last executing test programs:

3m57.910487452s ago: executing program 2 (id=109):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r0}, 0x18)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@cgroup=r1, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

3m57.873760732s ago: executing program 2 (id=112):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r0}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0xbc}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

3m57.707397454s ago: executing program 2 (id=117):
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000002090000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc)

3m57.474635757s ago: executing program 2 (id=121):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0500000004000000032000000c"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x7}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

3m57.385301468s ago: executing program 2 (id=125):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000380)='signal_deliver\x00', r1}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

3m57.227277539s ago: executing program 2 (id=127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb9"], 0xfdef)

3m41.234189855s ago: executing program 32 (id=127):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb9"], 0xfdef)

2m36.260046987s ago: executing program 5 (id=741):
syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x10, 0x44, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0x2010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x8, [{@remote, 0x4}, {@broadcast}]}, @ssrr={0x89, 0x3, 0xce}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0)

2m36.079274349s ago: executing program 5 (id=754):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[], 0x5, 0x357, &(0x7f0000000180)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x80900, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0)
msgsnd(0x0, &(0x7f0000000c40)={0x2}, 0x8, 0x0)

2m35.882391991s ago: executing program 5 (id=748):
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x12, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000007d00a700000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000004000000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @cgroup_sock_addr=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc87, @void, @value}, 0x94)

2m35.766561902s ago: executing program 5 (id=752):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x68b, &(0x7f0000000800)="$eJzs3c1vHGcdB/DvbDabbCipmyZtgiolaiRARE3sWCmYSwNCKIcKVeXA2UqcxMomDY6L3ApBeClce8gfUA6+cUBI3CPKhQvcevWxEoJLLzWnRTM7u16/22nqtcPnU43nmXnmeeb3/HbedrfRBvi/de1Cmo9T5NqFNxfK5aXFyc7S4uTdfjnJkSSNpNmbpfi82+1+nFxNb8qZcmXdXbG69/vP90uPZqfe/uSzpU97S816qrZvrG+3Ww/rKeeSHKrnT6u/69v1d3S77orBCMuEne8nDkbtcJJu5d+Pemt++vfnBjVD2hu13vbIBw6AonffXGcsOVaf6OVzQO+u2LtnH2gPRx0AAAAA7IHnl7OchRwfdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwkNS//1/UU6NfPpei//v/rXpd6vL+cnZ3mz/+suIAAAAAAAAAgD10djnLWcjx/nK3qL7zf7VaOFn9/UrezYPMZC4Xs5DpzGc+c5lIMjbUUWthen5+bmLQsv9/BqxveXnDlpe3CfRIPW8/jVEDAAAAAAAAwEHzebfb3XKDX+fayvf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwHxTJod6smk72y2NpNJMcTdIqt3uY/LNfPqjOvJY8HnUQAAAA8AV0d7jd88tZzkKOD9oV1Xv+l6r3/Ufzbu5lPrOZTyczuVF9FtB7199YWpzsLC1O3i2n9f1+7z+7CrfqMb3PHjbe8+lqi3ZuZrZaczHX806K4kYaVcvS6X48G8f1qzKm4o2ewzuM7EY9L0f+YT1fq7mrsW5qlx+mjFUZOTzIyHgdW5mNF7bOxC5fnbV7mkhjEOzJNXtaM4hVOX9jh/s7Vs/L8fxuk5yPxtpMXB46+l7aOufJN/7yx5/c7ty7c/vmgwv7Z0g7c6ie964r7fWZmBzKxMvPcibWGa8ycWqwfC0/zI9zIefyVuYym59lOvOZybn8oCpN18dzMXTKD2WqMdT11VU7emu7SFr1Edp7sVbHlG1ierVqezyz+VHeyY3M5PXqv8uZyLdzJVcyNfQKn9rBlbaxyVnf/eqGwZ//Zl1oJ/l9Pa/cekrX1ydW5vWFobwOX3PHqrrhNStZOrGL+1E/S3/aOpTm1+pCuY/fZPXhMlprMzExlIkXt87EH6rLyoPOvTtzt6fv72x3Jz6sC+V59MG+ukuUx8uJwXPB6qOjrHuxV1c9gwznq1V/49Jr11hXd2pQ1ztTH256prbqZ7j1PV2u6l7esG6yqjs9VLf2easzeB466F/+ADyzPmglx751rNX+V/sf7Y/av23fbr959PtHvnPklVYO/+3wd5vjh77eeKX4cz7KL1be/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/uwXvv35nudGbm1hS63e4vN6k6yIX+z5nt4U7PPJeMasitJPsj8//tdrv1mmI/xLN1oVs6ku4TNv9rkp1t3EyyUdXZ0Sdhi4uGH4CCZ8Kl+bv3Lz147/3XZu9O35q5NXNv6sqVqfGpK69PXro525kZ7/0ddZTAl2Hlpj/qSAAAAAAAAAAAAICd2ot/TrD53o/u5VABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAA+rahTQfp8jE+MXxcnlpcbJTTv3yypbNJI0kxc+T4uPkanpTxoa6Kzbbz6PZqbc/+Wzp05W+mv3tG1u125mH9ZRzSQ7V86fV3/Uv3F8xGGGZsPP9xMGo/S8AAP//fgkLLw==")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)

2m34.733860333s ago: executing program 5 (id=756):
r0 = syz_open_dev$sndctrl(&(0x7f0000002680), 0xa00, 0x68d01)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000027c0)={0xfc4, 0x0, 0x7, 0xa, 0x0})

2m33.150290841s ago: executing program 5 (id=769):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = userfaultfd(0x80001)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x3)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6)
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
ioctl(r6, 0x8b2a, &(0x7f0000000040))
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r8, &(0x7f0000001a80)=""/4096, 0x1000)

2m33.082537601s ago: executing program 33 (id=769):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r1 = userfaultfd(0x80001)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
lseek(0xffffffffffffffff, 0xfffffffffffffff9, 0x3)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60})
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0x20}], 0x6)
mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil)
r6 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b2b, &(0x7f0000000040)={'wlan1\x00', @random="010000000002"})
ioctl(r6, 0x8b2a, &(0x7f0000000040))
r8 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r8, &(0x7f0000001a80)=""/4096, 0x1000)

2m30.929438365s ago: executing program 4 (id=790):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$eJzs3EtvVFUcAPD/nXaKFUoLPnkoo0hsRFtaUFmYGI0mbExMdKHLWipBChioiRAiaAwujZ9AXZr4CVzpxqgrjVvdGxNi2IguzJj7KlM6rdPpTKcyv18y7Tn3dc7/nnt6H+dOA+hbtfRHErEtIn6JiNE8u3SBWv7rxvVLs39dvzSbRL3+yh9Jttyf1y/NlotuK35vLbY5XomofJjEniblnr9w8dTM/PzcuSI/uXD67cnzFy4+cfL0zIm5E3Nnpo8ePXJ46umnpp/sSJwjaV13v3d2765jr3/y0mw93vj+y7T+A8X8xjhyY+susxa1GI56vbJk6lD288C6t765jDSkk8EeVoQ1SY//tLmqWf8fjYG42Xij8eIHPa0c0FX1er2+Y9nU/KxYOZBk84HblT4O/ao846f3v+VnY69Aeuvac/kNUBr3jeKTzxmM9L49Gcvv2Ae6VP62iHjtyt+fpp9o+hwCAKCzvk6vfx5vdv1XiXsblttejA2NRcTBiNgZEXdFxN0RcU9Etux9EXH/Gsuv3ZLPy682TPlpuN3YWpFe/z1TjG0tvf5bHLUZGyhyI1n81eTNk/Nzh4p9Mh7VLWl+apUyvnnh54+zRJNIag3Xf+knLb+8Fizq8fvglqXrHJ9ZmFlv3KVr70fsHny2SfzJ4khAEhG7ImJ3G9tP99nJx77Ym6a3b10+/7/jX0UHxpnqn0c8mrf/lbgl/lKSl7TS+OTkHTE/d2iyPCqW++HHqy835huP7loWRpvxd0Da/nc2Pf6L+MtuUI7Xnl97GVd//WjFe5p2j/+h5NUsPVRMe3dmYeHcVMRQMWHJ9Omb65b5cvk0/vH9zfv/zoh/PivW2xMR6UH8QEQ8GBH7iro/FBEPR8T+VeL/7vlH3lp9D/W2/Y+v1v4RY0kRf+rc4sB964mBU99+tVL5rbX/kSw1Xkxp5e9fqxVsd78BAADA/0klG4NOKhOL6UplYiJ/h7987HKwFu+cOZ6PVY9FtVI+6RpteB46VTwbLvPTt+QPR8SO7E2j4Sw/MXt2fqTHsUO/27pC/0/91q2XXoDNY03jaEn36gFsPN/XhP7VvP939b0rYJNw/of+pf9D/2rW/y9H3OhBVYAN5vwP/av1/u+NALjdOP9D/9L/oS8t/0r8cPGvE9r5pv/NxM5j61p9rYnqBpbV4cRAl7Ycjf+0owuJqPR817WfqGyGauwrElsiotW1Lje0aXna7kYNq/M9/KMEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQQf8GAAD//4F+194=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)

2m30.689425608s ago: executing program 4 (id=791):
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = io_uring_setup(0xf74, &(0x7f0000000240)={0x0, 0xf364, 0x4000, 0x0, 0x158})
r1 = socket$alg(0x26, 0x5, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000380)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000004300)=@mangle={'mangle\x00', 0x44, 0x6, 0x420, 0x2b8, 0x0, 0x138, 0x0, 0x0, 0x388, 0x388, 0x388, 0x388, 0x388, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'gre0\x00', 'ip6gre0\x00'}, 0x7a00, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'nicvf0\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb8, 0xe0, 0x0, {}, [@common=@unspec=@limit={{0x48}, {0x29000000, 0x28, 0x0, 0x0, 0x0, 0x1}}]}, @ECN={0x28}}, {{@ip={@rand_addr, @private, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x480)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
close_range(r0, 0xffffffffffffffff, 0x2)
syz_open_dev$tty20(0xc, 0x4, 0x1)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000580), 0x8)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2m29.631949859s ago: executing program 4 (id=796):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@nolazytime}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x0)

2m29.414574292s ago: executing program 4 (id=802):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f00000004c0)='./file0/../file0\x00', 0x8801)
syz_mount_image$udf(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB='\x00'], 0x1, 0x5c6, &(0x7f00000006c0)="$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")

2m29.275715273s ago: executing program 4 (id=804):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
write$binfmt_aout(r1, &(0x7f0000000100)=ANY=[], 0xff5f)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x4, 0x0, 0x10, "0062ba7d82000000000000000000f7ffffff00"})
r2 = syz_open_pts(r1, 0x20000)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x1804011, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@utf8}, {@fmask={'fmask', 0x3d, 0x4}}, {@fmask={'fmask', 0x3d, 0x7}}], [{@flag='rw'}]}, 0x0, 0x1507, &(0x7f0000000700)="$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")

2m28.000516587s ago: executing program 4 (id=807):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)

2m27.872139739s ago: executing program 34 (id=807):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x81, 0x4, 0x8000, 0x16, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000006c0))
ioctl$SIOCSIFHWADDR(r0, 0x8b1b, &(0x7f0000000000)={'wlan1\x00'})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0)

1m22.841720592s ago: executing program 6 (id=1273):
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/firmware/fdt', 0x202, 0x0)
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4)

1m22.606851354s ago: executing program 6 (id=1278):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfffe}, 0xe)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2)

1m21.651878955s ago: executing program 6 (id=1299):
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_int(r0, 0x0, 0x7, 0x0, &(0x7f0000000040))

1m19.067097413s ago: executing program 6 (id=1344):
syz_mount_image$hfsplus(&(0x7f0000000800), &(0x7f0000000600)='./file1\x00', 0xa00010, &(0x7f0000000840)=ANY=[], 0x6, 0x646, &(0x7f0000002a80)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x80101)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x10)
chroot(&(0x7f0000000780)='./file0\x00')
umount2(&(0x7f0000000500)='./file0\x00', 0x9)

1m18.794572736s ago: executing program 6 (id=1347):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
open(&(0x7f0000000100)='./file0\x00', 0x80ff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file0\x00', 0x400, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0xfd, 0x299, &(0x7f0000000280)="$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")

1m17.748342418s ago: executing program 6 (id=1353):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@fmask={'fmask', 0x3d, 0x6}}, {@sys_tz}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}, {@namecase}, {@errors_continue}, {@gid}, {@namecase}, {}, {@allow_utime={'allow_utime', 0x3d, 0x7}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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")

1m16.773161418s ago: executing program 35 (id=1353):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000003c0)={[{@fmask={'fmask', 0x3d, 0x6}}, {@sys_tz}, {@uid={'uid', 0x3d, 0xee00}}, {@errors_remount}, {@namecase}, {@errors_continue}, {@gid}, {@namecase}, {}, {@allow_utime={'allow_utime', 0x3d, 0x7}}]}, 0x1, 0x152f, &(0x7f00000037c0)="$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")

1m16.744109638s ago: executing program 3 (id=1357):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x10a}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

1m16.57262209s ago: executing program 3 (id=1362):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000002a80)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000002b00)=""/82, 0x52}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {0x0}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

1m16.428028892s ago: executing program 3 (id=1366):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0xc, &(0x7f00000000c0)='7', 0x1)

1m16.326439823s ago: executing program 3 (id=1367):
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf604, 0x108008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r5, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r5, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fanotify_init(0x200, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(r3, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

1m15.402946103s ago: executing program 3 (id=1371):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000980)={@flat=@binder={0x73622a85, 0x0, 0x2}, @flat=@weak_handle={0x77682a85, 0x10a}, @flat=@weak_binder={0x77622a85, 0x100a, 0x2}}, &(0x7f0000000240)={0x0, 0x18, 0x30}}, 0x1000}], 0x0, 0x0, 0x0})

1m15.135053966s ago: executing program 3 (id=1376):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x31, 0x1, 0xff01, 0x59, 0x0, 0x0})

59.913033403s ago: executing program 36 (id=1376):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0x2)
ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x2, 0x31, 0x1, 0xff01, 0x59, 0x0, 0x0})

18.946577002s ago: executing program 9 (id=1774):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xa8}, @call={0x85, 0x0, 0x0, 0x50}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

18.791814734s ago: executing program 9 (id=1776):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc1105518, &(0x7f0000000c40)={{0x0, 0x0, 0x2000000, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0x80000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xfffffffe, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, 0x108000000000000, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x4, 0x0, 0x0, 0x40, 0xfffffffffffffffc, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffa, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x3, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x80000000000000, 0xfffffffc, 0x1, 0x8, 0x4, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x4, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0xfffffffc, 0x7]})

17.860760194s ago: executing program 9 (id=1782):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))

17.789854315s ago: executing program 9 (id=1784):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1200000002000000040000000200000000000000", @ANYRES32, @ANYBLOB="0400fe80e10b000000000000"], 0x50)

17.657464086s ago: executing program 1 (id=1787):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x300400, &(0x7f0000000200), 0x3, 0x571, &(0x7f0000000c00)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"})

17.607095117s ago: executing program 9 (id=1788):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xb8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xfd, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x5c}}, 0x4800)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0)

17.522740357s ago: executing program 7 (id=1789):
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf604, 0x108008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r2, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r2, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fanotify_init(0x200, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

17.442528749s ago: executing program 1 (id=1790):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000002b00)=""/82, 0x52}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

17.357142599s ago: executing program 1 (id=1791):
flock(0xffffffffffffffff, 0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001740)={@cgroup=r1, 0x14, 0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

16.962705304s ago: executing program 9 (id=1792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_emit_ethernet(0x22, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0x7, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36)

16.662525577s ago: executing program 7 (id=1793):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x76}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)

