last executing test programs:

39.678312885s ago: executing program 0 (id=125):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000400)='./file0\x00', 0xe, &(0x7f0000000580)={[{@dioread_lock}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@debug}]}, 0x3, 0x43b, &(0x7f0000000e00)="$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")
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
chdir(&(0x7f0000000140)='./file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000300)='./file0\x00', 0x40)
mount$nfs4(0x0, &(0x7f00000003c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000540), 0x400, 0x0)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000001f80)='./file0/../file0/../file0/../file0\x00', &(0x7f00000002c0)='./file0/../file0/../file0/../file0\x00')

20.476142904s ago: executing program 2 (id=159):
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r0 = io_uring_setup(0x74f8, &(0x7f00000005c0))
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000140)=0x15)
r2 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15)
close_range(r0, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$dri(&(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x4, 0x4})
syz_usb_connect(0x0, 0x24, 0x0, 0x0)

19.828300469s ago: executing program 2 (id=163):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000040)=0x5)
io_setup(0x3, &(0x7f00000000c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000180)=[&(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, r1, &(0x7f0000000700)='9', 0x1}])
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000600)=ANY=[@ANYRES32=r0], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
r4 = syz_open_pts(r1, 0x0)
r5 = dup3(r4, r1, 0x0)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000000))

19.522638075s ago: executing program 1 (id=165):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
listen(0xffffffffffffffff, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff})
splice(r1, 0x0, r0, 0x0, 0x1, 0x0)
vmsplice(r0, &(0x7f0000000b80)=[{&(0x7f0000000080)}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000c00)="9fd3190000000000010001bbc9e18125a12adeda455937a59ab4984d7888987451d89a", 0x23}, {&(0x7f00000007c0)="62223a91094f92fe0da2d79fb15e023415269bfe894d4bf821f94343e216689cf0b752ebd23c55af5adf72550662", 0x2e}], 0x4, 0x3)
ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000540))
close_range(r0, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
fsmount(r0, 0x1, 0x1)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000003c0)='./file0\x00', 0x23200406, &(0x7f0000000cc0)={[{@data_err_abort}, {@noblock_validity}, {@nogrpid}, {@orlov}, {@auto_da_alloc}, {@dioread_lock, 0x2e}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x20000}}, {@jqfmt_vfsold}, {@stripe={'stripe', 0x3d, 0x5d95}}], [], 0x2c}, 0x0, 0x4bf, &(0x7f0000001600)="$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")

19.473017439s ago: executing program 2 (id=166):
r0 = syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_procs(r1, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r2, &(0x7f00000005c0)=r0, 0x12)
r3 = openat$cgroup_ro(r1, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r3, &(0x7f0000000040)=0x1, 0x12)
syz_clone(0x20800000, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r5 = openat$cgroup_ro(r4, &(0x7f00000000c0)='cgroup.kill\x00', 0x275a, 0x0)
write$cgroup_int(r5, &(0x7f0000000040)=0x1, 0x12)

19.047399456s ago: executing program 2 (id=167):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
semget(0x1, 0x2, 0x14)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x402, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x1, 0x27a, &(0x7f0000000540)="$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")
open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'})
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r1, &(0x7f0000000080), 0x208e24b)
rmdir(&(0x7f0000000180)='./file0/../file0\x00')

18.75723792s ago: executing program 1 (id=169):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000040)="0f017715b9800000c00f3235000100000f300f01cb0f01c9b8010000000f01c10f090fc7ab008000000f20e035400000000f22e00f01cf0f01c3", 0x3a}], 0x1, 0x0, 0x0, 0x0)
preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000100)={0x6000})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

18.595389174s ago: executing program 2 (id=170):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
accept$unix(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000380), 0xd, 0x5e9, &(0x7f0000001340)="$eJzs3c1vVFUbAPDnTj9oKe/bQoyKC2liDCRKSwsYYkyErSENfsSNGystiBRoaI0WTSgJbkyMG2NMXLkQ/wslsmWlKxduXBkSooaliWPu9N7Sae/0u72V+/slQ889Zy7nTKfPnDNnzrkTQGX1p//UIvZHxGQS0ZvMzpe1R1bYP3e/B399fDa9JVGvv/5HEkmWl98/yX72ZCd3RcRPPyaxr21pvVMz1y6OTkyMX82OB6cvTQ5OzVw7fOHS6Pnx8+OXh18YPnH82PETQ0dW8zC6F2dcL7jT6ZvvfdD76chb3379dzL03a8jSZyMV7I7Lnwcm6U/+hu/k2RpUc+Jza6sJG3Z38nCpzhpL7FBrEn+/HVExBPRG23x8MnrjU9eLbVxwJaqJxF1oKIS8Q8VlY8D8vf2i98H10oZlQDb4f6puQmApfHfPjc3GF2NuYHdD5JYOK2TRMSqZuZWsCci7t4ZuXnuzsjN2KJ5OKDY7I2IeLIo/pNG/PdFV/Q14r/WFP/puOBM9jPNf22d9S+eKhb/sH3m4r9r2fiPFvH/9oL4f2ed9fc/TL7b3RT/Sz7SAwAAAAAAAFZw+1REPF/0+X9tfv1PFKz/6YmIk5tQf/+i46Wf/9fubUI1QIH7pyJeKlz/W8tX//a1Zan/NdYDdCTnLkyMH4mI/0fEoejYlR4PLVPH4c/2fdWqrD9b/5ff0vrvZmsBs3bca9/VfM7Y6PToRh83EHH/RsRThet/k/n+Pyno/9PXg8lV1rHv2VtnWpWtHP/AVql/E3GwsP9/eNWKZPnrcww2xgOD+ahgqac/+vz7VvWvN/5dYgI2Lu3/dy8f/33Jwuv1TK29jqMz7fVWZesd/3cmbzQuOdOZ5X04Oj19dSiiMzndluY25Q+vvc3wKMrjIY+XNP4PPbP8/F/R+L87ImYX/d/Jn817inOP/9PzW6v2GP9DedL4H1tT/7/2xPCtvh9a1b+6/v9Yo68/lOWY/4M5X+Zh2tmcXxCO7UVF291eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgU1CJiTyS1gfl0rTYwENETEY/F7trElanp585def/yWFrW+P7/Wv5Nv71zx0n+/f99C46HFx0fjYi9EfFFW3fjeODslYmxsh88AAAAAAAAAAAAAAAAAAAA7BA9Lfb/p35vK7t1wJZrL7sBQGkK4v/nMtoBbD/9P1SX+IfqEv9QXeIfqkv8Q3WJf6gu8Q/VJf4BAAAAAOCRsvfA7V+SiJh9sbtxS3VmZR2ltgzYarWyGwCUxiV+oLos/YHq8h4fSFYo72p50kpnLmfy7AZOBgAAAAAAAAAAAIDKObjf/n+oKvv/obrs/4fqyvf/Hyi5HcD2W+N7/PpGdvsCO9dysV24/3/FswAAAAAAAAAAAACAzTQ1c+3i6MTE+NXKJV6OiKacN3dIw7YxUa/Xr6d/BTulPf/xRL4Ufqe0Z1Ei3+u3urPKe00CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACa/RsAAP//EH0kSg==")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x2, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

18.042916691s ago: executing program 1 (id=172):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x20001400)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x40047451, 0x2000000c)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xa0090199)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r2 = add_key$keyring(&(0x7f00000001c0), &(0x7f00000004c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc)
keyctl$clear(0x7, r2)

11.891526996s ago: executing program 2 (id=173):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newneigh={0x24, 0x1c, 0x1, 0x0, 0x0, {0xc}, [@NDA_DST_IPV4={0x8}]}, 0x24}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
set_tid_address(0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x21085e, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x2}}, {@nouid32}, {@errors_remount}]}, 0x1, 0x533, &(0x7f0000000cc0)="$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")
epoll_create1(0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x74}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000280)=[0x0], 0x0, 0xf4, &(0x7f00000002c0)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0xe9, 0x8, 0x8, &(0x7f0000000380)}}, 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
open_by_handle_at(r1, &(0x7f0000000240)=@reiserfs_2={0x4b, 0x2, {0xb}}, 0x0)

11.889332266s ago: executing program 4 (id=174):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_pressure(r1, 0x0, 0x2, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
r3 = openat$cgroup_pressure(r1, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r2}], 0x1, 0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f)
close(r3)

11.525773317s ago: executing program 1 (id=176):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000010, &(0x7f0000000080), 0x1, 0x513, &(0x7f00000010c0)="$eJzs3d9rY1kdAPDvvW1mOzNdk1WRdcF1cVc6i07Sbt3dIqLriz4tqOt7rW1aSpOmNOk6LYt28T8QQcEnn3wR/AOEZR78A2RgQF/EB1FRRGf0QVDnSpIbp5Mmbd1pm07z+cBpzrn35n7PuSEn98fpvQGMrRci4o2ImIiIlyOimE9P87TYLux3l7t/753ldkoiy976axJJPq23rnZ5MiKud98SUxHxtS9HfDM5HLe5u7exVKtVt/NypVXfqjR3926u15fWqmvVzfn5udcWXl94dWE2yz1WO0u9zE++9Pn3Pv2t3y3++ca329X63EeiEH3tOE3dphc626KnvY22zyLYCEzk7SmMuiIAAJxIex//gxHxic7+fzEmOntzfSZGUTMAAADgtGRfmI5/JxEZAAAAcGmlETEdSVrOxwJMR5peyc8NfDiupbVGs/Wp1cbO5kp7XkQpCunqeq06m48VLkUhaZfn8jG2vfIrfeX5iHgmIr5fvNopl5cbtZURn/sAAACAcXG97/j/H8W0kz/egP8TAAAAAC6u0tACAAAAcFk45AcAAIDLr//4/70R1QMAAAA4E1958812ynrPv155e3dno/H2zZVqc6Nc31kuLze2t8prjcZa55599ePWV2s0tj4Tmzu3Kq1qs1Vp7u4t1hs7m63F9UcegQ0AAACco2c+fvvXSUTsf/ZqJ0V+H0CAR/xh1BUATtPEqCsAjIy7eMP4Koy6AsDIJcfMN3gHAACefDMfPXz9v/f8f+cG4HIz1gcAxo/r/zC+CkYAwlhLI+ID3exTw5YZev3/lyeNkmURd4oHpzi/CAAA52u6k5K0nB8HTEealssRT0ekpSgkq+u16mx+fPCrYuGpdnmu887k2DHDAAAAAAAAAAAAAAAAAAAAAAAAAEBXliWRAQAAAJdaRPqnpHM3/4iZ4kvT/ecHriT/LMYf88KP3vrBraVWa3uuPf1vnWd5XYmI1g/z6a8MfXwYAAAAcNqS/aGzusfp+evcudYKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDFw/947y710nnH/8sWIKA2KPxlTndepKETEtb8nMXngfUlETJxC/P13I+LZQfGTeJBlWSmvxaD4V884fqmzaQbHTyPi+inEh3F2u93/vDHo+5fGC53Xwd+/yTw9ruH9X5pHfrbTzw3qf54+tLb6wBjP3f1ZZWj8dyOemxzc//T632RI/BcPre1fWZYdjvGNr+/tDYuf/ThiZuDvT/JIrEqrvlVp7u7dXK8vrVXXqpvz83OvLby+8OrCbGV1vVbN/w6M8b2P/fzBUe2/NiD+b3/T7X+Pav9Lw1ba5z93b937UDdbGBT/xosDf3+nYkj8NP/t+2Seb8+f6eX3u/mDnv/pneePav/KkO1/3Od/44Ttf/mr3/39CRcFAM5Bc3dvY6lWq24fkZk6wTJPYuYXUxeiGv9nJvtO95O7KPV5v5n23urDKb1WXYCKHchk5xZrIi5Ik/+XGWm3BAAAnIGHO/2jrgkAAAAAAAAAAAAAAAAAAACMr/O4nVh/zP3RNBUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Ej/DQAA///M/t/r")
open(&(0x7f0000000040)='./bus\x00', 0x1ed37e, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0)
ioctl$FITRIM(r2, 0x40305839, &(0x7f0000000080)={0x0, 0x0, 0x8000000})
r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x0)
pwritev2(r3, &(0x7f0000000300)=[{&(0x7f0000000140)="e7", 0x1}], 0x1, 0xffff, 0x0, 0x0)

