last executing test programs:

9.709655302s ago: executing program 2 (id=1462):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000a00000000000000000000000d"], &(0x7f00000002c0)=""/193, 0x32, 0xc1, 0x1}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000b5c0)={0x8, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x7, 0x94, &(0x7f00000000c0)=""/148}, 0x80)

9.627803589s ago: executing program 2 (id=1463):
syz_mount_image$reiserfs(&(0x7f0000001100), &(0x7f0000000040)='./bus\x00', 0xc2, &(0x7f0000000900)={[{@acl}, {@usrjquota_file, 0x4}, {@acl}, {@balloc_hashed_reloc}, {@usrjquota, 0x3d}]}, 0x2, 0x1115, &(0x7f0000002280)="$eJzs2D9rFEEYB+Df7B0Yq5NNvwhaWEhIODurFBGutbaRkMpUuSoiiN/FjyOp7EM+gEXAUhjZTdYTCUS5CxJ4Hpjd4Z13/pXvBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAK687D/bTdKOkSZJSbrubHGRpBvjj75MmpS8PlosD07mr5ZJJkN66Vs/q5+Wdu/JVjtv5+1e+2J7/2m7PH3/7u3x8dHJ9TIlXc4vN3+Rcn2eG22VzW8IAAAA90Rd2+zPJadj528q7vX3BwAAAG6z8QcFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgH9UZ6t+m+RHrTVNkpJ03dniIkn3Pw8IAAAArK2kyZvZTfEMzwArz/N1Vob42L6XPmc3n4f5D1aph00e3v3RAQAA4B6Z3ppRfqvHn2WaWuvHcexxptnZuer3v37g234yOT3I7q+a/NPwPb/8cDi2Uid3dB8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Cc7cEACAAAAIOj/63YECgAAAAAAAAAAAAAAAAAAAAAAAHwUAAD//wAQ3aw=")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

9.299061896s ago: executing program 2 (id=1466):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000a00)='f2fs_reserve_new_blocks\x00'}, 0xfffffffffffffc45)
r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f0000000000)=""/17, 0x2}], 0x4e)

9.199374184s ago: executing program 2 (id=1467):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x50c9}]}, 0x10)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)="cc85", 0x2}], 0x1}}], 0x1, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0\x00', 0x8, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.019683389s ago: executing program 2 (id=1468):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r4=>0x0})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r2}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @val=@tcx}, 0x40)
syz_emit_ethernet(0x22, &(0x7f0000000100)=ANY=[], 0x0)

8.838769164s ago: executing program 2 (id=1469):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
mount$fuse(0x20000000, &(0x7f0000000580)='./file0\x00', 0x0, 0x223216, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0/../file0/../file0\x00', 0x0, 0x20, 0x0)

6.010215376s ago: executing program 3 (id=1486):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup(0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382)
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
fcntl$setlease(r1, 0x400, 0x0)
pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string}, 0x0, 0x0}, 0x0)

5.569550852s ago: executing program 0 (id=1491):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x200020000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0)
epoll_create1(0x0)
r3 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_QUERYCTRL(r3, 0xc0445624, &(0x7f00000002c0)={0x48000004, 0x0, "6a3ce4ab8ed6c54797be28dc6b7dcc8d5eba4a0f1dea455e02c75ec18cfcdbf4"})

4.667719176s ago: executing program 0 (id=1493):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_TARGET={0x8}, @TCA_CAKE_RTT={0x8}]}}]}, 0x44}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

3.722559834s ago: executing program 4 (id=1496):
r0 = socket$alg(0x26, 0x5, 0x0)
socket$netlink(0x10, 0x3, 0x8000000004)
syz_io_uring_setup(0x56da, &(0x7f000001f600), &(0x7f0000000200), &(0x7f0000000100))
socket$nl_crypto(0x10, 0x3, 0x15)
r1 = io_uring_setup(0x7058, 0x0)
r2 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000000)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0x18, 0x20000000, r2)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="00ffffffff012000000000080000000a0000000400000004000b0000"], 0x1c}}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, 0x0)
r3 = socket(0x0, 0x0, 0x0)
bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r3, 0x0)
r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x9, "c6579e97c026f2030000007d659ec1300fac5408bf584f63ebf89b20d5748c07", <r5=>0xffffffffffffffff})
poll(&(0x7f0000000140)=[{r5}], 0x1, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000280)={0x400, "3a1d94090000ffac0008000097eaa3b500f3000000040000000200"})
ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000080)=0xfdfdffff)
writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd0000001000020004001000080001400400", 0x56}], 0x1)
bind$alg(r0, &(0x7f0000002240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-generic\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000380)="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", 0xffc)

3.694133036s ago: executing program 0 (id=1497):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r1, &(0x7f0000001140)={0x10, 0x0, 0x25dfdbfd, 0x100000}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f00000003c0)=0x6, 0xdc)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x4, 0x4}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r5, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)
r6 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newlink={0x48, 0x10, 0xffffff1f, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, 0x44000, 0xc100}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x2000}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$NFT_MSG_GETCHAIN(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, 0x4, 0xa, 0x201}, 0x14}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
sendmmsg(r1, &(0x7f0000000b80), 0x3, 0x4000000)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000000c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000024007b560000000000400000ac8fa3"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)={@ifindex, r7, 0x11, 0x2, 0x0, @prog_id}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wg0\x00', <r8=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000018001108000000000000000002000000fd00fe020000000008000400", @ANYRES32=r8, @ANYBLOB="04000700e0000001"], 0x2c}}, 0x0)
r9 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r9, &(0x7f00000001c0), 0x0, 0x800, 0x7)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f0000002780)={0x0, 0x0, &(0x7f0000002740)={&(0x7f00000006c0)=ANY=[@ANYBLOB="0f57d8fc0e85f3e312bee1cee32868cb8d765ff3c7f9ed1c6a5a8b430c63c529574d41bb77dd8d54de1c4fdb627622b16c8bfb99a44cc66a4ab923502d218b1bfc04487ee1123e8cdf9afcae4b41dc383e60032ff265ce951d86afb57d5ef7d8c8d869b75e59d1fc6f81b3cf891adca0e03db39bee0c4cbd37d5422659bb04fe30a12294447217fd", @ANYRES16=r11, @ANYBLOB="01000000000000000000340000000e0001006e657464657673696d0000000f0002006e657464657673696d300000"], 0x34}}, 0x0)
sendmsg$DEVLINK_CMD_GET(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000580)={0x90, r11, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8}, {0x11}}]}, 0x90}, 0x1, 0x0, 0x0, 0x84}, 0x20000000)
read$FUSE(0xffffffffffffffff, &(0x7f0000001e40)={0x2020, 0x0, <r12=>0x0}, 0x2020)
write$FUSE_LK(r9, &(0x7f0000001200)={0x28, 0xffffffffffffffda, r12, {{0xff, 0xfc, 0x9012c3ee645f659a}}}, 0x28)
syz_mount_image$ext4(&(0x7f0000000640)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000840)={[{@barrier_val={'barrier', 0x3d, 0x7f}}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@grpjquota, 0x22}, {@errors_continue}, {@journal_checksum}, {@data_journal}]}, 0xfe, 0x45a, &(0x7f0000001100)="$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")

3.03580091s ago: executing program 0 (id=1499):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x2, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x17}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x80)

2.993475733s ago: executing program 0 (id=1500):
r0 = syz_open_dev$dri(&(0x7f0000000900), 0x1ff, 0x0)
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r2=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000200)={r2, 0x1, &(0x7f00000000c0)=[0x0], 0x0, 0x0})

