last executing test programs:

26.174666734s ago: executing program 0 (id=155):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
connect$802154_dgram(r0, 0x0, 0x0)
socket$kcm(0x21, 0x0, 0x2)
r1 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, &(0x7f0000000180), 0x1)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r3, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$SEG6_CMD_SETHMAC(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x34, r5, 0x1, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x0]}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x34}}, 0x0)

24.949499699s ago: executing program 0 (id=159):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x3000000, &(0x7f00000006c0), 0x1, 0x513, &(0x7f0000000c40)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x7fffffff})
bind$unix(0xffffffffffffffff, 0x0, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0x7, 0x0, 0x0)
landlock_create_ruleset(0x0, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, 0x0, 0x62181)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0x40086602, &(0x7f0000000140))

16.073818573s ago: executing program 2 (id=185):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0, 0x0, 0xff7c}, 0x90)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000280)={r2, r1, 0x1, 0x0, @val=@netfilter={0x2, 0x0, 0x8000}}, 0x40)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r3, &(0x7f0000005240), 0x4000095, 0x0)

14.594340149s ago: executing program 2 (id=188):
prlimit64(0x0, 0x6, &(0x7f0000000140), 0x0)
setresuid(0xee01, 0x0, 0xee01)
setuid(0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
r1 = openat$cgroup_subtree(0xffffffffffffffff, 0x0, 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000080)=ANY=[@ANYBLOB='kcp'], 0x5)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', <r2=>0x0})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="300000001000a900"/20, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="080004007f0000002dd9c12d596c"], 0x30}}, 0x0)

13.216757616s ago: executing program 2 (id=193):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000002c0)=0x200000000)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)

10.152572047s ago: executing program 2 (id=203):
r0 = gettid()
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000029000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
fcntl$lock(r1, 0x25, &(0x7f0000000000)={0x76531edec3d93c5e, 0x2, 0xa762, 0x7fffffffffffffff, r0})
ppoll(0x0, 0x0, 0x0, &(0x7f00000000c0)={[0x8001a0ffffffff]}, 0x8)
ioctl$int_in(r1, 0x5452, &(0x7f0000000180)=0xffffffffffffffff)
fcntl$setsig(r1, 0xa, 0x12)
ppoll(&(0x7f0000000100)=[{r2}], 0x1, 0x0, &(0x7f0000000080)={[0x8001a0ffffffff]}, 0x8)
dup2(r1, r2)
fcntl$setown(r2, 0x8, r0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r3, 0x0)
tkill(r0, 0x13)

9.793029647s ago: executing program 2 (id=205):
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2, &(0x7f0000000100)=ANY=[], 0x51, 0x2b7, &(0x7f0000000140)="$eJzs3T1v00Acx/HfOWkbaFVcWoTEWKgEC4KyIJYglBfBhIAmSBVREVDEw1QQE0Kws/MWeBEsIN4ATEy8gDIZ3fkhcezYadTEpP1+pEaOfef7X/xw97dUWQCOrVutn5+v/bZ/RqqpJr27IXmSGlJd0hmdbTzb2d3e7XbaRTuquRr2zyisaTJltnY6eVVtPVcj4ttvdS31r8NkBEFw81fVQaBy7urP4UkL0dXptjemHlmx12PW2zvkOGaN2de+Xmi56jgAANWKxn8vGueX3Cojz5M2omH/vxz/x7VfdQATFxRu7Rv/XZYVGHt8T7lNvXzPpXB2uxdniaO0PDfwfV7hmZWaYJqyrNLF4p14sN3tXN561G17eqNmpK/Ymvtsh6durCTa9ZzctMAIfTf5M8pF14c524fNMP7nklLxr47Z4tjMV/Pd3DG+PqmdzP/qgbGHyR0pf+BIhfFfGb5H10vfllKU9jebTS9VZMU1ci5qIVLSy0Z+RqL4jFpR+gGBXxanq3V6oFbYu6sltVZza23G34bUWkvVsr1Jzubh7U2a+WBum3X90Re1+ub/no1vQ4VXZu+qMRvhUOB+8bA/8/nN1d0+/czIkb1ckl9xYVjof4vvaTiA97qv61p++vLVw1q323liF+7lLDxeStbMvZVyy1S8oL3emgUFTqZwPChNM7BLh7pDe/8oLWyvspxNtudVH6YjtND6Nt0TqYqFam9PmI70LQLHkJ13mTD/6+Ur9XCyZz/83Hn6iA8Coj0Gdo6dZHC9ukE4I5d08kAZ3OLwDC6bc2VyRpdznb8oXRi9RT+K84gwLf3QXZ7/AwAAAAAAAAAAAAAAAAAAzJpp/DtB1X0EAAAAAAAAAAAAAAAAAAAAAGDWJe//Vfz+X432/t/BV7Ec5vt/P+6I9/8Ck/cvAAD//zfYewA=")
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r1)
close(r1)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29}, './file0\x00'})

9.560841387s ago: executing program 2 (id=208):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$igmp6(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r3, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x0, 0x101, @empty}, {0xa, 0x0, 0x0, @dev}, 0x0, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}, 0x5c)

9.076964808s ago: executing program 0 (id=160):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0000009058202"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_open_dev$hidraw(&(0x7f0000000100), 0x0, 0x84002)
syz_open_dev$evdev(0x0, 0x2, 0x101000)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x54c, 0x24b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000180)={0xc, &(0x7f0000000140)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x2082)
ioctl$EVIOCSKEYCODE(r2, 0x40084504, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000680)={{0x12, 0x1, 0x0, 0x5b, 0xd3, 0xa, 0x20, 0x3f0, 0x581d, 0x20a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x25, 0x0, 0x0, 0xff, 0x1, 0x7}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x36, 0x32, 0x2e}}]}}]}}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

6.733908427s ago: executing program 4 (id=216):
r0 = openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
ioctl$VIDIOC_DECODER_CMD(r0, 0xc0485660, &(0x7f0000000240)={0x0, 0x0, @raw_data})

5.682788717s ago: executing program 4 (id=219):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}], 0x1, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x5f}], 0x1, 0x0)
syz_emit_ethernet(0x3a, &(0x7f0000002380)={@local, @random="365c4cfb3e29", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x18, 0x0, @wg=@data}}}}}, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
getpid()
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x7)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0xff)

4.542621464s ago: executing program 1 (id=221):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x2})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000100)={{@my=0x1}, @hyper, 0x0, 0x2925, 0x0, 0x20000000, 0x4})
r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000000)={@my=0x0})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r2, 0x7a5, &(0x7f0000000140)={{@host}, 0x1})

4.521529945s ago: executing program 0 (id=222):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000003c0)={[{@noauto_da_alloc}, {@quota}, {@noload}, {@jqfmt_vfsold}]}, 0x2, 0x46a, &(0x7f0000000980)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYRES16, @ANYRES32, @ANYBLOB="2e5113abb96490e8baa757031fd3113d8fd231aecab2c455591d3bec0b6d42a1d9572dc5078c0de5a68dc252aeb457f345aaef1744f717c71738086a77f819bf8ec2164ad9d225996868d5440c2a1f1759386c920214f5b07fdeaa34d7cbb895ee45108d8715e8678c9e65c8b76f3f4f2a1537de01264b0f6c5a5083f49b6737a25758553b72788c48c129ab89ff000e7d0b1da439dc5e7e6cfad150a664ab7d70dd127f473015976f8f2a3603f45a042d8c3578e6eb3060b986ee9e6b4dbf79896d68301c5d9ea34afe122934", @ANYRES64, @ANYRES8=0x0, @ANYBLOB="d60a83a1f0457481edbb22ba9409462e156a7c242a", @ANYRES32, @ANYRES8, @ANYRES32], 0x0, 0x1c4, &(0x7f0000000440)="$eJzsVb/uEkEQ/uZu4UAtqG0lQqPA2fgG8gA+gAROJB7+4S5RCMVpQ2NhfAkSn8LCRHsLY0xssNBECyxJDGZ359YlasDkyO/3S/ZLyHzzzc7sDpedvZM8TAIAP9fzPmpQIFzARyIIAA3S2qas7Q+2W8YXof0O6y/ZfmabTGfvnmk6u9uL42iSTPcQImDfmh1y0KLDydunuwqhqMpFk9TX/+yfoec7SvC3NZyLE++iOOL/s52vRe9VwrHbAYxCB2R9eKE/52n5Fkci3n9lJeDxldx44uG7ct6v531JbvEUk9pA//IrodZI57W15qIAMoB8bE0doaYl0ADQSscPWsl0dmU07g2jYXQvDJG135znKxq1W7dHcdQm6xieJAIG8p5WrXgJwKff8QwWyDqaxDmA7Fw5f/Ph3LxkJVYBz8q1a+i6r0yNgDX5V9zEZVQAPMpkOGS1DllNQLXWBcFnpyOscwIbeKiowNX+/XiwAIHytCWEqdFZoSQdyoAoZEdFrl037S/Y1tl22S7Zrtjmb1f+JglV4Rt7zQwo43EvTSfq8dLMaKHRwprZ2eNd89eQ8pMEcHBwcHBwcHA4I/gVAAD//7B1VIM=")
open_by_handle_at(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_DEV(0xffffffffffffffff, 0x0, 0x40000)
rename(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

4.420618994s ago: executing program 4 (id=223):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

4.308872044s ago: executing program 1 (id=225):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$int_in(r1, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f00000007c0))
r2 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000140)=0x200000000)
r3 = dup(r2)
r4 = fcntl$dupfd(r1, 0x0, r2)
preadv(r4, &(0x7f00000012c0)=[{&(0x7f0000000280)=""/4096, 0x48}], 0x1, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r4, 0x4008af30, &(0x7f0000000080)={0x0, r3})
r5 = fcntl$dupfd(r4, 0x0, r0)
ioctl$VHOST_NET_SET_BACKEND(r5, 0x4008af30, &(0x7f0000000080))

4.128824289s ago: executing program 1 (id=226):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x1, 0x9, 0x5, 0xd00, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x80000003, 0xf}, 0x48)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x9)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x1458c2, 0x40)
openat$random(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = syz_open_dev$radio(&(0x7f0000000780), 0x2, 0x2)
readv(r0, &(0x7f0000000500)=[{&(0x7f0000000600)=""/24, 0x18}], 0x1)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)
read(r0, &(0x7f0000001e80)=""/96, 0x60)

4.125112149s ago: executing program 0 (id=227):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file2\x00', 0x16, &(0x7f00000000c0), 0x1, 0x510c, &(0x7f000000a2c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x52142, 0x0)
openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), &(0x7f00000003c0)=ANY=[], 0xe01, 0x0)
symlinkat(&(0x7f00000001c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file6\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000400)='./file7\x00', 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0)
add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x103a42, 0x0)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000600)=ANY=[], 0xd)

4.099987271s ago: executing program 3 (id=228):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00')
lseek(r3, 0x1000000, 0x0)

4.001935709s ago: executing program 4 (id=229):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
fallocate(r1, 0x0, 0x0, 0x1000f4)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x90e976db910956fe, 0x4002011, r2, 0x0)
write$evdev(r1, &(0x7f00000001c0)=[{}], 0x18)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r3 = open(&(0x7f0000000100)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r3, &(0x7f0000000080), 0x208e24b)
fallocate(r0, 0x3, 0x0, 0x1a00)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000900))

3.049354061s ago: executing program 3 (id=230):
r0 = socket(0x40000000015, 0x5, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
r1 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x25, 0x8, 0x3}, 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r2, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r1}, 0x20)
sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
accept4$inet(r0, 0x0, 0x0, 0x80000)
socket$inet_udp(0x2, 0x2, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)

2.82329353s ago: executing program 1 (id=231):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$l2tp6(0xa, 0x2, 0x73)
connect$l2tp6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x20)

1.827534834s ago: executing program 3 (id=232):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000300))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000004c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r3, 0x0)
munmap(&(0x7f0000002000/0x4000)=nil, 0x4000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000100)=[@enter_looper], 0x1, 0x1800, &(0x7f00000007c0)='b'})

1.827373215s ago: executing program 0 (id=233):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')

1.824089285s ago: executing program 1 (id=234):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000001d40), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f0000001d80)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0)

1.503202142s ago: executing program 3 (id=236):
r0 = gettid()
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r1, &(0x7f0000000440)=""/247, 0x26)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x840000088}, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x1, @time})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0xc058534b, &(0x7f0000000100)={{}, {0x0, 0x5}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc08c5335, &(0x7f0000000180))
tkill(r0, 0x7)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'})

1.500780502s ago: executing program 4 (id=237):
socket$packet(0x11, 0x2, 0x300)
socket(0x200000100000011, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8)
ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'})