10.850376885s ago: executing program 4 (id=177):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r1, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @val={0xc}}}}, 0x28}}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_REGISTER_BEACONS(r4, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003840), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000003880)={0x28, r7, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc}}}}, 0x28}}, 0x0)

9.905305445s ago: executing program 4 (id=179):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x1a, 0x0, 0x0)
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011600000000407d1ed43000000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0)
setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f00000003c0)="17000000020001000003d68c5ee17688a2003208030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba0008400200000000e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0xb8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0xc, "129d0b01"}, @global=@item_012={0x1, 0x1, 0x0, 'd'}]}}, 0x0}, 0x0)

9.483484701s ago: executing program 1 (id=180):
mkdir(&(0x7f0000000300)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000380)={0x0, 0x9, 0x8}, 0xc)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018004000800395032303030"], 0x15)
r2 = dup(r1)
write$P9_RLERRORu(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="8b"], 0x53)
write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x30)
write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x7c8)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000100)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x10)

8.747601684s ago: executing program 1 (id=183):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x45d0f620, 0x4)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468"], 0x34}}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x68, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8}, @TCA_TBF_BURST={0x8, 0x6, 0x80000000}, @TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x8}}]}}]}, 0x68}}, 0x0)

7.512319649s ago: executing program 4 (id=186):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x210008, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r1 = creat(&(0x7f0000003280)='./file0/file0\x00', 0x104)
r2 = open(&(0x7f0000000440)='./bus\x00', 0x101002, 0x0)
dup3(r2, r1, 0x0)
io_setup(0x58, &(0x7f0000000e40)=<r3=>0x0)
io_submit(r3, 0x3f0a, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r1, &(0x7f0000000000), 0x200a00}])
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
chdir(&(0x7f0000000180)='./file0\x00')
unlink(&(0x7f0000000200)='./file0\x00')

6.483967987s ago: executing program 4 (id=188):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
unshare(0x400)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='noacl,fastboot,nolazytime\x00\x00\x00\x00nc_mode=strict,\x00'], 0x1, 0x54f9, &(0x7f000000ab40)="$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")
r1 = creat(&(0x7f0000000400)='./bus\x00', 0x0)
r2 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
lseek(r2, 0xffffffffffffffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000180)='ext4_remove_blocks\x00', r0}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0x12)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$GETALL(r3, 0x0, 0xd, 0xffffffffffffffff)

5.620119721s ago: executing program 4 (id=189):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x45, &(0x7f0000000000)='cgroup\x00'}, 0x21)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001200)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000049c000/0x18000)=nil, &(0x7f0000000400)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000640)=0x1)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.039086426s ago: executing program 3 (id=193):
r0 = socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
socket$inet6_mptcp(0xa, 0x1, 0x106)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10)
ppoll(0x0, 0x0, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff}, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000df00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
connect$vsock_stream(r0, &(0x7f0000000080), 0x10)

3.602011933s ago: executing program 0 (id=144):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
pread64(r1, &(0x7f0000000300)=""/150, 0x96, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)

2.682748161s ago: executing program 3 (id=194):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a001fffffffff7f0000000081000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\b\x00', @ANYRES32=r2], 0x24}}, 0x0)

2.564189851s ago: executing program 0 (id=195):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000e40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')

2.423528123s ago: executing program 3 (id=196):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000f7850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10)
prctl$PR_SET_TSC(0x3a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00')
lseek(r1, 0x1, 0x0)

1.955678243s ago: executing program 3 (id=197):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000440)={r3, 0x0, 0x0, 0x0, 0x0, [<r4=>0x0]})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r4, 0x0, <r6=>0xffffffffffffffff})
ioctl$DRM_IOCTL_MODE_GETFB2(r1, 0xc06864ce, &(0x7f0000000200)={r3, 0x0, 0x0, 0x0, 0x0, [<r7=>0x0]})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r6})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f0000000040)={r7})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f0000000180)={r5})

1.410486039s ago: executing program 0 (id=198):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r0, &(0x7f0000000540), 0xfffffdd8)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000140))
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000)
r2 = dup2(r1, r1)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5)
read$FUSE(r2, &(0x7f0000004d80)={0x2020}, 0x2020)

1.211206147s ago: executing program 3 (id=199):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000040))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r1 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x5)
syz_open_dev$vim2m(&(0x7f0000000040), 0x0, 0x2)
openat$vimc0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
pselect6(0x40, &(0x7f0000000600), 0x0, &(0x7f0000000680)={0xff}, 0x0, 0x0)
read$FUSE(r1, &(0x7f0000003340)={0x2020}, 0x2020)

250.497159ms ago: executing program 0 (id=200):
socket$packet(0x11, 0x0, 0x300)
r0 = socket$packet(0x11, 0x0, 0x300)
getsockopt$packet_int(r0, 0x107, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x0, 0x0, 0xee01}, {}, {}, 0x400000}}, 0xb8}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@multicast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x10, 0x0, 0x0, 0xee01}}}, 0xb8}}, 0x0)

249.956839ms ago: executing program 3 (id=201):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000cc0)='./file1\x00', 0x10800, &(0x7f0000000040)=ANY=[], 0x1, 0x683, &(0x7f0000000d00)="$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")
creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
unlink(&(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
sync()
socket$nl_xfrm(0x10, 0x3, 0x6)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xec1d23b261b3df66, 0x0)
fcntl$setstatus(r1, 0x4, 0x2000)
close_range(r0, 0xffffffffffffffff, 0x0)
sync()

0s ago: executing program 0 (id=202):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8)
mkdir(0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x24}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e00010000000000000000020013"], 0x50}}, 0x0)

kernel console output (not intermixed with test programs):