2.91834758s ago: executing program 0 (id=1502):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, "c282fe"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0xe, "ea6aafaabfc5926708627c6c0963"}, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r2, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000180)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@ack={0x1e, 0x4, 0x2}]}}}}}}}}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000140)={0x20, 0x7, 0x82, {0x82, 0x5, "1578a9c27dcb2ee816bc2d97298bb1fa279ad2f1ec711aa242f7fb9ad468393dc23e07db7d338f460f4368ea9c95cfda95cf048875f6e032c867769d91ef6b14285739a75991e9dfdb35b033bad6fbcaed4f55ab7ab68a007423fbd88e72c84fb19ad9dcccc069e1b2a8a10d65243cb4618c44b2ba06ec0e9ce01e172219897c"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x429}}, &(0x7f00000005c0)=ANY=[@ANYBLOB="002204000000b1481926a386acd6f60e629b270e7412d5b89c1595696ae743b59b16f498624bf237aa83fbdd3416c0fc3de5ec8f205bd332f617239e22f04299cebc7c126ce331277ab077b2fcb7d620664735ba7b99b52418e28c85ecc8e39be4fbd324f39641bb9f50c379088d"], &(0x7f0000000200)={0x0, 0x21, 0x9, {0x9, 0x21, 0x600, 0x1, 0x1, {0x22, 0x628}}}}, &(0x7f0000000580)={0x2c, &(0x7f0000000280)={0x0, 0x16, 0xf8, "06a82be5d3f5bc85a8c132db143855e96a07e52944cab54a1229e529c3d52d2504b81d8cf1ad2cdec162797db7881d49482dfc7e153ed975163c806e618159907c2b5c9744a230068c86947148269ade9b8abfeb23ecf1c25fe985bd47a4a853dc35a9c65e7fa69237c18f5741488ffcf9c5102a9c6f44b9c5042333d8eb6eb0ef328c88b13bd390a1b2a1ced4d8fb5d4065e1446667b85cf45cd8788bcb20bf84d5ab720e9c6d57991e9d67ee92fa7e308e405a1f883f16d90272ee918dc8e64edbdd5efdc7e4543d1f89b30bb2a49f0f7dc4ab96021ba86a2f2775a9591013fdbe9b352e6f41cbd706abc4027438ea2aacf99dcf031e16"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x1, 0x24, "50bb55de9f3ac8dffd597ed84c215ce09eea945830dd2240217ebbf9148fbf83cd2b0e50"}, &(0x7f00000004c0)={0x20, 0x3, 0x1, 0x9}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
fcntl$lock(r3, 0x24, &(0x7f0000000200)={0x0, 0x1, 0x40000000004, 0xfffffffffffffffe})
syz_open_dev$vcsn(&(0x7f0000000640), 0xfb, 0x8040)
write$cgroup_int(0xffffffffffffffff, 0x0, 0x0)

2.887468082s ago: executing program 4 (id=1503):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)={0x20, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}]}, 0x20}}, 0x0)

2.860560435s ago: executing program 4 (id=1504):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f00000001c0), 0x81, 0x79e, &(0x7f00000018c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xd, 0x3, 0x4, 0x2, 0x0, r1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='ext4_mballoc_alloc\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='ext4_mballoc_alloc\x00', r4}, 0x10)
r5 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r5, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
r6 = fcntl$getown(0xffffffffffffffff, 0x9)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r8, 0x8933, &(0x7f0000001880)={'wg1\x00', <r9=>0x0})
r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff)
clock_getres(0x0, &(0x7f00000003c0))
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000300)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r10, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r9, @ANYBLOB="0800050001000000b400088080000080580009801c000080060001000200000008000200e000000205000300030000001c0000800600010002000000080002000000000005000300000000001c0000800600010002000000ec16463e5ba05172d808000200ac141400050003000100000024000100"], 0xd8}}, 0x20008004)
sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r10, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_IFINDEX={0x8}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r9}, @WGDEVICE_A_FWMARK={0x8}]}, 0x50}}, 0x0)
r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_clone3(&(0x7f0000000300)={0x40023000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x1d}, &(0x7f00000000c0)=""/198, 0xc6, &(0x7f00000001c0)=""/147, &(0x7f0000000280)=[r6, r6, r0], 0x3, {r11}}, 0x58)
r12 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r12, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000fc850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
write$binfmt_misc(r12, &(0x7f0000000300)=ANY=[], 0x6)

2.850174585s ago: executing program 3 (id=1505):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$rds(r0, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0)
setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x11, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)

2.773729462s ago: executing program 3 (id=1506):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000040)='./file0\x00', 0x0, 0x8}, 0x18)
bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dcbeec0696c37b64e3b24da3183dbe97e805165c0f63cdc2e82818254950ee03568b88091e6a86450545c0e18e09"], &(0x7f0000000100)='GPL\x00'}, 0x70)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x0, 0x0, @void}, 0x10)
socket(0x840000000002, 0x0, 0xfa)
ioctl$TCSETS(r1, 0x5402, &(0x7f0000004500)={0x0, 0x0, 0x0, 0x0, 0x0, "1241b72d7fffff5b000f000000462200"})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'})
r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x882)
r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x0, 0x1, 0x0, 0x3}})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r4, 0x40a85321, &(0x7f0000000280)={{0xf, 0x7}, 'port1\x00', 0x8, 0x51, 0x5722, 0x2, 0x8, 0xa, 0x0, 0x0, 0x4, 0x2})
write$sndseq(r5, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0xfd, @tick, {}, {}, @raw32}], 0x1c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = syz_open_dev$usbfs(&(0x7f0000000c40), 0x3, 0x200000)
ioctl$USBDEVFS_CONTROL(r7, 0x80045515, 0x0)
write$P9_RLERRORu(0xffffffffffffffff, &(0x7f0000000000)={0xf, 0x7, 0x2, {{0x2, '&:'}, 0x77c}}, 0xf)
write$binfmt_aout(r1, &(0x7f0000000080)=ANY=[], 0xff2e)

2.163592922s ago: executing program 3 (id=1507):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000380)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000016b2000000000003000000500001800400028038000400200001000a0000000000000000000000000000000000ffff7f000001000000001400020002000000ffffffff00000000000000000e0001006575683a76"], 0x64}}, 0x0)

2.022218673s ago: executing program 1 (id=1508):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6, 0x0, <r5=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xf})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000080)={0x3, 0x112, 0x4bb2})
ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r3, 0xc00464b4, &(0x7f0000000400)={r5})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000200)={0x10001, 0x401f, 0x3})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0xff, 0x3, 0xd83f})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000002c0)={0x8, 0xd7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x6, 0x12f, 0x2})
close_range(r0, 0xffffffffffffffff, 0x0)

1.810458371s ago: executing program 1 (id=1509):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x6, @private0, 0x8001}}, 0x2800000, 0xfff8, 0x8, 0x513d, 0xc, 0xd, 0x7f}, 0x9c)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000040000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020000838500000071000000850000005000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='netlink_extack\x00', r1}, 0x10)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000f40)={@ifindex, 0xffffffffffffffff, 0x14, 0x4, 0x0, @prog_fd}, 0x20)
socket$kcm(0x10, 0x3, 0x10)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff)
socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000200)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="3b9600000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="2900330040000000ffffffffffff0802110000015050505050500000000601016de2c29f969fcaeef7010101010100030100000000"], 0x48}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, 0x0}, 0x0)
listen(0xffffffffffffffff, 0x0)
sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBPORT={0x5, 0x3}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x30}, 0x1, 0x40030000000000}, 0x0)
syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r2)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001500010300000000000000000a"], 0x14}}, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000100), r2)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0)