673.032452ms ago: executing program 1 (id=238):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10)
pipe(&(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
splice(r1, 0x0, r4, 0x0, 0x8000f28, 0x0)
splice(r3, 0x0, r1, 0x0, 0x7f, 0xe)
write(r0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0)
r5 = memfd_create(&(0x7f0000000540)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93<u\xbe\xeag\xd2\x04e\xf2s\xde}o#\x90\xda\x9cs,r\xfd:\xcb\xc7\vTmPZJ\xac\x8b\xd0\xc0\xbcRK\xcb\x1e8\xce\xbd[N\xb0\xb4<\xeb\x86[\xec\x8f\x14\n\x83\x9e&\\\xb7!\xed\xa0\xc3,\x90m\x0f\x00\x00\x00\x00\x00\x00\xff\xd0\xb3\x94\x00\x00\x00\x00\x00\x00\x00\x9dH\xf8\xffRo\xa3W\xe1\xed\x8eS\xaeX\x93\x7f\xd3\xb9\x84Q\x9c\"\xd9\xf5\xe4e\xf9\xcam\xe3\x03\xe4\xad\xd5&A\x02\xc8\xa9\xfe\xcb\x87\xd9\xd3\x8c\f\xc08T~\xc4\xbd\x90?\x1f\x9c\x9b0\x19 \x9f\xd1p`\xc0/\x00u\x19\x1d\xac\xe8%\xb7\t\x9f4\xbb\x89\xe9\xc1\x81\xb0\xd6\xf7\x90\x1f\x94\x01M.\x16\x05\x16\xb9\xe9\xdc~\xd3-s\xe6;\x94\x1c^\x06\xdav;\xccD\x95sj\xe0\xd5\xbeS\xac\xe5N\xea\x9eyl[[\xce5\xee\x05\x9c\x96\xabJ^c\xf7\x19\xb4\xd8\xe4\x87\x9dp\xea?/\xcb\x9a\xaa5\'Q\fuG\x81\x8a@\x97M=v\xfe\a\xabp\xf3\x93\x9d\x7f@9\xc0\xd2\xf1\x00\x10\x00\x00\x00\x00\x00\x00\x82\x13\xb2\xa9\xef\xa5\xf8\x8bk\xb3\x9ev\x92\x0e\xd1\x1f\x17Dx[\xad\xb0\x9d/\x96\xe42mO\x9fh\xea\xf3\x14\xcd\x96\x89_)\x1b\xe2\xd6\b\x94b\xaf;\x92T\xafz\x94\x9fG\xfb\xfd|$k\x03\xd7;\x9ay\xee\xf9W?\xb3\xf9\xf8I.E4\xc3eWq\xfa\":$\xd0\x17Q\x94\xf5\xe5mk\x8e&\xf1;#z\xef*\xce\x99\x04\xb9\x90\xbc\xc9#-\x8di\xae\xc5\xdf\x13\xd2K\x8b\xf5\f\xb2x\xdd\xd5\xb4\xa9^~O<\x12\xe3\xc3P|7\xc4\xc8\xb1r0Z\x98\x87^\xc8C\x1b\x96\xb4lsyF\xc5\xbc\xffOE\xe9\xd70\xe7\xfep\x83\xa7\xa1\xd9\xe4\xba\x92\x17\xbf\xe0\xe1\x01\xb7\x8b\x18j\x19n\xc8\xff\xe9\xf4\xf4\xcf a\xd7_w\x0f\x9dF\xae\xccA-/\x83\xabU\xd5\xbf8\xa4O\xb4\xef\xc8\xccH\xd1=\xbe\xbex\xb5-\x05\x01\x11\xfa\xcf\x1dm\xb5X\xe9\xb5O\x15\xc7;Lb\xce\x1a\xcc\x98\xe8\xe9e\xe0\xc2N\xe7\xd7\x1d\x92\x87F8\x9e\xf7\xdd\xdaW\xf5X\x80\xa0f\xceo\xd8\x7f\xc0\x96\bSB\xce&\x04$\xc3\xe31U\x84\x82\xf0{i\x1d\x02\x10\xc6C\x01^\xcf\x93?w\x01\x84\xa0\xd6\xa2\x10\xa4\xfcG\xabD\xd6dGZ\xb2Cx\x1b\xfdD9\x17\xe6\xcauM\xe3\x05)\xe2\x03\xe2j$F1n@\xde\n9t.[\xad\xb5\f<o\xdb\xa4\x90\xc4\xd0I\xa6\x96\xa1\x00\xbb\xdd\x94\x00t/1YekG\x7f\xbdrI\x1e\x8a4=\xa2\xe9\x82<\x9e|\xf5\xa4\x05#\x7f\xa8\x01\x00\x82ih\xf9?\x03Q\xf5\xc4\x95\x99 \xa7v~:$\x02O\xe3\xaa\x1f\x00\xebh\'\xd2q\x10\x1e\x94n\xd7w\xb1\xc8G\x89\xf4\x8ct\xf9R\x85\x1b8OE\x04\x9a\xd8\x80\x10x\xbf\n0\b,r\xc6r\xf7=\xfe\xc1\x16\xe6\xee\xbb:-h\xba\x8b\x14\x9a?\x8e\x03;\xe5\x04\xd8\xa9\x9a\xd3\x05(\x7f|\xadU\xafe\x87V.i4$6U,R\x9b\n{\'\xfe1\xc4\xb09\x96{\xc0e\xa1\xe7\xa9\xb4\x1a\n\xf5\xd7zuvz\x972\xd4\xfb\x13u2\xab\x18\x01~r\xbbcW!)\xf4\x9b\x1dI\x9ex;\xb2\xe3I\xbd\x16T\xb75\xa6\a\xb7\xa1\x8d\xc9\x12\xb1\xbd\xbc\xd9c\xe9\xe6k\xee\x06\x83\xf4\xab\x18\x038\x8f\xc9^\x0f\xab\xea&P\b\xef#\xf6\xc3\xfc\xd4\xa0\xfd\x15N\xd3\xa0\x80\x9f\bU\xa63\xf6\xc9\xecZ`\xa4\xa0(\xf9\x98B\xaf\xde*\x91\xddk\xa1`d\xf0\x97\xc9e\xc1\"EC\x9a?x\x89\x8d\xb3\xfaF}\x82D\xf8\f\xf1`\x90D\xd1|%(\xd8\t\xea\x00C\xce\x7fo+?v\xee\xc6bL\x1d\xbe\x84p\x8d\xa3\xec\xf7\xe0\xfe\x8c=<\xf2\x1f@\xe66E\xa7\x9c\xd3\xb6\xf5\xe0\x14\xb8\xd4`\x85\xe3;\x8c\xf8\xf2\xd9)\x0e\xd0\xff\xa5K\xf3\xf1\xc4\x18\xf4Z\xdci\x91\x84\xe8\xb7\x10\x90\xbc\xect\x14\xdfR\xe2\x80\xf8a\x92\xb2R\xdf0\xcaQ\xdf\x87\xbdjp\x1ch3h\xcf<\x82\x97\xa5s/m\xb2\x1dd\xf7\xfc\xf5\xa9\x1d\xd34{\xcc\x1f\t,i\x16\x82\xad\x8e\xb6\x17\x0f\xaa\x85^/w\xbb~\xff\xce\x92\x90\x83\n\xe5\x14\x95\x92|\xfe-S%\x91i\xafh\x97z\x00@K\xbb\xc2\fcD\xff\xdcl\xa1\xfaR\xbc\xd0k\\\x92\x19a6Sv\x05%{\xe2\xe9\xf1\xddRB$8\xb0q9\xa1g&\x17\xe5P\xef\xb1<\xb6\xe2\xb2\xc06^\x0f4\xba\x10\xba\x00\x00\x00\x00\x00\x00\x00\x00\xef\xba\"\xb7\xc7~T\xc4Ei\xfdk\xa9\"F\xa9C\xa0\xd3\xa0\x1b\xbf\x13\xfb\x14S<\xa6\n5\x86\x9e\xb2=8\'g`\x8f\xa8\x027\xbd\xb5s\xe9dti\xc0\xbd\\H\xe5v\xdd\x0fP\x8b+-\x02i\x8eZU\xa8YB\xfc\xc2R7\xe9\x11\x06\x1aRd\xa93\xa1\\\xf4_s\xf7\xe8+\xbdg\x13\xaea\x04\xd8\x82\xf6\x90\xaf1\x86b\x81J\xb7E\xb0\xe2\xd6\x93S\xb3\x98\xcb\xf9\xde=\xd6T\x8d\xea\xab\xa9Z!\xd3-\xa6_\xc4\xa4\xb6+\x89\xdc]O<g\x06~\x12W\x86\x06\xba\x15#\xa7Q\xffa\x926>\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0x0)
r6 = fcntl$dupfd(r5, 0x0, r5)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x11, r6, 0xfffff000)
futex(&(0x7f0000000000), 0x8c, 0x1, 0x0, 0x0, 0x0)

638.960096ms ago: executing program 3 (id=239):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x4006, &(0x7f0000002440)=ANY=[], 0xff, 0xc0c, &(0x7f0000001500)="$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")
creat(&(0x7f00000000c0)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58)
r2 = accept$alg(r1, 0x0, 0x0)
r3 = dup(r2)
write$FUSE_INIT(r3, &(0x7f0000000080)={0x4f}, 0xfffffdef)
setsockopt(r3, 0x1, 0x20, &(0x7f0000000040)="c04bfa0a", 0x4)
read$FUSE(r3, &(0x7f0000002000)={0x2020}, 0xfffffc7c)

627.137617ms ago: executing program 4 (id=240):
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x4, 0x1ff, 0xee})
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000140)={0x0, &(0x7f0000000040)=[<r4=>0x0], 0x0, 0x0, 0x0, 0x40000000000000fd})
ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f0000000540)={0x0, 0x0, r4, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r3, 0xc06864ce, &(0x7f0000000080)={r5, 0x0, 0x0, 0x0, 0x0, [<r6=>0x0]})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000100)={r6, 0x0, <r7=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r0, 0xc00c642e, &(0x7f0000000180)={0x0, 0x0, r7})
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 3 (id=242):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xf58, 0x0, [{}, {}, {}, {0x0, 0x35}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x5}]}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