15.606717119s ago: executing program 7 (id=1795):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000540)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@lazytime}, {@nombcache}, {@usrjquota}]}, 0x3, 0x446, &(0x7f0000000ec0)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQuFWp26AmSLSqICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dae2Z3nJmvd8ee2YkDGFjj6UMSsSsifo+I0Vq2scB47enm8uXZv5cvzyZRqbz5V1Itd2P58mxeNH/dzjwzFFH4NIkDLepduHgpLVG6kOUnF8+9N7lw8dKzZ87NnC6dLp2fPnHi2NGp549PP9eTONO4buz/cP7gvlffvvr67Mmr7/z8bZLH3xRHj4x3Ovh4pdLj6vqjkD3vrtuXDPWpMXStWOumMVzt/6NRjNWTNxqvfNLXxgGbqlKpVO5rf3ipAtzFkuh3C4D+yL/o0/lvvm3R0OOOcP3F2gQojftmttWODK3MbYeb5re9NB4RJ5f++SrdYnPuQwAANPg+Hf8802r8V4j6+0L/z9ZQxiLinojYExHHI2JvRNwbUS17f0Q80GX9zYska8c/hWsbCmyd0vHfC9naVuP4Lx/9xVgxy+2uxj+cnDpTLh3J3pPDMbwtzU91qOOHl3/7vN2x+vFfuqX152PBrB3XhrY1vmZuZnHmdmKud/3jiP1DreJPVlYCkojYFxH7N1jHmae+Odju2K3j76AH60yVryOeqJ3/pWiKP5d0Xp+c/F+US0cm86tirV9+vfJGu/pvK/4eSM//jpbX/0r8Y0ltvfbsTLlcurDQzV//8sn08cofn7Wd02z0+h9J3mrY98HM4uKFqYiR5LVao+v3TzeVm14tn8Z/+FDr/r8nVt+JAxGRXsQPRsRDEfFw1vZHIuLRiDjU4V346aXH3t14/JsrjX+uq/O/mhiJ5j2tE8WzP37XUOlYN/Gn5/9YNXU427Oez7/1tKvbqxkAAAD+qwoRsSuSwsRKulCYmKj9D//e2FEozy8sPn1q/v3zc7XfCIzFcCG/0zVadz90KpvW5/nppvzR7L7xF8Xt1fzE7Hx5rt/Bw4Db2ab/p/4s9rt1wKbzey0YXPo/DC79HwaX/g+Dq0X/396PdgBbr9X3/0d9aAew9Zr6v2U/GCDm/zC4NtL/fWbA3aFjXx7ZunYAW2phe9z6R/ISEmsSUbgjmiGxSYl+fzIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD0xr8BAAD//4kK5gE=")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002000000"], 0x8840)

15.206592133s ago: executing program 7 (id=1797):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x2915048, 0x0, 0x1, 0x0, &(0x7f0000000000))
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x4, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$FUSE_DEV_IOC_CLONE(r2, 0x8004e500, &(0x7f0000000340)=r1)
close_range(r0, 0xffffffffffffffff, 0x0)

14.318525213s ago: executing program 7 (id=1800):
r0 = socket(0x10, 0x803, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x7}, {}, {0x1, 0x3}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4080}, 0x40)

14.261065623s ago: executing program 1 (id=1801):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000f00)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000002b00)=""/82, 0x52}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x7, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

13.63181573s ago: executing program 8 (id=1804):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='?', 0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000140)={0x0, 0x11}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = accept$alg(r0, 0x0, 0x0)
r2 = dup(r1)
sendmsg$alg(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="eb", 0x1}], 0x1, 0x0, 0x0, 0x80}, 0x8001)
read$FUSE(r2, &(0x7f00000037c0)={0x2020}, 0x2020)

13.319142524s ago: executing program 8 (id=1805):
r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8060, 0x0)
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x5, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}})

13.231578615s ago: executing program 8 (id=1806):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040), 0x6)
ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)="d7")
ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000080))

13.230525855s ago: executing program 8 (id=1807):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x20080e, &(0x7f0000000540)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@journal_dev={'journal_dev', 0x3d, 0x3}}, {@block_validity}, {@lazytime}, {@nombcache}, {@usrjquota}]}, 0x3, 0x446, &(0x7f0000000ec0)="$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")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="2000000002000000"], 0x8840)

13.094471956s ago: executing program 8 (id=1808):
syz_mount_image$exfat(&(0x7f0000000340), &(0x7f0000000080)='./file0\x00', 0x1000000, &(0x7f0000000380)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="ebe050f9a6e26556b98b3a694ca1d9f8df1d1907a2607c94fad06b78ed9f520e602e86e81adc6386a9cd7f05df985b7d7649fbe21aac9ea3cd407d5b9c5b0b7ff5572dc06f5dc6fa7d1206852880bc490a27a1ec2e3d77acc8c7454c8cfc31b1cddd5727a3a7bb058f019d781f3174f03a4f699b28b8ee3491fe8da4a5d8b2431b5b560ae1638b532ebadbb95c3d0ecece79ca4492a146892118cd97d3a346c6e0eccede0661be772eb19221fdc8f58e6d741bd5212bb2a9b57a1666e4bb084eecf00117c99520a8", @ANYRESOCT=0x0, @ANYRESHEX], 0x1, 0x1517, &(0x7f00000046c0)="$eJzs3AnYjVXXOPC19t43D4mTZMpee92cZNgkSYaEDEmSJEmmhCRJkpBMmZKQhMxJ5pBMIZnneU6SV5IkISHJ/l+q7/W9X19fXd/b/+99/8/6XdfNXs991jrrPut5zrnPfT3n+brdwEp1KpevxczwT8Ff/usKACkA0AcAMgFABADFMhfLfGl/Oo1d/7k7EX+tB6dc6Q7ElSTzT91k/qmbzD91k/mnbjL/1E3mn7rJ/FM3mb8QqdmWqTmukS31bn/++r/7n3fL9f9/Q/L6//+tP/WTJvNP3WT+qZvMP3WT+aduMv/UTeafusn8UzeZvxCp2RW79qwB4F/g+vef2P7+WP16iftK9/M7W/S/yrty33lCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIVKTc+EyAwD/sb7SfQkhhBBCCCGEEOKvE9Je6Q6EEEIIIYQQQgjxfx8CGA0GIkgDaSEF0kF6uAoywNWQETJBAq6BzHAtZIHrICtkg+yQA3KGTJALLBA4YIghN+SBJNwAeeFGyAf5oQAUBA+FoDDcBEXgZigKt0AxmLUA4DYoASWhFJSG26EM3AFloRyUhzuhAlSESlAZ7oIqcDdUhXugGtwL1eE+qAH3Q014AGrBg1AbHoI68DDUhUegHtSHBtAQGv2v8l+ATvAidIYu0BW6QXd4CXpAT+gFvaEPvAx94RXoB69CfxgAA+E1GASvw2B4A4bAUBgGb8JwGAEjYRSMhjEwFt6CcfA2jId3YAJMhEkwGabAVJgG78J0mAEz4T2YBe/DbJgDc2EezIcPYAEshEXwISyGj2AJLIVlsBxWwEpYBathDZ6AdbAeNsBG2ASbYQtshW2wHXbATtgFu8vtgY9hL3wC++BT2A+f/TYf1v4P+WfhH/PbIyCgQoUGDabBNJiCKZge02MGzIAZMSMmMIGZMTNmwSyYFbNidsyOOTEn5sJcSEjIyJgbc2MSk5gX82I+zIcFsAB69FgYC2MRvBmLYlEshsWwOBbHElgSS2JpLI1lsAyWxbJY/rY5AFgBK2ElvAvvwruxKlbFalgNq2N1rIE1sCbWxFpYC2tjbayDdbAu1sV6WA8bYANshI2wMTbGJtgEm2EzbI7NsQW2wJbYElthK2yNrbENtsG22BbbYTtsjx2wA76AL+CL+CJ2wQqqG3bH7tgDe2Av7I298WXsi6/gK/gq9scBOBBfw9fwdRyMZ3AIDsVhOAzLqBE4EkchqzE4FsfiOByH43E8TsCJOBEn4xScitNwGk7HGTgD38NZ+D6+j3NwDs7D+TgfF+BCXISLcDGexSW4FJfhclyBK3EFrsY1uBrX4XpchxtxI27GzbgVt+J23I47cSfuxt34MX6Mn+An2B/34348gAfwIB7EQ3gID+NhPIJHtl4FgMfwGB7H43gCT+IpPImn8TSewbN4Ds/heTyPF/C5nF/W3p1/bX9QlxhlVBqVRqWoFJVepVcZVAaVUWVUCZVQmVVmlUVlUVlVVpVdZVc5VU6VS+VSpEixilVulVslVVLlVXlVPpVPFVAFlFdeFVaFVRFVRBVVRVUxdasqrm5TJVRJ1dSXVqVVGdXMl1XlVHlVXlVQFVUlVVlVVlVUFVVVVVXVVDVVXVVXNdT9qqbqhr3wQXVpMnXUAKyrBmI9VV81UA3V6/ioaqwGYxPVVDVTj6uhOARbqMa+pXpKtVIjsbV6Ro3CZ1VbNQbbqedVe9VBdVQvqE6qie+suqgJ2E11V5Oxh+qpeqneajpWVJcmVkm9qvqrAWqgek3Nw9fVYPWGGqKGqmHqTTVcjVAj1Sg1Wo1RY9Vbapx6W41X76gJaqKapCarKWqqmqbeVdPVDDVTvadmqffVbDVHzVXz1Hz1gVqgFqpF6kO1WH2klqilaplarlaolWqVWq3WqLVqnVqvNqiNapParLaorWqb2q52qJ1ql9qt9qiP1V71idqnPlX71WfqgPqbOqg+V4fUF+qw+lIdUV+po+prdUx9o46rLuqEOqlOqe/UafW9OqPOqnPqB3Ve/aguqJ/URRUUaNRKa210pNPotDpFp9Pp9VU6g75aZ9SZdEJfozPra3UWfZ3OqrPp7DqHzqmv17m01aSdZh3r3DqPTuobdF59o86n8+sCuqD2upAurG/SRfTNuqi+RRfTt+ri+jZdQpfUpXRpfbsuo+/QZXU5XV7fqSvoirqSrqzv0lX03bqqvkdX0/fq6vo+XUPfr2vqB3Qt/aCurR/SdfTDuq5+RNfT9XUD3VA30o/qxvox3UQ31c3047q5fkK30E/qlvop3Uo/rVvrZ3Qb/axuq5/T7fTzur3uoDvqn/RFHXRn3UV31d2i7vol3UP31L10b91Hv6z76ld0P/2q7q8H6IH6NT1Iv64H6zf0ED1UD9Nv6uF6hB6pR+nReoweq9/S4/Tberx+R0/QE/UkPVlP0VN1r18rzfwT+W//N/n9fr73zXqL3qq36e16h96pd+ndeo/eo/fqvXqf3qf36/36gD6gD+qD+pA+pA/rw/qIPqKP6qP6mD6mj+vj+oQ+qX/Q3+nT+nt9Rp/VZ/UP+rw+ry/8+hiAQaOMNsZEJo1Ja1JMOpPeXGUymKtNRpPJJMw1JrO51mQx15msJpvJbnKYnOZ6k8tYQ8YZNrHJbfKYpLnB5DU3mnwmvylgChpvCpnC5qZ/Ov93+ls+6ZeTl9AFwDQ2jU0T08Q0M81Mc9PctDAtTEvT0rQyrUxr09q0MW1MW9PWtDPtTHvT3nQ0HU0n08l0RjBdTVfT3bxkepieppfpbfqYl01f09f0M/1Mf9PfDDQDzSAzyAw2g80QM8QYABhuhpuRZqQZbUabsWasGWfGmfFmvJlgJphJZpKZYqaYaWaamW6mm5lmppllZpnZZraZa+aa+Wa+WWAWmEVmkVlsFpslZqlZapab5WalWWlWm9VmrVlr1pv1ZqPZaJaYLWaL2Wa2mR1mh9lldpk9Zo/Za/aafWaf2W/2mwPmgDloDppD5pA5bA6bI+aIOWqOmmPmmDlujpsT5oQ5ZU6Z0+a0OWPOmHPmnDlvzpsL5oK5aC5eOu2LVKQiE5koTZQmSolSovRR+ihDlCHKGGWMElEiyhxljrJE10VZo2xR9ihHlDO6PsoV2YgiF3EUR7mjPFEyuiHKG90Y5YvyRwWigpGPCkWFo5uiItHNUdHolqhYdGtUPLotKhGVjEpFpaPbozLRHVHZqFxUProzqhBVjCpFlaO7oirR3VHV6J6oWnRvVD26L6oR3R/VjB6IakUPRrWjh6I60cNR3eiRqF5UP2oQNYwa/aX1QziT7THf2XaxaaGb7W5fsj1sT9vL9rZ97Mu2r33F9rOv2v52gB1oX7OD7Ot2sH3DDrFD7TD7ph1uR9iRdpQdbcfYsfYtO86+bcfbd+wEO9FOspPtFDvVTrPv2ul2hp1p37Oz7Pt2tp1j59p5dr79wC6wC+0i+6FdbD+yS+xSu8wutyvsSrvKrrZr7Fq7zq63G+xGu8lutlvsVrvNbrc77E67y+62e+zHdq/9xO6zn9r99jN7wKb8en7/hT1sv7RH7Ff2qP3aHrPf2OP2W3vCnrSn7Hf2tP3enrFn7Tn7gz1vf7QX7E/2og2XTu4vvbyTIUNpKA2lUAqlp/SUgTJQRspICUpQZspMWSgLZaWslJ2yU07KSbkoF13CxJSbclOSkpSX8lI+ykcFqAB58lSYClMRKkJFqSgVo2JUnIpTCSpBpagU3U630x10B5WjcnQn3UkVqSJVpspUhapQVapK1agaVafqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB41oAbUiBpRY2pMTagJNaNm1JyaUwtqQS2pJbWiVtSaWlMbakNtqS21o3bUntpTR+pInagTdabO1JW6UnfqTj2oB/WiXtSH+lBf6kv9qB/1p/40kAbSIBpEg2kwDaGhNIzepOE0gkbSKBpNY2gsjaVxNI7G03iaQBNoEk2iKTSFptE0mk7TaSbNpFk0i2bTbJpLc2k+zacFtIAW0SJaTItpCS2hZbSMVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI120A7aRbtoD+2hvbSX9tE+2k/76QAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+giBUpx6Vx6d5XL4K52GV0m91/j7C6Hy+mud7mcdVldtn+IyTmXz+V3BVxB510hV9jd9Ju4hCvpSrnS7nZXxt3hyv4mrrJmxy+/iO7udZXdXa6Ku9tVdfe4au5eV93d52q4h11N94ir5eq72q6hq+MednXdI66eq+8auIauuXvCtXBPupbuKdfKPf2beIFb6Na4tW6dW+/2uk/cOfeDO+q+dufdj66z6+L6uJddX/eK6+dedf3dgN/Ew9ybbrgb4Ua6UW60G/ObeJKb7Ka4qW6ae9dNdzN+E893H7hZbpGb7ea4uW7ez/Glnha5D91i95Fb4pa6ZW65W+FWulVu9d97Xe42uk1us9vjPnbb3Ha3w+10u9zun+NLx7HPfer2u8/cEfeVO+g+d4fcMXfYfflzfOn4jrlv3HH3rTvhTrpT7jt32n3vzrizPx//pWP/zv3kLrrggJEVazYccRpOyymcjtPzVZyBr+aMnIkTfA1n5ms5C1/HWTkbZ+ccnJOv51xsmdgxc8y5OQ8n+QbOyzdyPs7PBbggey7EhfkmLsI3c1G+hYvxrVycb+MSXJJLcWm+ncvwHVyWy3F5vpMrcEWuxJX5Lq7Cd3NVvoer8b1cne/jGnw/1+QHuBY/yLX5Ia7DD3NdfoTrcX1uwA25ET/KjfkxbsJNuRk/zs35CW7BT3JLfopb8dPcmp/hNvwst+XnuB0/z+25A3fkF7gTv8iduQt35W7cHYF7cE/uxb25D7/MffkV7sevcn8ewAP5NR7Er/NgfoOH8FAexm/ycB7BI3kUj+YxPJbf4nH8No/nd3gCT+RJPJmn8FSexu/ydJ7BM/k9nsXv82yew3N5Hs/nD3gBL+RF/CEv5o94CS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VtvJ2Rd/KuS0/z/DHv5U94H3/K+/kzPsB/44P8OR/iL/gwf8lH+Cs+yl/zMf6Gj/O3fIJP8in+jk/z93yGz/I5/oHP8498gX/iixwYYoxVrGMTR3GaOG2cEqeL08dXxRniq+OMcaY4EV8TZ46vjbPE18VZ42xx9jhHnDO+Ps4V25hiF3Mcx7njPHEyviHOG98Y54vzxwXigrGPC8WF45viIvHNcdH4lrhYfGtcPL4tLhGXjB++t3R8e1wmviMuG5eLy8d3xhXiinGluHJ8V1wlvjuuGt8TV4vvjYvG98U14vvjmvEDca34wbh2/FBcJ344rhs/EteL68cN4oZxo/jRuHH8WNwkbho3ix+Pm8dPxC3iJ+OW8VNxq/jpP9zfNe4Wd49fil+KQ7hHz03OS85PfpBckFyYXJT8MLk4+VFySXJpcllyeXJFcmVyVXJ1ck1ybXJdcn1yQ3JjclNyczKEymnBo1dee+Mjn8an9Sk+nU/vr/IZ/NU+o8/kE/4an9lf67P463xWn81n9zl8Tn+9z+WtJ+88+9jn9nl80t/g8/obfT6f3xfwBb33hXxh39A38o18Y/+Yb+Kb+gge94/7J/wT/kn/pH/Kt/JP+9b+Gd/GP+vb+uf8c/5539538B39C76Tf9F39l18V9/Vd/fdfQ/fw/fyvXwf38f39X19P9/P9/f9/UA/0A/yg/xgP9gP8UP8MD/MD/fD/Ug/0o/2o/1YP9aP8+P8eD/eT/AT/CQ/yU/xU/w0P81P99P9TD/Tz8o3y8/2s/1cP9fP9/P9Ar/AL/KL/GK/2C/xS/wyv8yv8Cv8Kr/Kr/Fr/Dq/zm/wG/wmv8lv8Vv8Nr/N7/A7/C6/y+/xe/xev9fv8/v8fr/fH/AHzgV/0B/yX/jD/kt/xH/lj/qv/TH/jT/uv/Un/El/yn/nT/vv/Rl/1p/zP/jz/kd/wf/kL/rgxybeSoxLvJ0Yn3gnMSExMTEpMTkxJTE1MS3xbmJ6YkZiZuK9xKzE+4nZiTmJuYl5ifmJDxILEgsTixIfJhYnPkosSSxNLEssT6xIrEyEcP22OOQOeUIy3BDyhhtDvpA/FAgFgw+FQuFwUygSbg5Fwy2hWLg1FA+3hRKhZCgVHgn1Qv3QIDQMjcKjoXF4LDQJTUOz8HhoHp4ILcKToWV4KrQKT4fW4ZnQJjwb2obnQrvwfGgfOoSO4YXQKbwYOgcduoZuoXt4KfQIPUOv0Dv0CS+HvuGV0C+8GvqHAWFgeC0MCq+HweGNMCQMDcPCm2F4GBFGhlFhdBgTxoa3wrjwdhgf3gkTwsQwKUwOU8LUMC28G6aHGWFmeC/MCu+H2WFOmBvmhfnhg7AgLAyLwodhcfgoLAlLw7KwPEDKyrAqrA5rwtqwLqwPG8LGsClsDlvC1rAtbA87ws6wK+wOe8LHYW/4JOwLn4b94bNwIPwtHAyfh0Phi3A4fBmOhK/C0fB1OBa+CcfDt+FEOBlOhe/C6fB9OBPOhnPhh3A+/BguhJ/CRfnMmhBCCCHEn6L/YH+3f4jU3/9Vv36lOwBcvT3H4f9ac0PWX9Y9Vc7mCQB4qku7B/9jq1Cha9euv952iYYozxwASFzOTwOX46XQDJ6AltAUivy3/fVUHc7zH9RP3gqQ/j/lpMDl+HL9m3+n/ohZf1h/DkC+PJdz0sHl+HL9or+pHf1cP1vjP6if7vOxAE3+U14GuBxfrl8YHoOnoeU/3FIIIYQQQgghhPhFT1WqzR+9v730/jynuZyTFn6JzZ94fw6/fMJACCGEEEIIIYQQV9CzHTo++WjLlk3b/M6i3O/vkkVqWaT512jj334B8C/Rxp9bXOlnJiGEEEIIIcRf7fJJ/5XuRAghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESL3+X/w5sSt9jEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIcSV9n8CAAD//yldK4M=")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0)