1.549442172s ago: executing program 3 (id=1510):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f00000001c0)='./file2\x00', 0x43, &(0x7f00000000c0)=ANY=[], 0x23, 0x1bb, &(0x7f0000000200)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x3fe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000040)=0x9, 0x4)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1.547188853s ago: executing program 4 (id=1511):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48)
unshare(0x20040600)
r1 = socket(0x2, 0x2, 0x0)
bind$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r4 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_FORWARD(r4, 0x4144, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r6=>0x0})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
write$evdev(0xffffffffffffffff, &(0x7f00000002c0), 0x0)
pipe(0x0)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000480)={'wlan0\x00', <r8=>0x0})
fsetxattr$security_ima(0xffffffffffffffff, 0x0, &(0x7f00000001c0)=@md5={0x1, "b84bdf3d6f7da37bd45238c264010237"}, 0x11, 0x0)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
syz_open_dev$MSR(0x0, 0xffffffffffffffff, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r8, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r13=>0x0})
sendmsg$NL80211_CMD_FRAME(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r13, @ANYBLOB="21003300d0800000080211000000080211000001505050505050"], 0x40}}, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, r10, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}}, 0x0)
connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc)

1.538919173s ago: executing program 1 (id=1512):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x2a}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c)
sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f00000001c0), 0x9)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, &(0x7f0000000040))
recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x44000102, 0x0)
getrlimit(0x3, &(0x7f0000000280))

207.503913ms ago: executing program 1 (id=1513):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="28000000020303000000000000000000000000000900020000000008020000000800010001"], 0x28}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000840)={0x20, 0x2, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_CFG_PARAMS={0x9}]}, 0x20}}, 0x0)

205.502722ms ago: executing program 3 (id=1514):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010921"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000001840)=[{0x0}], 0x1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
dup(0xffffffffffffffff)
r2 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0xa382)
r3 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW<GE\xf1\xe9\xf1q\x8c\xf0\xae\x98\x8c\xe0\xc1g}\xaeW\xaa\xa1\x90\x8c\n$\xa6\xbb\x10\xaf\xc7~\x11\x03<v\xe9\xc7K\xf6]\x11)u\xd3\x15\x01}\xe25$\xb0\x86v\x80\r\x9c\xb8\xe6\xd3(\xa0G2s\xa9&\xb3QU~u\x13\x05kKp\xa6&\x8eu\x1d\xb2\xa9!\xc9\xfa\xd0dG5\xcbf<}r\xab\x9c\xd9f6iN\xaa>\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n<V\xaa\xbfZ1\xa82\x85\x99\x0e$U\xb4X\xc7\xfa\f\b\x8f\xc4\xbeIt\xe4\xc51\xba\xb9H\xe8\x96\x94\xd7\xdc\x81\x111\t\xafl\x97\xd8T\xd40\x90ON\xaaFY\xb4\xb3\xf4\xf8JT\xc5:\xc5\aGc\xb5\x12\x90\x7f\x00\x91\xce@\xe5\xd3A\xcc\xd5|\x9f\x8e5\x042\x9a\xc1\xa1\a\xb7\xf5\xbc,\xd1\xd3k8\xc5\xefo\xb8\x8f]\x14\x1d', 0x0)
fcntl$setlease(r1, 0x400, 0x0)
pwritev(r3, &(0x7f0000000600)=[{&(0x7f0000000180)="10", 0x1}], 0x1, 0x800000, 0x0)
ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r3)
sendfile(r2, r2, 0x0, 0x24002de8)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DEL(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
ioctl$LOOP_SET_BLOCK_SIZE(r2, 0x4c09, 0x800)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, &(0x7f0000000640)={0x0, 0x3, 0x2, @string}, 0x0, 0x0}, 0x0)

191.372624ms ago: executing program 1 (id=1515):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='b *:4\t\n'], 0xa)

63.630225ms ago: executing program 1 (id=1516):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
socket$kcm(0x10, 0x0, 0x4)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000000040), &(0x7f0000000000))
ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x337)
r2 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, &(0x7f0000000140))
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', &(0x7f0000000180)=':00:\x00\x8e\xf7\xd4\t\xe1\xae\x19\xe5\xf7c\x84\x9c\x06\x00\x00\x00\x11\x01\xf2 \xec\xbe#\'S\xc4\xbd\xb5\x1e\x98MM\x06\x1a\x7f5U\x18\x90\x99\xb2\xfa\')Z\x9ew\xae\xe8\xdd\b\t\xf0\xc4\xbfj\xb6\x88/)~\x93E\x1d4\xa7\xcb\xeb\x0f\xd4(\xb6>\x87\xc3\t\xb0\x80\xf7\xe6\x8b?\xa4\xb3\b\x00\x81\xbe\xea\x1f\xfe\xed\x9d\x1a\x8aQ\xafQ\x06\x0fJ\xc0\xc0=}\x7f\xaeB\xb1\xed\xa4\xf3c#\xbe\b\x1f\xa4L[\xfa\x01Uu\xe0\x8b\x94E\xda\xd9j\x93\xc8~\xd9\x82\x8f\xcam\x17\xa2\xed\xf3\xc3_h\xfc6\t\x96@\xaf\xe6\xd0!)\xc3\xcfe\xe1g\xe7\xe5F\xbdC\xd9$\x9b@\xaf\xc2j1p\xa9\xb2d\x92\x8fo\xcbg\x9fZ\xd7\xef\xb2z\xf5\x0fq\x7f\b\xc2\xa7\x90\xc5\xf5Y\xbc\xf1s\x93X\xb6\xeb\x86&\xa7\x14%B', 0x0)
r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {0x4}, {}, {}, {0x7, 0x0}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x100b, &(0x7f0000001e40)=""/4107}, 0x90)
write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000640)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r3, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @remote}, r5}}, 0x48)
close_range(r2, 0xffffffffffffffff, 0x0)
socket$unix(0x1, 0x2, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x0, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))

44.858836ms ago: executing program 4 (id=1517):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0xffffff84}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4)
sendmsg$OSF_MSG_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x14, 0x0, 0x5, 0x101}, 0x14}}, 0x0)

