207][ T3635] Bluetooth: hci5: command tx timeout
[  105.912588][ T4493] ntfs: (device loop1): parse_options(): The gid option requires an argument.
[  106.080527][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.109590][ T4463] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.120821][ T4463] device bridge_slave_0 entered promiscuous mode
[  106.160855][ T3650] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  106.187839][ T3650] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  106.196266][ T3650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  106.208661][ T3650] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  106.218229][ T3650] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  106.225690][ T3650] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  106.228077][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.330606][ T4463] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.361890][ T4513] process 'syz.1.199' launched './file1' with NULL argv: empty string added
[  106.374856][ T4463] device bridge_slave_1 entered promiscuous mode
[  106.559373][ T4463] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.624795][ T4496] loop3: detected capacity change from 0 to 32768
[  106.671966][ T3923] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by udevd (3923)
[  106.698209][ T4463] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.749303][ T4496] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  106.823293][ T4496] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  106.832043][ T4496] BTRFS info (device loop3): using free space tree
[  106.852836][ T3919] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  106.864945][ T4463] team0: Port device team_slave_0 added
[  106.887323][ T4463] team0: Port device team_slave_1 added
[  107.118799][ T4463] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.126570][ T4463] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.155669][ T4463] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.168264][ T4463] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.175755][ T4463] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.188700][ T4496] BTRFS info (device loop3): enabling ssd optimizations
[  107.203181][ T4463] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.233101][ T3919] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  107.253040][ T3919] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  107.282830][ T3919] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  107.306712][ T3919] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  107.318792][ T3919] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  107.451769][ T4504] chnl_net:caif_netlink_parms(): no params data found
[  107.503079][ T3919] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  107.532469][ T3919] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.549210][ T4463] device hsr_slave_0 entered promiscuous mode
[  107.569025][ T3919] usb 3-1: Product: syz
[  107.586158][ T3919] usb 3-1: Manufacturer: syz
[  107.590795][ T3919] usb 3-1: SerialNumber: syz
[  107.590968][ T3966] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  107.633051][ T4518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.640721][ T4463] device hsr_slave_1 entered promiscuous mode
[  107.768214][ T4562] loop1: detected capacity change from 0 to 4096
[  107.775421][ T4562] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  107.796267][ T4562] ntfs: (device loop1): parse_options(): The gid option requires an argument.
[  107.872410][ T4564] loop3: detected capacity change from 0 to 1024
[  107.888506][ T4518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.914925][ T4518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.923095][ T3635] Bluetooth: hci5: command tx timeout
[  108.025295][ T4564] hfsplus: failed to load root directory
[  108.102126][ T4564] loop3: detected capacity change from 0 to 512
[  108.125491][   T46] device hsr_slave_0 left promiscuous mode
[  108.153114][   T46] device hsr_slave_1 left promiscuous mode
[  108.161526][ T4564] ext4: Unknown parameter 'obj_user'
[  108.185073][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  108.194110][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  108.226680][ T3923] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  108.259430][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.277377][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  108.278209][ T4564] loop3: detected capacity change from 0 to 512
[  108.333978][ T3635] Bluetooth: hci0: command tx timeout
[  108.341704][   T46] device bridge_slave_1 left promiscuous mode
[  108.361016][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  108.370075][ T4576] loop1: detected capacity change from 0 to 512
[  108.377609][   T46] device bridge_slave_0 left promiscuous mode
[  108.386504][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  108.438275][   T46] device veth1_macvtap left promiscuous mode
[  108.445176][   T46] device veth0_macvtap left promiscuous mode
[  108.458310][   T46] device veth1_vlan left promiscuous mode
[  108.469374][ T4564] EXT4-fs: Ignoring removed i_version option
[  108.479750][   T46] device veth0_vlan left promiscuous mode
[  108.482637][ T4576] journal_path: Lookup failure for './bus'
[  108.506517][ T4576] EXT4-fs: error: could not find journal device path
[  108.514988][ T4564] EXT4-fs error (device loop3): __ext4_iget:5044: inode #11: block 1: comm syz.3.207: invalid block
[  108.560078][ T4564] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.207: couldn't read orphan inode 11 (err -117)
[  108.584942][ T4518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  108.592140][ T4518] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  108.673165][ T4564] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  108.859408][ T4518] loop2: detected capacity change from 0 to 16
[  108.961371][ T4518] erofs: (device loop2): mounted with root inode @ nid 36.
[  108.984817][ T4518] erofs: (device loop2): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36
[  109.464523][ T3966] EXT4-fs (loop3): unmounting filesystem.
[  109.513542][ T4518] erofs: (device loop2): z_erofs_read_folio: failed to read, err [-117]
[  109.523128][ T3919] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  109.532320][ T3919] cdc_ncm 3-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048
[  109.540301][ T3919] cdc_ncm 3-1:1.0: setting rx_max = 2048
[  109.904516][   T46] team0 (unregistering): Port device team_slave_1 removed
[  109.936747][   T46] team0 (unregistering): Port device team_slave_0 removed
[  109.965656][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.996188][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  110.013119][ T3635] Bluetooth: hci5: command tx timeout
[  110.271486][   T46] bond0 (unregistering): Released all slaves
[  110.401127][ T4603] loop2: detected capacity change from 0 to 256
[  110.407546][ T3635] Bluetooth: hci0: command tx timeout
[  110.420489][ T4603] exfat: Deprecated parameter 'utf8'
[  110.426488][ T4603] exfat: Deprecated parameter 'utf8'
[  110.441652][ T4603] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  110.502799][ T4504] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.509888][ T3919] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  110.509975][ T4504] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.581766][ T3919] usb 3-1: USB disconnect, device number 4
[  110.602429][ T3919] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM (NO ZLP)
[  110.624217][ T4504] device bridge_slave_0 entered promiscuous mode
[  110.688226][ T4504] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.714515][ T4504] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.732193][ T4504] device bridge_slave_1 entered promiscuous mode
[  110.748124][ T4608] loop1: detected capacity change from 0 to 4096
[  110.756468][ T4608] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  110.896810][ T4504] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.039555][ T4504] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.162223][ T4617] loop3: detected capacity change from 0 to 256
[  111.217253][ T4617] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x4f9d53fa, utbl_chksum : 0xe619d30d)
[  112.082844][ T3635] Bluetooth: hci5: command tx timeout
[  112.203608][ T4504] team0: Port device team_slave_0 added
[  112.316486][ T4504] team0: Port device team_slave_1 added
[  112.482998][ T3635] Bluetooth: hci0: command tx timeout
[  112.592565][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_0
[  112.600829][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.627347][ T4504] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.700394][ T4504] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.706451][ T4629] loop2: detected capacity change from 0 to 512
[  112.732928][ T3919] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  112.758294][ T4504] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.833109][ T4629] journal_path: Lookup failure for './bus'
[  112.839104][ T4629] EXT4-fs: error: could not find journal device path
[  112.885441][ T4504] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  113.143235][ T3919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  113.172897][ T3919] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  113.222884][ T3919] usb 4-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  113.276929][ T3919] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  113.308454][ T3919] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  113.373945][ T4504] device hsr_slave_0 entered promiscuous mode
[  113.401026][ T4504] device hsr_slave_1 entered promiscuous mode
[  113.461574][ T4504] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  113.479767][ T4504] Cannot create hsr debugfs directory
[  113.523068][ T3919] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.550750][ T3919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.579208][ T3919] usb 4-1: Product: syz
[  113.594041][ T3919] usb 4-1: Manufacturer: syz
[  113.598682][ T3919] usb 4-1: SerialNumber: syz
[  113.643254][ T4623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  113.878646][ T4623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  113.904002][ T4660] loop1: detected capacity change from 0 to 256
[  113.906835][ T4623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  113.916188][ T4660] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f9d53fa, utbl_chksum : 0xe619d30d)
[  113.974720][ T4463] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  114.005492][ T4463] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  114.130671][ T4504] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.189586][ T4463] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  114.212571][ T4463] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  114.280688][ T4504] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.490591][ T4504] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  114.573202][ T3635] Bluetooth: hci0: command tx timeout
[  114.715378][ T4679] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2 (only 8 groups)
[  114.826013][ T4623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  114.973874][ T4623] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  115.313996][ T4504] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  115.385358][ T4681] loop3: detected capacity change from 0 to 16
[  115.440656][ T4681] erofs: (device loop3): mounted with root inode @ nid 36.