T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   74.644249][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   74.653714][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   74.666987][ T3639] 8021q: adding VLAN 0 to HW filter on device batadv0
[   74.692694][ T3641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.717795][ T3641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.736346][ T3641] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.738525][ T3655] Bluetooth: hci1: command tx timeout
[   74.750912][ T3638] device veth0_macvtap entered promiscuous mode
[   74.762307][ T3638] device veth1_macvtap entered promiscuous mode
[   74.782290][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   74.800997][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   74.818467][ T3655] Bluetooth: hci0: command tx timeout
[   74.823973][ T3655] Bluetooth: hci3: command tx timeout
[   74.829862][ T3652] Bluetooth: hci2: command tx timeout
[   74.831702][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   74.835286][ T3652] Bluetooth: hci4: command tx timeout
[   74.851284][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   74.863635][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   74.881321][ T3641] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.890985][ T3641] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.902128][ T3641] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.911352][ T3641] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.943986][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   74.992401][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.010064][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.020519][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   75.031322][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.042642][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_0
[   75.058260][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.067062][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.079884][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   75.089605][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   75.138698][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.139172][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.146874][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.164352][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.185900][ T3638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   75.203153][ T3638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   75.215540][ T3638] batman_adv: batadv0: Interface activated: batadv_slave_1
[   75.237441][ T3638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.246511][ T3638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.262336][ T3638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.274220][ T3638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.289790][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.301475][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.311048][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.321500][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   75.330628][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   75.339763][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.347714][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.399452][ T3640] device veth0_vlan entered promiscuous mode
[   75.418860][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   75.432662][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   75.457580][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.466369][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.503323][ T3640] device veth1_vlan entered promiscuous mode
[   75.527990][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.536208][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   75.546476][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   75.555917][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   75.564562][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   75.593265][ T3639] device veth0_vlan entered promiscuous mode
[   75.645771][ T3639] device veth1_vlan entered promiscuous mode
[   75.674102][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.688950][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.699148][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   75.716555][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.736629][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.773134][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.813457][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   75.814074][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.832945][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   75.843656][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   75.845596][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.856255][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   75.882423][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   75.915554][ T3640] device veth0_macvtap entered promiscuous mode
[   75.954968][ T3640] device veth1_macvtap entered promiscuous mode
[   75.974157][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.981741][ T3639] device veth0_macvtap entered promiscuous mode
[   75.989285][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.005642][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.027247][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.036007][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   76.050944][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   76.060714][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   76.096010][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   76.124187][ T3639] device veth1_macvtap entered promiscuous mode
[   76.175869][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.207773][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.232418][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.254390][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.265190][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.277903][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.299874][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.322713][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   76.346049][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   76.378980][ T3724] loop3: detected capacity change from 0 to 4096
[   76.388807][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   76.415659][ T3724] =======================================================
[   76.415659][ T3724] WARNING: The mand mount option has been deprecated and
[   76.415659][ T3724]          and is ignored by this kernel. Remove the mand
[   76.415659][ T3724]          option from the mount to silence this warning.
[   76.415659][ T3724] =======================================================
[   76.471922][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.514719][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.539407][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.569639][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.608156][ T3640] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   76.646467][ T3640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.671462][ T3640] batman_adv: batadv0: Interface activated: batadv_slave_1
[   76.692373][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   76.709068][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   76.760476][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.798469][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.818070][ T3652] Bluetooth: hci1: command tx timeout
[   76.819391][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.854194][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.866982][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.878060][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.891838][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   76.898468][ T3652] Bluetooth: hci4: command tx timeout
[   76.904738][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   76.907929][ T3655] Bluetooth: hci3: command tx timeout
[   76.922450][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_0
[   76.925411][ T3653] Bluetooth: hci2: command tx timeout
[   76.937479][ T3653] Bluetooth: hci0: command tx timeout
[   76.963410][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.087135][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.222665][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.345683][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.506648][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.677829][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.738313][ T3639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   77.749215][ T3639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   77.762910][ T3639] batman_adv: batadv0: Interface activated: batadv_slave_1
[   77.779508][ T3640] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.797233][ T3640] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.806841][ T3640] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.830607][ T3640] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.843358][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   77.854356][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   77.866065][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   77.877114][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   77.890453][ T3639] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   77.923900][ T3639] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   77.943438][ T3639] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   77.963369][ T3639] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   77.992631][ T3740] binder_alloc: 3738: binder_alloc_buf, no vma
[   78.176725][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.195652][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.211784][ T3726] loop0: detected capacity change from 0 to 32768
[   78.229935][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.244873][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.278999][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   78.293142][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.305527][ T3726] XFS (loop0): Mounting V5 Filesystem
[   78.326760][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.358018][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.381318][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.392646][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   78.420020][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.423085][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.445767][ T3751] loop1: detected capacity change from 0 to 1024
[   78.488833][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   78.668437][ T3726] XFS (loop0): Ending clean mount
[   78.774881][ T3762] loop2: detected capacity change from 0 to 8
[   78.883263][   T26] audit: type=1804 audit(1728594534.684:2): pid=3751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.12" name="/newroot/5/file2/cgroup.controllers" dev="loop1" ino=26 res=1 errno=0
[   78.887879][ T3687] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   78.926661][ T3762] SQUASHFS error: zlib decompression failed, data probably corrupt
[   78.954683][ T3762] SQUASHFS error: Failed to read block 0x9b: -5
[   78.975150][ T3762] SQUASHFS error: Unable to read metadata cache entry [99]
[   79.008568][ T3762] SQUASHFS error: Unable to read inode 0x127
[   79.238933][ T3687] usb 4-1: Using ep0 maxpacket: 16
[   79.295017][ T3762] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   79.337371][ T3762] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'.
[   79.645037][ T3638] XFS (loop0): Unmounting Filesystem
[   79.727881][ T3687] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[   79.754509][ T3687] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.762908][ T3687] usb 4-1: Product: syz
[   79.767119][ T3687] usb 4-1: Manufacturer: syz
[   79.781311][ T3687] usb 4-1: SerialNumber: syz
[   79.820333][ T3687] usb 4-1: config 0 descriptor??
[   79.891837][ T3687] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[   79.924085][ T3687] usb 4-1: Detected FT232H
[   80.027894][ T3688] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   80.128112][ T3687] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[   80.134505][   T22] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   80.147961][ T3687] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[   80.168017][ T3687] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71
[   80.187955][ T3687] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   80.216783][ T3687] usb 4-1: USB disconnect, device number 2
[   80.277875][ T3687] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   80.307167][ T3687] ftdi_sio 4-1:0.0: device disconnected
[   80.407873][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   80.417971][   T22] usb 3-1: Using ep0 maxpacket: 8
[   80.422152][ T3688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   80.433918][ T3688] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   80.443185][ T3688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.453539][ T3688] usb 2-1: config 0 descriptor??
[   80.522587][ T3629] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   80.560892][   T22] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[   80.572074][   T22] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[   80.586722][   T22] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   80.602642][   T22] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   80.613165][   T22] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   80.633947][   T22] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[   80.644197][   T22] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.708927][   T22] usbtmc 3-1:16.0: bulk endpoints not found
[   80.767907][ T3629] usb 1-1: Using ep0 maxpacket: 16
[   80.836044][ T3795] netlink: 296 bytes leftover after parsing attributes in process `syz.4.24'.
[   80.847159][ T3795] unsupported nlmsg_type 40
[   80.860067][ T3795] tipc: Started in network mode
[   80.865161][ T3795] tipc: Node identity ac1414aa, cluster identity 4711
[   80.873505][ T3795] tipc: Enabled bearer <udp:s>, priority 10
[   80.908056][ T3629] usb 1-1: config 0 has no interfaces?
[   80.927871][ T3629] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   80.944027][ T3688] hid-led 0003:27B8:01ED.0001: unbalanced delimiter at end of report description
[   80.963041][ T3688] hid-led: probe of 0003:27B8:01ED.0001 failed with error -22
[   80.970946][ T3629] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.991412][ T3629] usb 1-1: config 0 descriptor??
[   81.093715][ T3800] device pim6reg1 entered promiscuous mode
[   81.147804][   T22] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   81.175339][ T3629] usb 2-1: USB disconnect, device number 2
[   81.312249][ T3687] usb 3-1: USB disconnect, device number 2
[   81.346276][ T3803] loop4: detected capacity change from 0 to 512
[   81.390931][ T3774] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   81.686181][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   81.700625][  T153] cfg80211: failed to load regulatory.db
[   81.707356][   T22] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   81.720371][   T22] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   81.733766][   T22] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   81.745031][   T22] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.759834][   T22] usb 4-1: config 0 descriptor??
[   81.799321][ T3793] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22
[   82.520146][   T22] plantronics 0003:047F:FFFF.0002: ignoring exceeding usage max
[   82.588419][   T22] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[   82.611429][ T3686] tipc: Node number set to 2886997162
[   82.741783][   T22] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   83.438192][ T3686] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   83.828231][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   83.848158][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   83.863790][ T3686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   83.877051][ T3686] usb 2-1: New USB device found, idVendor=11c2, idProduct=2208, bcdDevice= 0.00
[   83.895162][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.913939][ T3686] usb 2-1: config 0 descriptor??
[   84.016114][ T3827] loop2: detected capacity change from 0 to 2048
[   84.047979][  T155] usb 1-1: USB disconnect, device number 2
[   84.105505][ T3827] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.173828][ T3829] loop0: detected capacity change from 0 to 1024
[   84.254746][ T3829] hfsplus: unable to find HFS+ superblock
[   84.280458][ T3827] overlayfs: upper fs needs to support d_type.
[   84.317595][ T3827] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   84.335479][ T3774] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   84.347925][ T3827] overlayfs: failed to set xattr on upper
[   84.362261][ T3827] overlayfs: ...falling back to index=off,metacopy=off.
[   84.383002][ T3829] loop0: detected capacity change from 0 to 512
[   84.411690][ T3829] EXT4-fs: Ignoring removed mblk_io_submit option
[   84.486353][ T3829] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.35: invalid indirect mapped block 10 (level 1)
[   84.541028][ T3829] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.35: invalid indirect mapped block 8 (level 1)
[   84.606705][ T3829] EXT4-fs (loop0): 1 truncate cleaned up
[   84.621130][ T3829] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[   84.653199][   T26] audit: type=1804 audit(1728594540.464:3): pid=3830 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.34" name="/newroot/3/file1/bus/file0" dev="overlay" ino=1346 res=1 errno=0
[   84.671512][ T3825] loop4: detected capacity change from 0 to 32768
[   84.705233][ T3825] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.33 (3825)
[   84.736676][ T3687] usb 4-1: USB disconnect, device number 3
[   84.749174][   T26] audit: type=1804 audit(1728594540.504:4): pid=3827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.34" name="/newroot/3/file1/bus/file0" dev="overlay" ino=1346 res=1 errno=0