0s ago: executing program 4 (id=1518):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1b, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000200000000000700009500000000d1aab18d85d2dbd61fd41d19dc4d0000f6"], &(0x7f0000000340)='syzkaller\x00', 0x1, 0xbb, &(0x7f0000000180)=""/187, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x267e}, 0x80)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x2000010, &(0x7f0000000080)=ANY=[], 0x1d, 0x6b6, &(0x7f0000000900)="$eJzs3cFvHGfdB/DvbNYbO63yOm3SRq+KiBKpIEUkTqwUwgWDEPKhQlVB4mwlTmNl41S2i9wKgQsITkgc+gcUJN84IXEPChcu5darjyAkLhGHiIvRzM7aa+86XseO7ZTPJxrPM/M888xvfvPMjHc31gb4nzV9Oc2HKTJ9+e3lcnltdbK9tjp5sq5uJynLjaTZmaWYT4pHyVRZX3TW/7Co2xc77eeTuZvvfv547eTmmma3feNp2w0woO1KPeVCkhP1vN/IsLvY0t+tJC/3NWkN29eWhmXSLnUPHo7aep+VvWy+l+sWOGa6T6ei89zsM56cSjJa/x6Q+u7QOLwI9+GvOz+k93SXAwAAgOOumWSyf/VnD44iGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHix1d//X9RTo57nQoru9/+3uuvq8gvt4VEHAAAAAAAAAAAH4MtP8iTLOd1dXi+qz/wvVgtn85/15KV8kMXMZiFXspyZLGUpC7mWZLyno9byzNLSwrWNLUuDt7w+cMvrh3XEAAAAAAAAAPCF9PNMb37+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx0GRnOjMqulstzyeRjOdulbZbiX5W7f8gigGrXx4+HEAAADAvow+wzb/9yRPspzT3eX1onrN/1r1enk0H2Q+S5nLUtqZze36NXT5qr+xtjrZXludvF9O/f1++197CqPqsX5/YfCez1ctxnInc9WaK7lVBXM7jWrL0vluPIPj+riMqfhWbcjImnVay539dqd3EQ7EXt+KGC+DSzYyMlHHVmbjTCcDRfVGTbI9E7ueneb2PaWRkY09XUtj452fs88h56d6cv6r55rzvdrIRCNVJq73jL7Xnp6J5Ct/+sOP7rbn7929s3j5+BzSLk5sXzG2WewdE5M9mXj9hc5Ec4/tJ6pMnNtYns738oNczoW8k4XM5ceZyVJms17Xz9Tjufw5/vRMTW1Zeme3SFr1CO2cs2FiupDvVqWZXKy2PZ25FHmQ25nNW9W/67mWr+dGbuRmzxk+t2Pc1bFVV31j+1XfPdN/Hhj8pa/WhXKA/XpzoE097Yj7RucB69yHyrye6clrZ9Q/3mh1puc6mOjJ0ivd7IwM7PxZ7o3N/68L5T5+Uc+Ph/E6E+UF1H1KdKN7tZOJZvUs6h/nv6uujcX2/L2FuzPv79D/yrblN+t5OaxWvzRslINPxcEqx8srGa3vJFtHR1n36sZd5syWp2qr/sSlU9foqztX1RVF90r9/o5Xaqv+Ha6/p+tV3esD6yaruvM9dVt+38qDtHP7EPIHwD6N51Rr7J9jn419OvbLsbtjb49+5+Q3Tr7RyshfRr7ZnDjxZuON4o/5ND/dfP0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8u8UPP7o3027PLgwuNHau2qWwW8/bCkX9hT7PtK9jWBhNsmXNSLliqM3/8VJyUGGMbQ+jr7D+s+Rgj/3xrkNr49u7Bvfzm7LQzDD7mtqtzcc7VhXNDLWLL3qhPBmDqo7ungQcjqtL99+/uvjhR1+buz/z3ux7s/MjN27cnLh5463Jq3fm2rMTnZ9HHSXwPGw+9I86EgAAAAAAAAAAAGBYg/4w4OLLu/3RyDCFlv9ZCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAByI6ctpPkyRaxNXJsrltdXJdjl1y5stm0kajaT4SVI8SqbSmTLe012R3z/K+oD9fDJ3893PH6/9fbOvZqd90qjn+7BST7mQ5EQ9P6j+bu27v+Lf3SMsE3apmzg4av8NAAD//zZG73k=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x2, &(0x7f0000000b40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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", @ANYRES32], 0xff, 0x2e7, &(0x7f0000000280)="$eJzs3M9LG2kcx/Gvml9GNDksu+wuy37ZveyyMGj2XghFaWmgRU2pLRRGnbQh00QygyWlqD31WvpH9CDe6k1oe+jVS2899dKbhxZKqfTXlEwmGjX+oiZa836B5nGe5+vzTGYcPiNk1q48uFXIOUbOdKW7OyzdIguyLpKstkQq1W9dIhKTmi6JSKMF+bfv3cs/xiauXkhnMsOjqiPp8f9Tqjrw55Pbd5f+eub2XV4eWInKavL62tvU69WfV39d+zp+M+9o3tFiyVVTJ0uv3Mikbel03ikYqpc8z3QszRefT4j4/SXXrPbn7NLMTEXN4nR/fKZsOY6axYoWrIpKSKRcUfOGmS+qYRjaHxfsJ7o4Omqm/Wbs0MVTLVgQvtu5HSd+uZw2e0Skd8fY7GK7VgUAAE6OLfk/ptvzv68reK1u+eJ5XmO9n//fPxY5UP5fieyS/4N8X8//tlXL/45Vdg+W/92SutX8HyL/H0J2M//j1Krm/3jw9+u7d21p0G+Q/wEAAAAAAAAAAAAAAAAAAAAA+BGse17C87xE/bX+FQ0+El7/+bjXidbg+He2MQ0aqjER+/5sdjYrYodrGzeOuyWDkpDP/vkQqLVHzmeGB9WXlKf2fFA/P5vt8QvTOcmLLZYMSUKSzeuHavW6tT4s8cb6lCTkp+b1qab1Efnn74Z6QxLyYkpKYsu0f15v1s8NqZ69mNlW3+uPAwAAAADgNDB0Q9P7d8PYrb9Wn86J+PfX+/9/YNv9dUh+Cx3vvgMAAAAA0Cmcyp2CadtWuY2NmIi0fq7q3rV+d3r3HjP3X/vf3pPTSDRsqT9Euu3LCDVOGg1W0aK5fnn46MPR/cIzy79/atb1sS1v3QEuHuHWXZcAAAAAHL3N0L/7GO9NO1cEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDnad1TxHqCGfZ6sgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQWb4FAAD//9yVIwU=")
mkdirat(0xffffffffffffff9c, &(0x7f00000005c0)='./file0\x00', 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10)
socket$packet(0x11, 0x3, 0x300)
syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYBLOB="ffffffffff81f793350000000011424203"], 0x0)
write$binfmt_script(r0, &(0x7f0000000040)={'#! ', './file1'}, 0xb)

kernel console output (not intermixed with test programs):