[  115.609963][ T4623] erofs: (device loop3): z_erofs_pcluster_readmore: readmore error at page 0 @ nid 36
[  115.758436][ T4463] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.766512][ T4623] erofs: (device loop3): z_erofs_read_folio: failed to read, err [-117]
[  115.924629][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.953234][ T3919] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42
[  115.960660][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.969914][ T3919] cdc_ncm 4-1:1.0: dwNtbInMaxSize=3 is too small. Using 2048
[  116.067989][ T4463] 8021q: adding VLAN 0 to HW filter on device team0
[  116.075931][ T3919] cdc_ncm 4-1:1.0: setting rx_max = 2048
[  116.200447][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  116.334751][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.400718][ T3921] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.407904][ T3921] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.583209][ T3919] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  116.776812][ T3919] usb 4-1: USB disconnect, device number 4
[  116.867169][ T3919] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[  116.912212][ T4463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  116.929096][ T4463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  117.012696][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  117.063366][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  117.088975][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  117.135825][ T3682] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.142998][ T3682] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.163117][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  117.183778][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  117.202200][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  117.241931][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  117.297835][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  117.347493][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  117.398859][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  117.464417][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  117.505804][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  117.547992][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  117.636408][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  117.679457][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  118.261907][ T4504] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  118.332321][ T4504] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  118.359276][ T4719] loop3: detected capacity change from 0 to 256
[  118.370023][ T4720] loop2: detected capacity change from 0 to 256
[  118.384396][ T4720] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f9d53fa, utbl_chksum : 0xe619d30d)
[  118.401095][ T4711] loop1: detected capacity change from 0 to 4096
[  118.420053][ T4504] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  118.433830][ T4711] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  118.478169][ T4504] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  118.683485][ T4719] loop3: detected capacity change from 256 to 0
[  118.719182][    C1] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  118.728777][ T4723] FAT-fs (loop3): Directory bread(block 3) failed
[  118.878645][ T4504] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.933221][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.944971][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.967884][ T4504] 8021q: adding VLAN 0 to HW filter on device team0
[  118.998114][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  119.010404][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  119.020611][ T3919] bridge0: port 1(bridge_slave_0) entered blocking state
[  119.027759][ T3919] bridge0: port 1(bridge_slave_0) entered forwarding state
[  119.070783][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  119.084428][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  119.094577][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.104535][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.111672][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.212006][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  119.315670][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  119.402138][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  119.589141][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  119.763381][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.833746][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.862552][ T4725] sched: RT throttling activated
[  119.889706][    C1] I/O error, dev loop3, sector 12 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  119.899444][ T3966] FAT-fs (loop3): Directory bread(block 3) failed
[  119.920690][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  120.063292][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  120.072355][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  120.113950][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  120.138446][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  120.164686][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.182442][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  120.207851][ T4504] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  120.262652][ T4463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.270214][    C1] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  120.279431][ T3966] FAT-fs (loop3): unable to read boot sector to mark fs as dirty
[  120.424084][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.463492][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.494520][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  120.503217][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.526419][ T4463] device veth0_vlan entered promiscuous mode
[  120.549769][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.558998][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  120.574681][ T4463] device veth1_vlan entered promiscuous mode
[  120.689155][ T4463] device veth0_macvtap entered promiscuous mode
[  120.720215][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  120.743601][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  120.771165][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  120.800373][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  120.856806][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  120.894345][ T4463] device veth1_macvtap entered promiscuous mode
[  120.934401][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  120.943831][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.951304][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.092544][   T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.127436][ T4463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.164924][ T4463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.212760][ T4463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.244731][ T4463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.277448][ T4463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.319195][ T4463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.352993][ T4741] loop1: detected capacity change from 0 to 32768
[  121.359500][ T4463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.403573][ T4760] loop2: detected capacity change from 0 to 256
[  121.415376][ T4760] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4f9d53fa, utbl_chksum : 0xe619d30d)
[  121.431899][ T4463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.480622][ T4463] batman_adv: batadv0: Interface activated: batadv_slave_0
[  121.503857][ T3649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  121.525260][ T3649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  121.536300][ T3649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  121.545338][ T3649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  121.552821][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  121.561204][ T3649] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  121.568645][ T3649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  121.576712][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  121.592464][ T4504] 8021q: adding VLAN 0 to HW filter on device batadv0
[  121.659792][   T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.683979][ T4463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.732869][ T4463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.751814][ T4463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.762526][ T4463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.787395][ T4463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.821424][ T4463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.843658][ T4463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  121.866025][ T4463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  121.888301][ T4463] batman_adv: batadv0: Interface activated: batadv_slave_1
[  121.915602][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  121.936918][ T3919] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  121.990193][   T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.027681][ T4463] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.051161][ T4463] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.075209][ T4463] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.098036][ T4463] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.243617][   T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.512913][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.521663][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.578557][ T4358] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.606930][ T4358] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.627922][ T4504] device veth0_vlan entered promiscuous mode
[  122.664226][ T4788] loop2: detected capacity change from 0 to 4096
[  122.670489][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.683796][ T4788] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  122.687389][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.719906][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.744612][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.758230][  T152] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.798845][ T4796] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  123.007153][ T4504] device veth1_vlan entered promiscuous mode
[  123.466862][ T4761] chnl_net:caif_netlink_parms(): no params data found
[  123.477066][ T3994] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.512748][ T3994] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.749161][ T3649] Bluetooth: hci1: command tx timeout
[  123.790501][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  123.805326][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.963702][ T4761] bridge0: port 1(bridge_slave_0) entered blocking state
[  123.970870][ T4761] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.980023][ T4761] device bridge_slave_0 entered promiscuous mode
[  123.990267][ T4761] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.002504][ T4761] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.014173][ T4761] device bridge_slave_1 entered promiscuous mode
[  124.296097][ T4818] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  125.051344][ T4828] loop0: detected capacity change from 0 to 256
[  125.071365][ T4504] device veth0_macvtap entered promiscuous mode
[  125.084560][ T4828] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x4f9d53fa, utbl_chksum : 0xe619d30d)
[  125.142053][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  125.152178][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  125.216062][ T4761] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  125.225391][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  125.237196][ T4504] device veth1_macvtap entered promiscuous mode
[  125.249188][ T4761] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  125.282957][ T3775] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  125.337334][ T4761] team0: Port device team_slave_0 added
[  125.404867][ T4761] team0: Port device team_slave_1 added
[  125.516869][ T4761] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.532788][ T4761] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.540749][ T4823] loop1: detected capacity change from 0 to 32768
[  125.593187][ T4761] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.649517][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.660437][ T3775] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  125.676133][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.688263][ T3775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.700980][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.718977][ T3775] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.753960][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.756330][ T3775] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  125.774373][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.804914][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.825076][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.843801][ T3649] Bluetooth: hci1: command tx timeout
[  125.858374][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.897515][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  125.923070][ T3775] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  125.926873][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  125.932392][ T3775] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  125.932418][ T3775] usb 3-1: Manufacturer: syz
[  125.959822][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.963674][ T3775] usb 3-1: config 0 descriptor??
[  126.044698][ T4761] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.051825][ T4761] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.087509][ T4848] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma?