9] loop2: detected capacity change from 0 to 256
[   80.252174][ T3644] EXT4-fs (loop3): unmounting filesystem.
[   80.288702][ T3638] EXT4-fs (loop1): unmounting filesystem.
[   80.321444][ T3779] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   80.642584][ T3772] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.791602][ T3772] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.895100][ T3772] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.020761][ T3772] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.543179][ T3781] loop4: detected capacity change from 0 to 32768
[   81.579939][ T3781] =======================================================
[   81.579939][ T3781] WARNING: The mand mount option has been deprecated and
[   81.579939][ T3781]          and is ignored by this kernel. Remove the mand
[   81.579939][ T3781]          option from the mount to silence this warning.
[   81.579939][ T3781] =======================================================
[   81.668874][  T153] cfg80211: failed to load regulatory.db
[   81.825046][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   81.833987][ T3781] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[   81.847979][ T3816] loop1: detected capacity change from 0 to 256
[   81.871348][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   81.881873][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   81.896233][ T3781] XFS (loop4): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[   81.907987][ T3655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   81.915719][ T3655] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   81.923658][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   81.991235][ T3781] XFS (loop4): Quotacheck needed: Please wait.
[   82.146703][ T3825] vivid-000: disconnect
[   82.663274][ T3819] vivid-000: reconnect
[   82.688755][ T3781] XFS (loop4): Quotacheck: Done.
[   83.136652][ T3639] XFS (loop4): Unmounting Filesystem
[   83.439662][ T3843] loop2: detected capacity change from 0 to 256
[   83.471814][ T3843] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[   83.763748][ T3817] chnl_net:caif_netlink_parms(): no params data found
[   83.816285][ T3685] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   83.908086][ T3850] loop4: detected capacity change from 0 to 1764
[   83.986221][ T3648] Bluetooth: hci4: command tx timeout
[   83.987266][ T3722] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   84.186471][ T3685] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.206582][ T3817] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.216406][ T3685] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   84.225464][ T3817] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.233039][ T3685] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   84.233088][ T3685] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.238829][ T3685] usb 3-1: config 0 descriptor??
[   84.288293][ T3817] device bridge_slave_0 entered promiscuous mode
[   84.436403][ T3817] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.453794][ T3817] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.462775][ T3867] capability: warning: `syz.3.40' uses deprecated v2 capabilities in a way that may be insecure
[   84.475110][ T3817] device bridge_slave_1 entered promiscuous mode
[   84.542450][ T3772] device hsr_slave_0 left promiscuous mode
[   84.555137][ T3772] device hsr_slave_1 left promiscuous mode
[   84.574292][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.592022][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.624342][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.645069][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.684139][ T3772] device bridge_slave_1 left promiscuous mode
[   84.715042][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state
[   84.742748][ T3685] plantronics 0003:047F:FFFF.0001: ignoring exceeding usage max
[   84.785796][ T3685] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[   84.828880][ T3685] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   84.900158][ T3772] device bridge_slave_0 left promiscuous mode
[   84.910230][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state
[   84.938945][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   84.952671][ T3772] device veth1_macvtap left promiscuous mode
[   84.959146][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   84.967617][ T3772] device veth0_macvtap left promiscuous mode
[   84.973731][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   84.982330][ T3772] device veth1_vlan left promiscuous mode
[   84.992424][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   85.002443][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   85.005601][ T3772] device veth0_vlan left promiscuous mode
[   85.009992][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   85.267327][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.276166][    T0] NOHZ tick-stop error: local softirq work is pending, handler #280!!!
[   85.286134][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   85.296149][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   85.304429][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[   85.312764][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   85.321067][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   85.329353][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   85.337615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   85.345908][    T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!!
[   86.066248][ T3651] Bluetooth: hci4: command tx timeout
[   86.414031][ T3772] team0 (unregistering): Port device team_slave_1 removed
[   86.465915][ T3629] usb 3-1: USB disconnect, device number 2
[   86.496670][ T3772] team0 (unregistering): Port device team_slave_0 removed
[   86.554733][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.597739][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.889525][ T3772] bond0 (unregistering): Released all slaves
[   86.980832][ T3817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.053306][ T3817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.106406][ T3651] Bluetooth: hci0: command tx timeout
[   87.155685][ T3896] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0
[   87.212673][ T3817] team0: Port device team_slave_0 added
[   87.234924][ T3817] team0: Port device team_slave_1 added
[   87.320446][ T3817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.330973][ T3817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.369677][ T3817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.391720][ T3817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.399241][ T3817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.442220][ T3817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.496238][ T3899] loop4: detected capacity change from 0 to 8
[   87.564748][ T3899] SQUASHFS error: lzo decompression failed, data probably corrupt
[   87.616008][ T3899] SQUASHFS error: Failed to read block 0x91: -5
[   87.633559][ T3817] device hsr_slave_0 entered promiscuous mode
[   87.660814][ T3817] device hsr_slave_1 entered promiscuous mode
[   87.668650][ T3899] SQUASHFS error: Unable to read metadata cache entry [8f]
[   87.675904][ T3899] SQUASHFS error: Unable to read inode 0x11f
[   87.707439][ T3817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.715831][ T3817] Cannot create hsr debugfs directory
[   87.972719][ T3882] chnl_net:caif_netlink_parms(): no params data found
[   88.010956][ T3901] loop2: detected capacity change from 0 to 32768
[   88.038486][ T3911] loop4: detected capacity change from 0 to 512
[   88.045392][ T3911] EXT4-fs: Ignoring removed nobh option
[   88.102162][ T3901] find_entry called with index = 0
[   88.116250][ T3901] find_entry called with index = 0
[   88.146435][ T3911] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   88.161347][ T3901] find_entry called with index = 1
[   88.176282][ T3901] find_entry called with index = 1
[   88.198989][ T3911] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   88.220899][ T3901] find_entry called with index >= next_index
[   88.227558][ T3651] Bluetooth: hci4: command tx timeout
[   88.246375][ T3901] find_entry called with index >= next_index
[   88.252412][ T3901] find_entry called with index >= next_index
[   88.301083][ T3901] overlayfs: upper fs needs to support d_type.
[   88.313716][ T3911] EXT4-fs (loop4): 1 truncate cleaned up
[   88.325940][ T3911] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   88.345321][ T3901] overlayfs: upper fs does not support tmpfile.
[   88.370185][ T3882] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.383413][ T3882] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.392202][ T3882] device bridge_slave_0 entered promiscuous mode
[   88.419105][ T3901] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   88.438595][ T3901] overlayfs: failed to resolve './file0': -2
[   88.446667][ T3882] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.456338][ T3882] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.475021][ T3882] device bridge_slave_1 entered promiscuous mode
[   88.670894][ T3882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.757714][ T3882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.974905][ T3882] team0: Port device team_slave_0 added
[   89.044435][ T3882] team0: Port device team_slave_1 added
[   89.151004][ T3882] batman_adv: batadv0: Adding interface: batadv_slave_0
[   89.173142][ T3882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.186289][ T3651] Bluetooth: hci0: command tx timeout
[   89.329070][ T3882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   89.383053][ T3882] batman_adv: batadv0: Adding interface: batadv_slave_1
[   89.504356][ T3882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   89.620723][ T3882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   89.981678][ T3817] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   90.036767][ T3817] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   90.089320][ T3882] device hsr_slave_0 entered promiscuous mode
[   90.109707][ T3882] device hsr_slave_1 entered promiscuous mode
[   90.148318][ T3882] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   90.161555][ T3882] Cannot create hsr debugfs directory
[   90.188401][ T3817] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   90.213346][ T3817] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   90.306357][ T3651] Bluetooth: hci4: command tx timeout
[   91.584284][ T3651] Bluetooth: hci0: command tx timeout
[   91.792310][ T3882] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.969600][ T3882] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.092696][ T3817] 8021q: adding VLAN 0 to HW filter on device bond0
[   92.184214][ T3955] loop3: detected capacity change from 0 to 2048
[   92.214775][ T3882] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.315980][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   92.324242][ T3955] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   92.346993][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   92.415287][ T3817] 8021q: adding VLAN 0 to HW filter on device team0
[   92.504721][ T3882] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.590518][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   92.622547][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   92.655375][   T57] bridge0: port 1(bridge_slave_0) entered blocking state
[   92.662694][   T57] bridge0: port 1(bridge_slave_0) entered forwarding state
[   92.698790][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   92.749921][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   92.789924][   T57] bridge0: port 2(bridge_slave_1) entered blocking state
[   92.797168][   T57] bridge0: port 2(bridge_slave_1) entered forwarding state
[   92.853168][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   92.900338][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   92.953948][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   92.990078][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   93.008970][ T3644] EXT4-fs (loop3): unmounting filesystem.
[   93.040959][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   93.060240][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   93.099210][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   93.124547][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   93.165598][ T3817] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   93.183252][ T3968] loop3: detected capacity change from 0 to 1024
[   93.226385][ T3817] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   93.258394][ T3968] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   93.379978][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   93.401445][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   93.412299][ T3639] EXT4-fs (loop4): unmounting filesystem.
[   93.467315][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   93.493636][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   93.503503][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   93.559304][ T3644] EXT4-fs (loop3): unmounting filesystem.
[   93.726368][ T3651] Bluetooth: hci0: command tx timeout
[   93.903672][ T3986] netlink: 116376 bytes leftover after parsing attributes in process `syz.4.57'.
[   93.914103][ T3986] netlink: zone id is out of range
[   94.102099][ T3882] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   94.281402][ T3882] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   94.454835][ T3882] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   94.505994][ T3882] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   94.957339][ T3999] dccp_close: ABORT with 9 bytes unread
[   95.035992][ T3882] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.212421][ T3882] 8021q: adding VLAN 0 to HW filter on device team0
[   95.236693][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   95.268232][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.296451][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.314334][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.341068][ T3817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.433774][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   95.443512][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.477374][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.484550][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.580446][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   95.597052][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   95.617116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.646796][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.648749][ T3991] loop3: detected capacity change from 0 to 32768
[   95.653976][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.716643][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   95.795118][   T26] audit: type=1800 audit(1724797024.079:2): pid=3991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.58" name="bus" dev="loop3" ino=7 res=0 errno=0
[   95.826536][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.855356][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.881054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.901749][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   95.924366][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   95.954256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   96.030014][ T3882] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   96.064391][ T3882] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   96.066305][ T3687] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   96.152445][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   96.163018][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   96.185530][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   96.215256][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   96.234937][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   96.251787][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   96.433654][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   96.466703][ T3687] usb 3-1: config 0 has no interfaces?
[   96.472500][ T3687] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[   96.492092][ T3817] device veth0_vlan entered promiscuous mode
[   96.523437][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.532392][ T3687] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.547958][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.677272][ T3687] usb 3-1: config 0 descriptor??
[   96.687821][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.707118][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.757424][ T3817] device veth1_vlan entered promiscuous mode
[   97.082515][ T4013] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.098626][ T3772] device hsr_slave_0 left promiscuous mode
[   97.132489][ T3772] device hsr_slave_1 left promiscuous mode
[   97.145697][ T4013] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   97.164923][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   97.195469][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0
[   97.230829][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   97.272621][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1
[   97.281572][ T3772] device bridge_slave_1 left promiscuous mode
[   97.298001][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.331711][ T3772] device bridge_slave_0 left promiscuous mode
[   97.392380][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.523577][ T3772] device veth1_macvtap left promiscuous mode
[   97.529953][ T3772] device veth0_macvtap left promiscuous mode
[   97.537721][ T3772] device veth1_vlan left promiscuous mode
[   97.544026][ T3772] device veth0_vlan left promiscuous mode
[   97.590794][ T3685] usb 3-1: USB disconnect, device number 3
[   97.707430][ T4041] loop4: detected capacity change from 0 to 512
[   97.788336][ T4041] EXT4-fs (loop4): 1 orphan inode deleted
[   97.794292][ T4041] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   97.804092][ T4041] ext4 filesystem being mounted at /13/file1 supports timestamps until 2038 (0x7fffffff)
[   97.868747][ T4041] EXT4-fs warning (device loop4): ext4_dirblock_csum_verify:406: inode #12: comm syz.4.66: No space for directory leaf checksum. Please run e2fsck -D.
[   97.884484][ T4041] EXT4-fs error (device loop4): ext4_get_first_dir_block:3581: inode #12: comm syz.4.66: Directory block failed checksum
[   97.957974][ T3639] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 2093400256 in block_group 0
[   97.984565][ T3639] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5879: Corrupt filesystem
[   97.995325][ T3639] EXT4-fs error (device loop4): ext4_dirty_inode:6083: inode #2: comm syz-executor: mark_inode_dirty error
[   98.010968][ T3639] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 2093400256 in block_group 0
[   98.028482][ T3639] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 2093400256 in block_group 0