bridge_slave_0 left promiscuous mode
[  243.918658][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.011120][ T7577] XFS (loop2): Ending clean mount
[  244.041127][ T3735] device veth1_macvtap left promiscuous mode
[  244.069443][ T7577] XFS (loop2): Quotacheck needed: Please wait.
[  244.090298][ T3735] device veth0_macvtap left promiscuous mode
[  244.096386][ T3735] device veth1_vlan left promiscuous mode
[  244.148219][ T3735] device veth0_vlan left promiscuous mode
[  244.199165][ T7577] XFS (loop2): Quotacheck: Done.
[  244.268643][ T3735] device veth1_macvtap left promiscuous mode
[  244.280479][ T3735] device veth0_macvtap left promiscuous mode
[  244.286612][ T3735] device veth1_vlan left promiscuous mode
[  244.304592][ T3735] device veth0_vlan left promiscuous mode
[  245.060179][ T4229] Bluetooth: hci4: command 0x040f tx timeout
[  245.080934][ T6874] XFS (loop2): Unmounting Filesystem
[  245.543728][ T7610] loop2: detected capacity change from 0 to 1024
[  245.827886][ T3735] team0 (unregistering): Port device team_slave_1 removed
[  245.848908][ T3735] team0 (unregistering): Port device team_slave_0 removed
[  245.869702][ T3735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  245.908429][ T3735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.047482][ T3735] bond0 (unregistering): Released all slaves
[  246.265409][ T3735] team0 (unregistering): Port device team_slave_1 removed
[  246.291123][ T3735] team0 (unregistering): Port device team_slave_0 removed
[  246.315522][ T3735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.342182][ T3735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.485808][ T3735] bond0 (unregistering): Released all slaves
[  246.625051][ T7411] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.742787][ T7411] 8021q: adding VLAN 0 to HW filter on device team0
[  246.751810][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  246.759689][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  246.792958][ T7408] 8021q: adding VLAN 0 to HW filter on device bond0
[  246.810313][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  246.818998][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  246.844056][ T1078] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.851354][ T1078] bridge0: port 1(bridge_slave_0) entered forwarding state
[  246.878561][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  246.913987][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  246.928816][ T1078] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.936001][ T1078] bridge0: port 2(bridge_slave_1) entered forwarding state
[  246.990640][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  247.015830][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  247.061848][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  247.081438][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  247.101991][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  247.144291][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  247.171017][ T4229] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  247.199192][ T7408] 8021q: adding VLAN 0 to HW filter on device team0
[  247.206951][ T1078] Bluetooth: hci4: command 0x0419 tx timeout
[  247.237057][ T7411] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  247.261732][ T7411] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  247.300889][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  247.319072][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  247.341078][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  247.360967][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  247.369515][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  247.387466][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  247.389053][ T7637] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  247.398041][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  247.439851][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  247.456729][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  247.498002][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  247.522728][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.529821][ T6544] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.557737][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  247.583750][ T6544] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  247.598228][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.603816][ T7628] loop2: detected capacity change from 0 to 32768
[  247.605406][ T6544] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.686149][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  247.744632][ T7649] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_vlan, syncid = 0, id = 0
[  247.788181][ T7628] XFS (loop2): Mounting V5 Filesystem
[  247.839416][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  247.861104][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  247.880699][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  247.902951][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  247.932565][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  247.950291][ T7628] XFS (loop2): Ending clean mount
[  247.959921][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  248.009329][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  248.026256][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  248.049419][ T7408] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.125078][ T7408] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  248.132940][ T7665] XFS (loop2): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[  248.197025][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  248.198713][ T7665] XFS (loop2): Unmount and run xfs_repair
[  248.215930][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  248.250751][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  248.259307][ T7488] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  248.267252][ T7665] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  248.282850][ T7488] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  248.310570][ T7665] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  248.319793][ T7665] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  248.349745][ T7411] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.383558][ T7665] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  248.414810][ T7488] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  248.421973][ T7665] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  248.436780][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  248.447231][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  248.459762][ T7488] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  248.488026][ T7665] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  248.541511][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  248.562682][ T7665] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  248.600658][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  248.616584][ T7665] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  248.650650][ T7665] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  248.681679][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  248.689157][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  248.697173][ T7665] XFS (loop2): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74
[  248.708591][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  248.750555][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  248.770720][ T7665] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  248.788638][ T7408] 8021q: adding VLAN 0 to HW filter on device batadv0
[  248.810279][ T7665] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  248.845007][ T6874] XFS (loop2): Unmounting Filesystem
[  248.850870][ T7411] device veth0_vlan entered promiscuous mode
[  248.857647][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  248.889887][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  248.975172][ T7411] device veth1_vlan entered promiscuous mode
[  249.029821][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  249.039382][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  249.089622][ T7488] 8021q: adding VLAN 0 to HW filter on device bond0
[  249.148551][ T7411] device veth0_macvtap entered promiscuous mode
[  249.169499][ T7411] device veth1_macvtap entered promiscuous mode
[  249.216045][ T7488] 8021q: adding VLAN 0 to HW filter on device team0
[  249.238802][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  249.248077][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  249.273800][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  249.292437][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  249.317286][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.390105][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.408656][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.431353][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.450287][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  249.470099][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.494875][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_0
[  249.513342][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  249.513995][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  249.514555][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  249.515061][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  249.515436][ T5312] bridge0: port 1(bridge_slave_0) entered blocking state
[  249.515473][ T5312] bridge0: port 1(bridge_slave_0) entered forwarding state
[  249.516406][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  249.516877][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  249.517211][ T5312] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.517241][ T5312] bridge0: port 2(bridge_slave_1) entered forwarding state
[  249.517687][ T5312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  249.527786][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  249.528302][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  249.585466][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  249.586034][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  249.586458][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  249.586894][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  249.587284][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  249.587661][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  249.589126][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  249.595099][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.595122][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.595133][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.595145][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.595154][ T7411] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.595164][ T7411] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.600939][ T7411] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.817808][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.818531][ T3618] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.823680][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  249.824242][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  249.824877][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  249.825325][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  249.835218][ T7411] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.835253][ T7411] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.835277][ T7411] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.835301][ T7411] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.850588][ T7408] device veth0_vlan entered promiscuous mode
[  249.856976][ T7703] loop2: detected capacity change from 0 to 1024
[  249.861995][ T7408] device veth1_vlan entered promiscuous mode
[  250.135457][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  250.158680][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  250.200894][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  250.209295][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  250.290765][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  250.473802][ T7488] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  250.641152][ T7408] device veth0_macvtap entered promiscuous mode
[  250.708397][ T7408] device veth1_macvtap entered promiscuous mode