[  126.089812][ T4761] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.149357][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  126.158905][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  126.170488][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.182097][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.192601][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.204794][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.215417][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.225942][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.235800][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.251755][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.265716][ T4504] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  126.276281][ T4504] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  126.287746][ T4504] batman_adv: batadv0: Interface activated: batadv_slave_1
[  126.375174][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  126.383020][ T3783] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  126.390120][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  126.403128][ T4504] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  126.414885][ T4504] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  126.434394][ T4504] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  126.449371][ T4504] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  126.520830][ T4761] device hsr_slave_0 entered promiscuous mode
[  126.529009][ T4761] device hsr_slave_1 entered promiscuous mode
[  126.544488][ T4761] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  126.554346][ T4761] Cannot create hsr debugfs directory
[  126.631911][ T3775] appleir 0003:05AC:8243.0001: unknown main item tag 0x0
[  126.643278][ T3775] appleir 0003:05AC:8243.0001: No inputs registered, leaving
[  127.869207][ T3775] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0
[  127.924735][ T3649] Bluetooth: hci1: command tx timeout
[  128.092980][ T3687] usb 3-1: reset high-speed USB device number 5 using dummy_hcd
[  128.312896][ T3783] usb 1-1: Using ep0 maxpacket: 32
[  128.483415][ T3994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.508239][ T3994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.513059][ T3783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.546957][ T3783] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  128.577408][ T3783] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  128.612856][ T3783] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  128.638285][ T3783] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 8
[  128.651628][ T4870] loop1: detected capacity change from 0 to 4096
[  128.683240][ T4870] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  128.713772][ T3682] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  128.727899][ T4873] loop2: detected capacity change from 0 to 1024
[  128.760820][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.798395][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.832917][ T3783] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  128.854444][ T3783] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.872564][ T3783] usb 1-1: Product: syz
[  128.897994][ T3783] usb 1-1: Manufacturer: syz
[  128.929315][ T3783] usb 1-1: SerialNumber: syz
[  128.947825][   T27] usb 3-1: USB disconnect, device number 5
[  129.132976][ T3783] cdc_ncm 1-1:1.0: bind() failure
[  129.161507][ T3783] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[  129.190783][ T3783] cdc_ncm 1-1:1.1: bind() failure
[  129.211600][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  129.239777][ T3783] usb 1-1: USB disconnect, device number 5
[  129.261058][ T3865] hfsplus: xattr search failed
[  129.338889][ T3865] hfsplus: xattr search failed
[  129.610922][ T4888] loop4: detected capacity change from 0 to 4096
[  129.663620][ T4888] ntfs: (device loop4): parse_options(): The fmask option requires an argument.
[  130.004197][ T3649] Bluetooth: hci1: command tx timeout
[  130.917416][ T3923] I/O error, dev loop4, sector 3968 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  131.398483][ T4908] loop1: detected capacity change from 0 to 256
[  131.410682][ T4908] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x4f9d53fa, utbl_chksum : 0xe619d30d)
[  131.429222][   T46] device hsr_slave_0 left promiscuous mode
[  131.451422][   T46] device hsr_slave_1 left promiscuous mode
[  131.568730][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.586675][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.637649][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.683021][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.698655][   T46] device bridge_slave_1 left promiscuous mode
[  131.711547][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.755577][   T46] device bridge_slave_0 left promiscuous mode
[  131.916235][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  132.247952][   T46] device hsr_slave_0 left promiscuous mode
[  132.653196][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  132.659634][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  132.732869][   T46] device hsr_slave_1 left promiscuous mode
[  132.813046][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.827831][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.933765][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.941213][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  133.033583][   T46] device bridge_slave_1 left promiscuous mode
[  133.039846][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.060220][ T4904] loop0: detected capacity change from 0 to 32768
[  133.093194][ T4904] XFS: ikeep mount option is deprecated.
[  133.134064][   T46] device bridge_slave_0 left promiscuous mode
[  133.140384][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.206724][ T4933] Illegal XDP return value 4291596288 on prog  (id 44) dev N/A, expect packet loss!
[  133.230861][ T4904] XFS (loop0): Mounting V5 Filesystem
[  133.437419][   T46] device veth1_macvtap left promiscuous mode
[  133.450262][   T46] device veth0_macvtap left promiscuous mode
[  133.465054][ T4904] XFS (loop0): Ending clean mount
[  133.477691][   T46] device veth1_vlan left promiscuous mode
[  133.496846][   T46] device veth0_vlan left promiscuous mode
[  133.526399][   T46] device veth1_macvtap left promiscuous mode
[  133.541358][   T46] device veth0_macvtap left promiscuous mode
[  133.561119][ T4904] XFS (loop0): Quotacheck needed: Please wait.
[  133.569791][   T46] device veth1_vlan left promiscuous mode
[  133.589838][   T46] device veth0_vlan left promiscuous mode
[  133.654534][ T4904] XFS (loop0): Quotacheck: Done.
[  133.727587][ T3635] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  133.737815][ T3635] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  133.746581][ T4904] XFS (loop0): User initiated shutdown received.
[  133.752974][ T3635] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  133.762080][ T3635] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  133.770048][ T3635] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  133.777568][ T3635] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  133.815156][ T4904] XFS (loop0): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:487).  Shutting down filesystem.
[  133.868642][ T4904] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  133.978826][ T4463] XFS (loop0): Unmounting Filesystem
[  134.381698][ T4963] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  134.689466][   T46] team0 (unregistering): Port device team_slave_1 removed
[  134.791948][   T46] team0 (unregistering): Port device team_slave_0 removed
[  134.831033][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  134.893870][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.475134][   T46] bond0 (unregistering): Released all slaves
[  135.845057][ T3635] Bluetooth: hci2: command tx timeout
[  136.836510][   T46] team0 (unregistering): Port device team_slave_1 removed
[  136.897374][   T46] team0 (unregistering): Port device team_slave_0 removed
[  136.958407][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.028730][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.681191][   T46] bond0 (unregistering): Released all slaves
[  137.922970][ T3635] Bluetooth: hci2: command tx timeout
[  138.475167][ T4761] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  138.545822][ T4761] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  138.634792][ T4761] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  138.707258][ T4761] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  138.966800][ T4998] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 2 (only 8 groups)
[  139.812084][ T5007] netlink: 6 bytes leftover after parsing attributes in process `syz.0.296'.
[  140.002936][ T3635] Bluetooth: hci2: command tx timeout
[  140.013603][ T4761] 8021q: adding VLAN 0 to HW filter on device bond0
[  140.022972][ T3783] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  140.054407][ T4948] chnl_net:caif_netlink_parms(): no params data found
[  140.103803][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  140.120008][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  140.222179][ T4761] 8021q: adding VLAN 0 to HW filter on device team0
[  140.393169][ T3783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  140.452312][ T3783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  140.526649][ T3783] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 576, setting to 64
[  140.611366][ T3783] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  140.833183][ T3783] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  140.851695][ T3783] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  140.860371][ T3783] usb 2-1: SerialNumber: syz
[  140.888444][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  140.897229][ T5005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  140.906135][ T5005] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  140.914395][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  140.938568][ T4031] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.945741][ T4031] bridge0: port 1(bridge_slave_0) entered forwarding state
[  140.963909][ T3783] cdc_acm 2-1:1.0: Control and data interfaces are not separated!
[  141.030466][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  141.048421][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  141.068679][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  141.084666][ T3775] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.091830][ T3775] bridge0: port 2(bridge_slave_1) entered forwarding state
[  141.102106][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  141.161768][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  141.203865][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  141.230400][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  141.239906][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  141.254416][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  141.263599][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  141.272145][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  141.353238][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  141.375746][ T4948] bridge0: port 1(bridge_slave_0) entered blocking state
[  141.403990][ T4948] bridge0: port 1(bridge_slave_0) entered disabled state
[  141.411381][ T3783] cdc_acm 2-1:1.0: ttyACM0: USB ACM device
[  141.427126][ T3783] usb 2-1: USB disconnect, device number 6
[  141.441819][ T4948] device bridge_slave_0 entered promiscuous mode
[  141.466059][ T4761] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  141.502883][ T4031] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  141.528387][ T4761] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  141.562215][ T5046] loop4: detected capacity change from 0 to 256
[  141.570709][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  141.584213][ T5046] exfat: Deprecated parameter 'utf8'
[  141.589570][ T5046] exfat: Deprecated parameter 'utf8'
[  141.589907][ T3685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  141.615148][ T4948] bridge0: port 2(bridge_slave_1) entered blocking state
[  141.622231][ T4948] bridge0: port 2(bridge_slave_1) entered disabled state
[  141.640313][ T5046] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x23a77120, utbl_chksum : 0xe619d30d)
[  141.648195][ T4948] device bridge_slave_1 entered promiscuous mode
[  141.735538][ T4948] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.786064][ T4948] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.877788][ T4948] team0: Port device team_slave_0 added
[  141.896121][ T4031] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  141.921295][ T4948] team0: Port device team_slave_1 added
[  141.957779][ T4031] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  142.032816][ T4031] usb 1-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 8
[  142.093956][ T3635] Bluetooth: hci2: command tx timeout
[  142.164058][ T5053] hub 6-0:1.0: USB hub found
[  142.172115][ T5053] hub 6-0:1.0: 1 port detected
[  142.378277][ T4948] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.477150][ T4948] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.668379][ T4031] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  142.861762][ T4031] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  142.916066][ T4948] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.979378][ T4948] batman_adv: batadv0: Adding interface: batadv_slave_1
[  143.012051][ T4948] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  143.100576][ T4948] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  143.220786][ T4948] device hsr_slave_0 entered promiscuous mode
[  143.239984][ T4948] device hsr_slave_1 entered promiscuous mode
[  143.264221][ T4948] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  143.271800][ T4948] Cannot create hsr debugfs directory
[  144.729940][ T4948] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.814474][ T5066] loop0: detected capacity change from 0 to 4096
[  144.821802][ T5066] ntfs: (device loop0): parse_options(): The fmask option requires an argument.