[   84.849178][ T3825] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   84.887775][ T3640] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[   84.897969][ T3825] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   84.907567][ T3640] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[   84.916729][ T3825] BTRFS info (device loop4): using free space tree
[   84.927890][ T3683] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   85.140271][ T3825] BTRFS info (device loop4): enabling ssd optimizations
[   85.298339][ T3683] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   85.318108][ T3683] usb 1-1: New USB device found, idVendor=0eef, idProduct=c002, bcdDevice= 0.00
[   85.327900][ T3683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.447693][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.457747][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.467692][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.477700][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.485891][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   85.496715][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   85.515371][ T3683] usb 1-1: config 0 descriptor??
[   85.547953][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   85.557718][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   85.567688][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   85.577696][    T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!!
[   86.298184][ T3686] usbhid 2-1:0.0: can't add hid device: -71
[   86.304268][ T3686] usbhid: probe of 2-1:0.0 failed with error -71
[   86.313285][ T3683] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[   86.409261][ T3686] usb 2-1: USB disconnect, device number 3
[   86.533275][ T3811] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.584540][ T3683] usb 1-1: USB disconnect, device number 3
[   86.681395][ T3639] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   86.693515][ T3811] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.963317][ T3686] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   86.990640][ T3811] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.085073][ T3652] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   87.104580][ T3652] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   87.113038][ T3652] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   87.123449][ T3652] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   87.133275][ T3652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   87.142134][ T3652] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   87.144295][ T3811] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   87.173331][ T3638] EXT4-fs error (device loop0): ext4_xattr_delete_inode:2924: inode #18: comm syz-executor: corrupted xattr block 33
[   87.217983][ T3686] usb 2-1: Using ep0 maxpacket: 16
[   87.235905][ T3638] EXT4-fs warning (device loop0): ext4_evict_inode:299: xattr delete (err -117)
[   87.278606][ T3638] EXT4-fs error (device loop0): ext4_lookup:1856: inode #16: comm syz-executor: iget: bogus i_mode (6355)
[   87.337860][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.369125][ T3638] EXT4-fs error (device loop0): ext4_lookup:1856: inode #16: comm syz-executor: iget: bogus i_mode (6355)
[   87.384052][ T3686] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.401052][ T3686] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   87.420992][ T3686] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   87.437296][ T3686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.495500][ T3686] usb 2-1: config 0 descriptor??
[   87.865466][ T3638] EXT4-fs (loop0): unmounting filesystem.
[   88.068921][ T3686] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0003/input/input5
[   88.201859][ T3866] loop1: detected capacity change from 0 to 128
[   88.236043][ T3686] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[   88.288382][ T3686] usb 2-1: USB disconnect, device number 4
[   88.770239][ T3878] chnl_net:caif_netlink_parms(): no params data found
[   88.853924][ T3893] loop3: detected capacity change from 0 to 4096
[   89.154589][   T26] audit: type=1800 audit(1728594544.964:5): pid=3893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.51" name="bus" dev="loop3" ino=33 res=0 errno=0
[   89.218127][ T3649] Bluetooth: hci2: command tx timeout
[   89.354663][ T3893] ntfs3: loop3: failed to convert "0080" to macinuit
[   89.369144][ T3878] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.376297][ T3878] bridge0: port 1(bridge_slave_0) entered disabled state
[   89.400734][ T3893] ntfs3: loop3: failed to convert name for inode 1e.
[   89.400952][ T3878] device bridge_slave_0 entered promiscuous mode
[   89.428054][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   89.445118][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   89.446611][ T3878] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.468707][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   89.476726][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   89.484809][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   89.492553][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   89.501317][ T3878] bridge0: port 2(bridge_slave_1) entered disabled state
[   89.509848][ T3878] device bridge_slave_1 entered promiscuous mode
[   89.567747][ T3686] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   89.592318][ T3910] loop1: detected capacity change from 0 to 8192
[   89.621112][ T3910] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[   89.697809][ T3910] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[   89.716283][ T3910] REISERFS (device loop1): using ordered data mode
[   89.732908][ T3910] reiserfs: using flush barriers
[   89.769055][ T3910] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[   89.786517][ T3910] REISERFS (device loop1): checking transaction log (loop1)
[   89.806462][ T3878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   89.809807][ T3910] REISERFS (device loop1): Using r5 hash to sort names
[   89.824214][ T3910] REISERFS (device loop1): using 3.5.x disk format
[   89.830881][ T3686] usb 5-1: Using ep0 maxpacket: 8
[   89.839785][ T3910] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[   89.847314][ T3878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   89.857284][ T3917] loop3: detected capacity change from 0 to 2048
[   89.901939][ T3917] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   89.955871][ T3917] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   89.965142][ T3686] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   89.980810][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.994514][ T3686] usb 5-1: config 0 descriptor??
[   90.363955][ T3878] team0: Port device team_slave_0 added
[   90.375807][ T3878] team0: Port device team_slave_1 added
[   90.738594][ T3878] batman_adv: batadv0: Adding interface: batadv_slave_0
[   90.745602][ T3878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.796996][ T3878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   90.804025][ T3937] loop1: detected capacity change from 0 to 1024
[   90.820403][ T3878] batman_adv: batadv0: Adding interface: batadv_slave_1
[   90.829311][ T3878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   90.873521][ T3878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   90.895449][ T3937] EXT4-fs: Ignoring removed oldalloc option
[   90.944933][ T3811] device hsr_slave_0 left promiscuous mode
[   90.957555][ T3811] device hsr_slave_1 left promiscuous mode
[   90.968062][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   90.977800][ T3940] program syz.3.59 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   90.985899][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.007892][ T3937] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   91.047960][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.083527][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.100910][ T3811] device bridge_slave_1 left promiscuous mode
[   91.109168][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.125898][ T3811] device bridge_slave_0 left promiscuous mode
[   91.134883][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.174641][   T26] audit: type=1804 audit(1728594546.984:6): pid=3937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.56" name="/newroot/10/file1/file1" dev="loop1" ino=15 res=1 errno=0
[   91.197332][ T3811] device veth1_macvtap left promiscuous mode
[   91.208019][ T3811] device veth0_macvtap left promiscuous mode
[   91.214175][ T3811] device veth1_vlan left promiscuous mode
[   91.225016][ T3811] device veth0_vlan left promiscuous mode
[   91.298591][ T3655] Bluetooth: hci2: command tx timeout
[   91.345838][ T3641] EXT4-fs (loop1): unmounting filesystem.
[   91.537996][ T3655] Bluetooth: hci1: command tx timeout
[   91.845935][ T3811] team0 (unregistering): Port device team_slave_1 removed
[   91.887600][ T3811] team0 (unregistering): Port device team_slave_0 removed
[   91.931288][ T3811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   91.976563][ T3811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   92.455696][ T3811] bond0 (unregistering): Released all slaves
[   92.574895][ T3947] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'.
[   92.589610][ T3947] device veth0_to_bond entered promiscuous mode
[   92.675487][ T3956] loop1: detected capacity change from 0 to 1024
[   92.678014][ T3686] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   92.698251][ T3686] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[   92.714777][ T3958] loop3: detected capacity change from 0 to 1024
[   92.723254][ T3958] EXT4-fs: Ignoring removed orlov option
[   92.731679][ T3686] asix: probe of 5-1:0.0 failed with error -71
[   92.744428][ T3958] EXT4-fs: Ignoring removed nomblk_io_submit option
[   92.755653][ T3686] usb 5-1: USB disconnect, device number 2
[   92.789671][ T3878] device hsr_slave_0 entered promiscuous mode
[   92.797163][ T3878] device hsr_slave_1 entered promiscuous mode
[   92.804347][ T3878] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   92.813706][ T3878] Cannot create hsr debugfs directory
[   92.841044][ T3958] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   93.240216][ T3911] chnl_net:caif_netlink_parms(): no params data found
[   93.254465][ T3645] EXT4-fs (loop3): unmounting filesystem.
[   93.377749][ T3655] Bluetooth: hci2: command tx timeout
[   93.381900][ T3967] loop4: detected capacity change from 0 to 1024
[   93.448648][ T3967] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   93.525246][ T3973] overlayfs: failed to get index nlink (file1/bus, err=-61)
[   93.553267][ T3967] jbd2_journal_init_inode: Cannot locate journal superblock
[   93.573219][ T3967] EXT4-fs (loop4): Could not load journal inode
[   93.618252][ T3655] Bluetooth: hci1: command tx timeout
[   93.747819][ T3687] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   93.993408][ T3911] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.021247][ T3911] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.059949][ T3911] device bridge_slave_0 entered promiscuous mode
[   94.060772][ T3984] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5)
[   94.073174][ T3984] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[   94.107925][ T3687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.136795][ T3687] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.147942][ T3911] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.155091][ T3911] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.173689][ T3687] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[   94.185295][ T3911] device bridge_slave_1 entered promiscuous mode
[   94.195260][ T3687] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.195956][ T3984] vhci_hcd vhci_hcd.0: Device attached
[   94.243289][ T3687] usb 4-1: config 0 descriptor??
[   94.293870][ T3878] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   94.346006][ T3878] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   94.374714][ T3987] vhci_hcd: connection closed
[   94.382146][   T56] vhci_hcd: stop threads
[   94.386602][ T3975] loop1: detected capacity change from 0 to 32768
[   94.401001][ T3878] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   94.408579][   T56] vhci_hcd: release socket
[   94.429965][   T56] vhci_hcd: disconnect device
[   94.464921][ T3975] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.68 (3975)
[   94.485537][ T3811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.528715][ T3975] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   94.530247][ T3911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.560280][ T3975] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[   94.570184][ T3975] BTRFS info (device loop1): setting nodatacow, compression disabled
[   94.579236][ T3878] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   94.587483][ T3975] BTRFS info (device loop1): force clearing of disk cache
[   94.602636][ T3975] BTRFS info (device loop1): setting datacow
[   94.609363][ T3975] BTRFS info (device loop1): doing ref verification
[   94.617452][ T3975] BTRFS info (device loop1): turning off barriers
[   94.624612][ T3975] BTRFS info (device loop1): enabling ssd optimizations
[   94.632113][ T3975] BTRFS info (device loop1): using spread ssd allocation scheme
[   94.647086][ T3975] BTRFS info (device loop1): not using ssd optimizations
[   94.655732][ T3975] BTRFS info (device loop1): not using spread ssd allocation scheme
[   94.664669][ T3975] BTRFS info (device loop1): using free space tree
[   94.672319][ T3811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.713164][ T3911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.740493][ T3687] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[   94.752048][ T3687] arvo 0003:1E7D:30D4.0004: unknown main item tag 0x0
[   94.762239][ T3687] arvo 0003:1E7D:30D4.0004: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[   94.830319][ T3811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.881491][ T3975] BTRFS info (device loop1): rebuilding free space tree
[   94.939288][ T3811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   94.958010][ T3687] arvo 0003:1E7D:30D4.0004: couldn't init struct arvo_device
[   94.972314][ T3911] team0: Port device team_slave_0 added
[   94.988132][ T3687] arvo 0003:1E7D:30D4.0004: couldn't install keyboard
[   95.016524][ T3911] team0: Port device team_slave_1 added
[   95.041702][ T3687] arvo: probe of 0003:1E7D:30D4.0004 failed with error -5
[   95.146268][ T4015] loop4: detected capacity change from 0 to 128
[   95.154879][ T3911] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.178924][ T3911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.213277][ T3874] usb 4-1: USB disconnect, device number 4
[   95.263726][ T4015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   95.273154][ T3911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.308351][ T4015] ext4 filesystem being mounted at /19/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[   95.339845][    C1] vkms_vblank_simulate: vblank timer overrun
[   95.391379][ T3641] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   95.402929][ T3911] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.410055][ T3911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.438158][ T3911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   95.457749][ T3655] Bluetooth: hci2: command tx timeout
[   95.661512][ T3639] EXT4-fs (loop4): unmounting filesystem.
[   95.698461][ T3655] Bluetooth: hci1: command tx timeout
[   95.820913][ T4019] loop4: detected capacity change from 0 to 512
[   95.848148][ T4019] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   95.914372][ T3911] device hsr_slave_0 entered promiscuous mode
[   95.927351][ T3911] device hsr_slave_1 entered promiscuous mode
[   95.939826][ T4019] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   95.954102][ T4019] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038 (0x7fffffff)
[   95.979667][ T4027] loop3: detected capacity change from 0 to 2048
[   95.993946][ T3911] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.003007][ T3911] Cannot create hsr debugfs directory
[   96.031440][ T4021] netlink: 108 bytes leftover after parsing attributes in process `syz.3.73'.
[   96.040611][ T4027] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   96.113074][ T3878] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.140490][   T26] audit: type=1800 audit(1728594551.954:7): pid=4021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.73" name=0B dev="loop3" ino=1367 res=0 errno=0
[   96.312621][ T3639] EXT4-fs (loop4): unmounting filesystem.
[   96.450899][ T3878] 8021q: adding VLAN 0 to HW filter on device team0
[   96.468873][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   96.479494][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   96.517606][ T4040] binder_alloc: 4037: binder_alloc_buf size 8 failed, no address space
[   96.535341][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   96.549843][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   96.562664][ T4040] binder_alloc: allocated: 4096 (num: 1 largest: 4096), free: 0 (num: 0 largest: 0)
[   96.575163][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.582481][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.648757][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   96.820790][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   96.837435][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   96.859677][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.866945][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[   96.962697][ T4054] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   96.972588][ T4054] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   96.981504][ T4054] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   96.990381][ T4054] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   97.001772][ T4054] device vxlan0 entered promiscuous mode