2.926487267s ago: executing program 0 (id=1836):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x8000, &(0x7f0000000100), 0x1, 0x7a2, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x8)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x10012, r1, 0x1000)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000002800), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, 0x0, 0x0})

2.892040308s ago: executing program 0 (id=1837):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000140)={0x34, r2, 0x1, 0x70bd2c, 0x0, {{0x2}, {@val={0x8, 0x3, r1}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xd0}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]]}, 0x34}, 0x1, 0x0, 0x0, 0x8001}, 0x4040000)

1.583984592s ago: executing program 37 (id=1792):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
syz_emit_ethernet(0x22, &(0x7f0000000180)={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x37, 0x14, 0x67, 0x0, 0x7, 0x6, 0x0, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[], 0x36)

1.554629332s ago: executing program 0 (id=1839):
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f00000005c0)=ANY=[], 0x1, 0x728, &(0x7f0000000b80)="$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")
connect$unix(0xffffffffffffffff, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)

1.553643172s ago: executing program 1 (id=1840):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[], 0x48)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
socket$key(0xf, 0x3, 0x2)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

1.553391683s ago: executing program 8 (id=1841):
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xf604, 0x108008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8})
fcntl$lock(r3, 0x26, &(0x7f0000000080)={0x1, 0x0, 0x2007, 0x1fd})
fcntl$lock(r3, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x9, 0x401})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
fanotify_init(0x200, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x4, 0x0, 0x2, 0xa, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x0, 0x0, 0x10, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}]}, 0x50}, 0x1, 0x7}, 0x0)

1.372090335s ago: executing program 7 (id=1842):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000001c0)={0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r0, &(0x7f0000000000), 0xd)

414.509656ms ago: executing program 0 (id=1843):
unshare(0x20000400)
rt_sigqueueinfo(0x0, 0x21, 0x0)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0)

271.679807ms ago: executing program 1 (id=1844):
syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="155f350100eaa9e30900945fe4d43c040875b5a54a1067da78c6639321a6915f6a1a8a2b5c883e2593037ad168b1da06aa22d0d9f3c1ebfba3ca064d86d79faaf770b1462809356e13b2771c017b5e46"], 0x7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r4=>0x0})
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x3c, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0x0, 0xfac0c, 0x0]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x3c}}, 0x0)
ioctl$PIO_UNIMAP(0xffffffffffffffff, 0x4b67, 0x0)
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB], 0x7)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)

181.557618ms ago: executing program 0 (id=1845):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01)
syz_clone3(&(0x7f0000000cc0)={0x100, 0x0, 0x0, 0x0, {0xf}, 0x0, 0x0, 0x0, 0x0}, 0x58)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000c40)=""/122)

0s ago: executing program 0 (id=1846):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000)

kernel console output (not intermixed with test programs):