[  144.842883][ T4031] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.930413][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  144.952832][ T4031] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.984092][ T3692] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.002922][ T4031] usb 1-1: can't set config #1, error -71
[  145.022984][ T4031] usb 1-1: USB disconnect, device number 6
[  145.055344][ T4948] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.171609][ T4761] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.216148][ T4948] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.320176][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.337744][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  145.386666][ T4948] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.434452][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  145.452889][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  145.474490][ T4761] device veth0_vlan entered promiscuous mode
[  145.511061][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  145.524855][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  145.541990][ T4761] device veth1_vlan entered promiscuous mode
[  145.619432][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  145.629624][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  145.688136][ T4761] device veth0_macvtap entered promiscuous mode
[  145.706488][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  145.728429][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  145.777871][ T5071] loop1: detected capacity change from 0 to 32768
[  145.797943][ T4761] device veth1_macvtap entered promiscuous mode
[  145.814800][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  145.826447][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  145.846540][ T5071] XFS (loop1): Mounting V5 Filesystem
[  145.930224][ T4761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.941070][ T4761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.951627][ T4761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.962204][ T4761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.974041][ T4761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  145.985208][ T4761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  145.995663][ T4761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.009077][ T4761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.012881][ T5079] loop4: detected capacity change from 0 to 32768
[  146.021518][ T4761] batman_adv: batadv0: Interface activated: batadv_slave_0
[  146.056141][ T5071] XFS (loop1): Ending clean mount
[  146.068572][ T5071] XFS (loop1): Quotacheck needed: Please wait.
[  146.110412][ T5079] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.315 (5079)
[  146.130464][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  146.149351][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  146.190232][ T5100] loop0: detected capacity change from 0 to 8192
[  146.190352][ T4948] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  146.209267][ T5071] XFS (loop1): Quotacheck: Done.
[  146.209334][ T5079] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  146.229339][ T4761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.236471][ T5100] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  146.243306][ T4761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.270314][ T5079] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  146.279824][   T26] audit: type=1804 audit(1721959935.241:6): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.312" name="/newroot/85/file2/bus" dev="loop1" ino=9292 res=1 errno=0
[  146.282297][ T5100] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  146.311336][ T5100] REISERFS (device loop0): using ordered data mode
[  146.320316][ T5100] reiserfs: using flush barriers
[  146.341889][ T5100] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.357475][ T5079] BTRFS info (device loop4): using free space tree
[  146.373757][ T4761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.389841][ T5100] REISERFS (device loop0): checking transaction log (loop0)
[  146.392308][   T26] audit: type=1804 audit(1721959935.301:7): pid=5071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.312" name="/newroot/85/file2/bus" dev="loop1" ino=9292 res=1 errno=0
[  146.421041][ T4761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.430973][ T4761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.443576][ T4761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.459760][ T4761] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  146.480477][ T4761] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.481281][ T5100] REISERFS (device loop0): Using r5 hash to sort names
[  146.502594][ T4761] batman_adv: batadv0: Interface activated: batadv_slave_1
[  146.535586][ T4948] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  146.535905][ T3640] XFS (loop1): Unmounting Filesystem
[  146.579178][ T4948] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  146.610148][ T5100] reiserfs: enabling write barrier flush mode
[  146.622348][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  146.636701][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  146.662382][ T4761] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  146.677464][ T4761] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  146.682976][ T5100] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  146.687061][ T4761] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  146.699806][ T5079] BTRFS info (device loop4): enabling ssd optimizations
[  146.704733][ T4761] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  146.822027][ T4948] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  147.134534][ T4504] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  147.357221][ T5124] loop1: detected capacity change from 0 to 1024
[  147.387997][   T46] device hsr_slave_0 left promiscuous mode
[  147.415033][   T46] device hsr_slave_1 left promiscuous mode
[  147.443777][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.456842][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.474293][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.491006][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.506777][   T46] device bridge_slave_1 left promiscuous mode
[  147.523403][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.554188][   T46] device bridge_slave_0 left promiscuous mode
[  147.571804][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.611460][ T5130] loop1: detected capacity change from 0 to 64
[  147.666636][   T46] device veth1_macvtap left promiscuous mode
[  147.676413][   T46] device veth0_macvtap left promiscuous mode
[  147.682613][   T46] device veth1_vlan left promiscuous mode
[  147.690260][   T46] device veth0_vlan left promiscuous mode
[  148.072568][   T46] team0 (unregistering): Port device team_slave_1 removed
[  148.106372][   T46] team0 (unregistering): Port device team_slave_0 removed
[  148.140100][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.174058][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  148.466854][   T46] bond0 (unregistering): Released all slaves
[  148.542531][ T4727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.559973][ T4727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.658195][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  148.746298][ T3709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  148.778145][ T4948] 8021q: adding VLAN 0 to HW filter on device bond0
[  148.795687][ T3709] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  148.810928][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  148.859733][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  148.872253][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  148.894670][ T4948] 8021q: adding VLAN 0 to HW filter on device team0
[  148.958061][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.018231][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.053296][ T3781] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.060465][ T3781] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.098112][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.109531][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.131205][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.158426][ T3783] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.165569][ T3783] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.193052][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.229569][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  149.294996][ T5159] loop0: detected capacity change from 0 to 1024
[  149.333264][ T4948] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  149.372948][ T4948] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  149.403951][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  149.420128][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  149.439272][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  149.480829][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  149.517933][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  149.538878][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  149.564086][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  149.587765][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  149.620819][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  149.643980][ T3781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  149.795847][ T3649] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  149.807836][ T3649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  149.816877][ T3649] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  149.826600][ T3649] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  149.837718][ T3649] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  149.845272][ T3649] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  149.948172][ T3781] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  150.060704][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.070474][ T5179] loop0: detected capacity change from 0 to 4096
[  150.093629][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  150.135149][ T5179] ntfs: (device loop0): parse_options(): The fmask option requires an argument.
[  150.160651][ T4948] 8021q: adding VLAN 0 to HW filter on device batadv0
[  150.217304][ T3781] usb 4-1: Using ep0 maxpacket: 16
[  150.317396][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  150.343828][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  150.363013][ T3781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  150.411787][ T3781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  150.466477][ T5174] chnl_net:caif_netlink_parms(): no params data found
[  150.468340][ T3781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  150.534983][ T4948] device veth0_vlan entered promiscuous mode
[  150.538872][ T3781] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  150.572592][ T3781] usb 4-1: New USB device found, idVendor=1b3d, idProduct=013c, bcdDevice=a6.ae
[  150.587329][ T5185] loop4: detected capacity change from 0 to 8192
[  150.609306][ T5185] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  150.650212][ T4948] device veth1_vlan entered promiscuous mode
[  150.655608][ T3781] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.689192][ T3781] usb 4-1: config 0 descriptor??