[   98.270503][ T4038] Falling back ldisc for ptm0.
[   98.408556][ T3772] team0 (unregistering): Port device team_slave_1 removed
[   98.445326][ T3772] team0 (unregistering): Port device team_slave_0 removed
[   98.505788][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   98.579372][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   98.794425][ T4046] loop2: detected capacity change from 0 to 32768
[   98.823052][ T4046] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.68 (4046)
[   98.902447][ T4046] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   98.937148][ T4046] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   98.953629][ T4046] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   98.992522][ T4046] BTRFS info (device loop2): use zstd compression, level 3
[   99.011499][ T4046] BTRFS info (device loop2): using free space tree
[   99.234338][ T4046] BTRFS info (device loop2): enabling ssd optimizations
[   99.263440][ T4046] BTRFS info (device loop2): checking UUID tree
[   99.298634][ T3772] bond0 (unregistering): Released all slaves
[   99.375487][ T4046] Zero length message leads to an empty skb
[   99.416905][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   99.438731][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   99.523720][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   99.535209][ T3642] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   99.548144][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   99.569572][ T3817] device veth0_macvtap entered promiscuous mode
[   99.586838][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   99.608806][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   99.622772][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   99.660334][ T3882] 8021q: adding VLAN 0 to HW filter on device batadv0
[   99.697903][ T3817] device veth1_macvtap entered promiscuous mode
[   99.717381][    T9] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm kworker/u4:0: Invalid inode table block 2093400256 in block_group 0
[   99.781177][ T3639] EXT4-fs (loop4): unmounting filesystem.
[   99.813224][ T3639] EXT4-fs error (device loop4): __ext4_get_inode_loc:4506: comm syz-executor: Invalid inode table block 2093400256 in block_group 0
[   99.841547][ T3817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.853590][ T3639] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5879: Corrupt filesystem
[   99.861399][ T3817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.881314][ T3639] EXT4-fs error (device loop4): ext4_quota_off:7066: inode #3: comm syz-executor: mark_inode_dirty error
[   99.881321][ T3817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.894103][ T3817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.939086][ T3817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   99.955789][ T3817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   99.999516][ T3817] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.011442][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  100.034938][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  100.059681][ T4080] loop3: detected capacity change from 0 to 512
[  100.094874][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  100.109003][ T4080] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  100.124932][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  100.148667][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  100.170002][ T4080] EXT4-fs (loop3): 1 truncate cleaned up
[  100.175711][ T4080] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  100.187033][ T3817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.198456][ T3817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.210742][ T3817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.222569][ T3817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.233751][ T3817] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  100.244568][ T3817] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  100.263927][ T3817] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.276464][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  100.323440][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  100.346285][ T4080] EXT4-fs warning (device loop3): __ext4fs_dirhash:270: inode #2: comm syz.3.74: Siphash requires key
[  100.401630][ T3817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.420926][ T3817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.430291][ T4085] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.74: Hash code is SIPHASH, but hash not in dirent
[  100.456240][ T3817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.476696][ T4087] loop2: detected capacity change from 0 to 512
[  100.485910][ T3817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.509795][ T4085] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended
[  100.537615][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  100.558014][ T4085] EXT4-fs warning (device loop3): dx_probe:845: inode #2: comm syz.3.74: Hash code is SIPHASH, but hash not in dirent
[  100.567643][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  100.581895][ T3882] device veth0_vlan entered promiscuous mode
[  100.588607][ T4085] EXT4-fs warning (device loop3): dx_probe:966: inode #2: comm syz.3.74: Corrupt directory, running e2fsck is recommended
[  100.600723][ T4087] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.76: inode #1: comm syz.2.76: iget: illegal inode #
[  100.628112][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  100.646901][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  100.673808][ T3882] device veth1_vlan entered promiscuous mode
[  100.708660][ T4087] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.76: error while reading EA inode 1 err=-117
[  100.764526][ T4087] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  100.823020][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  100.831285][ T4087] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.76: inode #1: comm syz.2.76: iget: illegal inode #
[  100.847645][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  100.886234][ T4087] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.76: error while reading EA inode 1 err=-117
[  100.902768][ T3644] EXT4-fs (loop3): unmounting filesystem.
[  100.914918][ T3882] device veth0_macvtap entered promiscuous mode
[  100.945217][ T4087] EXT4-fs (loop2): 1 orphan inode deleted
[  100.972498][ T3882] device veth1_macvtap entered promiscuous mode
[  100.989182][ T4087] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  101.034888][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.049242][ T3882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.082826][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.097850][ T3882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.126171][ T3882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.147345][ T3882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.169505][ T3882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.190451][ T3882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.200930][ T3882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  101.201352][ T3651] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  101.211775][ T3882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.229361][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  101.238100][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  101.246984][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  101.254662][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  101.262564][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  101.284266][ T3882] batman_adv: batadv0: Interface activated: batadv_slave_0
[  101.298392][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  101.311267][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  101.319859][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  101.328955][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  101.338226][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  101.370553][ T3882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.390318][ T3882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.401451][ T3642] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  101.412382][ T3882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.433793][ T3882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.443692][ T3882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.454155][ T3882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.465690][ T3882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  101.476488][ T3882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  101.491852][ T3882] batman_adv: batadv0: Interface activated: batadv_slave_1
[  101.522855][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  101.539847][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  101.582099][ T3642] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: deleted inode referenced: 15
[  101.582907][ T3882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  101.604557][ T3642] EXT4-fs error (device loop2): ext4_lookup:1860: inode #12: comm syz-executor: deleted inode referenced: 15
[  101.623841][ T3882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  101.646137][ T3882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  101.654867][ T3882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  101.783317][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  101.809908][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  101.860948][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  101.953090][ T3642] EXT4-fs (loop2): unmounting filesystem.
[  102.106861][ T4097] dccp_close: ABORT with 2 bytes unread
[  102.128694][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.153850][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.215253][ T3697] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  102.296869][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  102.316392][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  102.362871][ T4094] chnl_net:caif_netlink_parms(): no params data found
[  102.412725][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  102.591212][ T4108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.82'.
[  102.728492][ T4094] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.745913][ T4094] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.777597][ T4094] device bridge_slave_0 entered promiscuous mode
[  102.789617][ T4117] loop3: detected capacity change from 0 to 128
[  102.822135][ T4094] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.847176][ T4094] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.865459][ T4117] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  102.876601][ T4094] device bridge_slave_1 entered promiscuous mode
[  102.886672][ T4117] ext4 filesystem being mounted at /29/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  103.008814][ T4094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.078418][ T3648] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  103.092875][ T3648] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  103.101018][ T3648] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  103.110009][ T3648] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  103.118644][ T3648] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  103.127092][ T3648] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  103.150726][ T4094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.320512][ T4094] team0: Port device team_slave_0 added
[  103.329919][ T4094] team0: Port device team_slave_1 added
[  103.346585][ T3648] Bluetooth: hci1: command tx timeout
[  103.404554][ T3644] EXT4-fs (loop3): unmounting filesystem.
[  103.451312][ T4094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.651233][ T4094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.923485][ T4094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  104.015697][ T4094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  104.037631][ T4094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  104.084390][ T4094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  104.159065][ T4135] loop0: detected capacity change from 0 to 128
[  104.218031][ T4135] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  104.233222][ T4135] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  104.271241][ T4094] device hsr_slave_0 entered promiscuous mode
[  104.278549][ T4094] device hsr_slave_1 entered promiscuous mode
[  104.285400][ T4094] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  104.296239][ T4094] Cannot create hsr debugfs directory
[  105.213712][ T3648] Bluetooth: hci2: command tx timeout
[  105.426285][ T3655] Bluetooth: hci1: command tx timeout
[  105.611637][ T4094] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.685367][ T4124] chnl_net:caif_netlink_parms(): no params data found
[  105.753831][ T3817] EXT4-fs (loop0): unmounting filesystem.
[  105.809222][ T4094] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  105.940835][ T4158] loop0: detected capacity change from 0 to 512
[  105.982910][ T4158] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  106.004491][ T4094] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.048051][ T4158] EXT4-fs (loop0): 1 orphan inode deleted
[  106.054083][ T4158] EXT4-fs (loop0): 1 truncate cleaned up
[  106.068271][ T4158] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  106.144532][ T4094] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.249968][ T3772] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.391955][ T3772] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.667906][ T4124] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.675061][ T4124] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.688702][ T3817] EXT4-fs (loop0): unmounting filesystem.
[  106.767475][ T4124] device bridge_slave_0 entered promiscuous mode
[  106.818057][ T3772] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.903105][ T4124] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.924418][ T4124] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.979606][ T4124] device bridge_slave_1 entered promiscuous mode
[  107.038269][ T3655] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  107.047018][ T3655] Bluetooth: hci0: Injecting HCI hardware error event
[  107.055559][ T3648] Bluetooth: hci0: hardware error 0x00
[  107.130634][ T3772] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.270537][ T3655] Bluetooth: hci2: command tx timeout
[  107.303939][ T4124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.322922][ T4124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.407828][ T4124] team0: Port device team_slave_0 added
[  107.472020][ T4124] team0: Port device team_slave_1 added
[  107.506790][ T3655] Bluetooth: hci1: command tx timeout
[  107.553635][ T4124] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.563572][ T4124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.629052][ T4124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.660975][ T4094] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  107.756024][ T4124] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.776144][ T4124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.827229][ T4124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.889572][ T4094] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  107.946988][ T4094] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  107.973426][ T4094] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  108.174075][ T4124] device hsr_slave_0 entered promiscuous mode
[  108.202128][ T4124] device hsr_slave_1 entered promiscuous mode
[  108.240981][ T4124] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.266795][ T4124] Cannot create hsr debugfs directory
[  108.961937][ T4094] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.106327][ T3648] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  109.345270][ T4094] 8021q: adding VLAN 0 to HW filter on device team0
[  109.352322][ T3648] Bluetooth: hci2: command tx timeout
[  109.434537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  109.453750][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  109.586566][ T3648] Bluetooth: hci1: command tx timeout
[  109.637579][ T4180] loop1: detected capacity change from 0 to 32768
[  109.698695][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  109.750701][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  109.756484][ T4180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.96 (4180)
[  109.824555][ T4180] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.874589][ T4180] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  109.917231][ T4180] BTRFS info (device loop1): setting nodatacow, compression disabled
[  109.918602][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.932559][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.963983][ T4180] BTRFS info (device loop1): turning on flush-on-commit
[  109.995984][ T4180] BTRFS info (device loop1): enabling auto defrag
[  110.041310][ T4180] BTRFS info (device loop1): max_inline at 0
[  110.079478][ T4180] BTRFS info (device loop1): using free space tree
[  110.367413][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  110.427442][ T4180] BTRFS info (device loop1): enabling ssd optimizations
[  110.552932][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  110.563820][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  110.590655][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.597891][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  110.740183][   T26] audit: type=1804 audit(1724797551.032:3): pid=4180 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.96" name="/newroot/4/file1/bus" dev="loop1" ino=263 res=1 errno=0
[  110.762116][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  110.771374][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  110.787638][ T3772] IPVS: stopping backup sync thread 3896 ...
[  110.883179][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  110.901155][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  110.914642][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  110.945621][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  110.955253][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  111.028723][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  111.049001][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  111.222285][ T3882] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.311828][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  111.426243][ T3648] Bluetooth: hci2: command tx timeout
[  111.636748][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  112.682185][ T4124] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  112.718971][ T4225] loop3: detected capacity change from 0 to 40427