[   97.026234][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   97.035960][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   97.079016][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   97.099839][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   97.114154][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   97.124357][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   97.145511][ T3878] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   97.160664][ T3878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   97.217074][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   97.227333][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   97.237897][ T4060] process 'syz.4.78' launched './file0' with NULL argv: empty string added
[   97.254264][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   97.265984][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   97.286134][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   97.374878][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   97.483706][ T4063] device syzkaller0 entered promiscuous mode
[   97.778153][ T3655] Bluetooth: hci1: command tx timeout
[   98.041222][ T3683] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   98.271152][ T4088] loop4: detected capacity change from 0 to 512
[   98.295020][ T3683] usb 2-1: Using ep0 maxpacket: 32
[   98.355571][ T4088] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[   98.379359][ T4088] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   98.389113][ T4088] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.82: Failed to acquire dquot type 0
[   98.403050][ T4088] EXT4-fs (loop4): Remounting filesystem read-only
[   98.415276][ T4088] EXT4-fs (loop4): 1 orphan inode deleted
[   98.421767][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   98.422201][ T4088] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   98.446405][ T4088] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038 (0x7fffffff)
[   98.454380][ T3683] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   98.502795][ T4088] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 1 index 0
[   98.529181][ T3683] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   98.534096][ T4088] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[   98.543587][ T3683] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   98.563065][ T4088] EXT4-fs error (device loop4): ext4_acquire_dquot:6800: comm syz.4.82: Failed to acquire dquot type 0
[   98.577550][ T3683] usb 2-1: config 0 descriptor??
[   98.605862][ T4088] EXT4-fs (loop4): Remounting filesystem read-only
[   98.612874][ T4076] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   98.632372][ T3683] hub 2-1:0.0: USB hub found
[   98.689646][ T3639] EXT4-fs (loop4): unmounting filesystem.
[   98.854603][ T3683] hub 2-1:0.0: 2 ports detected
[   98.879604][ T4094] loop4: detected capacity change from 0 to 2048
[   98.913754][ T4094] UDF-fs: warning (device loop4): udf_fill_super: No fileset found
[  100.603150][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  100.612643][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  100.650950][ T3878] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.739621][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  100.751252][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  100.816735][ T4106] random: crng reseeded on system resumption
[  100.875359][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  100.901614][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  100.961741][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  100.995084][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  101.028319][ T3878] device veth0_vlan entered promiscuous mode
[  101.102890][ T3875] usb 2-1: USB disconnect, device number 5
[  101.214218][ T3878] device veth1_vlan entered promiscuous mode
[  101.551382][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  101.586366][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  101.617257][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  101.666675][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  101.727493][ T3811] device hsr_slave_0 left promiscuous mode
[  101.745547][ T3811] device hsr_slave_1 left promiscuous mode
[  101.774353][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.792296][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.810602][ T3811] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.849356][ T3811] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.882036][ T3811] device bridge_slave_1 left promiscuous mode
[  101.911422][ T3811] bridge0: port 2(bridge_slave_1) entered disabled state
[  101.961653][ T3811] device bridge_slave_0 left promiscuous mode
[  101.981800][ T3811] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.106575][ T3811] device veth1_macvtap left promiscuous mode
[  102.137673][ T3811] device veth0_macvtap left promiscuous mode
[  102.144556][ T3811] device veth1_vlan left promiscuous mode
[  102.150899][ T3811] device veth0_vlan left promiscuous mode
[  102.364409][ T4143] kvm: emulating exchange as write
[  103.105706][ T4136] loop1: detected capacity change from 0 to 40427
[  103.187247][ T4136] F2FS-fs (loop1): invalid crc value
[  103.262077][ T4136] F2FS-fs (loop1): Found nat_bits in checkpoint
[  103.390553][ T4136] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  103.423202][ T4136] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  103.591968][ T3641] syz-executor: attempt to access beyond end of device
[  103.591968][ T3641] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  103.638963][ T3811] team0 (unregistering): Port device team_slave_1 removed
[  103.739567][ T3811] team0 (unregistering): Port device team_slave_0 removed
[  103.875755][ T3811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  103.885402][ T4153] loop3: detected capacity change from 0 to 40427
[  103.917439][ T4153] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  103.926225][ T4153] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  103.980371][ T3811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  104.044333][ T4153] F2FS-fs (loop3): Found nat_bits in checkpoint
[  104.154088][ T4153] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  104.180144][ T4153] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  104.251749][   T26] audit: type=1804 audit(1728594560.064:8): pid=4153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.93" name="/newroot/26/file2/bus" dev="loop3" ino=10 res=1 errno=0
[  104.287898][   T26] audit: type=1804 audit(1728594560.064:9): pid=4153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.93" name="/newroot/26/file2/bus" dev="loop3" ino=10 res=1 errno=0
[  104.331736][ T4155] f2fs_ckpt-7:3: attempt to access beyond end of device
[  104.331736][ T4155] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  105.101613][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  105.586121][ T3811] bond0 (unregistering): Released all slaves
[  105.678517][ T3878] device veth0_macvtap entered promiscuous mode
[  105.685633][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.730998][ T3911] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  105.761755][ T3911] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  105.806724][ T3911] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  105.873708][ T3878] device veth1_macvtap entered promiscuous mode
[  105.895184][ T3911] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  105.975413][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.042368][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.093857][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.147755][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.180254][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  106.200975][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.281648][ T3878] batman_adv: batadv0: Interface activated: batadv_slave_0
[  106.305579][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  106.329682][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  106.338568][ T4179] Invalid ELF header magic: != ELF
[  106.371856][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.392777][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.406484][ T4177] loop4: detected capacity change from 0 to 8192
[  106.413245][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.425008][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.449414][ T3878] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.460393][ T3878] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.481499][ T3878] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.519198][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.573911][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  106.631391][ T3878] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  106.656101][ T3878] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  106.700109][ T3878] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  106.720000][ T3878] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  106.984266][ T4188] loop1: detected capacity change from 0 to 1024
[  106.996663][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.021882][ T4188] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  107.029263][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.082318][ T4171] loop3: detected capacity change from 0 to 32768
[  107.094102][ T4171] XFS: ikeep mount option is deprecated.
[  107.100796][ T4171] XFS: ikeep mount option is deprecated.
[  107.115664][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  107.520929][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  107.646309][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  107.667887][ T3911] 8021q: adding VLAN 0 to HW filter on device bond0
[  107.754792][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  107.889336][ T4188] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  107.937812][ T3911] 8021q: adding VLAN 0 to HW filter on device team0
[  107.965141][ T4171] XFS (loop3): Mounting V5 Filesystem
[  108.054726][   T26] audit: type=1800 audit(1728594563.864:10): pid=4188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.104" name="bus" dev="loop1" ino=18 res=0 errno=0
[  108.265742][ T4171] XFS (loop3): Ending clean mount
[  108.276713][ T4203] loop4: detected capacity change from 0 to 32768
[  108.289190][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  108.296618][ T4203] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.105 (4203)
[  108.323927][ T4203] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  108.333615][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  108.334231][ T4203] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  108.350353][ T4203] BTRFS info (device loop4): using free space tree
[  108.358575][ T4188] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  108.372590][ T4188] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #15: comm syz.1.104: mark_inode_dirty error
[  108.403606][ T4188] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  108.416318][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  108.425837][ T4188] EXT4-fs error (device loop1): mpage_map_and_submit_extent:2547: inode #15: comm syz.1.104: mark_inode_dirty error
[  108.449627][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  108.451114][ T4188] EXT4-fs error (device loop1): mpage_map_and_submit_extent:2551: comm syz.1.104: Failed to mark inode 15 dirty
[  108.458811][   T51] bridge0: port 1(bridge_slave_0) entered blocking state
[  108.477150][   T51] bridge0: port 1(bridge_slave_0) entered forwarding state
[  108.487970][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  108.497013][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  108.510051][   T51] bridge0: port 2(bridge_slave_1) entered blocking state
[  108.517324][   T51] bridge0: port 2(bridge_slave_1) entered forwarding state
[  108.526346][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  108.549648][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  108.564089][   T26] audit: type=1804 audit(1728594564.374:11): pid=4222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.98" name="/newroot/30/file0/bus" dev="loop3" ino=9289 res=1 errno=0
[  108.571793][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  108.605460][ T4188] syz.1.104: attempt to access beyond end of device
[  108.605460][ T4188] loop1: rw=2049, sector=3606377190, nr_sectors = 2 limit=1024
[  108.621413][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  108.621545][ T4188] EXT4-fs warning (device loop1): ext4_end_bio:347: I/O error 10 writing to inode 15 starting block 1803188595)
[  108.644090][ T4188] Buffer I/O error on device loop1, logical block 1803188595
[  108.684312][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  108.744533][ T3641] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 16: comm syz-executor: bad entry in directory: inode out of bounds - offset=0, inode=2, rec_len=12, size=1024 fake=1
[  108.747912][ T4203] BTRFS info (device loop4): enabling ssd optimizations
[  108.796917][ T3641] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5882: Corrupt filesystem
[  108.827784][ T3641] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #2: comm syz-executor: mark_inode_dirty error
[  108.835721][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  108.855681][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  108.877825][   T26] audit: type=1804 audit(1728594564.684:12): pid=4229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.98" name="/newroot/30/file0/bus" dev="loop3" ino=9289 res=1 errno=0
[  108.913540][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  108.923779][   T51] EXT4-fs error (device loop1): ext4_ind_map_blocks:604: inode #15: comm kworker/u4:3: Can't allocate blocks for non-extent mapped inodes with bigalloc
[  108.958950][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  108.966989][   T26] audit: type=1804 audit(1728594564.714:13): pid=4203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.105" name="/newroot/32/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  108.999954][   T51] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 131075 with max blocks 1 with error 117
[  109.021142][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  109.054985][   T51] EXT4-fs (loop1): This should not happen!! Data will be lost
[  109.054985][   T51] 
[  109.071656][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  109.093877][ T3645] XFS (loop3): Unmounting Filesystem
[  109.114089][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  109.162933][   T26] audit: type=1804 audit(1728594564.714:14): pid=4203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.105" name="/newroot/32/file0/bus" dev="loop4" ino=263 res=1 errno=0
[  109.206191][ T3911] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  109.209782][ T3641] EXT4-fs (loop1): Inode 15 (ffff888075382820): i_reserved_data_blocks (1) not cleared!
[  109.228913][ T3641] EXT4-fs (loop1): unmounting filesystem.
[  109.354326][ T3639] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  109.818271][ T3641] syz-executor (3641) used greatest stack depth: 18160 bytes left
[  109.897425][   T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  109.933748][   T56] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.949393][ T4238] input: syz1 as /devices/virtual/input/input6
[  110.056736][ T4242] loop4: detected capacity change from 0 to 128
[  110.159278][   T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.200081][   T56] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.220725][   T26] audit: type=1800 audit(1728594566.034:15): pid=4242 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.108" name="file1" dev="loop4" ino=1048599 res=0 errno=0
[  110.267273][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  110.281690][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  110.384853][   T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.410290][   T56] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.434593][ T4245] netlink: 16 bytes leftover after parsing attributes in process `syz.4.110'.
[  110.463555][ T3911] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.531802][   T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  110.575772][   T56] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  110.619204][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  110.637513][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  110.678253][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  110.689821][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  110.729813][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  110.755638][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  110.784411][ T3911] device veth0_vlan entered promiscuous mode
[  110.810287][ T4247] Process accounting resumed
[  110.815783][ T3911] device veth1_vlan entered promiscuous mode
[  110.871100][ T3655] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  110.881331][ T3655] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  110.890316][ T3655] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  110.900125][ T3655] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  110.918068][ T3655] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  110.943299][ T3655] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  111.041497][   T26] audit: type=1326 audit(1728594566.854:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.063695][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.081030][ T3911] device veth0_macvtap entered promiscuous mode
[  111.099051][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  111.118541][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  111.142651][   T26] audit: type=1326 audit(1728594566.884:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.165011][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.166598][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  111.212026][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  111.228557][   T26] audit: type=1326 audit(1728594566.884:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.241181][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  111.311143][   T26] audit: type=1326 audit(1728594566.884:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.342984][ T3911] device veth1_macvtap entered promiscuous mode