[  150.736049][ T5185] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  150.756106][ T3781] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  150.763556][ T5185] REISERFS (device loop4): using ordered data mode
[  150.765638][ T3781] ftdi_sio ttyUSB0: unknown device type: 0xa6ae
[  150.779452][ T5185] reiserfs: using flush barriers
[  150.790423][ T5185] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  150.827735][ T5185] REISERFS (device loop4): checking transaction log (loop4)
[  150.847320][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.923271][ T5185] REISERFS (device loop4): Using r5 hash to sort names
[  150.924624][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.961918][ T3781] usb 4-1: USB disconnect, device number 5
[  150.981010][ T3781] ftdi_sio 4-1:0.0: device disconnected
[  150.988372][ T5174] device bridge_slave_0 entered promiscuous mode
[  150.993058][ T5185] reiserfs: enabling write barrier flush mode
[  151.025992][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  151.029860][ T5185] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  151.035676][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  151.056021][ T5197] loop0: detected capacity change from 0 to 1024
[  151.075144][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  151.085208][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  151.096879][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  151.105736][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  151.115096][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  151.125224][ T5197] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  151.134925][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  151.143423][ T5197] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038 (0x7fffffff)
[  151.157124][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.167567][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.196437][ T5174] device bridge_slave_1 entered promiscuous mode
[  151.219745][ T4948] device veth0_macvtap entered promiscuous mode
[  151.244417][   T26] audit: type=1804 audit(1721959940.211:8): pid=5197 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.340" name="/newroot/34/file1/bus" dev="loop0" ino=18 res=1 errno=0
[  151.309601][ T4948] device veth1_macvtap entered promiscuous mode
[  151.349461][ T5174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  151.370500][ T5174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  151.441465][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.500730][ T5203] loop4: detected capacity change from 0 to 64
[  151.511466][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.540056][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.589229][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.600910][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.611536][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.621501][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  151.631963][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.653336][ T4948] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.680440][ T4463] EXT4-fs (loop0): unmounting filesystem.
[  151.703604][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  151.711841][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  151.773991][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  151.816947][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  151.856183][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  151.904270][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  151.923489][ T3635] Bluetooth: hci3: command tx timeout
[  151.963188][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.015125][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.045892][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.097221][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.132562][ T4948] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.151944][ T4948] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.170135][ T4948] batman_adv: batadv0: Interface activated: batadv_slave_1
[  152.191929][ T5174] team0: Port device team_slave_0 added
[  152.230147][ T5174] team0: Port device team_slave_1 added
[  152.251885][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  152.264941][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  152.279101][ T4948] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  152.302477][ T4948] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  152.331949][ T4948] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  152.362113][ T4948] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  152.480048][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  152.499242][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.534629][ T5174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  152.608794][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  152.630147][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  152.650589][ T5218] loop4: detected capacity change from 0 to 32768
[  152.712920][ T5174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  152.779705][ T5218] XFS (loop4): Mounting V5 Filesystem
[  152.814642][ T3709] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.846678][ T4108] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  152.846940][ T3709] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.870800][ T4108] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  152.917000][ T5174] device hsr_slave_0 entered promiscuous mode
[  152.956895][ T5174] device hsr_slave_1 entered promiscuous mode
[  152.977525][ T5174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  152.983329][ T5218] XFS (loop4): Ending clean mount
[  152.992783][ T5174] Cannot create hsr debugfs directory
[  153.017551][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  153.027415][ T5218] XFS (loop4): Quotacheck needed: Please wait.
[  153.031427][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  153.088410][ T5218] XFS (loop4): Quotacheck: Done.
[  153.131613][ T5238] netlink: 16 bytes leftover after parsing attributes in process `syz.3.349'.
[  153.176469][   T46] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.200536][ T5242] loop0: detected capacity change from 0 to 8192
[  153.209756][ T5242] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  153.223511][ T5242] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  153.237002][ T5242] REISERFS (device loop0): using ordered data mode
[  153.243727][ T5242] reiserfs: using flush barriers
[  153.250067][ T5242] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  153.254655][   T26] audit: type=1804 audit(1721959942.211:9): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.345" name="/newroot/25/file2/bus" dev="loop4" ino=9292 res=1 errno=0
[  153.266824][ T5242] REISERFS (device loop0): checking transaction log (loop0)
[  153.311235][ T5242] REISERFS (device loop0): Using r5 hash to sort names
[  153.342963][ T5242] reiserfs: enabling write barrier flush mode
[  153.358589][ T5242] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  153.410751][   T46] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.424308][ T4504] XFS (loop4): Unmounting Filesystem
[  153.476545][   T26] audit: type=1804 audit(1721959942.301:10): pid=5218 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.345" name="/newroot/25/file2/bus" dev="loop4" ino=9292 res=1 errno=0
[  153.611627][ T3921] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  153.705635][   T46] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.937117][ T3921] usb 4-1: Using ep0 maxpacket: 8
[  154.002858][ T3635] Bluetooth: hci3: command tx timeout
[  154.155458][ T3921] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[  154.372138][   T46] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.421742][ T5252] loop2: detected capacity change from 0 to 64
[  154.443007][ T3921] usb 4-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  154.456260][ T3921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=105
[  154.482099][ T3921] usb 4-1: SerialNumber: syz
[  154.503859][ T3921] usb 4-1: config 0 descriptor??
[  154.669161][ T5255] loop2: detected capacity change from 0 to 64
[  154.726747][ T3775] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  154.734797][ T5257] loop4: detected capacity change from 0 to 1024
[  154.786190][ T3921] usb 4-1: Found UVC 0.00 device <unnamed> (05ac:8501)
[  154.794043][ T3921] usb 4-1: No valid video chain found.
[  154.807837][ T5257] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  154.810357][ T3921] usb 4-1: USB disconnect, device number 6
[  154.847060][ T5257] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038 (0x7fffffff)
[  154.938878][   T26] audit: type=1804 audit(1721959943.901:11): pid=5257 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.351" name="/newroot/26/file1/bus" dev="loop4" ino=18 res=1 errno=0
[  154.989651][ T3775] usb 1-1: Using ep0 maxpacket: 16
[  155.042344][ T4504] EXT4-fs (loop4): unmounting filesystem.
[  155.113009][ T3775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  155.136417][ T3775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  155.176647][ T3775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  155.200861][ T3775] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  155.239216][ T3775] usb 1-1: New USB device found, idVendor=1b3d, idProduct=013c, bcdDevice=a6.ae
[  155.281585][ T3775] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.360238][ T3775] usb 1-1: config 0 descriptor??
[  155.424092][ T3775] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  155.444107][ T3775] ftdi_sio ttyUSB0: unknown device type: 0xa6ae
[  155.680991][ T4031] usb 1-1: USB disconnect, device number 7
[  155.842664][ T4031] ftdi_sio 1-1:0.0: device disconnected
[  156.132853][ T3650] Bluetooth: hci3: command tx timeout
[  156.727654][ T5174] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  157.387828][ T5174] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  158.689352][ T3635] Bluetooth: hci3: command tx timeout
[  158.730777][ T3650] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  159.680188][ T3650] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  159.688698][ T3650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  159.776933][ T3650] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  159.786957][ T3650] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  159.794255][ T5174] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  159.803080][ T3650] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  159.850921][ T5174] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  160.064750][   T46] device hsr_slave_0 left promiscuous mode
[  160.119015][   T46] device hsr_slave_1 left promiscuous mode
[  160.139233][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  160.156918][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  160.190375][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  160.213146][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  160.225297][   T46] device bridge_slave_1 left promiscuous mode
[  160.231554][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.259782][   T46] device bridge_slave_0 left promiscuous mode
[  160.268200][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.310525][   T46] device veth1_macvtap left promiscuous mode
[  160.342943][   T46] device veth0_macvtap left promiscuous mode
[  160.359440][   T46] device veth1_vlan left promiscuous mode
[  160.379625][   T46] device veth0_vlan left promiscuous mode
[  161.452812][ T4031] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  161.499720][   T46] team0 (unregistering): Port device team_slave_1 removed
[  161.552133][   T46] team0 (unregistering): Port device team_slave_0 removed
[  161.592519][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  161.641378][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  161.702760][ T4031] usb 1-1: Using ep0 maxpacket: 16
[  161.822966][ T4031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  161.842896][ T3650] Bluetooth: hci2: command tx timeout
[  161.843326][ T3649] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  161.849112][ T3650] Bluetooth: hci4: command 0x1003 tx timeout
[  161.865372][ T4031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  161.877386][ T4031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  161.975921][ T4031] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  161.985862][ T4031] usb 1-1: New USB device found, idVendor=1b3d, idProduct=013c, bcdDevice=a6.ae
[  161.995280][ T4031] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.023639][ T4031] usb 1-1: config 0 descriptor??