[  250.810544][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  250.828926][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  250.866210][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  250.907863][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  250.946909][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.011785][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.040823][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.051362][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.061416][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.090286][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.114701][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.140714][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.164955][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.188349][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.197454][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  251.222252][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  251.230231][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.258920][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  251.302012][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.330299][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.360885][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.383716][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.410184][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.430152][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.460128][ T7408] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.486071][ T7408] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.514917][ T7408] batman_adv: batadv0: Interface activated: batadv_slave_1
[  251.548281][ T7408] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  251.570573][ T7408] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  251.579316][ T7408] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  251.617952][ T7408] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  251.628526][ T7723] netlink: 'syz.1.923': attribute type 7 has an invalid length.
[  251.650288][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  251.661376][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  251.692939][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  251.744066][ T3846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  251.771300][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  251.779536][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  251.791065][ T3846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.793790][ T7725] binder: 7724:7725 ioctl c0306201 20000280 returned -14
[  251.836358][ T7488] 8021q: adding VLAN 0 to HW filter on device batadv0
[  251.875658][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.010217][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  252.018913][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  252.041651][ T3845] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.050034][ T3845] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.108422][ T7488] device veth0_vlan entered promiscuous mode
[  252.125466][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.148680][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  252.169958][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  252.206881][ T7488] device veth1_vlan entered promiscuous mode
[  252.216640][ T3671] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.236600][ T3671] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.237757][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  252.269938][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  252.300818][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  252.322642][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.374442][ T7731] device wireguard0 entered promiscuous mode
[  252.416353][ T7731] IPv6: ADDRCONF(NETDEV_CHANGE): wireguard0: link becomes ready
[  252.512001][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  252.520628][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  252.576440][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  252.614077][ T7488] device veth0_macvtap entered promiscuous mode
[  252.663785][ T7488] device veth1_macvtap entered promiscuous mode
[  252.764384][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.775388][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.787838][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  252.860240][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.053385][ T7744] loop2: detected capacity change from 0 to 256
[  253.061790][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.257725][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.270631][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.290125][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.299964][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.361690][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.373723][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.382930][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  253.391887][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  253.403853][ T7744] exfat: Unknown parameter ';Å.±[ì{Å>ñ™Ø/>Ä"G|ùwæŸýoù'
[  253.428732][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  253.439146][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  253.559426][ T7748] sp0: Synchronizing with TNC
[  253.593358][ T7751] netlink: 4 bytes leftover after parsing attributes in process `syz.4.932'.
[  253.652605][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.690299][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.708863][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.719779][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.738259][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.767751][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.784530][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.816462][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.848578][ T7488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.878045][ T7488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.937300][ T7488] batman_adv: batadv0: Interface activated: batadv_slave_1
[  254.409760][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  254.433064][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  254.453377][ T7488] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  254.494089][ T7488] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  254.505036][ T7488] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  254.514255][ T7488] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  254.542301][ T7763] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  254.620284][ T1078] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  254.678996][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.687832][ T3621] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  254.707904][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.727234][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  254.747326][ T7765] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  254.773175][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  254.774232][ T7765] overlayfs: bad mount option "redirect_dir=./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  254.789545][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  254.876447][    C0] vkms_vblank_simulate: vblank timer overrun
[  254.923513][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  255.120806][ T3621] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  255.140198][ T3621] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  255.163561][ T3621] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  255.183832][ T3621] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.195242][ T1078] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  255.206780][ T1078] usb 5-1: config 0 has no interface number 0
[  255.247978][ T3621] usb 1-1: config 0 descriptor??
[  255.325189][ T7771] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.888'.
[  255.334769][ T7771] netlink: zone id is out of range
[  255.339951][ T7771] netlink: zone id is out of range
[  255.401465][ T1078] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96
[  255.449988][ T1078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.565643][ T1078] usb 5-1: Product: syz
[  255.653276][ T1078] usb 5-1: Manufacturer: syz
[  255.748864][ T1078] usb 5-1: SerialNumber: syz
[  255.863374][ T1390] ieee802154 phy0 wpan0: encryption failed: -22
[  255.869684][ T1390] ieee802154 phy1 wpan1: encryption failed: -22
[  255.909853][ T1078] usb 5-1: config 0 descriptor??
[  255.985379][ T1078] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (2013:0259) with 1 interfaces
[  256.026442][ T1078] cx231xx 5-1:0.1: Not found matching IAD interface
[  256.197644][ T7787] netlink: 4 bytes leftover after parsing attributes in process `syz.2.944'.
[  256.216794][ T1078] usb 5-1: USB disconnect, device number 8
[  256.308044][ T7778] APIC base relocation is unsupported by KVM
[  256.343415][ T7785] loop3: detected capacity change from 0 to 256
[  256.414141][ T7791] overlayfs: missing 'lowerdir'
[  256.618416][ T3735] device hsr_slave_0 left promiscuous mode
[  256.628986][ T3735] device hsr_slave_1 left promiscuous mode
[  256.700845][ T3621] usbhid 1-1:0.0: can't add hid device: -71
[  256.721025][ T3621] usbhid: probe of 1-1:0.0 failed with error -71
[  256.748978][ T3621] usb 1-1: USB disconnect, device number 10
[  256.897577][ T7804] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  257.166279][ T7806] loop4: detected capacity change from 0 to 2048
[  258.021316][ T7816] netlink: 209848 bytes leftover after parsing attributes in process `syz.3.952'.
[  258.033442][ T7816] netlink: zone id is out of range
[  258.038864][ T7816] netlink: zone id is out of range
[  258.648983][ T7822] netlink: 4 bytes leftover after parsing attributes in process `syz.2.957'.
[  258.806167][ T3735] bond0 (unregistering): Released all slaves
[  259.779993][ T7847] UBIFS error (pid: 7847): cannot open "/dev/sg0", error -22
[  259.821637][ T5172] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  260.670749][ T5172] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  260.689916][ T5172] usb 5-1: config 0 has no interface number 0
[  261.051835][ T7862] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  261.500599][ T5172] usb 5-1: New USB device found, idVendor=2013, idProduct=0259, bcdDevice= e.96
[  261.509703][ T5172] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.580142][ T5172] usb 5-1: Product: syz
[  261.584387][ T5172] usb 5-1: Manufacturer: syz
[  261.588977][ T5172] usb 5-1: SerialNumber: syz
[  261.631912][ T5172] usb 5-1: config 0 descriptor??
[  261.702499][ T5172] cx231xx 5-1:0.1: New device syz syz @ 480 Mbps (2013:0259) with 1 interfaces
[  261.747586][ T5172] cx231xx 5-1:0.1: Not found matching IAD interface
[  261.767418][ T7867] loop2: detected capacity change from 0 to 128
[  261.885350][ T7865] fuse: Bad value for 'fd'
[  261.987534][ T5173] usb 5-1: USB disconnect, device number 9
[  262.191762][ T7878] loop0: detected capacity change from 0 to 64
[  262.393748][ T5172] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  262.884422][ T7890] UBIFS error (pid: 7890): cannot open "/dev/sg0", error -22
[  263.640242][ T5172] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  263.674517][ T5172] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  263.720222][ T5172] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  263.774258][ T5172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.824196][ T5172] usb 3-1: config 0 descriptor??
[  263.940872][   T21] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  263.959871][ T7902] loop3: detected capacity change from 0 to 128
[  264.138209][ T7910] loop0: detected capacity change from 0 to 256
[  264.167842][ T7911] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  264.190369][   T21] usb 5-1: Using ep0 maxpacket: 16
[  264.249844][ T7910] FAT-fs (loop0): Directory bread(block 64) failed
[  264.279835][ T7910] FAT-fs (loop0): Directory bread(block 65) failed
[  264.292435][ T7910] FAT-fs (loop0): Directory bread(block 66) failed
[  264.314697][ T7910] FAT-fs (loop0): Directory bread(block 67) failed
[  264.334992][ T7910] FAT-fs (loop0): Directory bread(block 68) failed
[  264.358915][ T7910] FAT-fs (loop0): Directory bread(block 69) failed
[  264.372942][ T7910] FAT-fs (loop0): Directory bread(block 70) failed
[  264.379804][ T7910] FAT-fs (loop0): Directory bread(block 71) failed