73:6575 context manager tried to acquire desc 0
[  136.562431][ T6575] binder: 6573:6575 ioctl c0306201 200003c0 returned -22
[  136.726589][ T6577] loop4: detected capacity change from 0 to 8192
[  137.632666][ T6588] 9pnet_fd: Insufficient options for proto=fd
[  139.883758][   T14] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  139.990854][ T6646] loop1: detected capacity change from 0 to 1024
[  140.060501][ T4413] hfsplus: b-tree write err: -5, ino 4
[  140.065116][   T14] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  140.067468][   T14] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.072177][   T14] usb 1-1: config 0 descriptor??
[  140.086776][   T14] cp210x 1-1:0.0: cp210x converter detected
[  141.177509][ T6671] loop3: detected capacity change from 0 to 512
[  141.227588][ T6624] loop0: detected capacity change from 0 to 512
[  141.238115][ T6624] ext4: Unknown parameter 'noacl'
[  141.242165][ T5449] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  141.265453][   T14] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  141.318242][ T6675] loop5: detected capacity change from 0 to 128
[  141.329105][   T14] usb 1-1: cp210x converter now attached to ttyUSB0
[  141.339272][ T6678] capability: warning: `syz.3.745' uses deprecated v2 capabilities in a way that may be insecure
[  141.356236][ T6675] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  141.358502][ T6675] FAT-fs (loop5): Filesystem has been set read-only
[  141.369024][ T6675] syz.5.754: attempt to access beyond end of device
[  141.369024][ T6675] loop5: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  141.393872][ T6675] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  141.396072][ T6675] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000100)
[  141.479759][ T3876] usb 1-1: USB disconnect, device number 7
[  141.485550][ T6681] netlink: 8 bytes leftover after parsing attributes in process `syz.4.746'.
[  141.491989][ T3876] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  141.510491][ T3876] cp210x 1-1:0.0: device disconnected
[  141.587453][ T6691] loop5: detected capacity change from 0 to 1024
[  141.635861][ T6694] loop4: detected capacity change from 0 to 8
[  141.699305][ T6694] SQUASHFS error: Unable to read inode 0xe3
[  142.735266][ T6706] netlink: 'syz.4.755': attribute type 16 has an invalid length.
[  142.748661][ T6706] netlink: 'syz.4.755': attribute type 17 has an invalid length.
[  142.772328][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.783919][ T6706] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  142.814073][ T6706] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  142.829770][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'.
[  142.906383][ T6715] loop3: detected capacity change from 0 to 128
[  142.934107][ T6712] netlink: 12 bytes leftover after parsing attributes in process `syz.0.760'.
[  142.978514][ T6719] loop4: detected capacity change from 0 to 16
[  142.981730][ T6719] erofs: (device loop4): mounted with root inode @ nid 36.
[  143.014863][ T4313] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000]
[  143.025096][ T6719] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000]
[  143.028603][ T6719] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -13 in[56, 4040] out[9000]
[  144.093811][ T4348] usb 1-1: new full-speed USB device number 8 using dummy_hcd
[  144.275269][ T4348] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  144.277802][ T4348] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  144.283911][ T4348] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  144.287467][ T4385] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.295578][ T4348] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  144.301006][ T4348] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.311150][ T4348] usb 1-1: Product: syz
[  144.312282][ T4348] usb 1-1: Manufacturer: syz
[  144.313448][ T4348] usb 1-1: SerialNumber: syz
[  144.317946][ T6737] loop3: detected capacity change from 0 to 128
[  144.337274][ T6721] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.342811][ T4348] usb 1-1: selecting invalid altsetting 1
[  144.389826][ T6737] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  144.415542][ T4385] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.460435][ T4312] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  144.464799][ T4312] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  144.467525][ T4312] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  144.470445][ T4312] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  144.472885][ T4312] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  144.475768][ T4312] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  144.571702][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  144.576361][ T4385] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.607729][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.610213][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.680528][ T4385] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.744634][ T4348] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS
[  144.746462][ T4348] cdc_ncm 1-1:1.0: bind() failure
[  144.772561][ T4348] usb 1-1: USB disconnect, device number 8
[  144.785650][ T6750] netlink: 60 bytes leftover after parsing attributes in process `syz.3.773'.
[  144.844912][ T6744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  144.847339][ T6744] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.924658][ T6753] netlink: 'syz.3.774': attribute type 27 has an invalid length.
[  145.061493][ T6760] loop3: detected capacity change from 0 to 512
[  145.121765][ T6760] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.775: casefold flag without casefold feature
[  145.150613][ T6740] chnl_net:caif_netlink_parms(): no params data found
[  145.174686][ T6760] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.775: couldn't read orphan inode 15 (err -117)
[  145.183254][ T6760] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  145.452951][ T6740] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.461619][ T6740] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.474607][ T6740] device bridge_slave_0 entered promiscuous mode
[  145.491218][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  145.581966][ T6740] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.584007][ T6740] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.586551][ T6740] device bridge_slave_1 entered promiscuous mode
[  145.634127][   T27] kauditd_printk_skb: 4 callbacks suppressed
[  145.634138][   T27] audit: type=1326 audit(145.600:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.653810][   T27] audit: type=1326 audit(145.600:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.659218][   T27] audit: type=1326 audit(145.600:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.693216][ T6774] loop1: detected capacity change from 0 to 512
[  145.711978][ T6740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.716471][ T6740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  145.737596][   T27] audit: type=1326 audit(145.600:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.757249][ T6774] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  145.765905][   T27] audit: type=1326 audit(145.600:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.773033][ T6774] EXT4-fs (loop1): orphan cleanup on readonly fs
[  145.775822][ T6774] EXT4-fs error (device loop1): ext4_ext_check_inode:520: inode #3: comm syz.1.777: pblk 0 bad header/extent: invalid eh_max - magic f30a, entries 7, max 0(0), depth 0(0)
[  145.805820][   T27] audit: type=1326 audit(145.600:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.811730][   T27] audit: type=1326 audit(145.600:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.832920][ T6774] EXT4-fs error (device loop1): ext4_quota_enable:7013: comm syz.1.777: Bad quota inode: 3, type: 0
[  145.847503][ T6740] team0: Port device team_slave_0 added
[  145.850595][ T6740] team0: Port device team_slave_1 added
[  145.859551][ T6774] EXT4-fs warning (device loop1): ext4_enable_quotas:7054: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  145.863409][ T6774] EXT4-fs (loop1): Cannot turn on quotas: error -117
[  145.865955][   T27] audit: type=1326 audit(145.600:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.874569][   T27] audit: type=1326 audit(145.600:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.880247][   T27] audit: type=1326 audit(145.610:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6772 comm="syz.1.777" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff9a95a768 code=0x7ffc0000
[  145.914759][ T6774] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  145.980520][ T4297] EXT4-fs (loop1): unmounting filesystem.
[  146.033498][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.037570][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.047989][ T6740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.060655][ T6796] loop1: detected capacity change from 0 to 8
[  146.063398][ T6740] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.070516][ T6740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.090395][ T6740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.095566][ T6796] SQUASHFS error: lzo decompression failed, data probably corrupt
[  146.097667][ T6796] SQUASHFS error: Failed to read block 0x91: -5
[  146.099290][ T6796] SQUASHFS error: Unable to read metadata cache entry [8f]
[  146.101167][ T6796] SQUASHFS error: Unable to read inode 0x11f
[  146.129613][ T6796] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.132097][ T6796] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.150279][ T4345] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  146.284990][ T6801] loop4: detected capacity change from 0 to 16
[  146.288572][ T6801] erofs: (device loop4): mounted with root inode @ nid 36.
[  146.326847][ T4345] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.329661][ T4345] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  146.334584][ T4345] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  146.337022][ T4345] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.337075][ T6740] device hsr_slave_0 entered promiscuous mode
[  146.339151][ T4345] usb 1-1: Product: syz
[  146.339167][ T4345] usb 1-1: Manufacturer: syz
[  146.339178][ T4345] usb 1-1: SerialNumber: syz
[  146.384589][ T6806] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  146.387537][ T6806] SQUASHFS error: Failed to read block 0x0: -5
[  146.423993][ T6740] device hsr_slave_1 entered promiscuous mode
[  146.462276][ T6811] loop4: detected capacity change from 0 to 512
[  146.494916][ T6811] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  146.497072][ T6811] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  146.507525][ T4312] Bluetooth: hci1: command 0x0409 tx timeout
[  146.513855][ T6811] EXT4-fs (loop4): orphan cleanup on readonly fs
[  146.535915][ T6811] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949761 > max in inode 13
[  146.539954][ T6811] EXT4-fs warning (device loop4): ext4_block_to_path:107: block 3279949762 > max in inode 13
[  146.543275][ T6811] EXT4-fs (loop4): 1 truncate cleaned up
[  146.544999][ T6811] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  146.557315][ T4345] usb 1-1: cannot find UAC_HEADER
[  146.567144][ T6811] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.790: dx entry: limit 65535 != root limit 120
[  146.579642][ T6811] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.790: Corrupt directory, running e2fsck is recommended
[  146.591775][ T4345] snd-usb-audio: probe of 1-1:1.0 failed with error -22
[  146.595212][ T4345] usb 1-1: USB disconnect, device number 9
[  146.649658][ T4301] EXT4-fs (loop4): unmounting filesystem.
[  146.790262][ T6826] 9pnet_fd: p9_fd_create_unix (6826): problem connecting socket: ./file0: -111
[  146.906955][ T5481] udevd[5481]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  146.975809][ T6831] xt_limit: Overflow, try lower: 687865856/40
[  147.748382][ T6836] loop4: detected capacity change from 0 to 1024
[  147.750623][ T6836] EXT4-fs: Ignoring removed orlov option
[  147.752047][ T6836] EXT4-fs: Ignoring removed nomblk_io_submit option
[  147.826499][ T6836] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  147.892653][ T4301] EXT4-fs (loop4): unmounting filesystem.
[  147.921724][ T6850] netlink: 'syz.1.801': attribute type 28 has an invalid length.
[  147.940416][ T6852] loop4: detected capacity change from 0 to 512
[  147.943294][ T6852] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  147.946614][ T6852] UDF-fs: Scanning with blocksize 512 failed
[  147.950482][ T6852] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  147.952582][ T6852] UDF-fs: Scanning with blocksize 1024 failed
[  147.958467][ T6852] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  147.960512][ T6852] UDF-fs: Scanning with blocksize 2048 failed
[  147.962779][ T6852] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  147.967635][ T6852] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.585169][ T4312] Bluetooth: hci1: command 0x041b tx timeout
[  148.943963][    T7] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  148.995274][ T6740] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  149.161331][    T7] usb 1-1: Using ep0 maxpacket: 32
[  149.164473][    T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 19
[  149.166898][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  149.169789][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.178243][    T7] usb 1-1: New USB device found, idVendor=05ac, idProduct=029c, bcdDevice= 0.00
[  149.181763][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.192731][    T7] usb 1-1: config 0 descriptor??
[  149.208983][ T4385] device hsr_slave_0 left promiscuous mode
[  149.244794][ T4385] device hsr_slave_1 left promiscuous mode
[  149.314502][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.316681][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.319503][ T4385] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.321966][ T4385] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.324742][ T4385] device bridge_slave_1 left promiscuous mode
[  149.326488][ T4385] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.364828][ T4385] device bridge_slave_0 left promiscuous mode
[  149.366682][ T4385] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.493903][ T4385] device veth1_macvtap left promiscuous mode
[  149.495593][ T4385] device veth0_macvtap left promiscuous mode
[  149.497242][ T4385] device veth1_vlan left promiscuous mode
[  149.498720][ T4385] device veth0_vlan left promiscuous mode
[  149.609885][    T7] apple 0003:05AC:029C.0002: unknown main item tag 0x0
[  149.614124][    T7] apple 0003:05AC:029C.0002: unknown main item tag 0x0
[  149.618282][    T7] apple 0003:05AC:029C.0002: unknown main item tag 0x0
[  149.628687][    T7] apple 0003:05AC:029C.0002: unknown main item tag 0x0
[  149.638544][    T7] apple 0003:05AC:029C.0002: unknown main item tag 0x0
[  149.643492][    T7] apple 0003:05AC:029C.0002: unknown main item tag 0x0
[  149.650738][    T7] apple 0003:05AC:029C.0002: unknown main item tag 0x0
[  149.657271][ T4312] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  149.658650][    T7] apple 0003:05AC:029C.0002: hidraw0: USB HID v0.00 Device [HID 05ac:029c] on usb-dummy_hcd.0-1/input0
[  149.662709][ T4300] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  149.672167][ T4300] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  149.674993][ T4300] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  149.677953][ T4300] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  149.681027][ T4300] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  149.818027][ T3876] usb 1-1: USB disconnect, device number 10
[  149.874423][ T6879] loop3: detected capacity change from 0 to 1024
[  149.941619][ T4379] hfsplus: b-tree write err: -5, ino 4
[  150.390307][ T6889] loop3: detected capacity change from 0 to 128
[  150.411517][ T6889] EXT4-fs (loop3): Test dummy encryption mode enabled
[  150.615576][ T6889] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  150.663980][ T4313] Bluetooth: hci1: command 0x040f tx timeout
[  150.710715][   T27] kauditd_printk_skb: 217 callbacks suppressed
[  150.710750][   T27] audit: type=1326 audit(150.610:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.003735][   T27] audit: type=1326 audit(150.870:314): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.011047][   T27] audit: type=1326 audit(150.970:315): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.039614][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  151.059316][   T27] audit: type=1326 audit(150.970:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.113683][   T27] audit: type=1326 audit(150.970:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.119444][   T27] audit: type=1326 audit(150.970:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.148831][   T27] audit: type=1326 audit(150.970:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.166299][   T27] audit: type=1326 audit(150.970:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.171997][   T27] audit: type=1326 audit(150.970:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.198896][   T27] audit: type=1326 audit(150.970:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6882 comm="syz.1.812" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffff9b84781c code=0x7ffc0000
[  151.264600][ T6896] loop3: detected capacity change from 0 to 256
[  151.265005][ T6898] loop0: detected capacity change from 0 to 256
[  151.266781][ T6896] exfat: Deprecated parameter 'utf8'
[  151.279302][ T6896] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d)
[  151.285910][ T6896] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000005)
[  151.288325][ T6896] exFAT-fs (loop3): Filesystem has been set read-only
[  151.291210][ T6896] exFAT-fs (loop3): failed to initialize root inode
[  151.346865][ T5481] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  152.359060][ T4313] Bluetooth: hci2: command 0x0409 tx timeout
[  152.727660][ T6914] loop3: detected capacity change from 0 to 2048
[  152.743784][ T4313] Bluetooth: hci1: command 0x0419 tx timeout
[  152.770509][ T6914] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.705296][ T4385] team0 (unregistering): Port device team_slave_1 removed
[  154.189909][ T4385] team0 (unregistering): Port device team_slave_0 removed
[  154.479023][ T4300] Bluetooth: hci2: command 0x041b tx timeout
[  154.542744][ T4385] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.285159][ T4385] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.504302][ T4300] Bluetooth: hci2: command 0x040f tx timeout
[  158.583960][ T4313] Bluetooth: hci2: command 0x0419 tx timeout
[  158.816222][ T4385] bond0 (unregistering): Released all slaves
[  159.037704][ T6740] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  159.084676][ T6740] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  159.130036][ T6740] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  159.528815][ T6740] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.579390][ T6740] 8021q: adding VLAN 0 to HW filter on device team0
[  159.586309][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.588745][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.591100][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  159.623840][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.626247][  T177] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.628161][  T177] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.631755][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  159.668420][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  159.672003][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  159.686196][ T4748] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.688109][ T4748] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.695402][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  159.719645][ T6998] loop0: detected capacity change from 0 to 2048
[  159.720865][ T6873] chnl_net:caif_netlink_parms(): no params data found
[  159.736579][ T6998] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.805952][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  159.808747][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  159.811701][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  159.828005][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  159.831933][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  159.841004][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  159.861606][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  159.871983][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  159.877034][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  159.969363][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  160.026058][ T7019] loop3: detected capacity change from 0 to 2048
[  160.045586][ T6740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  160.095271][ T7019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.145042][ T6873] bridge0: port 1(bridge_slave_0) entered blocking state
[  160.147114][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state
[  160.149594][ T6873] device bridge_slave_0 entered promiscuous mode
[  160.172741][ T6873] bridge0: port 2(bridge_slave_1) entered blocking state
[  160.176008][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state
[  160.178807][ T6873] device bridge_slave_1 entered promiscuous mode
[  160.262265][ T6873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  160.283224][ T6873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  160.316847][ T7033] binder: 7031:7033 tried to acquire reference to desc 0, got 1 instead
[  160.336662][ T7033] binder: 7031:7033 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  160.359235][ T7033] binder: 7033 RLIMIT_NICE not set
[  160.364018][ T7033] binder: 7033 RLIMIT_NICE not set
[  160.377479][   T24] binder: release 7031:7033 transaction 23 out, still active
[  160.379550][   T24] binder: undelivered TRANSACTION_COMPLETE
[  160.397733][ T7037] loop0: detected capacity change from 0 to 256
[  160.399954][ T7037] exfat: Deprecated parameter 'utf8'
[  160.430475][   T24] binder: release 7031:7033 transaction 23 in, still active
[  160.433320][   T24] binder: send failed reply for transaction 23, target dead
[  160.441623][ T6873] team0: Port device team_slave_0 added
[  160.452872][ T6873] team0: Port device team_slave_1 added
[  160.493459][ T7037] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xc65ab44c, utbl_chksum : 0xe619d30d)