[  162.066553][ T4031] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  162.075214][ T4031] ftdi_sio ttyUSB0: unknown device type: 0xa6ae
[  162.228662][   T46] bond0 (unregistering): Released all slaves
[  162.273988][ T4031] usb 1-1: USB disconnect, device number 8
[  162.288583][ T4031] ftdi_sio 1-1:0.0: device disconnected
[  162.470219][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.484525][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  162.493472][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  162.505097][ T5174] 8021q: adding VLAN 0 to HW filter on device team0
[  162.516715][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  162.525956][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  162.534587][ T3783] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.541728][ T3783] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.560450][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  162.569094][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  162.577990][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  162.587723][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.594881][ T5122] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.622187][ T5297] chnl_net:caif_netlink_parms(): no params data found
[  162.638505][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  162.648602][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  162.691814][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  162.704767][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  162.732096][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  162.754170][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  162.771463][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  162.781335][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  162.791497][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  162.801370][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  162.813467][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  162.863448][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  164.274892][ T3649] Bluetooth: hci2: command tx timeout
[  164.330715][ T5297] bridge0: port 1(bridge_slave_0) entered blocking state
[  164.361033][ T5297] bridge0: port 1(bridge_slave_0) entered disabled state
[  164.388977][ T5297] device bridge_slave_0 entered promiscuous mode
[  164.465112][ T5297] bridge0: port 2(bridge_slave_1) entered blocking state
[  164.472235][ T5297] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.580412][ T5297] device bridge_slave_1 entered promiscuous mode
[  164.716697][ T5297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  164.774403][ T5297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  164.866622][ T5375] loop0: detected capacity change from 0 to 128
[  164.899362][ T5297] team0: Port device team_slave_0 added
[  164.932935][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  164.953264][ T3783] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  164.978491][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  165.005788][ T5297] team0: Port device team_slave_1 added
[  165.170846][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  165.193535][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  165.374565][ T5297] batman_adv: batadv0: Adding interface: batadv_slave_0
[  165.381593][ T5297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  165.449571][ T5297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  165.549923][ T5174] device veth0_vlan entered promiscuous mode
[  165.813936][ T5174] device veth1_vlan entered promiscuous mode
[  166.147074][ T3921] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  166.173074][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  166.181592][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  166.200356][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  166.230242][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  166.250524][ T5370] loop0: detected capacity change from 0 to 40427
[  166.262594][ T5297] batman_adv: batadv0: Adding interface: batadv_slave_1
[  166.270780][ T5297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  166.320826][ T5297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  166.332887][ T3649] Bluetooth: hci2: command tx timeout
[  166.349126][ T5174] device veth0_macvtap entered promiscuous mode
[  166.359011][ T5174] device veth1_macvtap entered promiscuous mode
[  166.398567][ T5370] F2FS-fs (loop0): Found nat_bits in checkpoint
[  166.434254][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  166.446101][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  166.462862][ T3921] usb 4-1: Using ep0 maxpacket: 16
[  166.481558][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  166.503812][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  166.523647][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  166.547589][ T5391] netlink: 16 bytes leftover after parsing attributes in process `syz.4.384'.
[  166.552635][ T5370] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  166.593096][ T3921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  166.621260][ T3921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  166.625201][ T4463] syz-executor: attempt to access beyond end of device
[  166.625201][ T4463] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  166.635293][ T3921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  166.664342][ T3921] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  166.690218][ T3921] usb 4-1: New USB device found, idVendor=1b3d, idProduct=013c, bcdDevice=a6.ae
[  166.729120][ T3921] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.751714][ T3921] usb 4-1: config 0 descriptor??
[  166.761708][ T5122] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  166.787955][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.820545][ T3921] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  166.839722][ T3921] ftdi_sio ttyUSB0: unknown device type: 0xa6ae
[  166.862821][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.909079][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.920890][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.937158][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.949600][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  166.963863][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  166.996870][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.033675][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  167.044452][ T5297] device hsr_slave_0 entered promiscuous mode
[  167.059583][ T5297] device hsr_slave_1 entered promiscuous mode
[  167.067184][ T3687] usb 4-1: USB disconnect, device number 7
[  167.083109][ T3687] ftdi_sio 4-1:0.0: device disconnected
[  167.105252][ T5297] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  167.123375][ T5297] Cannot create hsr debugfs directory
[  167.129892][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'.
[  167.149175][ T5395] netlink: 8 bytes leftover after parsing attributes in process `syz.4.386'.
[  167.169491][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  167.178735][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  167.201491][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.243414][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.273608][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.289752][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.299958][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.311719][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.321875][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  167.336473][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  167.353992][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  167.373152][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  167.386023][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  167.474370][ T5174] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  167.498894][ T5174] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  167.529102][ T5174] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  167.548720][ T5174] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  167.791210][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.926518][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.936044][ T3881] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.961779][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  167.969316][ T3881] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  168.403060][ T3649] Bluetooth: hci2: command tx timeout
[  168.687737][ T5297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.751465][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  168.849562][ T5297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.921101][ T5417] loop0: detected capacity change from 0 to 128
[  169.005072][ T5297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.142107][ T5297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  169.376427][ T5297] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  169.398246][ T5297] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  169.416107][ T5297] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  169.456089][ T5297] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  169.619805][ T5297] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.642099][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  169.656148][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  169.705971][ T5297] 8021q: adding VLAN 0 to HW filter on device team0
[  169.724909][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.740634][ T3687] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.750773][ T3687] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.757923][ T3687] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.823656][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  169.831857][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  169.849297][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  169.859737][ T3921] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.866864][ T3921] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.884114][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  169.899734][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  169.909893][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  169.925242][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  169.978892][ T5297] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  169.996608][ T5297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  170.019210][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  170.030165][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  170.044024][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  170.060745][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  170.071374][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  170.086875][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  170.101544][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  170.120538][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  170.333132][ T3650] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  170.538605][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  170.553168][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  170.565007][ T5297] 8021q: adding VLAN 0 to HW filter on device batadv0
[  170.602540][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  170.612354][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  170.641299][ T5297] device veth0_vlan entered promiscuous mode
[  170.660524][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  170.673771][ T3921] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  170.698930][ T5297] device veth1_vlan entered promiscuous mode
[  170.714482][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  170.733119][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  170.741405][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  170.811395][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  170.831913][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  170.867629][   T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  170.899795][ T5297] device veth0_macvtap entered promiscuous mode
[  171.085239][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'.
[  171.104254][ T5429] netlink: 8 bytes leftover after parsing attributes in process `syz.4.395'.
[  171.111456][ T5435] loop0: detected capacity change from 0 to 512
[  171.125324][ T5297] device veth1_macvtap entered promiscuous mode
[  171.180601][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.203898][ T5435] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  171.232916][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.243425][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.254295][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.268392][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.305689][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.316323][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.328137][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.339004][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  171.349806][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  171.369067][ T4463] EXT4-fs (loop0): unmounting filesystem.
[  171.377953][ T5297] batman_adv: batadv0: Interface activated: batadv_slave_0
[  171.718307][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  171.739726][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  171.935406][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  171.952503][ T4031] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  171.987545][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'.
[  173.379771][ T5458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'.
[  173.504984][ T5468] loop3: detected capacity change from 0 to 512
[  173.542873][ T5468] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  173.637877][ T4761] EXT4-fs (loop3): unmounting filesystem.