[  264.391369][ T7910] FAT-fs (loop0): Directory bread(block 72) failed
[  264.397985][ T7910] FAT-fs (loop0): Directory bread(block 73) failed
[  264.529426][ T7916] loop3: detected capacity change from 0 to 512
[  264.550482][   T21] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=33.d2
[  264.565299][   T21] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.580798][   T21] usb 5-1: Product: syz
[  264.591697][   T21] usb 5-1: Manufacturer: syz
[  264.601672][   T21] usb 5-1: SerialNumber: syz
[  264.622089][   T21] usb 5-1: config 0 descriptor??
[  264.672066][   T21] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  264.682123][ T7918] overlayfs: missing 'lowerdir'
[  264.687478][ T7916] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #16: comm syz.3.988: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200)
[  264.708108][ T7916] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.988: couldn't read orphan inode 16 (err -117)
[  264.724331][ T7916] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  264.736020][ T7916] ext4 filesystem being mounted at /11/bus supports timestamps until 2038 (0x7fffffff)
[  264.919252][ T7924] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 3: comm syz.3.988: lblock 0 mapped to illegal pblock 3 (length 1)
[  265.027498][ T7488] EXT4-fs error (device loop3): ext4_map_blocks:601: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[  265.105572][ T3613] usb 5-1: USB disconnect, device number 10
[  265.108688][ T7488] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5789: Corrupt filesystem
[  265.153342][ T7488] EXT4-fs error (device loop3): ext4_quota_off:6485: inode #3: comm syz-executor: mark_inode_dirty error
[  265.642409][ T5172] usb 3-1: USB disconnect, device number 13
[  265.771906][ T3735] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.866682][ T3735] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.880197][ T5173] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  265.955173][ T3735] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.136261][ T3735] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.240300][ T5173] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  266.264559][ T5173] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  266.291845][ T7960] overlayfs: missing 'lowerdir'
[  266.300169][ T5173] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.331574][ T5173] usb 1-1: config 0 descriptor??
[  266.392267][ T5173] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  266.625425][ T7938] bridge0: port 3(macsec1) entered blocking state
[  266.652996][ T7938] bridge0: port 3(macsec1) entered disabled state
[  266.739912][ T7947] chnl_net:caif_netlink_parms(): no params data found
[  266.768589][ T3621] usb 1-1: USB disconnect, device number 11
[  266.780404][ T5173] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  266.895573][ T7947] bridge0: port 1(bridge_slave_0) entered blocking state
[  266.905982][ T7947] bridge0: port 1(bridge_slave_0) entered disabled state
[  266.915889][ T7947] device bridge_slave_0 entered promiscuous mode
[  266.939459][ T7947] bridge0: port 2(bridge_slave_1) entered blocking state
[  266.957350][ T7947] bridge0: port 2(bridge_slave_1) entered disabled state
[  266.985357][ T7947] device bridge_slave_1 entered promiscuous mode
[  267.108981][ T7947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  267.121688][ T1075] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  267.138352][ T7947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  267.160236][ T5173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  267.183584][ T7996] loop4: detected capacity change from 0 to 64
[  267.187614][ T5173] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  267.198908][ T5173] usb 2-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  267.208038][ T5173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.221747][ T5173] usb 2-1: config 0 descriptor??
[  267.253822][ T7947] team0: Port device team_slave_0 added
[  267.268745][ T7947] team0: Port device team_slave_1 added
[  267.395197][ T1075] usb 3-1: Using ep0 maxpacket: 16
[  267.439569][ T7947] batman_adv: batadv0: Adding interface: batadv_slave_0
[  267.475712][ T7947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.545591][ T7947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  267.573903][ T7972] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  267.709983][ T7947] batman_adv: batadv0: Adding interface: batadv_slave_1
[  267.717211][ T7947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  267.725072][ T8006] loop0: detected capacity change from 0 to 512
[  267.749811][ T1075] usb 3-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=33.d2
[  267.761285][ T1075] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.769976][ T1075] usb 3-1: Product: syz
[  267.776114][ T8008] loop4: detected capacity change from 0 to 512
[  267.776665][ T1075] usb 3-1: Manufacturer: syz
[  267.787512][ T1075] usb 3-1: SerialNumber: syz
[  267.800319][ T7947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  267.809487][ T1075] usb 3-1: config 0 descriptor??
[  267.862077][ T1075] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  267.886449][ T8008] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  267.916696][ T7947] device hsr_slave_0 entered promiscuous mode
[  267.932032][ T8006] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,inode_readahead_blks=0x0000000000000800,minixdf,,errors=continue. Quota mode: writeback.
[  267.957491][ T8008] EXT4-fs (loop4): orphan cleanup on readonly fs
[  267.973126][ T7947] device hsr_slave_1 entered promiscuous mode
[  267.995841][ T8006] ext4 filesystem being mounted at /19/bus supports timestamps until 2038 (0x7fffffff)
[  268.007650][ T7947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  268.028045][ T8008] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  268.060254][ T7947] Cannot create hsr debugfs directory
[  268.070481][ T5173] Bluetooth: hci4: command 0x0409 tx timeout
[  268.082185][ T8008] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  268.121669][ T8008] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm syz.4.1016: bg 0: block 40: padding at end of block bitmap is not set
[  268.188690][ T8008] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  268.254703][ T8008] EXT4-fs (loop4): 1 truncate cleaned up
[  268.310177][ T8008] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  268.344985][ T1075] usb 3-1: USB disconnect, device number 14
[  268.421939][ T3735] device hsr_slave_0 left promiscuous mode
[  268.442791][ T3735] device hsr_slave_1 left promiscuous mode
[  268.501954][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  268.509423][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.589651][ T3735] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  268.616720][ T3735] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.650767][ T3735] device bridge_slave_1 left promiscuous mode
[  268.657014][ T3735] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.684214][ T3735] device bridge_slave_0 left promiscuous mode
[  268.697826][ T3735] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.737490][ T3735] device veth1_macvtap left promiscuous mode
[  268.756217][ T3735] device veth0_macvtap left promiscuous mode
[  268.772378][ T3735] device veth1_vlan left promiscuous mode
[  268.778191][ T3735] device veth0_vlan left promiscuous mode
[  269.059647][ T8039] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw
[  269.803190][ T8030] loop0: detected capacity change from 0 to 32768
[  269.834142][ T1078] usb 2-1: USB disconnect, device number 13
[  269.936415][ T8030] XFS (loop0): Mounting V5 Filesystem
[  270.223343][ T3613] Bluetooth: hci4: command 0x041b tx timeout
[  270.266861][ T8030] XFS (loop0): Ending clean mount
[  270.481655][ T3735] team0 (unregistering): Port device team_slave_1 removed
[  270.540970][ T3735] team0 (unregistering): Port device team_slave_0 removed
[  270.573926][ T3613] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[  270.577876][ T3735] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.606771][ T3613] XFS (loop0): Unmount and run xfs_repair
[  270.620941][ T3613] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  270.628584][ T3613] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  270.639191][ T3735] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.639845][ T3613] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  270.658855][ T3613] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  270.667952][ T3613] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  270.679761][ T3613] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  270.696528][ T3613] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  270.706795][ T3613] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  270.723337][ T3613] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  270.738303][ T8058] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74
[  270.753130][ T8058] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  270.768109][ T8058] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  270.822319][ T7411] XFS (loop0): Unmounting Filesystem
[  270.836537][ T3735] bond0 (unregistering): Released all slaves
[  271.085513][ T8066] loop2: detected capacity change from 0 to 512
[  271.187671][ T8066] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  271.188249][ T8073] trusted_key: encrypted_key: key trusted:syz not found
[  271.221531][ T8066] EXT4-fs (loop2): orphan cleanup on readonly fs
[  271.270643][ T8066] EXT4-fs warning (device loop2): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  271.342970][ T8066] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  271.414903][ T8066] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.1028: bg 0: block 40: padding at end of block bitmap is not set
[  271.511175][ T8066] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  271.562309][ T8066] EXT4-fs (loop2): 1 truncate cleaned up
[  271.568157][ T8066] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  271.590248][   T21] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  271.712807][ T7947] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  271.771221][ T7947] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  271.888194][ T7947] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  272.015563][ T7947] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  272.030716][   T21] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  272.084997][   T21] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  272.196956][   T21] usb 5-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  272.247677][   T21] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.270867][ T8101] overlayfs: missing 'lowerdir'
[  272.286201][   T21] usb 5-1: config 0 descriptor??
[  272.310646][ T3613] Bluetooth: hci4: command 0x040f tx timeout
[  272.458793][ T7947] 8021q: adding VLAN 0 to HW filter on device bond0
[  272.519248][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  272.547648][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  272.574633][ T7947] 8021q: adding VLAN 0 to HW filter on device team0
[  272.597607][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  272.632768][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  272.667555][ T3613] bridge0: port 1(bridge_slave_0) entered blocking state
[  272.674687][ T3613] bridge0: port 1(bridge_slave_0) entered forwarding state
[  272.684242][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  272.688537][ T8080] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  272.700795][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  272.729338][ T3613] bridge0: port 2(bridge_slave_1) entered blocking state
[  272.736485][ T3613] bridge0: port 2(bridge_slave_1) entered forwarding state
[  272.770907][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  272.781306][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  272.801076][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  272.841792][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  272.853357][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  272.904541][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  272.947430][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  272.960975][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  272.979756][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  272.988650][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  273.011516][ T8097] loop0: detected capacity change from 0 to 32768