[  160.518035][ T7037] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000005)
[  160.520550][ T7037] exFAT-fs (loop0): Filesystem has been set read-only
[  160.522338][ T7037] exFAT-fs (loop0): failed to initialize root inode
[  161.523545][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.525837][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.573723][ T6873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.647095][ T7055] loop3: detected capacity change from 0 to 512
[  161.648035][   T39] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.699447][ T6873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.701662][ T6873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.723707][ T6873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.738096][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  161.740222][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  161.742737][ T7055] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  161.775448][   T39] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.796279][ T6740] 8021q: adding VLAN 0 to HW filter on device batadv0
[  161.906263][   T39] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  161.975474][ T6873] device hsr_slave_0 entered promiscuous mode
[  161.984837][ T6873] device hsr_slave_1 entered promiscuous mode
[  162.033948][ T6873] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  162.035991][ T6873] Cannot create hsr debugfs directory
[  162.058006][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  162.116469][   T39] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.213042][ T7086] loop0: detected capacity change from 0 to 1024
[  162.301957][ T7089] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  162.304692][ T7089] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  162.795326][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  162.839521][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  163.298365][ T6740] device veth0_vlan entered promiscuous mode
[  163.310166][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  163.312744][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  163.330494][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  163.332984][ T4748] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  163.342273][ T6740] device veth1_vlan entered promiscuous mode
[  163.585270][ T6873] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  163.873751][ T4313] Bluetooth: hci3: command 0x0406 tx timeout
[  164.230242][ T6873] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  164.252418][ T7102] loop0: detected capacity change from 0 to 256
[  164.267007][ T6873] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  164.273455][ T7102] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  164.285847][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  164.288361][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  164.290825][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  164.293528][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  164.322992][ T6740] device veth0_macvtap entered promiscuous mode
[  164.336244][ T6873] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  164.391333][ T6740] device veth1_macvtap entered promiscuous mode
[  164.504429][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.507187][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.521107][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.524417][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.527104][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.529780][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.532345][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  164.573776][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.584671][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_0
[  164.600094][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.602825][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.613750][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.623763][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.626379][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.658559][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.690052][ T6740] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  164.704688][ T6740] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  164.708539][ T6740] batman_adv: batadv0: Interface activated: batadv_slave_1
[  165.625549][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  165.628158][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  165.632689][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  165.657686][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  165.677273][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  166.103939][ T6740] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  166.166409][ T6740] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  166.227530][ T6740] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  166.298251][ T6740] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  166.779558][ T7150] netlink: 8 bytes leftover after parsing attributes in process `syz.3.895'.
[  166.839496][ T6873] 8021q: adding VLAN 0 to HW filter on device bond0
[  166.954486][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.956871][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.991772][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  167.058395][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  167.060882][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  167.066657][ T4385] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  167.068878][ T4385] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  167.075993][ T6873] 8021q: adding VLAN 0 to HW filter on device team0
[  167.080068][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  167.171331][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  167.174807][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  167.177351][ T4900] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.179241][ T4900] bridge0: port 1(bridge_slave_0) entered forwarding state
[  167.181983][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  167.248945][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  167.251794][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  167.261702][ T4900] bridge0: port 2(bridge_slave_1) entered blocking state
[  167.263690][ T4900] bridge0: port 2(bridge_slave_1) entered forwarding state
[  167.354120][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  167.357553][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  167.360668][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  167.391247][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  167.395828][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  167.398618][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  167.401318][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  167.413711][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  167.416799][  T419] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  167.532777][ T6873] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  167.540256][ T6873] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  167.543040][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  167.552634][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  167.559421][ T7192] loop6: detected capacity change from 0 to 2048
[  167.579284][ T7192] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  168.385562][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  168.387629][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  168.398418][ T6873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  168.437431][   T39] device hsr_slave_0 left promiscuous mode
[  168.483859][   T39] device hsr_slave_1 left promiscuous mode
[  168.564155][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.569061][   T39] batman_adv: batadv0: Removing interface: batadv_slave_0
[  168.649415][ T7259] loop3: detected capacity change from 0 to 8
[  168.669745][   T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.671913][   T39] batman_adv: batadv0: Removing interface: batadv_slave_1
[  168.685183][   T39] device bridge_slave_1 left promiscuous mode
[  168.690244][   T39] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.714145][ T7259] SQUASHFS error: Failed to read block 0xfffffffd01ea: -5
[  168.716239][ T7259] unable to read xattr id index table
[  168.903527][   T39] device bridge_slave_0 left promiscuous mode
[  168.952848][   T39] bridge0: port 1(bridge_slave_0) entered disabled state
[  169.484869][   T39] device veth1_macvtap left promiscuous mode
[  169.486586][   T39] device veth0_macvtap left promiscuous mode
[  169.488262][   T39] device veth1_vlan left promiscuous mode
[  169.489811][   T39] device veth0_vlan left promiscuous mode
[  171.984662][ T7315] xt_limit: Overflow, try lower: 687865856/40
[  174.503588][    C1] sched: RT throttling activated
[  174.897208][ T7328] input: syz0 as /devices/virtual/input/input3
[  175.027545][ T7332] loop6: detected capacity change from 0 to 256
[  175.030965][ T7332] exfat: Deprecated parameter 'namecase'
[  175.045395][ T7332] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  175.748318][   T39] team0 (unregistering): Port device team_slave_1 removed
[  175.936063][   T39] team0 (unregistering): Port device team_slave_0 removed
[  176.107832][   T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.396631][   T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.132254][ T7351] af_packet: tpacket_rcv: packet too big, clamped from 265 to 4294967272. macoff=96
[  179.429246][   T39] bond0 (unregistering): Released all slaves
[  179.660783][ T7275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.941'.
[  179.841894][ T7374] loop6: detected capacity change from 0 to 512
[  179.864491][ T7374] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  180.356846][ T7374] EXT4-fs (loop6): 1 orphan inode deleted
[  180.406459][ T7374] EXT4-fs (loop6): 1 truncate cleaned up
[  180.466813][ T7374] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  180.731713][ T7374] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  180.751495][ T7374] EXT4-fs (loop6): Remounting filesystem read-only
[  180.972103][ T6740] EXT4-fs (loop6): unmounting filesystem.
[  180.978996][ T7399] loop0: detected capacity change from 0 to 512
[  181.012156][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  181.024884][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.036489][ T7399] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.984: corrupted inode contents
[  181.044050][ T7399] EXT4-fs error (device loop0): ext4_dirty_inode:6118: inode #16: comm syz.0.984: mark_inode_dirty error
[  181.051482][ T7399] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.984: corrupted inode contents
[  181.074294][ T7399] EXT4-fs error (device loop0): __ext4_ext_dirty:202: inode #16: comm syz.0.984: mark_inode_dirty error
[  181.092609][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  181.095504][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.097968][ T7399] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.984: corrupted inode contents
[  181.098863][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.103390][ T7399] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  181.122596][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.123910][ T7399] EXT4-fs error (device loop0): ext4_do_update_inode:5253: inode #16: comm syz.0.984: corrupted inode contents
[  181.128730][ T7399] EXT4-fs error (device loop0): ext4_truncate:4312: inode #16: comm syz.0.984: mark_inode_dirty error
[  181.132045][ T7399] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  181.139116][ T7399] EXT4-fs (loop0): 1 truncate cleaned up
[  181.140635][ T7399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  181.141886][ T6873] device veth0_vlan entered promiscuous mode
[  181.160870][ T4413] __quota_error: 1115 callbacks suppressed
[  181.160883][ T4413] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  181.185025][ T6873] device veth1_vlan entered promiscuous mode
[  181.195946][ T7406] netlink: 8 bytes leftover after parsing attributes in process `syz.6.985'.
[  181.204832][ T4413] EXT4-fs error (device loop0): ext4_release_dquot:6838: comm kworker/u4:8: Failed to release dquot type 1
[  181.258010][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  181.260654][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  181.263121][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  181.272437][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  181.280851][ T6873] device veth0_macvtap entered promiscuous mode
[  181.298865][ T6873] device veth1_macvtap entered promiscuous mode
[  181.339070][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.353488][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.371234][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.380893][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.383553][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.392964][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.397899][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  181.400835][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.409604][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.410645][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  181.413274][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.443524][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.446537][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.449282][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.460935][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  181.894841][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  181.982783][ T6873] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  182.080860][ T6873] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  182.287403][ T6873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.297564][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  182.300104][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  182.302546][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  182.318282][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  182.328502][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.363413][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  182.384790][ T6873] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  182.387117][ T6873] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  182.389424][ T6873] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  182.409215][ T6873] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.565248][ T7433] loop0: detected capacity change from 0 to 512
[  182.580354][ T7433] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  182.617943][ T7433] EXT4-fs (loop0): 1 truncate cleaned up
[  182.619474][ T7433] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  182.631783][ T7433] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.993: corrupted in-inode xattr
[  182.641486][ T7433] EXT4-fs (loop0): Remounting filesystem read-only
[  182.643276][ T7433] EXT4-fs warning (device loop0): ext4_xattr_set_entry:1732: inode #15: comm syz.0.993: unable to update i_inline_off
[  182.693988][ T4749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.696218][ T4749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.719775][ T7433] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2195: inode #15: comm syz.0.993: corrupted in-inode xattr
[  182.734861][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  182.737892][ T7433] EXT4-fs (loop0): Remounting filesystem read-only
[  182.740448][ T7439] EXT4-fs error (device loop0): ext4_xattr_ibody_list:748: inode #15: comm syz.0.993: corrupted in-inode xattr
[  182.779291][ T7439] EXT4-fs (loop0): Remounting filesystem read-only
[  182.804433][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.806791][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.811681][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.842441][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  182.900575][ T7450] loop6: detected capacity change from 0 to 512
[  182.906848][ T7450] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.997: invalid indirect mapped block 256 (level 2)
[  182.910957][ T7450] EXT4-fs (loop6): 2 truncates cleaned up
[  182.912519][ T7450] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  182.976741][ T6740] EXT4-fs (loop6): unmounting filesystem.
[  182.988330][ T7459] loop3: detected capacity change from 0 to 512
[  182.993699][ T7457] netlink: 27 bytes leftover after parsing attributes in process `syz.7.808'.
[  183.099109][ T7459] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  183.532183][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  184.280384][ T7486] loop0: detected capacity change from 0 to 128
[  184.282653][ T7486] FAT-fs (loop0): Unrecognized mount option "vfat" or missing value
[  184.345015][ T4300] Bluetooth: hci4: command 0x0406 tx timeout
[  184.714202][ T7498] binder: BINDER_SET_CONTEXT_MGR already set
[  184.715910][ T7498] binder: 7481:7498 ioctl 4018620d 20000040 returned -16
[  184.732764][ T7498] binder: 7481:7498 got transaction to invalid handle, 1
[  184.734859][ T7498] binder: 7498:7481 cannot find target node
[  184.736486][ T7498] binder: 7481:7498 transaction async to 0:0 failed 26/29201/-22, size 0-0 line 3054
[  185.309149][ T4348] binder: undelivered TRANSACTION_ERROR: 29201
[  185.487656][ T7504] loop7: detected capacity change from 0 to 2048
[  185.666825][ T7504] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  187.386638][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  187.388400][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  187.993950][ T7503] UDF-fs: warning (device loop7): udf_truncate_tail_extent: Too long extent after EOF in inode 1436: i_size: 98304 lbcount: 102400 extent 129+101376
[  188.981846][ T7560] loop3: detected capacity change from 0 to 256
[  189.022844][ T7560] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fe7f, chksum : 0xff48ad06, utbl_chksum : 0xe619d30d)
[  190.108252][ T7582] loop7: detected capacity change from 0 to 128
[  190.137070][ T7582] UDF-fs: bad mount option "çô"t–¬°03Û±Qà©mî!ÉiÕûôœÉ%˜8ñ7×?5ÆGÎ@ÊCÇÕêž©óm�§¯DWI  Ú”ùà2�£
»0•#@ÎòPcHÜ.eæq[ÊÅU%Š…I<öâp›µbÌ™�õDp®3½=fç±>�ÀV2¢¸ÕÂ$©�óÅÄ1“ß7&ŽGÂÆ…<xKJo«J�“²”`•ˆ|�ÿÛÏ€û	¸mÑðeÜ…¿Ü·Ç˜ÄAJ�aK¯…9Y¿/uÀUmR3°ÄÔ¹GLžð	hÿÇcÃ…" or missing value
[  191.145968][ T7607] loop6: detected capacity change from 0 to 1024
[  191.148157][ T7607] EXT4-fs: Ignoring removed nobh option
[  191.149675][ T7607] EXT4-fs: Ignoring removed i_version option
[  191.299703][ T7607] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 2: comm syz.6.1040: lblock 2 mapped to illegal pblock 2 (length 1)
[  191.334309][ T7607] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  191.336550][ T7607] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 48: comm syz.6.1040: lblock 0 mapped to illegal pblock 48 (length 1)
[  191.356006][ T7607] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  191.359565][ T7607] EXT4-fs error (device loop6): ext4_acquire_dquot:6802: comm syz.6.1040: Failed to acquire dquot type 0
[  191.363206][ T7607] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  191.392699][ T7607] EXT4-fs error (device loop6): ext4_evict_inode:279: inode #11: comm syz.6.1040: mark_inode_dirty error
[  191.396166][    T7] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  191.400831][ T7607] EXT4-fs warning (device loop6): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  191.411013][ T7607] EXT4-fs (loop6): 1 orphan inode deleted
[  191.412615][ T7607] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  191.436268][ T4385] EXT4-fs error (device loop6): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:7: lblock 1 mapped to illegal pblock 1 (length 1)
[  191.467435][ T4385] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  191.473175][ T7621] dccp_invalid_packet: P.Data Offset(10) too large
[  191.482960][ T4385] EXT4-fs error (device loop6): ext4_release_dquot:6838: comm kworker/u4:7: Failed to release dquot type 0
[  191.508562][ T6740] EXT4-fs (loop6): unmounting filesystem.
[  191.510386][ T6740] EXT4-fs error (device loop6): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0
[  191.533070][ T6740] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  191.547466][ T6740] EXT4-fs error (device loop6): ext4_quota_off:7108: inode #3: comm syz-executor: mark_inode_dirty error
[  191.578816][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.581421][    T7] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  191.587887][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.599167][    T7] usb 1-1: config 0 descriptor??
[  191.629988][ T7633] loop6: detected capacity change from 0 to 512
[  191.707344][ T7633] EXT4-fs (loop6): 1 orphan inode deleted
[  191.708847][ T7633] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  191.747411][ T7638] loop7: detected capacity change from 0 to 2048
[  191.753848][ T4749] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  191.756591][ T4749] EXT4-fs error (device loop6): ext4_release_dquot:6838: comm kworker/u4:10: Failed to release dquot type 1
[  191.767285][ T7638] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.805673][    T7] usb 1-1: string descriptor 0 read error: -71
[  191.807820][    T7] hub 1-1:0.0: bad descriptor, ignoring hub
[  191.809517][    T7] hub: probe of 1-1:0.0 failed with error -5
[  191.862362][ T6740] EXT4-fs (loop6): unmounting filesystem.
[  192.034293][    T7] usb 1-1: reset high-speed USB device number 11 using dummy_hcd
[  192.267997][    T7] usb 1-1: device firmware changed
[  192.324404][    T7] usb 1-1: USB disconnect, device number 11
[  192.870301][ T7659] loop6: detected capacity change from 0 to 256
[  192.928582][ T7659] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  193.187545][    T7] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  194.154463][    T7] usb 1-1: device descriptor read/all, error -71
[  194.231043][ T7680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.264038][ T7680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.463771][ T7711] loop6: detected capacity change from 0 to 128
[  195.750746][ T7718] loop7: detected capacity change from 0 to 512
[  195.777861][ T7722] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1072'.
[  195.852275][ T7718] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  195.927210][ T4313] Bluetooth: hci2: unexpected event 0x18 length: 5 < 23
[  196.007857][ T7731] loop3: detected capacity change from 0 to 256