[  112.766258][ T4225] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  112.774552][ T4225] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  112.796059][ T4124] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  112.869250][ T4225] F2FS-fs (loop3): Found nat_bits in checkpoint
[  112.870535][ T4247] overlayfs: statfs failed on './file0'
[  112.996873][ T4225] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  113.060517][ T4124] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  113.094821][ T4124] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  113.108005][ T4225] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  113.115474][ T4225] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  113.200065][ T3772] device hsr_slave_0 left promiscuous mode
[  113.237320][ T3772] device hsr_slave_1 left promiscuous mode
[  113.245946][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.277497][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.297179][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.304664][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.343635][ T3772] device bridge_slave_1 left promiscuous mode
[  113.358464][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.402806][ T3772] device bridge_slave_0 left promiscuous mode
[  113.419444][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.445610][ T4224] syz.3.101: attempt to access beyond end of device
[  113.445610][ T4224] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  113.479080][ T3772] device hsr_slave_0 left promiscuous mode
[  113.496517][ T3772] device hsr_slave_1 left promiscuous mode
[  113.506897][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.518435][ T4225] syz.3.101: attempt to access beyond end of device
[  113.518435][ T4225] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  113.543804][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0
[  113.555745][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  113.555839][ T4239] loop1: detected capacity change from 0 to 32768
[  113.572620][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1
[  113.599099][ T3772] device bridge_slave_1 left promiscuous mode
[  113.605513][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state
[  113.649926][ T3772] device bridge_slave_0 left promiscuous mode
[  113.678168][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.727188][ T4239] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  113.757082][ T4239] XFS (loop1): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  113.819731][ T4239] XFS (loop1): Quotacheck needed: Please wait.
[  113.835738][ T3772] device veth1_macvtap left promiscuous mode
[  113.886286][ T3772] device veth0_macvtap left promiscuous mode
[  113.900007][ T4239] XFS (loop1): Quotacheck: Done.
[  113.913031][ T3772] device veth1_vlan left promiscuous mode
[  113.933258][ T3772] device veth0_vlan left promiscuous mode
[  113.981905][ T3772] device veth1_macvtap left promiscuous mode
[  114.037191][ T3772] device veth0_macvtap left promiscuous mode
[  114.043376][ T3772] device veth1_vlan left promiscuous mode
[  114.052828][ T3772] device veth0_vlan left promiscuous mode
[  114.161310][ T4259] loop0: detected capacity change from 0 to 32768
[  114.169903][ T3882] XFS (loop1): Unmounting Filesystem
[  114.242693][ T4259] XFS (loop0): Mounting V5 Filesystem
[  114.326921][ T4259] XFS (loop0): Ending clean mount
[  114.407405][ T4259] XFS (loop0): User initiated shutdown received.
[  114.438733][ T4259] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  114.456465][ T4259] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  114.535453][ T4259] XFS (loop0): xfs_imap_lookup: xfs_ialloc_read_agi() returned error -5, agno 0
[  114.933020][ T4286] loop1: detected capacity change from 0 to 128
[  115.113358][ T4286] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  115.417654][ T4286] loop1: detected capacity change from 128 to 0
[  115.912804][ T3772] team0 (unregistering): Port device team_slave_1 removed
[  115.951282][ T3772] team0 (unregistering): Port device team_slave_0 removed
[  115.993742][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.069990][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  116.634363][ T4297] loop3: detected capacity change from 0 to 40427
[  116.656481][ T4297] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  116.666904][ T4297] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  116.706858][ T4297] F2FS-fs (loop3): Found nat_bits in checkpoint
[  116.745736][ T3772] bond0 (unregistering): Released all slaves
[  116.779747][ T4297] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  116.787092][ T4297] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  116.919251][ T4297] syz.3.112: attempt to access beyond end of device
[  116.919251][ T4297] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  116.994313][ T3644] syz-executor: attempt to access beyond end of device
[  116.994313][ T3644] loop3: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  117.009723][ T3644] syz-executor: attempt to access beyond end of device
[  117.009723][ T3644] loop3: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  117.108780][    T9] kworker/u4:0: attempt to access beyond end of device
[  117.108780][    T9] loop3: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  117.129865][    T9] kworker/u4:0: attempt to access beyond end of device
[  117.129865][    T9] loop3: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  117.338153][ T3772] team0 (unregistering): Port device team_slave_1 removed
[  117.375702][ T3772] team0 (unregistering): Port device team_slave_0 removed
[  117.410768][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.448047][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.797883][ T3772] bond0 (unregistering): Released all slaves
[  117.898903][ T4094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.917986][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  117.925651][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  118.015478][ T3817] XFS (loop0): Unmounting Filesystem
[  118.271188][ T4124] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.304181][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.324181][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.370572][ T4124] 8021q: adding VLAN 0 to HW filter on device team0
[  118.406699][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.447574][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.467083][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.474246][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.547199][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.557787][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  118.574815][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  118.596744][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  118.603884][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  118.668113][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  118.708627][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  118.752158][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  118.791505][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  118.817716][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  118.853810][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  118.906664][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  118.948248][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  118.974567][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.000602][ T4124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.021139][ T4124] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.036389][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.051014][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.092369][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  119.121198][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.207852][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.229685][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.284956][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  119.297061][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  119.338454][ T4094] device veth0_vlan entered promiscuous mode
[  119.396500][ T4094] device veth1_vlan entered promiscuous mode
[  119.470798][ T4094] device veth0_macvtap entered promiscuous mode
[  119.511291][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  119.537051][ T3648] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  119.546454][ T3648] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  119.546955][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  119.554304][ T3648] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  119.570983][ T3648] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  119.578686][ T3648] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  119.585996][ T3648] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  119.597443][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  119.615234][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  119.647720][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  119.711469][ T4094] device veth1_macvtap entered promiscuous mode
[  119.803233][ T4094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.814650][ T3648] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  119.823835][ T3648] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  119.831830][ T3648] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  119.840527][ T3648] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  119.847800][ T4094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.859794][ T4094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.870467][ T3648] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  119.878857][ T3648] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  119.880483][ T4094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.896563][ T4094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  119.908382][ T4094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  119.927955][ T4094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  119.945511][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  119.957844][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  119.973391][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  120.001009][ T4094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.023583][ T4094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.034435][ T4094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.050931][ T4094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.062938][ T4094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.080237][ T4094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.094197][ T4094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.128171][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  120.143682][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  120.220146][ T4094] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.250032][ T4331] loop0: detected capacity change from 0 to 64
[  120.256345][ T4094] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.279038][ T4094] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.291595][ T4094] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.366692][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  120.374270][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  120.414268][ T4331] syz.0.121: attempt to access beyond end of device
[  120.414268][ T4331] loop0: rw=0, sector=163, nr_sectors = 1 limit=64
[  120.459493][ T4124] 8021q: adding VLAN 0 to HW filter on device batadv0
[  120.477941][ T4331] Buffer I/O error on dev loop0, logical block 163, async page read
[  120.486063][ T4331] syz.0.121: attempt to access beyond end of device
[  120.486063][ T4331] loop0: rw=0, sector=164, nr_sectors = 1 limit=64
[  120.507347][ T4331] Buffer I/O error on dev loop0, logical block 164, async page read
[  120.515411][ T4331] syz.0.121: attempt to access beyond end of device
[  120.515411][ T4331] loop0: rw=0, sector=165, nr_sectors = 1 limit=64
[  120.554101][ T4331] Buffer I/O error on dev loop0, logical block 165, async page read
[  120.568427][ T4331] syz.0.121: attempt to access beyond end of device
[  120.568427][ T4331] loop0: rw=0, sector=166, nr_sectors = 1 limit=64
[  120.587656][ T4331] Buffer I/O error on dev loop0, logical block 166, async page read
[  120.687380][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  120.707815][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  120.784330][ T4124] device veth0_vlan entered promiscuous mode
[  120.831075][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  120.875287][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  120.887527][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.916951][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  120.940386][ T4328] chnl_net:caif_netlink_parms(): no params data found
[  120.994105][ T4319] chnl_net:caif_netlink_parms(): no params data found
[  121.015059][ T4337] loop0: detected capacity change from 0 to 1024
[  121.030506][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.049942][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.103183][ T4337] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  121.118311][ T4124] device veth1_vlan entered promiscuous mode
[  121.158331][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  121.178376][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  121.375685][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.384526][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.394151][ T4328] device bridge_slave_0 entered promiscuous mode
[  121.412506][ T3817] EXT4-fs (loop0): unmounting filesystem.
[  121.424483][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  121.442721][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  121.463927][ T4124] device veth0_macvtap entered promiscuous mode
[  121.475204][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  121.527355][ T4328] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.534487][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.541822][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  121.574209][ T4328] device bridge_slave_1 entered promiscuous mode
[  121.603271][ T4124] device veth1_macvtap entered promiscuous mode
[  121.611185][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  121.619877][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  121.628599][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  121.656777][ T4319] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.663988][ T4319] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.671336][ T3651] Bluetooth: hci0: command tx timeout
[  121.685089][ T4319] device bridge_slave_0 entered promiscuous mode
[  121.720578][   T26] audit: type=1800 audit(1724797562.012:4): pid=4349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.123" name="/" dev="fuse" ino=1 res=0 errno=0
[  121.753053][ T4319] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.783603][ T4319] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.803761][ T4319] device bridge_slave_1 entered promiscuous mode
[  121.830030][ T4328] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.880939][ T4319] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.909297][ T4328] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.945427][ T4319] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.978224][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  121.996807][ T3648] Bluetooth: hci3: command tx timeout
[  122.014323][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.035191][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.055909][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.067184][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.077700][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.088047][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  122.099814][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.114016][ T4124] batman_adv: batadv0: Interface activated: batadv_slave_0
[  122.155336][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  122.164272][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  122.184248][ T4328] team0: Port device team_slave_0 added
[  122.195582][ T4328] team0: Port device team_slave_1 added
[  122.208694][ T4319] team0: Port device team_slave_0 added
[  122.227794][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.244058][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.255277][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.273021][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.282899][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.293573][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.303505][ T4124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  122.314234][ T4124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  122.330911][ T4124] batman_adv: batadv0: Interface activated: batadv_slave_1
[  122.342843][ T4319] team0: Port device team_slave_1 added
[  122.359837][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  122.369761][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  122.394348][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.402652][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.429155][ T4328] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.464279][ T3772] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.503448][ T4328] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.510609][ T4328] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.536981][ T4328] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.561269][ T4124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  122.570191][ T4124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  122.580436][ T4124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  122.589311][ T4124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  122.600376][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_0
[  122.609168][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.635733][ T4319] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  122.660920][ T3772] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.690221][ T4319] batman_adv: batadv0: Adding interface: batadv_slave_1
[  122.698357][ T4319] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  122.725179][ T4319] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  122.775765][ T3772] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.794012][ T4328] device hsr_slave_0 entered promiscuous mode
[  122.801269][ T4328] device hsr_slave_1 entered promiscuous mode
[  122.855872][ T3772] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.889318][ T4319] device hsr_slave_0 entered promiscuous mode
[  122.918649][ T4319] device hsr_slave_1 entered promiscuous mode
[  122.925412][ T4319] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  122.933444][ T4319] Cannot create hsr debugfs directory