[  173.783339][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.812800][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.847527][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.892880][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.909575][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.920432][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.939911][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.959960][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  173.971435][ T5297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  173.989398][ T5297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  174.001301][ T5297] batman_adv: batadv0: Interface activated: batadv_slave_1
[  174.134260][   T46] device hsr_slave_0 left promiscuous mode
[  174.155927][   T46] device hsr_slave_1 left promiscuous mode
[  174.180153][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  174.188013][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.203076][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  174.210697][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.226002][   T46] device bridge_slave_1 left promiscuous mode
[  174.232394][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.249021][   T46] device bridge_slave_0 left promiscuous mode
[  174.263833][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.307960][   T46] device veth1_macvtap left promiscuous mode
[  174.320589][   T46] device veth0_macvtap left promiscuous mode
[  174.327312][   T46] device veth1_vlan left promiscuous mode
[  174.339852][   T46] device veth0_vlan left promiscuous mode
[  174.783047][ T5474] loop1: detected capacity change from 0 to 512
[  174.887781][ T5474] EXT4-fs error (device loop1): ext4_orphan_get:1396: inode #15: comm syz.1.412: casefold flag without casefold feature
[  174.905808][ T5474] EXT4-fs error (device loop1): __ext4_iget:5044: inode #12: block 2: comm syz.1.412: invalid block
[  174.959748][ T5474] EXT4-fs error (device loop1): ext4_xattr_inode_iget:409: comm syz.1.412: error while reading EA inode 12 err=-117
[  174.994787][ T5474] EXT4-fs (loop1): 1 orphan inode deleted
[  175.000656][ T5474] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  175.282537][ T5491] loop0: detected capacity change from 0 to 256
[  175.405577][   T46] team0 (unregistering): Port device team_slave_1 removed
[  175.490843][   T46] team0 (unregistering): Port device team_slave_0 removed
[  175.499017][ T5495] loop0: detected capacity change from 0 to 512
[  175.533329][ T5495] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  175.579280][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.596240][ T4463] EXT4-fs (loop0): unmounting filesystem.
[  175.651293][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.051786][ T5498] loop0: detected capacity change from 0 to 40427
[  176.102608][ T5498] F2FS-fs (loop0): Found nat_bits in checkpoint
[  176.163934][ T5498] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  176.236833][   T46] bond0 (unregistering): Released all slaves
[  176.238041][ T4463] syz-executor: attempt to access beyond end of device
[  176.238041][ T4463] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  176.377078][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  176.391386][ T3918] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  176.423491][ T5297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  176.446832][ T5297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  176.457470][ T5297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.469141][ T5297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.479914][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'.
[  176.512964][ T5484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.412'.
[  176.541934][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[  176.552223][ T5493] netlink: 8 bytes leftover after parsing attributes in process `syz.4.420'.
[  176.685464][ T5174] EXT4-fs (loop1): unmounting filesystem.
[  177.486994][ T5516] loop3: detected capacity change from 0 to 256
[  177.569186][ T5516] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  177.599249][ T4108] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.630984][ T4108] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.683298][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  177.703480][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.711633][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.732388][  T945] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  179.082181][ T5534] Bluetooth: MGMT ver 1.22
[  179.912431][ T5543] loop4: detected capacity change from 0 to 512
[  179.986976][ T5543] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #15: comm syz.4.435: casefold flag without casefold feature
[  180.021453][ T5543] EXT4-fs error (device loop4): __ext4_iget:5044: inode #12: block 2: comm syz.4.435: invalid block
[  180.054384][ T5543] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.435: error while reading EA inode 12 err=-117
[  180.098650][ T5543] EXT4-fs (loop4): 1 orphan inode deleted
[  180.128653][ T5543] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  182.428872][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.4.435'.
[  182.458520][ T5550] netlink: 12 bytes leftover after parsing attributes in process `syz.4.435'.
[  182.619550][ T4504] EXT4-fs (loop4): unmounting filesystem.
[  183.102757][ T5122] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  183.343165][ T5122] usb 5-1: Using ep0 maxpacket: 16
[  183.623859][ T5122] usb 5-1: New USB device found, idVendor=046d, idProduct=08b5, bcdDevice=d7.01
[  183.716494][ T5122] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.841060][ T5122] usb 5-1: Product: syz
[  183.855638][ T5122] usb 5-1: Manufacturer: syz
[  183.871225][ T5122] usb 5-1: SerialNumber: syz
[  183.991987][ T5122] usb 5-1: config 0 descriptor??
[  184.086465][ T5122] pwc: Logitech QuickCam Orbit/Sphere USB webcam detected.
[  184.343049][ T5122] pwc: Failed to set LED on/off time (-71)
[  184.413066][ T5122] pwc: send_video_command error -71
[  184.438977][ T5122] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  184.509933][ T5122] Philips webcam: probe of 5-1:0.0 failed with error -71
[  184.638695][ T5122] usb 5-1: USB disconnect, device number 4
[  184.676647][ T3650] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  184.974836][ T5588] loop0: detected capacity change from 0 to 512
[  185.068432][ T5588] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #15: comm syz.0.450: casefold flag without casefold feature
[  185.107262][ T5588] EXT4-fs error (device loop0): __ext4_iget:5044: inode #12: block 2: comm syz.0.450: invalid block
[  185.173783][ T5596] loop2: detected capacity change from 0 to 256
[  185.183168][ T5588] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.450: error while reading EA inode 12 err=-117
[  185.219389][ T5588] EXT4-fs (loop0): 1 orphan inode deleted
[  185.242450][ T5596] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  185.262016][ T5588] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  185.334051][ T5588] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'.
[  185.384107][ T5588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.450'.
[  185.409958][ T5604] loop1: detected capacity change from 0 to 1024
[  185.449702][ T5604] 
[  185.452244][ T5604] ======================================================
[  185.459269][ T5604] WARNING: possible circular locking dependency detected
[  185.466287][ T5604] 6.1.101-syzkaller #0 Not tainted
[  185.468970][ T5602] loop3: detected capacity change from 0 to 8192
[  185.471382][ T5604] ------------------------------------------------------
[  185.471391][ T5604] syz.1.459/5604 is trying to acquire lock:
[  185.471401][ T5604] ffff888027b622c8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_file_extend+0x1d2/0x1b10
[  185.501751][ T5604] 
[  185.501751][ T5604] but task is already holding lock:
[  185.509106][ T5604] ffff88805a6f80b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  185.518630][ T5604] 