[  196.036224][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  196.558543][ T7757] loop6: detected capacity change from 0 to 512
[  196.564013][ T7757] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  196.595072][ T7757] EXT4-fs (loop6): 1 truncate cleaned up
[  196.596825][ T7757] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  197.629033][ T6740] EXT4-fs (loop6): unmounting filesystem.
[  198.175023][ T7799] loop6: detected capacity change from 0 to 512
[  198.177401][ T7799] EXT4-fs: inline encryption not supported
[  198.179356][ T7799] EXT4-fs: Ignoring removed nobh option
[  198.234896][ T7799] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  198.397519][ T6740] EXT4-fs (loop6): unmounting filesystem.
[  198.531166][ T7813] loop3: detected capacity change from 0 to 1024
[  198.600449][ T7813] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  198.788165][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  198.898059][ T7842] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1112'.
[  198.911414][ T7842] device lo entered promiscuous mode
[  199.147069][ T7855] loop6: detected capacity change from 0 to 16
[  199.163182][ T7855] erofs: (device loop6): mounted with root inode @ nid 36.
[  199.597380][ T7878] binder: 7877:7878 ioctl c0306201 20000480 returned -14
[  199.628394][ T7878] binder: 7877:7878 tried to acquire reference to desc 0, got 1 instead
[  199.663901][ T7878] binder: 7877:7878 got transaction with invalid parent offset or type
[  199.666307][ T7878] binder: 7877:7878 transaction call to 7877:0 failed 31/29201/-22, size 80-24 line 3448
[  199.681705][   T24] binder: undelivered TRANSACTION_ERROR: 29201
[  203.740060][ T7993] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1161'.
[  203.744052][ T7992] loop7: detected capacity change from 0 to 2048
[  203.746591][ T7992] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=3932051, location=3932051
[  203.770006][ T7992] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.860947][ T8003] loop3: detected capacity change from 0 to 512
[  203.929269][ T8003] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=f002e018, mo2=0002]
[  203.931469][ T8003] System zones: 0-2, 18-18, 34-34
[  203.987630][ T8003] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[  204.002397][ T8012] 9pnet_fd: Insufficient options for proto=fd
[  204.023016][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.1165: corrupted inode contents
[  204.049244][ T8003] EXT4-fs error (device loop3): ext4_dirty_inode:6118: inode #16: comm syz.3.1165: mark_inode_dirty error
[  204.062540][ T8018] loop6: detected capacity change from 0 to 764
[  204.065044][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.1165: corrupted inode contents
[  204.071726][ T8003] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #16: comm syz.3.1165: mark_inode_dirty error
[  204.099469][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.1165: corrupted inode contents
[  204.109249][ T8003] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  204.143854][ T8003] EXT4-fs error (device loop3): ext4_do_update_inode:5253: inode #16: comm syz.3.1165: corrupted inode contents
[  204.150107][ T8003] EXT4-fs error (device loop3): ext4_truncate:4312: inode #16: comm syz.3.1165: mark_inode_dirty error
[  204.168795][ T8020] netlink: 'syz.1.1170': attribute type 4 has an invalid length.
[  204.171047][ T8003] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  204.181305][ T8003] EXT4-fs (loop3): 1 truncate cleaned up
[  204.182860][ T8003] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  204.196140][   T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  204.198709][   T11] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1
[  204.280959][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  204.379280][ T8033] loop3: detected capacity change from 0 to 512
[  205.194334][ T8033] EXT4-fs (loop3): 1 orphan inode deleted
[  205.195939][ T8033] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  205.213878][   T11] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  205.216703][   T11] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:1: Failed to release dquot type 1
[  205.404922][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  205.406655][ T4899] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  205.409308][ T4899] EXT4-fs error (device loop3): ext4_release_dquot:6838: comm kworker/u4:13: Failed to release dquot type 1
[  205.586316][ T8062] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  205.673412][ T8069] loop3: detected capacity change from 0 to 512
[  205.676035][ T8069] EXT4-fs: Ignoring removed oldalloc option
[  205.702010][ T8069] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  205.750697][ T8069] EXT4-fs (loop3): 1 truncate cleaned up
[  205.752359][ T8069] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  206.829511][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  207.968183][ T8121] loop6: detected capacity change from 0 to 1764
[  209.556936][ T8145] loop7: detected capacity change from 0 to 128
[  209.603203][ T8145] EXT4-fs (loop7): Test dummy encryption mode enabled
[  209.985464][ T8145] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  210.270924][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  210.646340][ T8171] loop6: detected capacity change from 0 to 512
[  210.652889][ T8171] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  210.705607][ T8171] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  210.775683][ T6740] EXT4-fs (loop6): unmounting filesystem.
[  210.916679][ T8185] binder: 8184:8185 ioctl 400c620e 20000400 returned -22
[  210.937504][ T4343] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  211.128230][ T4343] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  211.131106][ T4343] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[  211.136139][ T4343] usb 1-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  211.140706][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.157836][ T4343] usb 1-1: config 0 descriptor??
[  211.493534][ T8218] loop7: detected capacity change from 0 to 512
[  211.562019][ T8218] EXT4-fs (loop7): 1 orphan inode deleted
[  211.569881][ T8224] loop3: detected capacity change from 0 to 512
[  211.574509][ T8224] EXT4-fs: Ignoring removed i_version option
[  211.578348][ T4748] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  211.580955][ T4748] EXT4-fs error (device loop7): ext4_release_dquot:6838: comm kworker/u4:9: Failed to release dquot type 1
[  211.584276][ T8218] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  211.638978][ T8224] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  211.650274][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1232'.
[  211.769964][ T4343] usb 1-1: Direct firmware load for ar3k/ramps_0x695b989e_0.dfu failed with error -2
[  211.772529][ T4343] usb 1-1: Falling back to sysfs fallback for: ar3k/ramps_0x695b989e_0.dfu
[  211.798818][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  211.845910][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  211.847623][ T4900] Quota error (device loop7): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  211.850522][ T4900] EXT4-fs error (device loop7): ext4_release_dquot:6838: comm kworker/u4:14: Failed to release dquot type 1
[  211.983474][ T8244] loop7: detected capacity change from 0 to 2048
[  212.059334][ T8244] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  212.150839][ T8257] loop3: detected capacity change from 0 to 128
[  212.179953][ T8257] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  212.250687][ T8257] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-ce"
[  212.285563][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  212.296018][ T8257] fscrypt: loop3: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  212.431305][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  212.608233][ T8276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  212.619224][ T8276] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  212.627363][ T8278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1250'.
[  213.000517][ T8298] loop6: detected capacity change from 0 to 512
[  213.014732][ T8298] EXT4-fs: Ignoring removed oldalloc option
[  213.023454][ T8298] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  213.043150][ T8298] EXT4-fs (loop6): 1 truncate cleaned up
[  213.048040][ T8298] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  213.155351][ T8294] loop0: detected capacity change from 0 to 8192
[  213.328076][ T6740] EXT4-fs (loop6): unmounting filesystem.
[  213.505072][ T8325] loop3: detected capacity change from 0 to 512
[  213.519323][ T8325] EXT4-fs (loop3): Test dummy encryption mode enabled
[  213.554889][ T8325] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1269: invalid indirect mapped block 4294967295 (level 1)
[  213.603957][ T8327] loop6: detected capacity change from 0 to 1024
[  213.606661][ T8325] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.1269: invalid indirect mapped block 4294967295 (level 1)
[  213.650265][ T8325] EXT4-fs (loop3): 2 truncates cleaned up
[  213.652880][ T8325] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  213.672450][ T8325] EXT4-fs error (device loop3): ext4_get_parent:1906: inode #11: comm syz.3.1269: bad parent inode number: 3
[  213.777782][ T4643] EXT4-fs (loop3): unmounting filesystem.
[  214.064802][ T8335] loop0: detected capacity change from 0 to 4096
[  214.565268][ T8335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  214.576572][ T8334] fs-verity: sha256 using implementation "sha256-ce"
[  214.785928][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  215.297666][   T27] audit: type=1326 audit(215.260:1438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc15a768 code=0x7ffc0000
[  215.308240][   T27] audit: type=1326 audit(215.270:1439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=95 compat=0 ip=0xffffbc15a768 code=0x7ffc0000
[  215.316521][   T27] audit: type=1326 audit(215.280:1440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc15a768 code=0x7ffc0000
[  215.336841][   T27] audit: type=1326 audit(215.280:1441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8385 comm="syz.3.1289" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbc15a768 code=0x7ffc0000
[  215.667043][ T8405] loop0: detected capacity change from 0 to 1024
[  216.903934][ T4313] Bluetooth: hci2: command 0x0405 tx timeout
[  217.031936][   T27] audit: type=1326 audit(216.990:1442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5a768 code=0x7ffc0000
[  217.070414][   T27] audit: type=1326 audit(217.030:1443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=199 compat=0 ip=0xffffbab5a768 code=0x7ffc0000
[  217.094864][   T27] audit: type=1326 audit(217.060:1444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8444 comm="syz.0.1309" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffbab5a768 code=0x7ffc0000
[  217.130453][ T8450] loop7: detected capacity change from 0 to 256
[  217.143977][ T8450] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  217.146792][ T8450] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  217.186761][ T8450] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  217.208909][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1315'.
[  217.311971][ T8460] loop3: detected capacity change from 0 to 128
[  217.343741][ T8460] FAT-fs (loop3): bogus sectors per cluster 0
[  217.345572][ T8460] FAT-fs (loop3): Can't find a valid FAT filesystem
[  217.385741][ T7020] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  217.390124][ T4300] Bluetooth: hci4: Malformed LE Event: 0x1d
[  217.702310][ T8483] binder: 8480:8483 got transaction to invalid handle, 1
[  217.723988][ T8483] binder: 8483:8480 cannot find target node
[  217.725601][ T8483] binder: 8480:8483 transaction async to 0:0 failed 37/29201/-22, size 72-24 line 3054
[  217.728663][ T4878] binder: undelivered TRANSACTION_ERROR: 29201
[  217.803777][ T8488] capability: warning: `syz.7.1331' uses 32-bit capabilities (legacy support in use)
[  218.129410][ T8507] loop0: detected capacity change from 0 to 256
[  218.169452][ T7014] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  218.277935][ T8515] loop0: detected capacity change from 0 to 512
[  218.316038][ T8517] binder: 8514:8517 got transaction to invalid handle, 1
[  218.317904][ T8517] binder: 8517:8514 cannot find target node
[  218.319466][ T8517] binder: 8514:8517 transaction async to 0:0 failed 41/29201/-22, size 72-24 line 3054
[  218.346410][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[  218.354615][ T8522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  218.357019][ T8522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  218.374189][ T8520] loop6: detected capacity change from 0 to 1024
[  218.394573][ T8515] [EXT4 FS bs=4096, gc=1, bpg=71, ipg=32, mo=e04ec018, mo2=0000]
[  218.396593][ T8515] System zones: 0-2, 18-18, 34-34
[  218.414768][ T8515] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  218.418595][ T8515] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  218.421115][ T8515] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.1341: Failed to acquire dquot type 0
[  218.460124][ T8515] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  218.475148][ T8515] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  218.478003][ T8515] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.1341: Failed to acquire dquot type 0
[  218.482349][ T8515] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[  218.496990][ T8515] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  218.499771][ T8515] EXT4-fs error (device loop0): ext4_acquire_dquot:6802: comm syz.0.1341: Failed to acquire dquot type 0
[  218.643153][ T8515] EXT4-fs (loop0): 1 orphan inode deleted
[  218.654261][ T8515] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  218.695246][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  219.543493][ T8542] loop7: detected capacity change from 0 to 256
[  219.614656][ T7014] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  220.661646][ T8566] binder: tried to use weak ref as strong ref
[  220.663380][ T8566] binder: 8565:8566 Acquire 1 refcount change on invalid ref 0 ret -22
[  220.673538][ T8567] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1356'.
[  220.682502][ T8566] binder: 8565:8566 got transaction to invalid handle, 1
[  220.693869][ T8566] binder: 8566:8565 cannot find target node
[  220.695528][ T8566] binder: 8565:8566 transaction async to 0:0 failed 44/29201/-22, size 72-24 line 3054
[  220.712346][ T4878] binder: undelivered TRANSACTION_ERROR: 29201
[  220.772535][ T8569] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  220.819565][ T4313] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  220.823892][ T4313] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  220.827023][ T4313] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  220.835479][ T4313] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  220.853094][ T4313] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  220.855619][ T4313] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.878724][ T8596] loop7: detected capacity change from 0 to 256
[  222.000801][ T8607] binder: tried to use weak ref as strong ref
[  222.002035][ T8606] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  222.024360][ T8607] binder: 8604:8607 Acquire 1 refcount change on invalid ref 0 ret -22
[  222.026889][ T8607] binder: 8604:8607 got transaction to invalid handle, 1
[  222.028735][ T8607] binder: 8607:8604 cannot find target node
[  222.071652][ T8609] loop7: detected capacity change from 0 to 128
[  222.092995][ T8609] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  222.239881][ T8609] fscrypt: loop7: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  222.301043][ T8575] chnl_net:caif_netlink_parms(): no params data found
[  222.306612][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  222.942077][ T4313] Bluetooth: hci1: command 0x0409 tx timeout
[  223.084410][ T8575] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.114109][ T8575] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.116716][ T8575] device bridge_slave_0 entered promiscuous mode
[  223.328509][ T8575] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.401467][ T8575] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.552170][ T8575] device bridge_slave_1 entered promiscuous mode
[  223.976327][ T8575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.011225][ T8575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.113193][ T8655] device wlan1 entered promiscuous mode
[  224.115984][ T8657] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  224.136737][ T8575] team0: Port device team_slave_0 added
[  224.139937][ T8575] team0: Port device team_slave_1 added
[  224.156558][ T8659] binder: tried to use weak ref as strong ref
[  224.158293][ T8659] binder: 8658:8659 Acquire 1 refcount change on invalid ref 0 ret -22
[  224.174604][ T8659] binder: 8658:8659 got transaction to invalid handle, 1
[  224.187040][ T8659] binder_debug: 2 callbacks suppressed
[  224.187051][ T8659] binder: 8659:8658 cannot find target node
[  224.198548][ T8659] binder: 8658:8659 transaction async to 0:0 failed 50/29201/-22, size 72-24 line 3054
[  224.202206][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.215994][   T14] binder: undelivered TRANSACTION_ERROR: 29201
[  224.217986][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.238068][ T8575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.242213][ T8575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.258674][ T8575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.290958][ T8665] loop0: detected capacity change from 0 to 2048
[  224.297825][ T8575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.323258][ T8665] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.364415][ T8668] loop7: detected capacity change from 0 to 2048
[  224.431226][ T8575] device hsr_slave_0 entered promiscuous mode
[  224.494577][ T8575] device hsr_slave_1 entered promiscuous mode
[  224.534854][ T8575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.536906][ T8575] Cannot create hsr debugfs directory
[  224.703075][ T8681] loop0: detected capacity change from 0 to 256
[  224.723921][ T8681] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  224.984163][ T4313] Bluetooth: hci1: command 0x041b tx timeout
[  225.686073][ T8575] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  225.706903][ T8694] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  225.755487][ T8575] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  225.785862][ T8575] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  225.817738][ T8575] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  225.827235][ T8700] loop0: detected capacity change from 0 to 512
[  225.859408][ T8700] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  225.861619][ T8700] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002]
[  225.866210][ T8700] EXT4-fs (loop0): orphan cleanup on readonly fs
[  225.871336][ T8700] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949761 > max in inode 13
[  225.884906][ T8700] EXT4-fs warning (device loop0): ext4_block_to_path:107: block 3279949762 > max in inode 13
[  225.887957][ T8700] EXT4-fs (loop0): 1 truncate cleaned up
[  225.889465][ T8700] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  225.920378][ T8700] EXT4-fs warning (device loop0): dx_probe:893: inode #2: comm syz.0.1396: dx entry: limit 65535 != root limit 120
[  225.957254][ T8700] EXT4-fs warning (device loop0): dx_probe:966: inode #2: comm syz.0.1396: Corrupt directory, running e2fsck is recommended
[  226.022774][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  226.054846][ T8575] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.076365][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  226.078756][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  226.082769][ T8575] 8021q: adding VLAN 0 to HW filter on device team0
[  226.112668][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  226.115785][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  226.118373][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state
[  226.120238][ T4379] bridge0: port 1(bridge_slave_0) entered forwarding state
[  226.130435][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  226.134483][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  226.137729][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  226.140411][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.142330][ T4379] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.145472][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  226.167899][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  226.179783][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  226.193250][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  226.205602][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  226.236499][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  226.250450][ T8575] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  226.253227][ T8575] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  226.270746][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  226.273465][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  226.276790][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  226.285292][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  226.295236][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  226.302405][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  227.154068][ T4313] Bluetooth: hci1: command 0x040f tx timeout
[  227.244404][ T8736] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  227.246843][ T8736] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  227.519783][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  227.521944][ T4899] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  227.534808][ T8575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  227.544399][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1411'.
[  227.787752][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  227.807004][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  227.831744][ T8575] device veth0_vlan entered promiscuous mode
[  227.838839][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  227.841516][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  227.851190][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  227.854619][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  227.998339][ T8575] device veth1_vlan entered promiscuous mode