[  123.097833][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.133093][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.210448][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  123.295714][ T3772] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.324777][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  123.357337][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  123.426016][ T3772] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.457442][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  123.618871][ T3772] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.745976][ T3772] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.763760][ T4375] loop2: detected capacity change from 0 to 16
[  123.770557][ T3648] Bluetooth: hci0: command tx timeout
[  123.787627][ T4375] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  124.066624][ T3648] Bluetooth: hci3: command tx timeout
[  124.731246][ T4381] loop2: detected capacity change from 0 to 32768
[  124.848984][ T4381] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  124.858750][ T4381] XFS (loop2): Mounting V5 filesystem in no-recovery mode. Filesystem will be inconsistent.
[  124.901291][ T4381] XFS (loop2): Quotacheck needed: Please wait.
[  124.973603][ T4381] XFS (loop2): Quotacheck: Done.
[  125.186695][ T3651] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  125.187369][ T3648] Bluetooth: hci5: command 0x1003 tx timeout
[  125.267917][ T4124] XFS (loop2): Unmounting Filesystem
[  125.553968][ T4328] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  125.762428][ T4419] loop4: detected capacity change from 0 to 2048
[  125.798337][ T4419] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18881, location=18881
[  125.837068][ T3651] Bluetooth: hci0: command tx timeout
[  126.146928][ T3651] Bluetooth: hci3: command tx timeout
[  126.330211][ T4328] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  126.360809][ T4328] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  126.482188][ T4328] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  127.907361][ T3651] Bluetooth: hci0: command tx timeout
[  128.191282][ T4319] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  128.226512][ T3651] Bluetooth: hci3: command tx timeout
[  128.291281][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888058b8f800: rx timeout, send abort
[  128.772974][ T4328] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.789729][ T4319] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  128.800584][    C1] vxcan1: j1939_tp_rxtimer: 0xffff888058b8f800: abort rx timeout. Force session deactivation
[  128.866241][ T4319] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  128.881545][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  128.896926][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  128.919415][ T4328] 8021q: adding VLAN 0 to HW filter on device team0
[  129.028086][   T33] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  129.074080][ T4319] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  129.107925][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  129.126925][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  129.156675][ T3775] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.163890][ T3775] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.172677][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  129.244476][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  129.255656][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  129.283894][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.291126][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.323652][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  129.334219][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  129.373277][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  129.395134][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  129.404557][   T33] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  129.443593][   T33] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  129.558190][   T26] audit: type=1326 audit(1724797569.852:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4468 comm="syz.2.142" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcaab79e79 code=0x0
[  129.610483][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  129.618299][   T33] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  129.628971][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  129.637472][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.652045][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  129.658542][   T33] usb 5-1: Product: syz
[  129.664084][   T33] usb 5-1: Manufacturer: syz
[  129.681314][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  129.700492][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  129.701751][   T33] usb 5-1: SerialNumber: syz
[  129.745016][   T33] usb 5-1: config 0 descriptor??
[  129.779335][ T4453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  129.796583][ T4453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  129.827166][ T3772] device hsr_slave_0 left promiscuous mode
[  129.834060][ T3772] device hsr_slave_1 left promiscuous mode
[  129.843174][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  129.899808][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0
[  129.938761][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  129.952764][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1
[  129.990001][ T3772] device bridge_slave_1 left promiscuous mode
[  130.003120][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.013561][ T3772] device bridge_slave_0 left promiscuous mode
[  130.028649][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.048858][ T4453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  130.059014][ T4453] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  130.068996][ T3772] device hsr_slave_0 left promiscuous mode
[  130.075708][ T3772] device hsr_slave_1 left promiscuous mode
[  130.084383][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.307377][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.470265][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  130.607875][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1
[  130.869183][ T3772] device bridge_slave_1 left promiscuous mode
[  130.906607][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.986336][   T33] Error reading MAC address
[  130.986970][ T3772] device bridge_slave_0 left promiscuous mode
[  131.024783][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.078557][   T26] audit: type=1326 audit(1724797571.372:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4483 comm="syz.2.144" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efcaab79e79 code=0x0
[  131.183536][ T3772] device veth1_macvtap left promiscuous mode
[  131.189834][ T3772] device veth0_macvtap left promiscuous mode
[  131.195920][ T3772] device veth1_vlan left promiscuous mode
[  131.204076][ T3772] device veth0_vlan left promiscuous mode
[  131.211024][ T3772] device veth1_macvtap left promiscuous mode
[  131.217571][ T3772] device veth0_macvtap left promiscuous mode
[  131.224846][ T3772] device veth1_vlan left promiscuous mode
[  131.232506][ T3772] device veth0_vlan left promiscuous mode
[  131.376428][ T3688] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  131.628200][ T3688] usb 1-1: Using ep0 maxpacket: 32
[  131.779105][ T3772] team0 (unregistering): Port device team_slave_1 removed
[  131.822368][ T3772] team0 (unregistering): Port device team_slave_0 removed
[  131.894211][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.943732][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.226529][   T33] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  132.324147][ T3772] bond0 (unregistering): Released all slaves
[  132.429319][ T3684] usb 5-1: USB disconnect, device number 2
[  132.477722][   T33] usb 3-1: Using ep0 maxpacket: 16
[  132.550971][ T4495] syz.4.147 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  132.606454][   T33] usb 3-1: config 0 has an invalid interface number: 40 but max is 3
[  132.624191][   T33] usb 3-1: config 0 has an invalid interface number: 8 but max is 3
[  132.633165][   T33] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  132.642454][   T33] usb 3-1: config 0 has an invalid interface number: 62 but max is 3
[  132.651941][   T33] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  132.672822][   T33] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  132.687831][   T33] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  132.696749][   T33] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  132.705454][   T33] usb 3-1: config 0 has an invalid descriptor of length 243, skipping remainder of the config
[  132.711033][ T4497] loop4: detected capacity change from 0 to 256
[  132.716664][   T33] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 4
[  132.731496][   T33] usb 3-1: config 0 has no interface number 0
[  132.737747][   T33] usb 3-1: config 0 has no interface number 1
[  132.743953][   T33] usb 3-1: config 0 has no interface number 2
[  132.760950][   T33] usb 3-1: config 0 interface 40 altsetting 1 has a duplicate endpoint with address 0x7, skipping
[  132.792036][   T33] usb 3-1: config 0 interface 40 altsetting 1 endpoint 0x9 has invalid maxpacket 1600, setting to 64
[  132.824551][   T33] usb 3-1: config 0 interface 40 altsetting 1 endpoint 0xC has an invalid bInterval 127, changing to 7
[  132.852471][   T33] usb 3-1: config 0 interface 8 altsetting 128 has an invalid endpoint with address 0x80, skipping
[  132.872092][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  132.878490][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  132.892954][   T33] usb 3-1: config 0 interface 8 altsetting 128 has an invalid endpoint with address 0x0, skipping
[  132.917443][   T33] usb 3-1: config 0 interface 8 altsetting 128 has a duplicate endpoint with address 0x3, skipping
[  132.933304][   T33] usb 3-1: config 0 interface 8 altsetting 128 endpoint 0xA has invalid maxpacket 1024, setting to 64
[  132.945882][   T33] usb 3-1: config 0 interface 62 altsetting 3 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  132.966952][   T33] usb 3-1: config 0 interface 40 has no altsetting 0
[  132.974046][   T33] usb 3-1: config 0 interface 8 has no altsetting 0
[  132.980769][   T33] usb 3-1: config 0 interface 62 has no altsetting 0
[  133.258301][   T33] usb 3-1: New USB device found, idVendor=19d2, idProduct=ffd5, bcdDevice=8f.79
[  133.267515][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.275587][   T33] usb 3-1: Product: syz
[  133.281340][   T33] usb 3-1: Manufacturer: syz
[  133.286047][   T33] usb 3-1: SerialNumber: syz
[  133.291789][ T3772] team0 (unregistering): Port device team_slave_1 removed
[  133.293637][   T33] usb 3-1: config 0 descriptor??
[  134.878799][ T4493] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  135.146000][ T3772] team0 (unregistering): Port device team_slave_0 removed
[  135.256413][ T3688] usb 1-1: unable to get BOS descriptor or descriptor too short
[  135.264303][ T3688] usb 1-1: no configurations
[  135.294692][ T3688] usb 1-1: can't read configurations, error -22
[  135.304711][   T33] usb 3-1: can't set config #0, error -71
[  135.315001][   T33] usb 3-1: USB disconnect, device number 4
[  136.072114][ T4514] loop4: detected capacity change from 0 to 2048
[  136.107578][ T4514] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.333061][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  136.493479][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  136.775796][ T4520] loop4: detected capacity change from 0 to 256
[  136.815458][   T26] audit: type=1804 audit(1724797577.102:7): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.156" name=2F6E6577726F6F742F31342FE91F7189591E9233614B2F627573 dev="loop4" ino=1048636 res=1 errno=0
[  136.839942][   T26] audit: type=1804 audit(1724797577.102:8): pid=4520 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.156" name=2F6E6577726F6F742F31342FE91F7189591E9233614B2F627573 dev="loop4" ino=1048636 res=1 errno=0
[  137.226264][ T3772] bond0 (unregistering): Released all slaves
[  137.339824][ T4328] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  137.352615][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  137.368629][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  137.384082][ T3775] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  137.405970][ T4522] loop4: detected capacity change from 0 to 32768
[  137.422633][ T4515] netlink: 4 bytes leftover after parsing attributes in process `syz.2.153'.
[  137.453958][ T4522] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.157 (4522)
[  137.542354][ T4522] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.562863][ T4522] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  137.586690][ T4522] BTRFS info (device loop4): using free space tree
[  137.596762][ T4515] device hsr_slave_1 left promiscuous mode
[  137.871626][ T4319] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.924539][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  137.933793][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  137.936725][ T4522] BTRFS info (device loop4): enabling ssd optimizations
[  137.953043][ T4319] 8021q: adding VLAN 0 to HW filter on device team0
[  138.017132][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  138.069256][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  138.115884][ T4421] bridge0: port 1(bridge_slave_0) entered blocking state
[  138.123170][ T4421] bridge0: port 1(bridge_slave_0) entered forwarding state
[  138.173828][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  138.276712][ T4522] loop4: detected capacity change from 32768 to 0
[  138.288399][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  138.312864][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  138.345520][    T9] loop: Write error at byte offset 9223372036860121087, length 4096.
[  138.398740][ T4421] bridge0: port 2(bridge_slave_1) entered blocking state
[  138.405940][ T4421] bridge0: port 2(bridge_slave_1) entered forwarding state
[  138.416047][    C0] I/O error, dev loop4, sector 10440 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2
[  138.426153][    C0] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  138.486475][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  138.499860][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  138.542748][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  138.598992][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  138.629129][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  138.655358][ T4285] loop: Write error at byte offset 9223372036861661183, length 4096.
[  138.680455][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  138.696840][    C1] I/O error, dev loop4, sector 13448 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 2
[  138.706764][    C1] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  138.722735][ T4094] BTRFS: error (device loop4: state A) in __btrfs_run_delayed_items:1158: errno=-5 IO failure
[  138.757201][ T4094] BTRFS info (device loop4: state EA): forced readonly
[  138.766606][ T4094] BTRFS warning (device loop4: state EA): Skipping commit of aborted transaction.
[  138.775942][ T4094] BTRFS: error (device loop4: state EA) in cleanup_transaction:1994: errno=-5 IO failure
[  138.777355][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  138.812272][ T4094] BTRFS info (device loop4: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.869174][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  138.921211][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  138.968893][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  138.981631][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  138.995636][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  139.016176][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  139.024853][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  139.049849][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  139.061028][ T4328] 8021q: adding VLAN 0 to HW filter on device batadv0
[  139.069463][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  139.080551][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  139.109254][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.130424][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.164938][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  139.299819][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  139.311336][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  139.385203][ T4328] device veth0_vlan entered promiscuous mode
[  139.413613][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  139.424853][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.487989][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.507531][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.541597][ T4328] device veth1_vlan entered promiscuous mode
[  139.680090][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  139.690955][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  139.734154][ T4328] device veth0_macvtap entered promiscuous mode
[  139.791910][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.800294][ T4553] loop2: detected capacity change from 0 to 32768
[  139.820896][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.834964][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  139.846792][ T4328] device veth1_macvtap entered promiscuous mode
[  139.924877][ T4553] XFS (loop2): Mounting V5 Filesystem
[  139.930933][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.942450][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.952762][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.963382][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.973305][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.986765][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.998579][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.016616][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  140.047571][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.081744][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.097927][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.115069][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.118019][ T4553] XFS (loop2): Ending clean mount
[  140.130181][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.145024][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.151595][ T4553] XFS (loop2): Quotacheck needed: Please wait.
[  140.155371][ T4328] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.173022][ T4328] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.188095][ T4328] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.232588][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.244406][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.258849][ T4553] XFS (loop2): Quotacheck: Done.
[  140.277119][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.284651][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.306051][ T4554] chnl_net:caif_netlink_parms(): no params data found