[  111.376884][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  111.383483][   T26] audit: type=1326 audit(1728594566.904:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.483008][   T26] audit: type=1326 audit(1728594566.904:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.499210][ T3911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.545918][ T3911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.566864][   T26] audit: type=1326 audit(1728594566.904:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.603689][ T3911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.638419][ T3911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.641844][   T26] audit: type=1326 audit(1728594566.904:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.668967][ T3911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.691286][ T4234] loop2: detected capacity change from 0 to 65536
[  111.706219][   T26] audit: type=1326 audit(1728594566.904:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4252 comm="syz.3.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1dc377dff9 code=0x7ffc0000
[  111.711460][ T3911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.728664][    C0] vkms_vblank_simulate: vblank timer overrun
[  111.753786][ T3911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  111.769661][ T3911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.783564][ T3911] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.821206][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  111.837963][ T4234] XFS (loop2): Mounting V5 Filesystem
[  111.848138][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  111.883646][ T3911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.953059][ T4234] XFS (loop2): Ending clean mount
[  111.959708][ T4273] loop3: detected capacity change from 0 to 512
[  111.971188][ T3911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  111.981679][ T3911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  111.993120][ T3911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.003318][ T3911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.024530][ T4234] XFS (loop2): Quotacheck needed: Please wait.
[  112.037980][ T3911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.085747][ T3911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  112.129077][ T3911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  112.155707][ T3911] batman_adv: batadv0: Interface activated: batadv_slave_1
[  112.169927][ T4234] XFS (loop2): Quotacheck: Done.
[  112.357205][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  112.379064][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  112.398372][ T4281] loop3: detected capacity change from 0 to 512
[  112.422026][ T3911] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  112.432841][ T4281] EXT4-fs: Ignoring removed orlov option
[  112.447755][ T3911] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  112.474924][ T3911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  112.484782][ T4281] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e09c, mo2=0002]
[  112.525212][ T4281] System zones: 1-12
[  112.529514][ T3911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  112.549688][ T4281] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #15: comm syz.3.115: casefold flag without casefold feature
[  112.587501][ T4281] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.115: couldn't read orphan inode 15 (err -117)
[  112.626185][ T4281] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  112.661193][ T4257] loop4: detected capacity change from 0 to 32768
[  112.761998][ T3645] EXT4-fs (loop3): unmounting filesystem.
[  112.840370][ T4257] XFS (loop4): Mounting V5 Filesystem
[  112.889623][ T4294] loop3: detected capacity change from 0 to 512
[  112.920260][ T4294] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  112.944165][ T4294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  112.976080][ T3878] XFS (loop2): Unmounting Filesystem
[  113.015953][ T4257] XFS (loop4): Ending clean mount
[  113.042139][ T4294] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.116: invalid indirect mapped block 83886080 (level 1)
[  113.058222][ T3649] Bluetooth: hci3: command tx timeout
[  113.106992][ T4294] EXT4-fs (loop3): Remounting filesystem read-only
[  113.118450][ T4294] EXT4-fs (loop3): 1 orphan inode deleted
[  113.124324][ T4294] EXT4-fs (loop3): 1 truncate cleaned up
[  113.130684][ T4250] chnl_net:caif_netlink_parms(): no params data found
[  113.157926][ T4294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  113.258869][ T3759] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.267260][ T3759] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.475007][ T3639] XFS (loop4): Unmounting Filesystem
[  113.504407][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  113.637860][ T3645] EXT4-fs error (device loop3): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0
[  113.648453][ T3693] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  113.666708][ T3693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  113.702572][ T3645] EXT4-fs (loop3): Remounting filesystem read-only
[  113.866929][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  113.888369][ T3645] EXT4-fs (loop3): unmounting filesystem.
[  113.907954][ T4250] bridge0: port 1(bridge_slave_0) entered blocking state
[  113.915127][ T4250] bridge0: port 1(bridge_slave_0) entered disabled state
[  113.964019][ T4250] device bridge_slave_0 entered promiscuous mode
[  114.212053][ T4319] binder_alloc: 4318: pid 4318 spamming oneway? 1 buffers allocated for a total size of 4096
[  114.291175][ T4250] bridge0: port 2(bridge_slave_1) entered blocking state
[  114.318745][ T4250] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.368070][ T4250] device bridge_slave_1 entered promiscuous mode
[  114.545545][ T4324] Invalid ELF header len 18
[  114.660633][ T4250] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  114.710678][ T4250] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  114.852367][ T4250] team0: Port device team_slave_0 added
[  114.875274][ T4250] team0: Port device team_slave_1 added
[  115.126320][ T4334] loop4: detected capacity change from 0 to 4096
[  115.138826][ T3649] Bluetooth: hci3: command tx timeout
[  115.240275][   T56] device hsr_slave_0 left promiscuous mode
[  115.252404][   T56] device hsr_slave_1 left promiscuous mode
[  115.298391][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.305884][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.340315][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.397363][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.423002][   T56] device bridge_slave_1 left promiscuous mode
[  115.439970][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  115.459508][   T56] device bridge_slave_0 left promiscuous mode
[  115.465961][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  115.480195][ T3655] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  115.513453][ T3655] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  115.530779][ T3655] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  115.544713][ T3655] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  115.555798][ T3655] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  115.565305][ T3655] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  115.633003][   T56] device veth1_macvtap left promiscuous mode
[  115.669934][   T56] device veth0_macvtap left promiscuous mode
[  115.676300][   T56] device veth1_vlan left promiscuous mode
[  115.686797][   T56] device veth0_vlan left promiscuous mode
[  116.483532][   T56] team0 (unregistering): Port device team_slave_1 removed
[  116.534772][   T56] team0 (unregistering): Port device team_slave_0 removed
[  116.582725][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  116.632632][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.172869][   T56] bond0 (unregistering): Released all slaves
[  117.218136][ T3649] Bluetooth: hci3: command tx timeout
[  117.242789][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.250222][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.276566][ T4250] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.629764][ T3649] Bluetooth: hci4: command tx timeout
[  117.932347][ T4250] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.958177][ T4250] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  118.018860][ T4250] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  118.087127][ T4369] loop4: detected capacity change from 0 to 1024
[  118.165228][ T4369] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  118.216516][ T4250] device hsr_slave_0 entered promiscuous mode
[  118.228816][ T4250] device hsr_slave_1 entered promiscuous mode
[  119.323736][ T3649] Bluetooth: hci3: command tx timeout
[  119.372286][ T3639] EXT4-fs (loop4): unmounting filesystem.
[  119.661778][ T4390] device vlan2 entered promiscuous mode
[  119.667394][ T4390] device syz_tun entered promiscuous mode
[  119.680596][ T4345] chnl_net:caif_netlink_parms(): no params data found
[  119.698167][ T3655] Bluetooth: hci4: command tx timeout
[  119.865870][ T4395] loop2: detected capacity change from 0 to 256
[  119.867965][ T3686] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  119.966485][ T4395] FAT-fs (loop2): Directory bread(block 64) failed
[  119.986023][ T4395] FAT-fs (loop2): Directory bread(block 65) failed
[  119.994214][ T4395] FAT-fs (loop2): Directory bread(block 66) failed
[  120.003057][ T4395] FAT-fs (loop2): Directory bread(block 67) failed
[  120.010639][ T4395] FAT-fs (loop2): Directory bread(block 68) failed
[  120.017233][ T4395] FAT-fs (loop2): Directory bread(block 69) failed
[  120.024920][ T4395] FAT-fs (loop2): Directory bread(block 70) failed
[  120.031885][ T4395] FAT-fs (loop2): Directory bread(block 71) failed
[  120.038978][ T4395] FAT-fs (loop2): Directory bread(block 72) failed
[  120.045555][ T4395] FAT-fs (loop2): Directory bread(block 73) failed
[  120.099948][ T4395] capability: warning: `syz.2.136' uses deprecated v2 capabilities in a way that may be insecure
[  120.111636][ T4395] program syz.2.136 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.219136][   T56] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.248145][ T3686] usb 5-1: config index 0 descriptor too short (expected 65426, got 146)
[  120.264110][ T3686] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.279132][ T3686] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 5
[  120.348969][   T56] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.363171][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.368484][ T3686] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  120.376943][ T4345] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.379965][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  120.391736][ T4345] device bridge_slave_0 entered promiscuous mode
[  120.394867][ T3686] usb 5-1: SerialNumber: syz
[  120.411314][ T3686] usb 5-1: config 0 descriptor??
[  120.453193][   T56] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.477127][ T4345] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.485438][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.494608][ T4345] device bridge_slave_1 entered promiscuous mode
[  120.535917][   T56] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.547074][ T3874] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  120.611590][ T4345] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  120.645746][ T4345] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  120.694870][ T4389] loop4: detected capacity change from 0 to 256
[  120.776459][ T4345] team0: Port device team_slave_0 added
[  120.790658][ T4250] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  120.820999][ T4345] team0: Port device team_slave_1 added
[  120.834898][ T3874] usb 3-1: Using ep0 maxpacket: 32
[  120.835383][ T4250] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  120.876281][ T3681] usb 5-1: USB disconnect, device number 3
[  120.916188][ T4250] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  120.953332][ T4250] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  120.979402][ T3874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  120.997008][ T3874] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  121.000940][ T4345] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.017882][ T3874] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  121.023994][ T4345] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.037293][ T3874] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.060307][ T4345] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.101844][ T3874] usb 3-1: config 0 descriptor??
[  121.117991][ T4404] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  121.126686][ T4345] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.142028][ T4345] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.176395][ T4345] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.179318][ T3874] hub 3-1:0.0: USB hub found
[  121.351952][ T4345] device hsr_slave_0 entered promiscuous mode
[  121.360527][ T4345] device hsr_slave_1 entered promiscuous mode
[  121.367339][ T4345] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.375324][ T4345] Cannot create hsr debugfs directory
[  121.432960][ T3874] hub 3-1:0.0: 2 ports detected
[  121.476619][ T4250] 8021q: adding VLAN 0 to HW filter on device bond0
[  121.612809][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  121.632155][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  121.672946][ T4250] 8021q: adding VLAN 0 to HW filter on device team0
[  121.773064][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  121.781420][ T3655] Bluetooth: hci4: command tx timeout
[  121.788627][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  121.813856][ T3811] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.821124][ T3811] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.913931][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  121.928834][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  121.952727][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  121.975942][ T3811] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.983192][ T3811] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.019476][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  122.054427][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  122.069040][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  122.090395][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  122.115371][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  122.146600][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  122.167323][ T3811] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  122.247567][ T4250] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  122.273703][ T4250] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  122.291596][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  122.307099][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  122.316824][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  122.333564][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  122.350621][ T4421] loop4: detected capacity change from 0 to 40427
[  122.381361][ T4421] F2FS-fs (loop4): Wrong NAT boundary, start(2560) end(462336) blocks(1024)
[  122.437995][ T4421] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  122.451789][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  122.552518][ T4421] F2FS-fs (loop4): Found nat_bits in checkpoint
[  122.722071][ T4421] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  122.736760][ T4421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  122.835914][ T4421] syz.4.138: attempt to access beyond end of device
[  122.835914][ T4421] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  122.951412][ T4421] syz.4.138: attempt to access beyond end of device
[  122.951412][ T4421] loop4: rw=2049, sector=45104, nr_sectors = 24 limit=40427
[  122.983817][   T56] device hsr_slave_0 left promiscuous mode
[  122.986685][ T4421] syz.4.138: attempt to access beyond end of device
[  122.986685][ T4421] loop4: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  123.005672][   T56] device hsr_slave_1 left promiscuous mode
[  123.014527][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.032769][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.046284][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.067816][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.075665][ T3639] syz-executor: attempt to access beyond end of device
[  123.075665][ T3639] loop4: rw=2049, sector=45136, nr_sectors = 8 limit=40427
[  123.094526][   T56] device bridge_slave_1 left promiscuous mode
[  123.106350][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.137823][   T56] device bridge_slave_0 left promiscuous mode
[  123.144130][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.215709][   T56] device veth0_to_bond left promiscuous mode
[  123.244304][   T56] device veth1_macvtap left promiscuous mode
[  123.258012][   T56] device veth0_macvtap left promiscuous mode
[  123.268114][   T56] device veth1_vlan left promiscuous mode
[  123.274042][   T56] device veth0_vlan left promiscuous mode
[  123.699367][ T4459] binder: transaction release 35 bad handle 1, ret = -22
[  123.736443][ T3874] usb 3-1: USB disconnect, device number 3
[  123.825662][ T4461] loop4: detected capacity change from 0 to 128
[  123.846067][ T4461] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  123.858174][ T3655] Bluetooth: hci4: command tx timeout
[  124.114703][ T4463] loop4: detected capacity change from 0 to 4096
[  124.127963][ T4463] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[  124.193151][ T4463] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  124.213923][ T4463] ntfs3: loop4: Failed to load $Extend.
[  124.378260][   T26] kauditd_printk_skb: 88 callbacks suppressed
[  124.378278][   T26] audit: type=1804 audit(1728594580.184:113): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.141" name="/newroot/45/file0/bus" dev="loop4" ino=33 res=1 errno=0
[  124.430023][   T26] audit: type=1804 audit(1728594580.244:114): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.141" name="/newroot/45/file0/bus" dev="loop4" ino=33 res=1 errno=0
[  124.459544][   T26] audit: type=1804 audit(1728594580.264:115): pid=4463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.141" name="/newroot/45/file0/bus" dev="loop4" ino=33 res=1 errno=0