[  228.021124][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  228.031993][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  228.038188][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  228.394792][  T177] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  228.835969][ T8575] device veth0_macvtap entered promiscuous mode
[  228.842399][ T8575] device veth1_macvtap entered promiscuous mode
[  228.858450][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.861307][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.864251][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.866928][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.869572][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.881277][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.884134][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.886996][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.889611][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.892299][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.906508][ T8793] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1416'.
[  228.911117][ T8790] binder: 8787:8790 tried to acquire reference to desc 0, got 1 instead
[  228.913958][ T8793] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1416'.
[  228.917393][ T8790] binder_alloc: 8787: binder_alloc_buf, no vma
[  228.919403][ T8790] binder: cannot allocate buffer: vma cleared, target dead or dying
[  228.919438][ T8790] binder: 8787:8790 transaction async to 8787:0 failed 55/29189/-3, size 72-24 line 3239
[  228.920601][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.924683][   T22] binder: undelivered TRANSACTION_ERROR: 29189
[  228.930496][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.933308][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.936163][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.938962][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.941781][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.944909][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.947434][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.950181][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.952914][ T8575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.956921][ T8575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.961427][ T8575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  229.223929][ T4300] Bluetooth: hci1: command 0x0419 tx timeout
[  229.747829][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  229.750619][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  229.753195][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  229.784949][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  229.799235][ T8575] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.801563][ T8575] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.817504][ T8575] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.820171][ T8575] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.930019][ T1680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.932389][ T1680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.962904][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  229.973337][ T4749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.981263][ T4749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.993242][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  230.236201][ T8819] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  232.488376][   T27] audit: type=1326 audit(232.450:1445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.503018][   T27] audit: type=1326 audit(232.460:1446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.513645][   T27] audit: type=1326 audit(232.470:1447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.533466][   T27] audit: type=1326 audit(232.470:1448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.550536][   T27] audit: type=1326 audit(232.470:1449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.559894][   T27] audit: type=1326 audit(232.470:1450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.596908][   T27] audit: type=1326 audit(232.470:1451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.602587][   T27] audit: type=1326 audit(232.470:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.624968][   T27] audit: type=1326 audit(232.470:1453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.640989][   T27] audit: type=1326 audit(232.470:1454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8804 comm="syz.7.1421" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=139 compat=0 ip=0xffffaa14b81c code=0x7ffc0000
[  232.993146][ T8879] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  234.495018][ T8908] loop7: detected capacity change from 0 to 256
[  234.976808][ T8932] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  235.920518][ T8935] loop7: detected capacity change from 0 to 1024
[  235.922948][ T8935] hfsplus: unable to parse mount options
[  236.215441][ T7014] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  236.336893][ T8952] loop0: detected capacity change from 0 to 256
[  236.408027][ T8952] FAT-fs (loop0): Directory bread(block 64) failed
[  236.409913][ T8952] FAT-fs (loop0): Directory bread(block 65) failed
[  236.411767][ T8952] FAT-fs (loop0): Directory bread(block 66) failed
[  236.413422][ T8952] FAT-fs (loop0): Directory bread(block 67) failed
[  236.423944][ T8952] FAT-fs (loop0): Directory bread(block 68) failed
[  236.425792][ T8952] FAT-fs (loop0): Directory bread(block 69) failed
[  236.427532][ T8952] FAT-fs (loop0): Directory bread(block 70) failed
[  236.429268][ T8952] FAT-fs (loop0): Directory bread(block 71) failed
[  236.431017][ T8952] FAT-fs (loop0): Directory bread(block 72) failed
[  236.432750][ T8952] FAT-fs (loop0): Directory bread(block 73) failed
[  236.562314][ T8952] syz.0.1457: attempt to access beyond end of device
[  236.562314][ T8952] loop0: rw=2051, sector=1224, nr_sectors = 608 limit=256
[  236.847998][ T8967] loop7: detected capacity change from 0 to 1024
[  236.858136][ T8967] hfsplus: unable to parse mount options
[  236.914131][ T8965] loop8: detected capacity change from 0 to 2048
[  237.494148][ T8965] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  238.551754][ T8575] EXT4-fs (loop8): unmounting filesystem.
[  238.573344][ T8993] loop0: detected capacity change from 0 to 8
[  238.610657][ T4300] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  238.614496][ T4300] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  238.618100][ T4300] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  238.633021][ T4300] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  238.636066][ T4300] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  238.638141][ T4300] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  238.696121][ T8993] SQUASHFS error: Failed to read block 0x4de: -5
[  238.698624][ T8993] SQUASHFS error: Failed to read block 0x4de: -5
[  238.986819][ T9022] loop0: detected capacity change from 0 to 16
[  238.991467][ T9022] erofs: (device loop0): mounted with root inode @ nid 36.
[  240.742708][ T9038] syz.0.1480: attempt to access beyond end of device
[  240.742708][ T9038] loop0: rw=524288, sector=34359738360, nr_sectors = 1976 limit=16
[  240.888422][ T4313] Bluetooth: hci5: command 0x0409 tx timeout
[  242.680355][ T9059] loop0: detected capacity change from 0 to 1024
[  242.682861][ T9059] hfsplus: unable to parse mount options
[  242.913804][ T4313] Bluetooth: hci5: command 0x041b tx timeout
[  243.446825][ T8991] chnl_net:caif_netlink_parms(): no params data found
[  244.983721][ T4300] Bluetooth: hci5: command 0x040f tx timeout
[  245.467454][ T9093] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1494'.
[  245.503300][ T9101] loop7: detected capacity change from 0 to 1024
[  245.673806][ T8991] bridge0: port 1(bridge_slave_0) entered blocking state
[  245.675764][ T8991] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.678410][ T8991] device bridge_slave_0 entered promiscuous mode
[  245.682348][ T8991] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.373813][ T8991] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.376497][ T8991] device bridge_slave_1 entered promiscuous mode
[  246.486683][ T8991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.491284][ T8991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  246.583137][ T8991] team0: Port device team_slave_0 added
[  246.589688][ T8991] team0: Port device team_slave_1 added
[  246.661883][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  246.673876][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.680853][ T8991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  246.696359][ T8991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  246.698238][ T8991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  246.723677][ T8991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  246.903429][ T8991] device hsr_slave_0 entered promiscuous mode
[  247.065131][ T4300] Bluetooth: hci5: command 0x0419 tx timeout
[  247.127740][ T8991] device hsr_slave_1 entered promiscuous mode
[  247.173976][ T8991] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.176591][ T8991] Cannot create hsr debugfs directory
[  247.809412][ T9150] loop7: detected capacity change from 0 to 512
[  247.851879][ T9150] EXT2-fs (loop7): warning: feature flags set on rev 0 fs, running e2fsck is recommended
[  247.867040][ T9150] EXT2-fs (loop7): warning: maximal mount count reached, running e2fsck is recommended
[  247.869675][ T9150] EXT2-fs (loop7): 0.5b, 95/08/09, bs=4096, gc=1, bpg=32768, ipg=32, mo=8001c]
[  247.927910][ T9150] syz.7.1513: attempt to access beyond end of device
[  247.927910][ T9150] loop7: rw=0, sector=1022032, nr_sectors = 8 limit=512
[  247.971109][ T8991] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  248.006116][ T8991] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  248.055523][ T8991] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  248.076059][ T8991] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  248.976229][ T2060] ieee802154 phy0 wpan0: encryption failed: -22
[  248.977918][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[  249.002243][ T8991] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.097596][ T8991] 8021q: adding VLAN 0 to HW filter on device team0
[  249.102771][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  249.114232][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  249.122687][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  249.159279][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  249.170958][ T9183] loop8: detected capacity change from 0 to 1024
[  249.171635][ T4749] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.174581][ T4749] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.198829][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  249.215198][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  249.218002][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  249.232801][ T4749] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.234837][ T4749] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.251935][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  249.261499][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  249.276473][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  249.281332][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  249.300575][ T1680] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  249.383853][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  249.392957][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  249.414567][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  249.441595][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  249.460433][ T8991] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.464467][ T8991] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  250.280305][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  250.294444][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  250.454876][ T9216] loop8: detected capacity change from 0 to 256
[  250.465171][ T9216] exfat: Deprecated parameter 'utf8'
[  250.471911][ T9216] exfat: Deprecated parameter 'namecase'
[  250.478850][ T9216] exfat: Deprecated parameter 'utf8'
[  250.491043][ T9216] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  250.557637][ T8991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.562647][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.565221][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  251.782229][ T9249] loop7: detected capacity change from 0 to 512
[  251.843247][ T9249] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  251.948808][ T9249] EXT4-fs (loop7): 1 truncate cleaned up
[  251.950420][ T9249] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  252.626876][ T9249] EXT4-fs error (device loop7): ext4_get_parent:1910: comm syz.7.1537: inode #2: comm syz.7.1537: iget: illegal inode #
[  252.741638][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  252.758736][ T4900] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  252.811060][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  252.814361][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  252.824697][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  252.830204][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  252.844289][ T4749] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  252.865778][ T8991] device veth0_vlan entered promiscuous mode
[  252.877863][ T9274] loop0: detected capacity change from 0 to 8
[  252.896925][ T8991] device veth1_vlan entered promiscuous mode
[  252.909571][ T9274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1542'.
[  252.950266][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  252.953109][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  252.956196][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  253.081167][ T4385] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  253.777354][ T8991] device veth0_macvtap entered promiscuous mode
[  253.815434][ T8991] device veth1_macvtap entered promiscuous mode
[  253.826623][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  253.829426][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  253.872656][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.893639][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.896310][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.899055][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.901591][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.941735][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.971546][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.993660][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.996330][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.999146][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.001768][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  254.047033][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.052982][ T8991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  254.055778][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  254.056324][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  254.058282][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.058300][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.058311][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.058322][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.058335][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.058346][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.058358][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.058369][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.058380][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.058391][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.058402][ T8991] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  254.058413][ T8991] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  254.059442][ T8991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.059544][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  254.060057][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  254.065881][ T8991] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.065934][ T8991] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.065956][ T8991] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.065976][ T8991] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.207058][ T4413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.207121][ T4413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.209953][ T9039] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  254.351611][ T1680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.351656][ T1680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.362224][ T8085] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  254.753878][ T9325] loop0: detected capacity change from 0 to 1024
[  254.924076][ T9039] hfsplus: b-tree write err: -5, ino 4
[  255.758381][   T27] kauditd_printk_skb: 1202 callbacks suppressed
[  255.758393][   T27] audit: type=1326 audit(255.720:2657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15a768 code=0x7ffc0000
[  255.778429][   T27] audit: type=1326 audit(255.740:2658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15a768 code=0x7ffc0000
[  255.888656][   T27] audit: type=1326 audit(255.740:2659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=192 compat=0 ip=0xffff8b15a768 code=0x7ffc0000
[  255.906196][   T27] audit: type=1326 audit(255.740:2660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15a768 code=0x7ffc0000
[  255.916665][   T27] audit: type=1326 audit(255.740:2661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15a768 code=0x7ffc0000
[  255.924778][   T27] audit: type=1326 audit(255.740:2662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=191 compat=0 ip=0xffff8b15a768 code=0x7ffc0000
[  255.942837][   T27] audit: type=1326 audit(255.740:2663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15a768 code=0x7ffc0000
[  255.980719][   T27] audit: type=1326 audit(255.740:2664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9330 comm="syz.8.1556" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff8b15a768 code=0x7ffc0000
[  256.054835][ T9353] loop8: detected capacity change from 0 to 256
[  256.118933][ T9353] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  256.215231][ T9362] netlink: 104 bytes leftover after parsing attributes in process `syz.7.1564'.
[  256.405366][ T9370] trusted_key: encrypted_key: keyword 'uxdate' not recognized
[  256.408610][ T9366] loop8: detected capacity change from 0 to 1024
[  256.410816][ T9366] EXT4-fs: Ignoring removed bh option
[  256.412221][ T9366] EXT4-fs: inline encryption not supported
[  256.418014][ T9372] loop0: detected capacity change from 0 to 128
[  256.472536][ T9366] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c80ce018, mo2=0000]
[  256.484299][ T9372] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  256.510908][ T9366] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 2: comm syz.8.1566: lblock 2 mapped to illegal pblock 2 (length 1)
[  256.530832][ T9366] Quota error (device loop8): qtree_write_dquot: dquota write failed
[  256.533067][ T9366] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 48: comm syz.8.1566: lblock 0 mapped to illegal pblock 48 (length 1)
[  256.576657][ T9366] Quota error (device loop8): v2_write_file_info: Can't write info structure
[  256.579084][ T9366] EXT4-fs error (device loop8): ext4_acquire_dquot:6802: comm syz.8.1566: Failed to acquire dquot type 0
[  256.582215][ T9366] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  256.585604][ T9366] EXT4-fs error (device loop8): ext4_evict_inode:279: inode #11: comm syz.8.1566: mark_inode_dirty error
[  256.588500][ T9372] fscrypt: AES-256-XTS using implementation "xts-aes-ce"
[  256.603620][ T9366] EXT4-fs warning (device loop8): ext4_evict_inode:282: couldn't mark inode dirty (err -117)
[  256.606390][ T9366] EXT4-fs (loop8): 1 orphan inode deleted
[  256.607937][ T9366] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  256.629413][ T9039] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm kworker/u4:19: lblock 1 mapped to illegal pblock 1 (length 1)
[  256.684250][ T9039] EXT4-fs error (device loop8): ext4_release_dquot:6838: comm kworker/u4:19: Failed to release dquot type 0
[  257.438581][ T9366] EXT4-fs error (device loop8): ext4_map_blocks:635: inode #3: block 1: comm syz.8.1566: lblock 1 mapped to illegal pblock 1 (length 1)
[  257.486199][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  257.560682][ T9394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  257.563501][ T9394] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  257.701900][ T8575] EXT4-fs (loop8): unmounting filesystem.
[  257.703908][ T8575] EXT4-fs error (device loop8): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1 in block_group 0
[  257.718288][ T8575] EXT4-fs error (device loop8) in ext4_reserve_inode_write:5914: Corrupt filesystem
[  257.742070][ T8575] EXT4-fs error (device loop8): ext4_quota_off:7108: inode #3: comm syz-executor: mark_inode_dirty error
[  257.854380][ T9407] netlink: 104 bytes leftover after parsing attributes in process `syz.8.1578'.
[  260.431128][ T9437] loop8: detected capacity change from 0 to 1024
[  260.433680][ T9437] hfsplus: unable to parse mount options
[  260.435718][ T9439] loop9: detected capacity change from 0 to 2048
[  260.457544][ T9439] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  260.607602][ T7014] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  260.980050][ T9453] loop8: detected capacity change from 0 to 512
[  261.006053][ T9453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  261.124996][ T9453] EXT4-fs (loop8): orphan cleanup on readonly fs
[  261.129976][ T9453] EXT4-fs error (device loop8): ext4_validate_block_bitmap:438: comm syz.8.1592: bg 0: block 248: padding at end of block bitmap is not set
[  261.243990][ T9453] __quota_error: 2 callbacks suppressed
[  261.244005][ T9453] Quota error (device loop8): write_blk: dquota write failed
[  261.247638][ T9453] Quota error (device loop8): qtree_write_dquot: Error -117 occurred while creating quota
[  261.250613][ T9453] EXT4-fs error (device loop8): ext4_acquire_dquot:6802: comm syz.8.1592: Failed to acquire dquot type 1
[  261.255520][ T8991] EXT4-fs (loop9): unmounting filesystem.
[  261.320891][ T9453] EXT4-fs (loop8): 1 truncate cleaned up
[  261.332446][ T9453] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  261.355601][ T9453] EXT4-fs error (device loop8): ext4_lookup:1862: inode #2: comm syz.8.1592: deleted inode referenced: 12
[  261.995019][ T9469] loop9: detected capacity change from 0 to 128
[  262.502836][ T8575] EXT4-fs (loop8): unmounting filesystem.