[  140.319558][ T4319] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.341294][ T4328] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.363854][ T4328] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.373053][ T4328] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.382262][ T4328] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.530246][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.550132][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.700565][ T4319] device veth0_vlan entered promiscuous mode
[  140.735659][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  140.748490][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  140.760068][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state
[  140.768411][ T4124] XFS (loop2): Unmounting Filesystem
[  140.775205][ T4554] bridge0: port 1(bridge_slave_0) entered disabled state
[  140.785972][ T4554] device bridge_slave_0 entered promiscuous mode
[  140.822794][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  140.838167][ T4421] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  140.880124][ T4319] device veth1_vlan entered promiscuous mode
[  140.911312][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state
[  140.925753][ T4554] bridge0: port 2(bridge_slave_1) entered disabled state
[  140.947284][ T4554] device bridge_slave_1 entered promiscuous mode
[  140.977819][ T4285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.043657][ T4285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.083581][ T4554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  141.116483][ T3651] Bluetooth: hci4: command tx timeout
[  141.139165][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  141.158623][ T4554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  141.204253][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  141.227333][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  141.277856][ T4319] device veth0_macvtap entered promiscuous mode
[  141.361615][ T4554] team0: Port device team_slave_0 added
[  141.379378][ T4319] device veth1_macvtap entered promiscuous mode
[  141.398536][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.422452][ T4554] team0: Port device team_slave_1 added
[  141.430795][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.439982][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.456601][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.486129][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.506952][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.526116][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.546152][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.566256][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  141.572896][ T4588] loop2: detected capacity change from 0 to 8192
[  141.587862][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.617735][ T4588] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  141.618119][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_0
[  141.649243][ T4588] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  141.660322][ T4588] REISERFS (device loop2): using ordered data mode
[  141.685572][ T4588] reiserfs: using flush barriers
[  141.692723][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  141.700944][ T4588] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  141.703436][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  141.729851][ T4588] REISERFS (device loop2): checking transaction log (loop2)
[  141.740388][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.754790][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  141.763969][ T4588] REISERFS (device loop2): Using r5 hash to sort names
[  141.773303][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  141.800089][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.824103][ T4588] reiserfs: enabling write barrier flush mode
[  141.846217][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.871037][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.883952][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.900033][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.912992][ T4588] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  141.943920][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  141.968747][ T4319] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  141.991240][ T4319] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  142.025816][ T4319] batman_adv: batadv0: Interface activated: batadv_slave_1
[  142.037188][ T4554] batman_adv: batadv0: Adding interface: batadv_slave_0
[  142.046897][ T4554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.078215][ T4554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  142.090508][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  142.110235][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  142.113642][ T4588] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
[  142.139608][ T4319] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  142.139965][ T4588] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  142.158592][ T4319] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  142.173311][ T4319] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  142.182427][ T4588] REISERFS (device loop2): Remounting filesystem read-only
[  142.185269][ T4319] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  142.196190][ T4588] REISERFS error (device loop2): vs-2100 add_save_link: search_by_key ([-1 2 0x1 IND]) returned -2
[  142.214617][ T4554] batman_adv: batadv0: Adding interface: batadv_slave_1
[  142.226343][ T4554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  142.267453][ T4588] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 1 0(1) DIR], item_len 35, item_location 4029, free_space(entry_count) 2
[  142.291383][ T4554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  142.296595][ T4588] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  142.322507][ T4594] binder: 4593:4594 ioctl c0306201 20000380 returned -14
[  142.411970][ T4588] REISERFS error (device loop2): vs-5657 reiserfs_do_truncate: i/o failure occurred trying to truncate [2 2 0xffffffff DIRECT]
[  142.461831][ T4588] REISERFS warning (device loop2): clm-6006 reiserfs_dirty_inode: writing inode 2 on readonly FS
[  142.506551][ T4554] device hsr_slave_0 entered promiscuous mode
[  142.532435][ T4554] device hsr_slave_1 entered promiscuous mode
[  142.558292][ T4554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  142.565955][ T4554] Cannot create hsr debugfs directory
[  142.615875][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.645364][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.767601][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.797313][ T4421] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.813449][ T4421] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.990586][   T29] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  143.133499][ T4554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  143.186584][ T3651] Bluetooth: hci4: command tx timeout
[  144.252836][ T4554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.376979][ T4614] trusted_key: encrypted_key: insufficient parameters specified
[  144.404197][ T4620] netlink: 8 bytes leftover after parsing attributes in process `syz.3.173'.
[  144.651059][ T4554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.872367][ T4554] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.979735][ T4635] loop4: detected capacity change from 0 to 512
[  145.040411][ T3722] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  145.266662][ T3651] Bluetooth: hci4: command tx timeout
[  145.505745][ T4638] loop2: detected capacity change from 0 to 512
[  145.541491][ T4638] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  145.584442][ T4554] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  145.639426][ T4638] EXT4-fs (loop2): 1 orphan inode deleted
[  145.645709][ T4554] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  145.652772][ T4638] EXT4-fs (loop2): 1 truncate cleaned up
[  145.659439][ T4638] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  145.710875][ T4554] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  145.823995][ T4631] loop3: detected capacity change from 0 to 40427
[  145.845741][ T4554] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  145.894130][ T4631] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  145.936397][ T4631] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  145.961178][ T4631] F2FS-fs (loop3): invalid crc value
[  146.518090][ T4631] F2FS-fs (loop3): Found nat_bits in checkpoint
[  146.709795][ T4124] EXT4-fs (loop2): unmounting filesystem.
[  146.753380][ T4631] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  146.760745][ T4631] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  146.837467][ T4631] syz.3.177: attempt to access beyond end of device
[  146.837467][ T4631] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  146.871187][ T4631] syz.3.177: attempt to access beyond end of device
[  146.871187][ T4631] loop3: rw=34817, sector=45096, nr_sectors = 128 limit=40427
[  146.912701][ T4656] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  146.969252][ T4631] syz.3.177: attempt to access beyond end of device
[  146.969252][ T4631] loop3: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  146.996349][ T4660] netlink: 'syz.4.184': attribute type 10 has an invalid length.
[  147.096207][ T4660] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.105354][ T4660] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.124133][ T4631] syz.3.177: attempt to access beyond end of device
[  147.124133][ T4631] loop3: rw=2049, sector=77824, nr_sectors = 416 limit=40427
[  147.137465][ T4660] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.145477][ T4660] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.154666][ T4660] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.161828][ T4660] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.170401][    T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  147.210747][ T4660] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  147.346213][ T3651] Bluetooth: hci4: command tx timeout
[  147.358215][    T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[  147.401752][ T3772] device hsr_slave_0 left promiscuous mode
[  147.414250][ T3772] device hsr_slave_1 left promiscuous mode
[  147.415108][    T9] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix.
[  147.449436][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  147.486311][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_0
[  147.503085][ T3772] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  147.511262][ T3772] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.524767][ T3772] device bridge_slave_1 left promiscuous mode
[  147.531657][ T3772] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.540228][    T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  147.554993][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  147.574321][    T7] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  147.583912][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.609261][    T7] usb 2-1: config 0 descriptor??
[  147.629034][ T3772] device bridge_slave_0 left promiscuous mode
[  147.635248][ T3772] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.657834][    T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  147.775713][ T3772] device veth1_macvtap left promiscuous mode
[  147.783302][ T3772] device veth0_macvtap left promiscuous mode
[  147.797136][ T3772] device veth1_vlan left promiscuous mode
[  147.803233][ T3772] device veth0_vlan left promiscuous mode
[  148.039061][   T14] usb 2-1: USB disconnect, device number 2
[  148.783083][ T3772] team0 (unregistering): Port device team_slave_1 removed
[  148.830030][ T3772] team0 (unregistering): Port device team_slave_0 removed
[  148.870017][ T3772] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  148.908936][ T3772] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.290892][ T3772] bond0 (unregistering): Released all slaves
[  149.403754][ T4668] device bridge_slave_0 left promiscuous mode
[  149.426534][ T4668] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.464194][ T4678] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'.
[  149.553729][ T4554] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.637094][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  149.648704][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  149.692767][ T4554] 8021q: adding VLAN 0 to HW filter on device team0
[  149.723325][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  149.754765][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  149.813633][ T3700] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.820861][ T3700] bridge0: port 1(bridge_slave_0) entered forwarding state
[  149.847695][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  149.867812][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  149.883819][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  149.895017][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.902196][ T4449] bridge0: port 2(bridge_slave_1) entered forwarding state
[  149.927887][ T4692] loop4: detected capacity change from 0 to 512
[  149.963521][ T4692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  149.986173][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  149.995283][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  150.043089][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  150.073323][ T4692] EXT4-fs (loop4): 1 orphan inode deleted
[  150.079766][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  150.103271][ T4692] EXT4-fs (loop4): 1 truncate cleaned up
[  150.110631][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  150.128911][ T4692] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  150.152565][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  150.176193][ T3688] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  150.222415][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  150.243346][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  150.259130][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  150.299293][ T4554] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  150.361076][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  150.421402][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  150.440618][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  150.586210][ T3688] usb 3-1: Using ep0 maxpacket: 16
[  150.877319][ T3688] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.987417][ T3688] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.176006][ T3688] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  151.242587][ T4697] loop3: detected capacity change from 0 to 4096
[  151.279974][ T3688] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  151.350965][ T3688] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  151.411222][ T3688] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  151.462865][ T4094] EXT4-fs (loop4): unmounting filesystem.
[  151.527691][   T26] audit: type=1800 audit(1724797591.822:9): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.196" name="bus" dev="loop3" ino=33 res=0 errno=0
[  151.596581][ T3688] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  151.616340][ T3688] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.624389][ T3688] usb 3-1: Product: syz
[  151.649094][ T3688] usb 3-1: Manufacturer: syz
[  151.653753][ T3688] usb 3-1: SerialNumber: syz
[  151.871775][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  151.889598][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  151.950223][ T4554] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.977060][ T3688] cdc_ncm 3-1:1.0: bind() failure
[  151.985607][ T3688] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  152.033507][ T3688] cdc_ncm 3-1:1.1: bind() failure
[  152.042646][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  152.054392][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  152.093463][ T3688] usb 3-1: USB disconnect, device number 5
[  152.174847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  152.184259][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  152.203372][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  152.223101][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  152.242675][ T4554] device veth0_vlan entered promiscuous mode
[  152.279596][ T4554] device veth1_vlan entered promiscuous mode
[  152.337335][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  152.357148][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  152.381590][ T4717] syz.4.201 sent an empty control message without MSG_MORE.
[  152.383129][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  152.422955][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  152.444994][ T4554] device veth0_macvtap entered promiscuous mode
[  152.490841][ T4554] device veth1_macvtap entered promiscuous mode
[  152.544928][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.575941][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.597370][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.646181][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.661911][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.694535][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.724821][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  152.745513][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  152.767953][ T4554] batman_adv: batadv0: Interface activated: batadv_slave_0
[  152.776334][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  152.791636][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  152.810401][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  152.849368][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  152.894406][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  152.956291][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.002738][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.024672][ T4726] loop2: detected capacity change from 0 to 64
[  153.051502][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.081815][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.103595][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.115746][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  153.144125][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  153.167474][ T4554] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.186319][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  153.196314][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  153.210413][ T4124] hfs: walked past end of dir
[  153.237036][ T4554] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.245798][ T4554] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.282812][ T4554] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.302974][ T4554] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.361969][ T4735] loop4: detected capacity change from 0 to 256