[  185.518630][ T5604] which lock already depends on the new lock.
[  185.518630][ T5604] 
[  185.529036][ T5604] 
[  185.529036][ T5604] the existing dependency chain (in reverse order) is:
[  185.538052][ T5604] 
[  185.538052][ T5604] -> #1 (&tree->tree_lock){+.+.}-{3:3}:
[  185.545787][ T5604]        lock_acquire+0x1f8/0x5a0
[  185.550823][ T5604]        __mutex_lock+0x132/0xd80
[  185.555855][ T5604]        hfsplus_file_truncate+0x80d/0xb40
[  185.561659][ T5604]        hfsplus_delete_inode+0x170/0x220
[  185.567378][ T5604]        hfsplus_unlink+0x50d/0x7f0
[  185.572573][ T5604]        vfs_unlink+0x359/0x5f0
[  185.577420][ T5604]        do_unlinkat+0x4a5/0x820
[  185.582350][ T5604]        __x64_sys_unlink+0x45/0x50
[  185.587567][ T5604]        do_syscall_64+0x3b/0xb0
[  185.592497][ T5604]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.598904][ T5604] 
[  185.598904][ T5604] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  185.607927][ T5604]        validate_chain+0x1661/0x5950
[  185.613300][ T5604]        __lock_acquire+0x125b/0x1f80
[  185.618674][ T5604]        lock_acquire+0x1f8/0x5a0
[  185.623818][ T5604]        __mutex_lock+0x132/0xd80
[  185.628843][ T5604]        hfsplus_file_extend+0x1d2/0x1b10
[  185.634556][ T5604]        hfsplus_bmap_reserve+0x101/0x4e0
[  185.640271][ T5604]        hfsplus_create_cat+0x1a9/0x1ba0
[  185.645898][ T5604]        hfsplus_fill_super+0x13e6/0x1c90
[  185.651623][ T5604]        mount_bdev+0x2c9/0x3f0
[  185.656467][ T5604]        legacy_get_tree+0xeb/0x180
[  185.661761][ T5604]        vfs_get_tree+0x88/0x270
[  185.666704][ T5604]        do_new_mount+0x2ba/0xb40
[  185.671723][ T5604]        __se_sys_mount+0x2d5/0x3c0
[  185.676926][ T5604]        do_syscall_64+0x3b/0xb0
[  185.681863][ T5604]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  185.688275][ T5604] 
[  185.688275][ T5604] other info that might help us debug this:
[  185.688275][ T5604] 
[  185.698502][ T5604]  Possible unsafe locking scenario:
[  185.698502][ T5604] 
[  185.705941][ T5604]        CPU0                    CPU1
[  185.711293][ T5604]        ----                    ----
[  185.716643][ T5604]   lock(&tree->tree_lock);
[  185.721243][ T5604]                                lock(&HFSPLUS_I(inode)->extents_lock);
[  185.729564][ T5604]                                lock(&tree->tree_lock);
[  185.736584][ T5604]   lock(&HFSPLUS_I(inode)->extents_lock);
[  185.742377][ T5604] 
[  185.742377][ T5604]  *** DEADLOCK ***
[  185.742377][ T5604] 
[  185.750502][ T5604] 3 locks held by syz.1.459/5604:
[  185.755505][ T5604]  #0: ffff88805a6fc0e0 (&type->s_umount_key#70/1){+.+.}-{3:3}, at: alloc_super+0x217/0x930
[  185.765624][ T5604]  #1: ffff88807a039198 (&sbi->vh_mutex){+.+.}-{3:3}, at: hfsplus_fill_super+0x1378/0x1c90
[  185.775642][ T5604]  #2: ffff88805a6f80b0 (&tree->tree_lock){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  185.785567][ T5604] 
[  185.785567][ T5604] stack backtrace:
[  185.791449][ T5604] CPU: 0 PID: 5604 Comm: syz.1.459 Not tainted 6.1.101-syzkaller #0
[  185.799432][ T5604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  185.809503][ T5604] Call Trace:
[  185.812780][ T5604]  <TASK>
[  185.815697][ T5604]  dump_stack_lvl+0x1e3/0x2cb
[  185.820379][ T5604]  ? nf_tcp_handle_invalid+0x642/0x642
[  185.825835][ T5604]  ? print_circular_bug+0x12b/0x1a0
[  185.831019][ T5604]  check_noncircular+0x2fa/0x3b0
[  185.835941][ T5604]  ? hlock_conflict+0x55/0x1f0
[  185.840715][ T5604]  ? add_chain_block+0x850/0x850
[  185.845661][ T5604]  ? lockdep_lock+0x11f/0x2a0
[  185.850340][ T5604]  ? is_bpf_text_address+0x22/0x2a0
[  185.855536][ T5604]  ? _find_first_zero_bit+0xd0/0x100
[  185.861026][ T5604]  validate_chain+0x1661/0x5950
[  185.865901][ T5604]  ? check_noncircular+0x1e3/0x3b0
[  185.871008][ T5604]  ? reacquire_held_locks+0x660/0x660
[  185.876379][ T5604]  ? add_chain_block+0x850/0x850
[  185.881315][ T5604]  ? lockdep_unlock+0x165/0x300
[  185.886163][ T5604]  ? look_up_lock_class+0x77/0x140
[  185.891264][ T5604]  ? register_lock_class+0x100/0x990
[  185.896550][ T5604]  ? is_dynamic_key+0x260/0x260
[  185.901394][ T5604]  ? validate_chain+0x13ce/0x5950
[  185.906413][ T5604]  ? mark_lock+0x9a/0x340
[  185.910746][ T5604]  __lock_acquire+0x125b/0x1f80
[  185.915596][ T5604]  lock_acquire+0x1f8/0x5a0
[  185.920094][ T5604]  ? hfsplus_file_extend+0x1d2/0x1b10
[  185.925461][ T5604]  ? read_lock_is_recursive+0x10/0x10
[  185.930828][ T5604]  ? __might_sleep+0xb0/0xb0
[  185.935420][ T5604]  ? print_irqtrace_events+0x210/0x210
[  185.940873][ T5604]  ? mark_lock+0x9a/0x340
[  185.945196][ T5604]  __mutex_lock+0x132/0xd80
[  185.949746][ T5604]  ? hfsplus_file_extend+0x1d2/0x1b10
[  185.955109][ T5604]  ? hfsplus_file_extend+0x1d2/0x1b10
[  185.960469][ T5604]  ? mutex_lock_nested+0x10/0x10
[  185.965403][ T5604]  hfsplus_file_extend+0x1d2/0x1b10
[  185.970591][ T5604]  ? __might_sleep+0xb0/0xb0
[  185.975170][ T5604]  ? trace_raw_output_contention_end+0xd0/0xd0
[  185.981313][ T5604]  ? hfsplus_get_block+0x14e0/0x14e0
[  185.986585][ T5604]  ? trace_contention_end+0x61/0x170
[  185.991864][ T5604]  ? __mutex_lock+0x2f7/0xd80
[  185.996537][ T5604]  ? hfsplus_find_init+0x146/0x1c0
[  186.001638][ T5604]  ? mutex_lock_nested+0x10/0x10
[  186.006570][ T5604]  hfsplus_bmap_reserve+0x101/0x4e0
[  186.011764][ T5604]  hfsplus_create_cat+0x1a9/0x1ba0
[  186.016865][ T5604]  ? _raw_spin_lock_irqsave+0xdd/0x120
[  186.022310][ T5604]  ? hfsplus_find_cat+0x5c0/0x5c0
[  186.027319][ T5604]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  186.033217][ T5604]  ? do_raw_spin_unlock+0x137/0x8a0
[  186.038399][ T5604]  ? _raw_spin_unlock+0x24/0x40
[  186.043320][ T5604]  ? hfsplus_new_inode+0x5c9/0x740
[  186.048421][ T5604]  hfsplus_fill_super+0x13e6/0x1c90
[  186.053618][ T5604]  ? hfsplus_mount+0x40/0x40
[  186.058215][ T5604]  ? snprintf+0xd6/0x120
[  186.062446][ T5604]  ? vscnprintf+0x80/0x80
[  186.066761][ T5604]  ? set_blocksize+0x1c6/0x350
[  186.071510][ T5604]  mount_bdev+0x2c9/0x3f0
[  186.075831][ T5604]  ? hfsplus_mount+0x40/0x40
[  186.080408][ T5604]  legacy_get_tree+0xeb/0x180
[  186.085075][ T5604]  ? hfsplus_mark_mdb_dirty+0x1b0/0x1b0
[  186.090612][ T5604]  vfs_get_tree+0x88/0x270
[  186.095016][ T5604]  do_new_mount+0x2ba/0xb40
[  186.099504][ T5604]  ? ns_capable+0x85/0xe0
[  186.103821][ T5604]  ? do_move_mount_old+0x160/0x160
[  186.108922][ T5604]  __se_sys_mount+0x2d5/0x3c0
[  186.113590][ T5604]  ? __x64_sys_mount+0xc0/0xc0
[  186.118346][ T5604]  ? syscall_enter_from_user_mode+0x2e/0x230
[  186.124311][ T5604]  ? lockdep_hardirqs_on+0x94/0x130
[  186.129491][ T5604]  ? __x64_sys_mount+0x1c/0xc0
[  186.134241][ T5604]  do_syscall_64+0x3b/0xb0
[  186.138643][ T5604]  ? clear_bhb_loop+0x45/0xa0
[  186.143306][ T5604]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  186.149187][ T5604] RIP: 0033:0x7f146ef7899a
[  186.153615][ T5604] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 7e 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  186.173203][ T5604] RSP: 002b:00007f146edfee78 EFLAGS: 00000202 ORIG_RAX: 00000000000000a5
[  186.181604][ T5604] RAX: ffffffffffffffda RBX: 00007f146edfef00 RCX: 00007f146ef7899a
[  186.189560][ T5604] RDX: 0000000020000000 RSI: 0000000020000080 RDI: 00007f146edfeec0
[  186.197518][ T5604] RBP: 0000000020000000 R08: 00007f146edfef00 R09: 000000000080000c
[  186.205470][ T5604] R10: 000000000080000c R11: 0000000000000202 R12: 0000000020000080
[  186.213426][ T5604] R13: 00007f146edfeec0 R14: 00000000000006dd R15: 0000000020000100
[  186.221395][ T5604]  </TASK>
[  186.259193][ T5604] hfsplus: found bad thread record in catalog
[  186.297739][ T5604] hfsplus: b-tree write err: -5, ino 4
[  186.304123][ T4463] EXT4-fs (loop0): unmounting filesystem.
[  186.306368][ T5596] netlink: 4 bytes leftover after parsing attributes in process `syz.2.455'.
[  194.084259][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  194.090554][ T1271] ieee802154 phy1 wpan1: encryption failed: -22