[  263.351517][ T9489] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1603'.
[  263.616295][ T9501] loop8: detected capacity change from 0 to 1024
[  263.721914][ T9501] EXT4-fs error (device loop8): ext4_orphan_get:1426: comm syz.8.1609: bad orphan inode 2304
[  263.725457][ T9501] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  264.397499][ T8575] EXT4-fs (loop8): unmounting filesystem.
[  264.532257][ T9513] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1612'.
[  264.700746][ T9525] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1617'.
[  264.796975][ T9532] loop7: detected capacity change from 0 to 256
[  264.804880][ T9533] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1622'.
[  265.001303][ T9546] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1627'.
[  265.977073][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1633'.
[  266.111831][ T9572] loop0: detected capacity change from 0 to 512
[  266.146950][ T9572] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  266.161581][ T9572] EXT4-fs (loop0): 1 truncate cleaned up
[  266.163209][ T9572] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  266.204448][ T4300] Bluetooth: to_multiplier 0 < 10
[  266.214666][ T9570] loop7: detected capacity change from 0 to 512
[  266.235267][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  266.304811][ T9580] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1640'.
[  266.349759][ T9585] netlink: 100 bytes leftover after parsing attributes in process `syz.7.1643'.
[  267.610137][ T4313] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  267.612600][ T4313] Bluetooth: hci1: Injecting HCI hardware error event
[  267.618685][ T4300] Bluetooth: hci1: hardware error 0x00
[  267.687960][ T9609] loop7: detected capacity change from 0 to 512
[  267.726914][ T9609] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  267.741311][ T9609] EXT4-fs (loop7): 1 truncate cleaned up
[  267.742861][ T9609] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  267.821501][ T9618] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1655'.
[  267.826963][ T9616] loop0: detected capacity change from 0 to 2048
[  267.847662][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  267.849412][ T9616] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  268.114055][ T9634] xt_CT: You must specify a L4 protocol and not use inversions on it
[  268.134971][ T9635] loop7: detected capacity change from 0 to 256
[  268.245737][ T9640] loop9: detected capacity change from 0 to 512
[  268.251851][ T9640] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  268.261379][ T9640] EXT4-fs (loop9): 1 truncate cleaned up
[  268.262867][ T9640] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  268.273756][ T4313] Bluetooth: hci5: command 0x2021 tx timeout
[  268.290166][ T9644] loop7: detected capacity change from 0 to 256
[  268.305296][ T8991] EXT4-fs (loop9): unmounting filesystem.
[  268.356731][ T9644] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  268.437674][ T9652] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1668'.
[  268.466581][ T9654] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.469186][ T9654] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.871992][ T9673] loop0: detected capacity change from 0 to 512
[  268.916867][ T9673] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  268.970722][ T9673] EXT4-fs (loop0): 1 truncate cleaned up
[  268.972309][ T9673] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  269.072707][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  269.146550][ T9687] netlink: 100 bytes leftover after parsing attributes in process `syz.8.1682'.
[  269.265511][ T9695] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  269.267946][ T9695] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  269.420557][ T9705] loop0: detected capacity change from 0 to 2048
[  269.565593][ T9711] loop9: detected capacity change from 0 to 512
[  269.570866][ T9711] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  269.611848][ T9711] EXT4-fs (loop9): 1 truncate cleaned up
[  269.613450][ T9711] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  269.726175][ T8991] EXT4-fs (loop9): unmounting filesystem.
[  269.864115][ T4300] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  269.914647][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'.
[  269.936992][ T9735] loop9: detected capacity change from 0 to 512
[  269.953126][ T9735] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  269.972559][ T9735] EXT4-fs (loop9): 1 truncate cleaned up
[  269.974774][ T9735] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: writeback.
[  270.128766][ T9735] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.1705: corrupted in-inode xattr
[  270.135493][ T9735] EXT4-fs warning (device loop9): ext4_xattr_set_entry:1732: inode #15: comm syz.9.1705: unable to update i_inline_off
[  270.139255][ T9735] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2195: inode #15: comm syz.9.1705: corrupted in-inode xattr
[  270.340868][ T9745] loop8: detected capacity change from 0 to 1024
[  270.343354][ T9745] hfsplus: unable to parse mount options
[  270.903796][ T8991] EXT4-fs (loop9): unmounting filesystem.
[  271.038868][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1710'.
[  271.084964][ T9753] loop7: detected capacity change from 0 to 128
[  271.127752][ T9753] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  271.165762][ T9753] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz.7.1709: No space for directory leaf checksum. Please run e2fsck -D.
[  271.193702][ T9753] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #11: comm syz.7.1709: checksumming directory block 0
[  271.214520][ T9761] loop0: detected capacity change from 0 to 512
[  271.231044][ T9761] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  271.237233][ T9762] EXT4-fs warning (device loop7): ext4_dirblock_csum_verify:406: inode #11: comm syz.7.1709: No space for directory leaf checksum. Please run e2fsck -D.
[  271.241366][ T9762] EXT4-fs error (device loop7): __ext4_find_entry:1696: inode #11: comm syz.7.1709: checksumming directory block 0
[  271.275408][ T9765] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5
[  271.285492][ T9761] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  271.318194][ T9770] loop8: detected capacity change from 0 to 8
[  271.360672][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  271.440982][ T9775] loop9: detected capacity change from 0 to 2048
[  271.452083][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  271.467203][ T9775] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  271.511424][ T9775] UDF-fs: error (device loop9): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  271.514595][ T9775] UDF-fs: warning (device loop9): udf_load_vrs: No anchor found
[  271.516586][ T9775] UDF-fs: Scanning with blocksize 512 failed
[  271.521585][ T9775] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  272.500060][ T9791] loop7: detected capacity change from 0 to 128
[  272.539738][ T9791] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  272.662791][ T9791] EXT4-fs (loop7): unmounting filesystem.
[  272.719024][ T9801] loop0: detected capacity change from 0 to 764
[  272.750809][ T9801] rock: directory entry would overflow storage
[  272.752863][ T9801] rock: sig=0x4654, size=5, remaining=4
[  272.772859][ T9801] isofs: Unable to find the ".." directory for NFS.
[  272.826490][ T9809] loop8: detected capacity change from 0 to 2048
[  272.877686][ T9809] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  272.924573][ T9818] loop7: detected capacity change from 0 to 512
[  272.927694][ T9818] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  273.113974][ T9818] EXT4-fs (loop7): 1 truncate cleaned up
[  273.115996][ T9818] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  274.022790][ T8575] EXT4-fs (loop8): unmounting filesystem.
[  274.037751][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  274.162724][ T9832] bridge0: port 1(bridge_slave_0) entered disabled state
[  274.193906][ T8732] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  274.204219][ T8732] bridge0: port 1(bridge_slave_0) entered blocking state
[  274.206155][ T8732] bridge0: port 1(bridge_slave_0) entered forwarding state
[  275.107228][ T4343] Bluetooth: Configuration file not found ar3k/ramps_0x695b989e_0.dfu
[  275.109436][ T4343] Bluetooth: Loading sysconfig file failed
[  275.110939][ T4343] ath3k: probe of 1-1:0.0 failed with error -110
[  275.116055][ T4343] usb 1-1: USB disconnect, device number 14
[  275.353251][ T9861] loop8: detected capacity change from 0 to 1024
[  276.095078][ T9861] EXT4-fs: Ignoring removed orlov option
[  276.134382][ T9861] EXT4-fs (loop8): Test dummy encryption mode enabled
[  276.214516][ T9861] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: writeback.
[  276.284082][ T9871] loop9: detected capacity change from 0 to 512
[  276.303749][ T4343] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  276.331946][ T9871] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  276.364429][ T9871] EXT4-fs (loop9): 1 truncate cleaned up
[  276.365940][ T9871] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  276.385670][ T8575] EXT4-fs (loop8): unmounting filesystem.
[  276.503824][ T4312] Bluetooth: hci2: command 0x0406 tx timeout
[  276.504669][ T4343] usb 1-1: Using ep0 maxpacket: 32
[  276.508749][ T4343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  276.516381][ T4343] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  276.519109][ T4343] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  276.521501][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.554585][ T8991] EXT4-fs (loop9): unmounting filesystem.
[  276.570918][ T9878] loop7: detected capacity change from 0 to 512
[  276.576717][ T4343] usb 1-1: config 0 descriptor??
[  276.612436][ T9882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.618464][ T9882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.631412][ T9878] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  276.793439][ T9878] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: writeback.
[  277.591737][ T9895] loop9: detected capacity change from 0 to 1024
[  277.618210][ T9895] hfsplus: unable to parse mount options
[  277.657267][ T4343] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  277.677814][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  277.998970][    T7] usb 1-1: USB disconnect, device number 15
[  278.108738][ T9918] loop9: detected capacity change from 0 to 128
[  278.202643][ T9918] EXT4-fs (loop9): mounted filesystem without journal. Quota mode: none.
[  278.291876][ T9909] fido_id[9909]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  278.317123][ T9918] EXT4-fs (loop9): unmounting filesystem.
[  278.339903][ T9039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.751647][ T9932] loop7: detected capacity change from 0 to 1024
[  278.760418][ T9932] hfsplus: unable to parse mount options
[  279.291400][ T9039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.506591][ T9039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.683667][   T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  279.695894][ T9039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.785714][ T9958] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  279.791799][ T9958] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  279.863881][   T24] usb 1-1: Using ep0 maxpacket: 16
[  279.867460][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.870594][   T24] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.873182][   T24] usb 1-1: config 0 interface 0 has no altsetting 0
[  279.884006][   T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  279.886382][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.912734][   T24] usb 1-1: config 0 descriptor??
[  280.535519][ T4877] usb 1-1: USB disconnect, device number 16
[  280.540199][ T9979] device syzkaller0 entered promiscuous mode
[  281.822322][ T9991] loop7: detected capacity change from 0 to 512
[  281.859207][ T9991] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  281.900237][ T9991] EXT4-fs (loop7): 1 truncate cleaned up
[  281.901683][ T9991] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  282.125138][ T6873] EXT4-fs (loop7): unmounting filesystem.
[  282.972137][T10005] loop8: detected capacity change from 0 to 256
[  283.021672][T10005] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  283.066146][T10005] exFAT-fs (loop8): hint_cluster is invalid (17)
[  283.177781][T10014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  283.180314][T10014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  283.744079][T10023] "syz.8.1804" (10023) uses obsolete ecb(arc4) skcipher
[  284.150104][T10029] loop8: detected capacity change from 0 to 512
[  284.165372][T10029] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  284.180999][T10029] EXT4-fs (loop8): 1 truncate cleaned up
[  284.182688][T10029] EXT4-fs (loop8): mounted filesystem without journal. Quota mode: none.
[  284.206754][ T8575] EXT4-fs (loop8): unmounting filesystem.
[  284.264809][T10033] loop8: detected capacity change from 0 to 256
[  284.273475][T10033] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[  284.298523][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1808'.
[  284.335232][T10035] loop0: detected capacity change from 0 to 128
[  284.387348][ T7642] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  284.419022][T10035] loop0: detected capacity change from 0 to 2048
[  284.420330][ T7642] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  284.434560][T10035] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  284.580368][T10039] loop0: detected capacity change from 0 to 512
[  284.599268][T10039] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  284.607067][T10039] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  284.609340][T10039] System zones: 1-12
[  284.612897][T10039] EXT4-fs (loop0): 1 truncate cleaned up
[  284.617792][T10039] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  285.581731][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  285.969258][T10051] loop0: detected capacity change from 0 to 512
[  286.007416][T10051] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  286.100784][ T4304] EXT4-fs (loop0): unmounting filesystem.
[  296.965997][ T4312] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  296.970436][ T4312] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  296.973202][ T4312] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  296.976539][ T4312] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  296.979003][ T4312] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  296.981112][ T4312] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  297.387529][ T9771] ==================================================================
[  297.389729][ T9771] BUG: KASAN: use-after-free in __mutex_lock_common+0xae8/0x1f38
[  297.391823][ T9771] Read of size 8 at addr ffff0000f3ca4060 by task khidpd_15c25886/9771
[  297.393962][ T9771] 
[  297.394554][ T9771] CPU: 1 PID: 9771 Comm: khidpd_15c25886 Not tainted 6.1.140-syzkaller #0
[  297.396799][ T9771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  297.399400][ T9771] Call trace:
[  297.400213][ T9771]  dump_backtrace+0x1c8/0x1f4
[  297.401409][ T9771]  show_stack+0x2c/0x3c
[  297.402507][ T9771]  __dump_stack+0x30/0x40
[  297.403635][ T9771]  dump_stack_lvl+0xf8/0x160
[  297.404817][ T9771]  print_address_description+0x88/0x220
[  297.406261][ T9771]  print_report+0x50/0x68
[  297.407398][ T9771]  kasan_report+0xa8/0x100
[  297.408519][ T9771]  __asan_report_load8_noabort+0x2c/0x38
[  297.409984][ T9771]  __mutex_lock_common+0xae8/0x1f38
[  297.411370][ T9771]  mutex_lock_nested+0x38/0x44
[  297.412584][ T9771]  l2cap_unregister_user+0x70/0x18c
[  297.413918][ T9771]  hidp_session_thread+0x3d0/0x46c
[  297.415208][ T9771]  kthread+0x250/0x2d8
[  297.416290][ T9771]  ret_from_fork+0x10/0x20
[  297.417444][ T9771] 
[  297.418026][ T9771] Allocated by task 8991:
[  297.419131][ T9771]  kasan_set_track+0x4c/0x80
[  297.420346][ T9771]  kasan_save_alloc_info+0x28/0x34
[  297.421626][ T9771]  __kasan_kmalloc+0xa0/0xb8
[  297.422839][ T9771]  __kmalloc+0xec/0x178
[  297.423919][ T9771]  hci_alloc_dev_priv+0x30/0x18a8
[  297.425253][ T9771]  vhci_create_device+0xf0/0x6cc
[  297.426535][ T9771]  vhci_write+0x30c/0x3ac
[  297.427720][ T9771]  vfs_write+0x5ac/0x7c4
[  297.428824][ T9771]  ksys_write+0x120/0x210
[  297.429935][ T9771]  __arm64_sys_write+0x7c/0x90
[  297.431162][ T9771]  invoke_syscall+0x98/0x2bc
[  297.432366][ T9771]  el0_svc_common+0x138/0x258
[  297.433591][ T9771]  do_el0_svc+0x58/0x13c
[  297.434703][ T9771]  el0_svc+0x58/0x138
[  297.435781][ T9771]  el0t_64_sync_handler+0x84/0xf0
[  297.437133][ T9771]  el0t_64_sync+0x18c/0x190
[  297.438345][ T9771] 
[  297.438947][ T9771] Freed by task 8991:
[  297.439967][ T9771]  kasan_set_track+0x4c/0x80
[  297.441191][ T9771]  kasan_save_free_info+0x3c/0x60
[  297.442503][ T9771]  ____kasan_slab_free+0x148/0x1b0
[  297.443898][ T9771]  __kasan_slab_free+0x18/0x28
[  297.445117][ T9771]  slab_free_freelist_hook+0x16c/0x1ec
[  297.446584][ T9771]  __kmem_cache_free+0xc0/0x224
[  297.447856][ T9771]  kfree+0xd0/0x1ac
[  297.448856][ T9771]  hci_release_dev+0xfe4/0x112c
[  297.450127][ T9771]  bt_host_release+0x70/0x8c
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  297.451342][ T9771]  device_release+0x8c/0x1ac
[  297.452555][ T9771]  kobject_put+0x2b0/0x438
[  297.453716][ T9771]  put_device+0x28/0x40
[  297.454825][ T9771]  hci_free_dev+0x24/0x34
[  297.455958][ T9771]  vhci_release+0x84/0xcc
[  297.457102][ T9771]  __fput+0x1bc/0x7c0
[  297.458196][ T9771]  ____fput+0x20/0x30
[  297.459252][ T9771]  task_work_run+0x1ec/0x270
[  297.460478][ T9771]  do_exit+0x544/0x19a8
[  297.461606][ T9771]  do_group_exit+0x194/0x22c
[  297.462879][ T9771]  get_signal+0x11d0/0x1310
[  297.464065][ T9771]  do_notify_resume+0x340/0x2b0c
[  297.465350][ T9771]  el0_svc+0x98/0x138
[  297.466369][ T9771]  el0t_64_sync_handler+0x84/0xf0
[  297.467661][ T9771]  el0t_64_sync+0x18c/0x190
[  297.468873][ T9771] 
[  297.469494][ T9771] Last potentially related work creation:
[  297.471017][ T9771]  kasan_save_stack+0x40/0x70
[  297.472335][ T9771]  __kasan_record_aux_stack+0xc0/0xdc
[  297.473786][ T9771]  kasan_record_aux_stack_noalloc+0x14/0x20
[  297.475380][ T9771]  insert_work+0x64/0x37c
[  297.476521][ T9771]  __queue_work+0xcbc/0x123c
[  297.477758][ T9771]  queue_work_on+0xc0/0x16c
[  297.478939][ T9771]  hci_cmd_timeout+0x178/0x1c8
[  297.480146][ T9771]  process_one_work+0x7f4/0x13a8
[  297.481466][ T9771]  worker_thread+0x8c8/0xfbc
[  297.482669][ T9771]  kthread+0x250/0x2d8
[  297.483771][ T9771]  ret_from_fork+0x10/0x20
[  297.484922][ T9771] 
[  297.485526][ T9771] Second to last potentially related work creation:
[  297.487245][ T9771]  kasan_save_stack+0x40/0x70
[  297.488471][ T9771]  __kasan_record_aux_stack+0xc0/0xdc
[  297.489848][ T9771]  kasan_record_aux_stack_noalloc+0x14/0x20
[  297.491349][ T9771]  insert_work+0x64/0x37c
[  297.492435][ T9771]  __queue_work+0xcbc/0x123c
[  297.493698][ T9771]  delayed_work_timer_fn+0x74/0x90
[  297.495017][ T9771]  call_timer_fn+0x1b8/0x964
[  297.496235][ T9771]  __run_timers+0x490/0x6bc
[  297.497434][ T9771]  run_timer_softirq+0x7c/0x114
[  297.498730][ T9771]  handle_softirqs+0x318/0xc6c
[  297.499962][ T9771]  __do_softirq+0x14/0x20
[  297.501053][ T9771] 
[  297.501689][ T9771] The buggy address belongs to the object at ffff0000f3ca4000
[  297.501689][ T9771]  which belongs to the cache kmalloc-8k of size 8192
[  297.505468][ T9771] The buggy address is located 96 bytes inside of
[  297.505468][ T9771]  8192-byte region [ffff0000f3ca4000, ffff0000f3ca6000)
[  297.508915][ T9771] 
[  297.509514][ T9771] The buggy address belongs to the physical page:
[  297.511190][ T9771] page:00000000aef663fb refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x133ca0
[  297.513830][ T9771] head:00000000aef663fb order:3 compound_mapcount:0 compound_pincount:0
[  297.516081][ T9771] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff)
[  297.518215][ T9771] raw: 05ffc00000010200 0000000000000000 dead000000000001 ffff0000c0002c00
[  297.520464][ T9771] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  297.522784][ T9771] page dumped because: kasan: bad access detected
[  297.524530][ T9771] 
[  297.525111][ T9771] Memory state around the buggy address:
[  297.526606][ T9771]  ffff0000f3ca3f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  297.528704][ T9771]  ffff0000f3ca3f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  297.530826][ T9771] >ffff0000f3ca4000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  297.533045][ T9771]                                                        ^
[  297.534875][ T9771]  ffff0000f3ca4080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  297.537138][ T9771]  ffff0000f3ca4100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  297.539259][ T9771] ==================================================================
[  297.542005][ T9771] Disabling lock debugging due to kernel taint
[  299.245058][ T9039] device hsr_slave_0 left promiscuous mode
[  299.287626][ T9039] device hsr_slave_1 left promiscuous mode
[  299.354296][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  299.356357][ T9039] batman_adv: batadv0: Removing interface: batadv_slave_0
[  299.359086][ T9039] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  299.361088][ T9039] batman_adv: batadv0: Removing interface: batadv_slave_1
[  299.363392][ T9039] device bridge_slave_1 left promiscuous mode
[  299.365875][ T9039] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.394351][ T9039] device bridge_slave_0 left promiscuous mode
[  299.396168][ T9039] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.553889][ T9039] device veth1_macvtap left promiscuous mode
[  299.555817][ T9039] device veth0_macvtap left promiscuous mode
[  299.557541][ T9039] device veth1_vlan left promiscuous mode
[  299.559005][ T9039] device veth0_vlan left promiscuous mode
[  301.314529][ T9039] team0 (unregistering): Port device team_slave_1 removed
[  301.485629][ T9039] team0 (unregistering): Port device team_slave_0 removed
[  301.644876][ T9039] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  301.854823][ T9039] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  304.289379][ T9039] bond0 (unregistering): Released all slaves
[  307.227595][ T9039] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  307.315416][ T9039] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0