[  153.485748][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.507944][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.547590][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  153.578288][ T3700] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.598255][ T3700] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.606231][   T14] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  153.628474][   T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  153.976339][   T14] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  153.983363][ T4743] loop4: detected capacity change from 0 to 1024
[  153.998191][   T14] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21
[  153.999751][ T4743] EXT4-fs: Ignoring removed oldalloc option
[  154.026219][ T3688] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  154.051950][   T14] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  154.067645][   T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.099324][   T14] usb 2-1: config 0 descriptor??
[  154.132729][ T4743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  154.143161][ T4750] loop3: detected capacity change from 0 to 512
[  154.154539][   T14] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  154.211351][ T4750] EXT4-fs error (device loop3): ext4_find_inline_data_nolock:164: inode #12: comm syz.3.213: inline data xattr refers to an external xattr inode
[  154.240446][ T4750] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.213: couldn't read orphan inode 12 (err -117)
[  154.254671][ T4750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  154.286229][ T3688] usb 1-1: Using ep0 maxpacket: 8
[  154.335034][   T26] audit: type=1804 audit(1724797594.622:10): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.211" name="/newroot/39/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  154.360364][   T26] audit: type=1804 audit(1724797594.652:11): pid=4743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.211" name="/newroot/39/file1/file1" dev="loop4" ino=15 res=1 errno=0
[  154.406554][ T3688] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  154.414841][ T3688] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  154.444031][ T3688] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  154.453508][ T3688] usb 1-1: config 250 has no interface number 0
[  154.460185][ T3688] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  154.463558][ T4094] EXT4-fs (loop4): unmounting filesystem.
[  154.472016][ T3688] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  154.472051][ T3688] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  154.472103][ T3688] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  154.472130][ T3688] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  154.472161][ T3688] usb 1-1: config 250 interface 228 has no altsetting 0
[  154.542260][ T3683] usb 2-1: USB disconnect, device number 3
[  154.586542][ T3688] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  154.595660][ T3688] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  154.627670][ T3688] usb 1-1: Product: syz
[  154.632362][ T3688] usb 1-1: SerialNumber: syz
[  154.808378][ T3688] hub 1-1:250.228: bad descriptor, ignoring hub
[  154.814893][ T3688] hub: probe of 1-1:250.228 failed with error -5
[  155.846440][ T3688] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  155.886328][ T4328] EXT4-fs (loop3): unmounting filesystem.
[  156.118859][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.152732][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.178952][ T4739] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  156.195187][ T4739] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  156.239434][ T4761] syz.3.215 uses obsolete (PF_INET,SOCK_PACKET)
[  156.723801][ T4765] loop1: detected capacity change from 0 to 512
[  156.987207][ T4765] EXT4-fs (loop1): can't mount with both data=journal and delalloc
[  157.133431][   T14] usb 1-1: USB disconnect, device number 4
[  157.142158][ T3648] Bluetooth: unknown link type 129
[  157.161619][   T14] usblp0: removed
[  157.391035][ T4771] sp0: Synchronizing with TNC
[  158.329665][ T4778] Failed to get privilege flags for destination (handle=0x2:0x0)
[  158.333841][ T4780] loop0: detected capacity change from 0 to 512
[  158.453977][ T4780] EXT4-fs (loop0): 1 truncate cleaned up
[  158.461988][ T4780] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  158.500850][ T4780] EXT4-fs warning (device loop0): ext4_read_inode_bitmap:149: Cannot read inode bitmap - block_group = 0, inode_bitmap = 3171692
[  158.514935][ T4780] EXT4-fs error (device loop0) in ext4_free_inode:362: Out of memory
[  158.537656][ T4780] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768304430
[  158.559258][ T4780] EXT4-fs warning (device loop0): ext4_read_block_bitmap_nowait:486: Cannot get buffer for block bitmap - block_group = 0, block_bitmap = 1768304430
[  158.579022][ T4780] EXT4-fs error (device loop0): ext4_free_branches:1043: inode #13: block 234881024: comm syz.0.222: Read failure
[  158.647778][ T4554] EXT4-fs error (device loop0): ext4_readdir:260: inode #2: block 13: comm syz-executor: path /1/file0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=196608, rec_len=0, size=1024 fake=0
[  158.733339][ T4554] EXT4-fs error (device loop0): ext4_lookup:1856: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature.
[  158.931060][ T4794] vivid-003: =================  START STATUS  =================
[  158.943165][ T4799] loop4: detected capacity change from 0 to 512
[  158.950176][ T4554] EXT4-fs error (device loop0): ext4_lookup:1856: inode #11: comm syz-executor: iget: Dir with htree data on filesystem without dir_index feature.
[  158.969132][ T4794] vivid-003: Radio HW Seek Mode: Bounded
[  159.711918][ T4794] vivid-003: Radio Programmable HW Seek: false
[  159.718170][ T3648] Bluetooth: hci0: command tx timeout
[  159.753386][ T4794] vivid-003: RDS Rx I/O Mode: Block I/O
[  159.767152][ T4794] vivid-003: Generate RBDS Instead of RDS: false
[  159.775669][ T4794] vivid-003: RDS Reception: true
[  159.788138][ T4799] EXT4-fs (loop4): 1 orphan inode deleted
[  159.794034][ T4794] vivid-003: RDS Program Type: 0 inactive
[  159.800225][ T4794] vivid-003: RDS PS Name:  inactive
[  159.809295][ T4794] vivid-003: RDS Radio Text: 
[  159.809321][ T4799] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  159.823571][ T4794]  inactive
[  159.827653][ T4794] vivid-003: RDS Traffic Announcement: false inactive
[  159.835381][ T4794] vivid-003: RDS Traffic Program: false inactive
[  159.843264][ T4794] vivid-003: RDS Music: false inactive
[  159.850127][ T4794] vivid-003: ==================  END STATUS  ==================
[  159.859492][ T4799] ext4 filesystem being mounted at /44/file1 supports timestamps until 2038 (0x7fffffff)
[  160.075191][ T4799] EXT4-fs error (device loop4): ext4_ext_remove_space:2842: inode #16: comm syz.4.229: path[1].p_hdr == NULL
[  160.094948][ T4799] EXT4-fs (loop4): Remounting filesystem read-only
[  160.102982][ T4799] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5879: Corrupt filesystem
[  160.127772][ T4799] EXT4-fs error (device loop4): ext4_punch_hole:4151: inode #16: comm syz.4.229: mark_inode_dirty error
[  160.148965][ T4798] EXT4-fs error (device loop4): ext4_ext_map_blocks:4161: inode #16: comm syz.4.229: bad extent address lblock: 0, depth: 1 pblock 0
[  160.169941][ T4798] EXT4-fs error (device loop4): ext4_ext_map_blocks:4161: inode #16: comm syz.4.229: bad extent address lblock: 0, depth: 1 pblock 0
[  160.184644][ T4798] EXT4-fs error (device loop4): ext4_ext_map_blocks:4161: inode #16: comm syz.4.229: bad extent address lblock: 0, depth: 1 pblock 0
[  160.202904][ T4798] EXT4-fs error (device loop4): ext4_ext_map_blocks:4161: inode #16: comm syz.4.229: bad extent address lblock: 0, depth: 1 pblock 0
[  160.217754][ T4798] EXT4-fs error (device loop4): ext4_ext_map_blocks:4161: inode #16: comm syz.4.229: bad extent address lblock: 0, depth: 1 pblock 0
[  160.244064][ T4554] EXT4-fs (loop0): unmounting filesystem.
[  160.250764][ T4798] EXT4-fs error (device loop4): ext4_ext_map_blocks:4161: inode #16: comm syz.4.229: bad extent address lblock: 0, depth: 1 pblock 0
[  160.449679][ T4798] EXT4-fs error (device loop4): ext4_ext_map_blocks:4161: inode #16: comm syz.4.229: bad extent address lblock: 0, depth: 1 pblock 0
[  160.493214][   T46] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.925224][   T46] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.137407][ T4814] binder: 4812:4814 ioctl c0306201 20000140 returned -14
[  161.183639][   T46] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.198828][ T4094] EXT4-fs (loop4): unmounting filesystem.
[  161.641394][   T46] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.289642][ T4827] loop3: detected capacity change from 0 to 2048
[  162.335522][ T4827] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.400249][ T3648] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  162.410869][ T3648] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  162.440464][ T3648] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  162.460735][ T3648] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  162.473854][ T3648] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  162.484304][ T3648] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  162.812305][ T4328] ==================================================================
[  162.820453][ T4328] BUG: KASAN: use-after-free in crc_itu_t+0x218/0x2a0
[  162.827281][ T4328] Read of size 1 at addr ffff88805585c000 by task syz-executor/4328
[  162.835282][ T4328] 
[  162.837624][ T4328] CPU: 1 PID: 4328 Comm: syz-executor Not tainted 6.1.106-syzkaller #0
[  162.845914][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  162.856172][ T4328] Call Trace:
[  162.859471][ T4328]  <TASK>
[  162.862416][ T4328]  dump_stack_lvl+0x1e3/0x2cb
[  162.867128][ T4328]  ? nf_tcp_handle_invalid+0x642/0x642
[  162.872635][ T4328]  ? panic+0x764/0x764
[  162.876821][ T4328]  ? _printk+0xd1/0x111
[  162.881007][ T4328]  ? __virt_addr_valid+0x17f/0x530
[  162.886161][ T4328]  ? __virt_addr_valid+0x17f/0x530
[  162.891300][ T4328]  print_report+0x15f/0x4f0
[  162.895822][ T4328]  ? __virt_addr_valid+0x17f/0x530
[  162.900972][ T4328]  ? __virt_addr_valid+0x17f/0x530
[  162.906126][ T4328]  ? __virt_addr_valid+0x45b/0x530
[  162.911282][ T4328]  ? __phys_addr+0xb6/0x170
[  162.915811][ T4328]  ? crc_itu_t+0x218/0x2a0
[  162.920348][ T4328]  kasan_report+0x136/0x160
[  162.924894][ T4328]  ? crc_itu_t+0x218/0x2a0
[  162.929355][ T4328]  crc_itu_t+0x218/0x2a0
[  162.933631][ T4328]  udf_sync_fs+0x1ce/0x380
[  162.938079][ T4328]  ? udf_put_super+0x160/0x160
[  162.942928][ T4328]  ? get_nr_dirty_inodes+0x2ab/0x2e0
[  162.948281][ T4328]  sync_filesystem+0xe8/0x220
[  162.952994][ T4328]  generic_shutdown_super+0x6b/0x340
[  162.958308][ T4328]  kill_block_super+0x7a/0xe0
[  162.963013][ T4328]  deactivate_locked_super+0xa0/0x110
[  162.968422][ T4328]  cleanup_mnt+0x490/0x520
[  162.972867][ T4328]  ? lockdep_hardirqs_on+0x94/0x130
[  162.978090][ T4328]  task_work_run+0x246/0x300
[  162.982716][ T4328]  ? kasan_quarantine_put+0xd4/0x220
[  162.988031][ T4328]  ? task_work_cancel+0x2e0/0x2e0
[  162.993081][ T4328]  ? kmem_cache_free+0x292/0x510
[  162.998044][ T4328]  ? do_exit+0xa6e/0x26a0
[  163.002418][ T4328]  do_exit+0xa73/0x26a0
[  163.006609][ T4328]  ? put_task_struct+0x80/0x80
[  163.011406][ T4328]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  163.017546][ T4328]  ? print_irqtrace_events+0x210/0x210
[  163.023042][ T4328]  ? _raw_spin_unlock_irq+0x1f/0x40
[  163.028269][ T4328]  ? lockdep_hardirqs_on+0x94/0x130
[  163.033494][ T4328]  do_group_exit+0x202/0x2b0
[  163.038132][ T4328]  __x64_sys_exit_group+0x3b/0x40
[  163.043208][ T4328]  do_syscall_64+0x3b/0xb0
[  163.047659][ T4328]  ? clear_bhb_loop+0x45/0xa0
[  163.052382][ T4328]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.058402][ T4328] RIP: 0033:0x7f5076f79e79
[  163.062839][ T4328] Code: Unable to access opcode bytes at 0x7f5076f79e4f.
[  163.069872][ T4328] RSP: 002b:00007ffdfb7eeb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  163.078395][ T4328] RAX: ffffffffffffffda RBX: 00007f5076fe784e RCX: 00007f5076f79e79
[  163.086434][ T4328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  163.094426][ T4328] RBP: 0000000000000010 R08: 00007ffdfb7ec8f6 R09: 00007ffdfb7efe10
[  163.102416][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfb7efe10
[  163.110492][ T4328] R13: 00007f5076fe77dc R14: 000055555691a4a8 R15: 00007ffdfb7f0ed0
[  163.118495][ T4328]  </TASK>
[  163.121535][ T4328] 
[  163.123868][ T4328] The buggy address belongs to the physical page:
[  163.130297][ T4328] page:ffffea0001561700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5585c
[  163.140561][ T4328] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  163.147698][ T4328] raw: 00fff00000000000 ffffea0001c4a388 ffffea00019fd888 0000000000000000
[  163.156297][ T4328] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[  163.164888][ T4328] page dumped because: kasan: bad access detected
[  163.171319][ T4328] page_owner tracks the page as freed
[  163.176702][ T4328] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 4328, tgid 4328 (syz-executor), ts 162215000871, free_ts 162799475607
[  163.184543][ T3648] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  163.194595][ T4328]  post_alloc_hook+0x18d/0x1b0
[  163.194623][ T4328]  get_page_from_freelist+0x322e/0x33b0
[  163.194643][ T4328]  __alloc_pages+0x28d/0x770
[  163.194661][ T4328]  __folio_alloc+0xf/0x30
[  163.194678][ T4328]  vma_alloc_folio+0x486/0x990
[  163.194704][ T4328]  wp_page_copy+0x291/0x18c0
[  163.194728][ T4328]  handle_mm_fault+0x2525/0x5340
[  163.194750][ T4328]  exc_page_fault+0x26f/0x620
[  163.194768][ T4328]  asm_exc_page_fault+0x22/0x30
[  163.194793][ T4328] page last free stack trace:
[  163.194800][ T4328]  free_unref_page_prepare+0xf63/0x1120
[  163.194818][ T4328]  free_unref_page_list+0x663/0x900
[  163.217804][ T3648] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  163.221264][ T4328]  release_pages+0x2836/0x2b40
[  163.228587][ T3648] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  163.230656][ T4328]  tlb_flush_mmu+0xfc/0x210
[  163.230681][ T4328]  tlb_finish_mmu+0xce/0x1f0
[  163.230699][ T4328]  exit_mmap+0x3c3/0x9f0
[  163.230716][ T4328]  __mmput+0x115/0x3c0
[  163.230731][ T4328]  exit_mm+0x226/0x300
[  163.230757][ T4328]  do_exit+0x9f6/0x26a0
[  163.230782][ T4328]  do_group_exit+0x202/0x2b0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  163.230808][ T4328]  __x64_sys_exit_group+0x3b/0x40
[  163.230834][ T4328]  do_syscall_64+0x3b/0xb0
[  163.230860][ T4328]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.239100][ T3648] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  163.240464][ T4328] 
[  163.240471][ T4328] Memory state around the buggy address:
[  163.245948][ T3648] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  163.249981][ T4328]  ffff88805585bf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  163.249998][ T4328]  ffff88805585bf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  163.250011][ T4328] >ffff88805585c000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  163.250021][ T4328]                    ^
[  163.250031][ T4328]  ffff88805585c080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  163.250044][ T4328]  ffff88805585c100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  163.250054][ T4328] ==================================================================
[  163.415751][ T3648] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  163.440998][ T4328] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  163.448242][ T4328] CPU: 0 PID: 4328 Comm: syz-executor Not tainted 6.1.106-syzkaller #0
[  163.456506][ T4328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  163.466664][ T4328] Call Trace:
[  163.469960][ T4328]  <TASK>
[  163.472906][ T4328]  dump_stack_lvl+0x1e3/0x2cb
[  163.477618][ T4328]  ? nf_tcp_handle_invalid+0x642/0x642
[  163.483104][ T4328]  ? panic+0x764/0x764
[  163.487200][ T4328]  ? preempt_schedule_common+0xa6/0xd0
[  163.492782][ T4328]  ? vscnprintf+0x59/0x80
[  163.497232][ T4328]  panic+0x318/0x764
[  163.501148][ T4328]  ? check_panic_on_warn+0x1d/0xa0
[  163.506291][ T4328]  ? memcpy_page_flushcache+0xfc/0xfc
[  163.511687][ T4328]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  163.517691][ T4328]  ? _raw_spin_unlock+0x40/0x40
[  163.522556][ T4328]  ? print_report+0x4a3/0x4f0
[  163.527259][ T4328]  check_panic_on_warn+0x7e/0xa0
[  163.532303][ T4328]  ? crc_itu_t+0x218/0x2a0
[  163.536744][ T4328]  end_report+0x66/0x110
[  163.540998][ T4328]  kasan_report+0x143/0x160
[  163.545522][ T4328]  ? crc_itu_t+0x218/0x2a0
[  163.549971][ T4328]  crc_itu_t+0x218/0x2a0
[  163.554368][ T4328]  udf_sync_fs+0x1ce/0x380
[  163.558818][ T4328]  ? udf_put_super+0x160/0x160
[  163.563610][ T4328]  ? get_nr_dirty_inodes+0x2ab/0x2e0
[  163.568919][ T4328]  sync_filesystem+0xe8/0x220
[  163.573621][ T4328]  generic_shutdown_super+0x6b/0x340
[  163.578929][ T4328]  kill_block_super+0x7a/0xe0
[  163.583634][ T4328]  deactivate_locked_super+0xa0/0x110
[  163.589029][ T4328]  cleanup_mnt+0x490/0x520
[  163.593463][ T4328]  ? lockdep_hardirqs_on+0x94/0x130
[  163.598670][ T4328]  task_work_run+0x246/0x300
[  163.603283][ T4328]  ? kasan_quarantine_put+0xd4/0x220
[  163.608578][ T4328]  ? task_work_cancel+0x2e0/0x2e0
[  163.613618][ T4328]  ? kmem_cache_free+0x292/0x510
[  163.618558][ T4328]  ? do_exit+0xa6e/0x26a0
[  163.622896][ T4328]  do_exit+0xa73/0x26a0
[  163.627062][ T4328]  ? put_task_struct+0x80/0x80
[  163.631835][ T4328]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  163.637833][ T4328]  ? print_irqtrace_events+0x210/0x210
[  163.643315][ T4328]  ? _raw_spin_unlock_irq+0x1f/0x40
[  163.648518][ T4328]  ? lockdep_hardirqs_on+0x94/0x130
[  163.653716][ T4328]  do_group_exit+0x202/0x2b0
[  163.658322][ T4328]  __x64_sys_exit_group+0x3b/0x40
[  163.663395][ T4328]  do_syscall_64+0x3b/0xb0
[  163.667925][ T4328]  ? clear_bhb_loop+0x45/0xa0
[  163.672620][ T4328]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  163.678522][ T4328] RIP: 0033:0x7f5076f79e79
[  163.682940][ T4328] Code: Unable to access opcode bytes at 0x7f5076f79e4f.
[  163.689975][ T4328] RSP: 002b:00007ffdfb7eeb58 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  163.698388][ T4328] RAX: ffffffffffffffda RBX: 00007f5076fe784e RCX: 00007f5076f79e79
[  163.706359][ T4328] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[  163.714338][ T4328] RBP: 0000000000000010 R08: 00007ffdfb7ec8f6 R09: 00007ffdfb7efe10
[  163.722320][ T4328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdfb7efe10
[  163.730361][ T4328] R13: 00007f5076fe77dc R14: 000055555691a4a8 R15: 00007ffdfb7f0ed0
[  163.738369][ T4328]  </TASK>
[  163.741628][ T4328] Kernel Offset: disabled
[  163.745954][ T4328] Rebooting in 86400 seconds..