[  124.543115][   T56] team0 (unregistering): Port device team_slave_1 removed
[  124.690039][   T56] team0 (unregistering): Port device team_slave_0 removed
[  124.804682][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.941890][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.976608][ T4465] loop2: detected capacity change from 0 to 32768
[  125.028137][ T4465] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.142 (4465)
[  125.090510][ T4465] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.109405][ T4465] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  125.129391][ T4465] BTRFS info (device loop2): using free space tree
[  125.337873][ T4465] BTRFS info (device loop2): enabling ssd optimizations
[  125.498063][ T3878] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  125.853613][ T3649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  125.864384][ T3649] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  125.873998][ T3649] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  125.882049][ T3649] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  125.883503][ T4494] loop4: detected capacity change from 0 to 1024
[  125.915398][ T3649] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  125.922891][ T3649] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  127.513403][   T56] bond0 (unregistering): Released all slaves
[  128.074802][ T3649] Bluetooth: hci5: command tx timeout
[  128.145653][ T4250] 8021q: adding VLAN 0 to HW filter on device batadv0
[  128.222560][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  128.230245][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  128.247886][ T4498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'.
[  128.334936][ T4501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.146'.
[  128.388951][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  128.439067][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  128.866875][ T4345] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  128.888043][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  128.917180][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  128.973588][ T4250] device veth0_vlan entered promiscuous mode
[  129.004097][ T4345] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  129.027871][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.048007][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.151567][ T4345] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  129.178375][ T4491] chnl_net:caif_netlink_parms(): no params data found
[  129.201967][ T4250] device veth1_vlan entered promiscuous mode
[  129.218114][ T4345] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  129.253664][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  129.359437][ T4508] loop4: detected capacity change from 0 to 32768
[  129.486328][ T4491] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.524276][ T4491] bridge0: port 1(bridge_slave_0) entered disabled state
[  129.571422][ T4491] device bridge_slave_0 entered promiscuous mode
[  129.618380][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  129.627101][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.650553][ T4491] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.669646][ T4491] bridge0: port 2(bridge_slave_1) entered disabled state
[  129.685091][ T4491] device bridge_slave_1 entered promiscuous mode
[  129.754102][ T4250] device veth0_macvtap entered promiscuous mode
[  129.827022][ T4250] device veth1_macvtap entered promiscuous mode
[  129.904148][ T4491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  129.964152][ T4491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.098173][ T3649] Bluetooth: hci5: command tx timeout
[  130.151585][   T56] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.235018][ T4491] team0: Port device team_slave_0 added
[  130.282944][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  130.302176][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  130.394870][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.413775][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.444893][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.476064][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.506701][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  130.528471][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.569845][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_0
[  130.652162][   T56] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.685716][ T4491] team0: Port device team_slave_1 added
[  130.702637][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.723613][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.734694][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.754099][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.781151][ T4250] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.813386][ T4250] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.844819][ T4250] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.867916][ T3687] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  130.882819][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  130.917026][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.956259][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.976150][   T51] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.070980][   T56] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.119185][ T4250] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.147732][ T4250] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.156536][ T4250] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.165370][ T3687] usb 5-1: Using ep0 maxpacket: 8
[  131.184699][ T4250] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.216018][ T4345] 8021q: adding VLAN 0 to HW filter on device bond0
[  131.234279][ T4491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  131.242533][ T4491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.271337][ T4491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  131.288012][ T3687] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[  131.296690][ T3687] usb 5-1: config 179 has no interface number 0
[  131.330052][ T3687] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  131.338966][   T56] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.347429][ T3687] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  131.375861][ T3687] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  131.387789][ T3687] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  131.397145][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  131.399729][ T3687] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  131.412366][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  131.435667][ T3687] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  131.455403][ T4491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  131.462563][ T3687] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.462597][ T4491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  131.497547][ T4491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  131.520690][ T4345] 8021q: adding VLAN 0 to HW filter on device team0
[  131.523063][ T4541] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  131.659629][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  131.670625][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  131.679867][ T3735] bridge0: port 1(bridge_slave_0) entered blocking state
[  131.687063][ T3735] bridge0: port 1(bridge_slave_0) entered forwarding state
[  131.695556][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  131.706012][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  131.715489][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state
[  131.722778][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state
[  131.733015][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  131.797832][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  131.827223][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  131.854792][ T4491] device hsr_slave_0 entered promiscuous mode
[  131.868086][ T3629] usb 5-1: USB disconnect, device number 4
[  131.877848][    C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  131.903885][ T4491] device hsr_slave_1 entered promiscuous mode
[  131.918526][ T4491] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  131.926119][ T4491] Cannot create hsr debugfs directory
[  131.992535][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  132.012071][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  132.028383][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  132.073589][ T3735] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.094398][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  132.115379][ T3735] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.128123][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  132.148011][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  132.167692][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  132.179975][ T3649] Bluetooth: hci5: command tx timeout
[  132.197255][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  132.215357][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  132.226274][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  132.250558][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  132.354691][ T3735] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.373064][ T3735] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.493260][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  132.820232][ T1271] ieee802154 phy0 wpan0: encryption failed: -22
[  132.826635][ T1271] ieee802154 phy1 wpan1: encryption failed: -22
[  133.649767][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  133.657320][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  133.746668][ T4345] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.861862][ T4574] program syz.4.156 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.898973][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  133.918201][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  133.939632][ T4581] loop1: detected capacity change from 0 to 512
[  134.061625][ T4581] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  134.100028][ T4581] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038 (0x7fffffff)
[  134.206247][ T4345] device veth0_vlan entered promiscuous mode
[  134.260763][ T3649] Bluetooth: hci5: command tx timeout
[  134.276300][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  134.309068][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  134.350554][ T4581] overlayfs: failed to resolve './file0': -2
[  134.463047][ T4345] device veth1_vlan entered promiscuous mode
[  134.489479][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  134.501124][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  134.512653][ T3759] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  134.582427][ T4491] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  134.615834][ T4491] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  134.680409][ T4345] device veth0_macvtap entered promiscuous mode
[  134.776753][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  134.849370][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  134.875084][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  134.901803][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  134.913256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  134.926662][ T4491] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  134.940330][ T4345] device veth1_macvtap entered promiscuous mode
[  134.974839][ T4491] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  135.036452][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.080069][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.096872][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.119830][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.135868][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.158331][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.169391][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  135.180885][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.195677][ T4345] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.287203][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  135.315933][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  135.354271][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.383608][ T4619] loop1: detected capacity change from 0 to 512
[  135.395752][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.410498][ T4619] EXT4-fs: Ignoring removed orlov option
[  135.424943][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.432316][ T4619] ext4: Unknown parameter 'dioread_lock.noload'
[  135.462413][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.493096][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.512138][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.535743][ T4345] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  135.554230][ T4628] loop2: detected capacity change from 0 to 128
[  135.567174][ T4345] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  135.587314][ T4345] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.633819][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  135.652995][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  135.725943][ T4345] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.774891][ T4345] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.791567][ T4345] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.825073][ T4345] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.879120][   T56] device hsr_slave_0 left promiscuous mode
[  135.903070][   T56] device hsr_slave_1 left promiscuous mode
[  135.923699][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.956307][   T56] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.995126][   T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.038424][   T56] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.064377][   T56] device bridge_slave_1 left promiscuous mode
[  136.077851][   T56] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.096848][   T56] device bridge_slave_0 left promiscuous mode
[  136.107352][   T56] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.195676][   T56] device veth1_macvtap left promiscuous mode
[  136.216886][   T56] device veth0_macvtap left promiscuous mode
[  136.223793][   T56] device veth1_vlan left promiscuous mode
[  136.237977][   T56] device veth0_vlan left promiscuous mode
[  136.613658][ T4646] futex_wake_op: syz.1.172 tries to shift op by 144; fix this program
[  137.674126][   T56] team0 (unregistering): Port device team_slave_1 removed
[  137.839663][   T56] team0 (unregistering): Port device team_slave_0 removed
[  137.996926][   T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.138660][   T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  140.190169][   T56] bond0 (unregistering): Released all slaves
[  140.538456][ T3878] device syz_tun left promiscuous mode
[  142.764183][ T3734] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.782880][ T3734] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.813703][ T4491] 8021q: adding VLAN 0 to HW filter on device bond0
[  142.838816][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  142.864273][ T3734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  142.878068][ T4491] 8021q: adding VLAN 0 to HW filter on device team0
[  142.885468][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  142.890047][ T3734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  142.906810][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  142.939717][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  142.955427][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  142.983690][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  143.006255][ T4656] loop1: detected capacity change from 0 to 512
[  143.014155][   T56] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.021364][   T56] bridge0: port 1(bridge_slave_0) entered forwarding state
[  143.032115][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  143.042663][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  143.052420][   T56] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.059757][   T56] bridge0: port 2(bridge_slave_1) entered forwarding state
[  143.100083][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  143.123692][ T4656] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.176: corrupted inode contents
[  143.154751][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  143.165936][ T4656] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #3: comm syz.1.176: mark_inode_dirty error
[  143.195690][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  143.263409][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  143.268463][ T4656] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #3: comm syz.1.176: corrupted inode contents
[  143.301963][ T4656] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #3: comm syz.1.176: mark_inode_dirty error
[  143.332155][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  143.346597][ T4656] Quota error (device loop1): write_blk: dquota write failed
[  143.367543][ T4656] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  143.378231][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  143.397883][ T4656] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz.1.176: Failed to acquire dquot type 0
[  143.461179][ T4656] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.176: corrupted inode contents
[  143.509211][ T4656] EXT4-fs error (device loop1): ext4_dirty_inode:6086: inode #16: comm syz.1.176: mark_inode_dirty error
[  143.548781][ T4656] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.176: corrupted inode contents
[  143.590382][ T4656] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #16: comm syz.1.176: mark_inode_dirty error
[  143.632244][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  143.741845][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  143.898010][ T4656] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.176: corrupted inode contents
[  143.920358][ T3655] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  143.942484][ T3655] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  143.959323][ T3655] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  143.976018][ T3655] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  143.992670][ T3655] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  144.006442][ T3655] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  144.244355][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  144.263541][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  144.301439][ T4491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  144.323104][ T4491] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  144.353823][ T4656] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  144.395776][ T4656] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #16: comm syz.1.176: corrupted inode contents
[  144.408735][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  144.429332][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  144.457127][ T4656] EXT4-fs error (device loop1): ext4_truncate:4311: inode #16: comm syz.1.176: mark_inode_dirty error
[  144.479088][ T4656] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  144.543035][ T4656] EXT4-fs (loop1): 1 truncate cleaned up
[  144.576471][ T4656] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  144.648593][ T4656] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038 (0x7fffffff)
[  144.765395][   T26] audit: type=1800 audit(1728594600.574:116): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.176" name="bus" dev="loop1" ino=18 res=0 errno=0
[  145.019886][ T4250] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  145.087766][ T4250] EXT4-fs warning (device loop1): ext4_dirblock_csum_set:427: inode #2: comm syz-executor: No space for directory leaf checksum. Please run e2fsck -D.
[  145.107914][ T3686] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  145.119602][ T4663] chnl_net:caif_netlink_parms(): no params data found
[  145.208621][ T4250] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  145.221406][ T4250] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  145.231728][ T4250] EXT4-fs error (device loop1): ext4_acquire_dquot:6800: comm syz-executor: Failed to acquire dquot type 1
[  145.311832][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  145.319746][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  145.332071][ T4491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  145.488091][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.501471][ T3686] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  145.511571][ T3686] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  145.520920][ T3686] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.530993][ T3686] usb 5-1: config 0 descriptor??
[  145.547938][ T4663] bridge0: port 1(bridge_slave_0) entered blocking state
[  145.555268][ T4663] bridge0: port 1(bridge_slave_0) entered disabled state
[  145.564316][ T4663] device bridge_slave_0 entered promiscuous mode
[  145.580110][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  145.589388][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  145.621941][ T4491] device veth0_vlan entered promiscuous mode
[  145.630047][ T4250] EXT4-fs (loop1): unmounting filesystem.
[  145.639489][ T4491] device veth1_vlan entered promiscuous mode
[  145.649073][ T4663] bridge0: port 2(bridge_slave_1) entered blocking state
[  145.675409][ T4663] bridge0: port 2(bridge_slave_1) entered disabled state
[  145.705843][ T4663] device bridge_slave_1 entered promiscuous mode
[  145.731805][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  145.766984][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  145.798669][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  145.807359][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  145.823525][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  145.925709][ T3735] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  145.949978][ T4663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  145.971865][ T4663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.063642][ T3686] arvo 0003:1E7D:30D4.0005: collection stack underflow
[  146.083335][ T3686] arvo 0003:1E7D:30D4.0005: item 0 4 0 12 parsing failed
[  146.098256][ T3649] Bluetooth: hci1: command tx timeout
[  146.104187][ T3686] arvo 0003:1E7D:30D4.0005: parse failed
[  146.104264][ T3686] arvo: probe of 0003:1E7D:30D4.0005 failed with error -22
[  146.165477][ T3735] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.210248][ T4663] team0: Port device team_slave_0 added
[  146.221754][ T4663] team0: Port device team_slave_1 added
[  146.292942][ T4036] usb 5-1: USB disconnect, device number 5
[  146.326946][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  146.373692][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  146.405420][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  146.445901][ T3655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  146.464432][ T3655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  146.473958][ T3655] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  146.482422][ T3655] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  146.492856][ T3652] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  146.503636][ T3655] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  146.512863][ T3735] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.541665][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.549140][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.576079][ T4663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.592510][ T4491] device veth0_macvtap entered promiscuous mode
[  146.611608][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  146.627155][ T4663] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.643971][ T4663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.678916][ T4663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.693503][ T4491] device veth1_macvtap entered promiscuous mode
[  146.730263][ T3735] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.811909][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.827159][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.837684][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.848588][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.865029][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.884340][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.895988][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  146.925176][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  146.955967][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.014129][ T4663] device hsr_slave_0 entered promiscuous mode
[  147.043824][ T4663] device hsr_slave_1 entered promiscuous mode
[  147.063437][ T4663] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  147.065594][ T4701] loop4: detected capacity change from 0 to 2048
[  147.085787][ T4663] Cannot create hsr debugfs directory
[  147.092728][ T4701] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.123879][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  147.152122][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  147.217330][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.244136][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.261346][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.282266][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.301174][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.313477][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.323803][ T4491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  147.334687][ T4491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  147.347921][ T4491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.475984][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  147.485537][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  147.536898][ T4491] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.559117][ T4491] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.574021][ T4491] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.601318][ T4491] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  148.188825][ T3655] Bluetooth: hci1: command tx timeout
[  148.579120][ T3655] Bluetooth: hci2: command tx timeout
[  148.967312][ T4663] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.479067][ T4663] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.068738][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.077250][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.188868][ T4666] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  150.257963][ T3655] Bluetooth: hci1: command tx timeout
[  150.299488][ T4663] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.368903][ T4729] netlink: 'syz.3.192': attribute type 9 has an invalid length.
[  150.376896][ T4729] netlink: 'syz.3.192': attribute type 7 has an invalid length.
[  150.386218][ T4729] netlink: 'syz.3.192': attribute type 8 has an invalid length.
[  150.395354][ T4698] chnl_net:caif_netlink_parms(): no params data found
[  150.511464][ T4663] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.571789][ T3649] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  150.582041][ T3734] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  150.593174][ T3649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  150.593230][ T3734] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  150.616007][ T3652] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  150.631114][ T3652] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  150.641166][ T3652] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  150.648621][ T3652] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  150.659277][ T3655] Bluetooth: hci2: command tx timeout
[  150.726931][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  151.446709][ T4698] bridge0: port 1(bridge_slave_0) entered blocking state
[  151.482189][ T4698] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.508862][ T4698] device bridge_slave_0 entered promiscuous mode
[  151.798832][ T4698] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.844664][ T4698] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.881382][ T4698] device bridge_slave_1 entered promiscuous mode
[  152.209357][ T4698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  152.348071][ T3655] Bluetooth: hci1: command tx timeout
[  152.749705][ T3652] Bluetooth: hci0: command tx timeout
[  152.749750][ T3655] Bluetooth: hci2: command tx timeout
[  153.132989][ T4698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.248090][ T3735] device hsr_slave_0 left promiscuous mode
[  153.268825][ T3735] device hsr_slave_1 left promiscuous mode
[  153.324818][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.347950][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.364641][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.397754][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.418795][ T3735] device bridge_slave_1 left promiscuous mode
[  153.425238][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.466152][ T3735] device bridge_slave_0 left promiscuous mode
[  153.478116][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.549829][ T3735] device veth1_macvtap left promiscuous mode
[  153.563068][ T3735] device veth0_macvtap left promiscuous mode
[  153.575536][ T3735] device veth1_vlan left promiscuous mode
[  153.586045][ T3735] device veth0_vlan left promiscuous mode
[  154.324397][ T4779] loop3: detected capacity change from 0 to 1024
[  154.529200][ T4779] ------------[ cut here ]------------
[  154.536074][ T4779] kernel BUG at fs/hfsplus/bnode.c:618!
[  154.544910][ T4779] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  154.551051][ T4779] CPU: 1 PID: 4779 Comm: syz.3.201 Not tainted 6.1.112-syzkaller #0
[  154.559114][ T4779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  154.569232][ T4779] RIP: 0010:hfsplus_bnode_put+0x6b3/0x6d0
[  154.575008][ T4779] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 48 89 df e8 fe dc 81 ff e9 5f fd ff ff e8 c4 5a 2a ff 0f 0b e8 bd 5a 2a ff <0f> 0b e8 b6 5a 2a ff 0f 0b e8 af 5a 2a ff 0f 0b 66 2e 0f 1f 84 00
[  154.594671][ T4779] RSP: 0018:ffffc9000327f350 EFLAGS: 00010287
[  154.600760][ T4779] RAX: ffffffff82605483 RBX: ffff8881447c9280 RCX: 0000000000040000
[  154.608748][ T4779] RDX: ffffc900047d1000 RSI: 000000000000d117 RDI: 000000000000d118
[  154.616728][ T4779] RBP: 0000000000000000 R08: ffffffff82604e4c R09: ffffed10288f9251
[  154.624729][ T4779] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881447c9200
[  154.632760][ T4779] R13: dffffc0000000000 R14: ffff888019ef4000 R15: dffffc0000000000
[  154.640765][ T4779] FS:  00007f789b9696c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  154.649708][ T4779] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  154.656298][ T4779] CR2: 00007fde687f7c40 CR3: 0000000062764000 CR4: 00000000003506e0
[  154.664295][ T4779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  154.672284][ T4779] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  154.680265][ T4779] Call Trace:
[  154.683552][ T4779]  <TASK>
[  154.686519][ T4779]  ? __die_body+0x5e/0xa0
[  154.690866][ T4779]  ? die+0x83/0xb0
[  154.694600][ T4779]  ? do_trap+0x11e/0x350
[  154.698849][ T4779]  ? hfsplus_bnode_put+0x6b3/0x6d0
[  154.703987][ T4779]  ? hfsplus_bnode_put+0x6b3/0x6d0
[  154.709125][ T4779]  ? do_error_trap+0x13d/0x1e0
[  154.713905][ T4779]  ? hfsplus_bnode_put+0x6b3/0x6d0
[  154.719213][ T4779]  ? do_int3+0x30/0x30
[  154.723403][ T4779]  ? rcu_is_watching+0x11/0xb0
[  154.728183][ T4779]  ? handle_invalid_op+0x2c/0x40
[  154.733127][ T4779]  ? hfsplus_bnode_put+0x6b3/0x6d0
[  154.738249][ T4779]  ? exc_invalid_op+0x2f/0x40
[  154.742933][ T4779]  ? asm_exc_invalid_op+0x16/0x20
[  154.747981][ T4779]  ? hfsplus_bnode_put+0x7c/0x6d0
[  154.753104][ T4779]  ? hfsplus_bnode_put+0x6b3/0x6d0
[  154.758320][ T4779]  ? hfsplus_bnode_put+0x6b3/0x6d0
[  154.763466][ T4779]  hfsplus_bmap_alloc+0x58c/0x630
[  154.768545][ T4779]  ? hfsplus_bmap_reserve+0x4e0/0x4e0
[  154.773956][ T4779]  ? hfsplus_bnode_read+0xe5/0x1d0
[  154.779090][ T4779]  ? hfsplus_bnode_read_u16+0x142/0x2c0
[  154.784653][ T4779]  ? memcpy+0x3c/0x60
[  154.788659][ T4779]  hfs_bnode_split+0xda/0x1100
[  154.793438][ T4779]  ? hfsplus_bnode_dump+0xa32/0xba0
[  154.798652][ T4779]  ? memcpy+0x3c/0x60
[  154.802654][ T4779]  ? hfsplus_bnode_read_u16+0x1bd/0x2c0
[  154.808231][ T4779]  ? hfs_btree_inc_height+0xdb0/0xdb0
[  154.813619][ T4779]  ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0
[  154.819441][ T4779]  hfsplus_brec_insert+0x3a2/0xdd0
[  154.824752][ T4779]  ? hfsplus_brec_keylen+0x310/0x310
[  154.830062][ T4779]  ? memcpy+0x3c/0x60
[  154.834055][ T4779]  ? hfsplus_bnode_read+0x193/0x1d0
[  154.839302][ T4779]  hfsplus_rename_cat+0x652/0x1090
[  154.844452][ T4779]  ? hfsplus_subfolders_dec+0x110/0x110
[  154.850030][ T4779]  ? number+0xb5a/0xf80
[  154.854220][ T4779]  ? hfsplus_unlink+0x15d/0x7f0
[  154.859348][ T4779]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  154.865000][ T4779]  ? hfsplus_unlink+0x210/0x7f0
[  154.869966][ T4779]  ? vsprintf+0x30/0x30
[  154.874154][ T4779]  ? lock_acquire+0x26f/0x5a0
[  154.878855][ T4779]  hfsplus_unlink+0x304/0x7f0
[  154.883544][ T4779]  ? read_lock_is_recursive+0x10/0x10
[  154.888940][ T4779]  ? hfsplus_link+0x840/0x840
[  154.893635][ T4779]  ? clear_nonspinnable+0x60/0x60
[  154.898674][ T4779]  ? bpf_lsm_inode_unlink+0x5/0x10
[  154.903791][ T4779]  ? security_inode_unlink+0xca/0x110
[  154.909178][ T4779]  vfs_unlink+0x359/0x5f0
[  154.913532][ T4779]  do_unlinkat+0x4a5/0x820
[  154.917972][ T4779]  ? fsnotify_link_count+0xf0/0xf0
[  154.923101][ T4779]  __x64_sys_unlink+0x45/0x50
[  154.927788][ T4779]  do_syscall_64+0x3b/0xb0
[  154.932231][ T4779]  ? clear_bhb_loop+0x45/0xa0
[  154.936946][ T4779]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  154.942886][ T4779] RIP: 0033:0x7f789ab7dff9
[  154.947327][ T4779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  154.966939][ T4779] RSP: 002b:00007f789b969038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[  154.975377][ T4779] RAX: ffffffffffffffda RBX: 00007f789ad35f80 RCX: 00007f789ab7dff9
[  154.983358][ T4779] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080
[  154.991421][ T4779] RBP: 00007f789abf0296 R08: 0000000000000000 R09: 0000000000000000
[  154.999399][ T4779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  155.007376][ T4779] R13: 0000000000000000 R14: 00007f789ad35f80 R15: 00007ffc8b96b1f8
[  155.015361][ T4779]  </TASK>
[  155.018380][ T4779] Modules linked in:
[  155.022312][    C1] vkms_vblank_simulate: vblank timer overrun
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  155.050084][ T3652] Bluetooth: hci0: command tx timeout
[  155.055544][ T3652] Bluetooth: hci2: command tx timeout
[  155.161723][ T4779] ---[ end trace 0000000000000000 ]---
[  155.193187][ T4779] RIP: 0010:hfsplus_bnode_put+0x6b3/0x6d0
[  155.199749][ T4779] Code: ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6c fd ff ff 48 89 df e8 fe dc 81 ff e9 5f fd ff ff e8 c4 5a 2a ff 0f 0b e8 bd 5a 2a ff <0f> 0b e8 b6 5a 2a ff 0f 0b e8 af 5a 2a ff 0f 0b 66 2e 0f 1f 84 00
[  155.224937][ T4779] RSP: 0018:ffffc9000327f350 EFLAGS: 00010287
[  155.249033][ T4779] RAX: ffffffff82605483 RBX: ffff8881447c9280 RCX: 0000000000040000
[  155.260529][ T4779] RDX: ffffc900047d1000 RSI: 000000000000d117 RDI: 000000000000d118
[  155.287249][ T4779] RBP: 0000000000000000 R08: ffffffff82604e4c R09: ffffed10288f9251
[  155.295622][ T4779] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8881447c9200
[  155.304262][ T4779] R13: dffffc0000000000 R14: ffff888019ef4000 R15: dffffc0000000000
[  155.338286][ T4779] FS:  00007f789b9696c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  155.347330][ T4779] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  155.367461][ T4779] CR2: 00007f789b905f98 CR3: 0000000062764000 CR4: 00000000003506f0
[  155.375925][ T4779] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  155.399508][ T4779] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  155.407569][ T4779] Kernel panic - not syncing: Fatal exception
[  155.414221][ T4779] Kernel Offset: disabled
[  155.418558][ T4779] Rebooting in 86400 seconds..