[  273.018045][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  273.038429][ T7947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  273.079216][ T5172] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  273.195817][ T8125] trusted_key: encrypted_key: key trusted:syz not found
[  273.372654][ T8097] XFS (loop0): Mounting V5 Filesystem
[  273.390917][ T8135] loop2: detected capacity change from 0 to 512
[  273.431328][ T7947] 8021q: adding VLAN 0 to HW filter on device batadv0
[  273.439088][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  273.457503][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  273.579656][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  273.611564][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  273.668357][ T8135] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  273.718165][ T8097] XFS (loop0): Ending clean mount
[  273.756854][ T7947] device veth0_vlan entered promiscuous mode
[  273.781031][ T8135] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038 (0x7fffffff)
[  273.842701][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  273.856254][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  273.907198][ T7947] device veth1_vlan entered promiscuous mode
[  273.922835][   T21] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x1ca/0x290, xfs_agfl block 0x3 
[  273.954356][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  273.970130][   T21] XFS (loop0): Unmount and run xfs_repair
[  273.981467][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  274.000207][   T21] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  274.020975][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  274.047662][   T21] 00000000: 58 41 46 4c 00 00 00 00 00 00 00 00 00 00 80 86  XAFL............
[  274.071386][ T7947] device veth0_macvtap entered promiscuous mode
[  274.077719][   T21] 00000010: af d4 a8 f7 47 a7 4b ab 00 00 00 00 00 00 00 00  ....G.K.........
[  274.090379][ T7947] device veth1_macvtap entered promiscuous mode
[  274.110144][   T21] 00000020: 5e fe 9e 73 ff ff ff ff 00 00 02 0a 00 00 02 0b  ^..s............
[  274.153196][   T21] 00000030: 00 00 02 0c 00 00 02 0d 00 00 02 0e 00 00 02 0f  ................
[  274.164738][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.194573][   T21] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  274.210241][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.237071][   T21] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  274.253860][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.275615][   T21] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  274.294939][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.311564][   T21] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  274.312610][ T3613] usb 5-1: USB disconnect, device number 11
[  274.340231][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.369066][ T8152] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x224/0x3e0" at daddr 0x3 len 1 error 74
[  274.390429][ T1078] Bluetooth: hci4: command 0x0419 tx timeout
[  274.396196][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.404598][ T8167] loop4: detected capacity change from 0 to 512
[  274.427690][ T8152] XFS (loop0): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x659/0xa60 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  274.463977][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.491703][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.508470][ T8152] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  274.540180][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  274.560768][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.591604][ T7947] batman_adv: batadv0: Interface activated: batadv_slave_0
[  274.610667][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  274.618758][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  274.627230][ T7411] XFS (loop0): Unmounting Filesystem
[  274.684101][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  274.698989][ T8167] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.1044: casefold flag without casefold feature
[  274.731819][ T8167] EXT4-fs error (device loop4): ext4_xattr_inode_iget:404: inode #2: comm syz.4.1044: missing EA_INODE flag
[  274.789602][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  274.801324][ T8167] EXT4-fs error (device loop4): ext4_xattr_inode_iget:409: comm syz.4.1044: error while reading EA inode 2 err=-117
[  274.819812][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  274.847003][ T8167] EXT4-fs (loop4): 1 orphan inode deleted
[  274.850483][ T5316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  274.860154][ T8167] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  274.890580][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.910203][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  274.950184][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  274.970830][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.016652][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.052553][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.079568][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.093681][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.123516][ T7947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  275.156859][ T7947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  275.171017][ T7947] batman_adv: batadv0: Interface activated: batadv_slave_1
[  275.190466][ T7947] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  275.199202][ T7947] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  275.250124][ T7947] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  275.258882][ T7947] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  275.295449][ T8176] tipc: Started in network mode
[  275.300635][ T8176] tipc: Node identity da787e95c891, cluster identity 4711
[  275.307982][ T8176] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  275.330322][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  275.338628][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  275.358938][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  275.430877][ T8176] tipc: Disabling bearer <eth:syzkaller0>
[  275.463978][ T8183] tc_dump_action: action bad kind
[  275.705475][ T5767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.750965][ T5767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.780242][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  275.808507][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  275.808709][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  275.840225][ T4229] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  276.459027][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  276.826585][ T8203] loop0: detected capacity change from 0 to 512
[  276.860317][ T4229] usb 3-1: config 168 descriptor has 1 excess byte, ignoring
[  278.512817][ T4229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 is Bulk; changing to Interrupt
[  278.523847][ T4229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  278.534460][ T4229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  278.539493][ T8203] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  278.549956][ T8216] loop3: detected capacity change from 0 to 512
[  278.622506][ T8203] EXT4-fs (loop0): orphan cleanup on readonly fs
[  278.690124][ T4229] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  278.697394][ T8223] trusted_key: encrypted_key: key trusted:syz not found
[  278.700907][ T8203] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  278.795615][ T8203] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  278.802914][ T4229] usb 3-1: unable to read config index 1 descriptor/start: -71
[  278.821454][ T4229] usb 3-1: can't read configurations, error -71
[  278.828352][ T8216] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  278.849793][ T8216] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038 (0x7fffffff)
[  278.889973][ T8203] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1045: bg 0: block 40: padding at end of block bitmap is not set
[  278.998241][ T8203] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  279.002191][ T8238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1056'.
[  279.039363][ T8203] EXT4-fs (loop0): 1 truncate cleaned up
[  279.054713][ T8203] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  279.096843][ T8249] loop4: detected capacity change from 0 to 1024
[  279.313212][ T8249] EXT4-fs (loop4): Unrecognized mount option "appraise_type=imasig" or missing value
[  280.302085][ T8261] loop2: detected capacity change from 0 to 4096
[  280.319496][ T8273] trusted_key: encrypted_key: key trusted:syz not found
[  280.359209][ T8261] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  280.431166][ T8261] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  280.645207][ T8291] loop0: detected capacity change from 0 to 512
[  280.917118][ T8291] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  281.075198][ T8291] EXT4-fs (loop0): orphan cleanup on readonly fs
[  281.216283][ T8291] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  281.240568][ T8291] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  281.320221][ T8291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1075: bg 0: block 40: padding at end of block bitmap is not set
[  281.381734][ T8291] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  281.409690][ T8291] EXT4-fs (loop0): 1 truncate cleaned up
[  281.434528][ T3671] ntfs3: loop2: ntfs3_write_inode r=5 failed, -22.
[  281.445153][ T8291] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  281.468845][ T6874] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  282.481673][ T8309] loop2: detected capacity change from 0 to 1024
[  282.555492][ T8309] EXT4-fs (loop2): Unrecognized mount option "appraise_type=imasig" or missing value
[  282.792386][ T8324] loop3: detected capacity change from 0 to 512
[  283.463007][ T8324] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  283.491209][ T8324] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038 (0x7fffffff)
[  283.762237][ T8343] loop0: detected capacity change from 0 to 512
[  283.841177][ T8343] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  283.886037][ T8343] EXT4-fs (loop0): orphan cleanup on readonly fs
[  283.943179][ T8343] EXT4-fs warning (device loop0): ext4_enable_quotas:6431: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  283.998990][ T8343] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  284.041780][ T8343] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1091: bg 0: block 40: padding at end of block bitmap is not set
[  284.103789][ T8343] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  284.141660][ T8343] EXT4-fs (loop0): 1 truncate cleaned up
[  284.153235][ T8343] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  284.560466][ T3621] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  285.030984][ T3621] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  285.166594][ T3621] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.179325][ T3621] usb 4-1: config 0 descriptor??
[  285.221143][ T3621] cp210x 4-1:0.0: cp210x converter detected
[  285.419481][ T8381] loop4: detected capacity change from 0 to 1024
[  285.446854][ T8377] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  285.673717][ T3621] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  286.173495][ T3621] usb 4-1: cp210x converter now attached to ttyUSB0
[  286.700229][ T5316] usb 4-1: USB disconnect, device number 9
[  286.729017][ T5316] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  286.778786][ T5316] cp210x 4-1:0.0: device disconnected
[  286.812576][ T8396] delete_channel: no stack
[  286.917747][ T8414] loop0: detected capacity change from 0 to 1024
[  287.054631][ T8419] loop2: detected capacity change from 0 to 8
[  287.111675][ T8419] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  287.328784][ T8423] cramfs: Error -5 while decompressing!
[  287.335116][ T8423] cramfs: ffffffff915942c2(26)->ffff888048c9a000(4096)
[  287.342146][ T8423] cramfs: Error -3 while decompressing!
[  287.347742][ T8423] cramfs: ffffffff915942dc(16)->ffff888050290000(4096)
[  287.354990][ T8423] cramfs: Error -5 while decompressing!
[  287.361817][ T8423] cramfs: ffffffff915942c2(26)->ffff888048c9a000(4096)
[  287.390198][   T26] audit: type=1800 audit(1722476650.223:62): pid=8423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1124" name="file3" dev="loop2" ino=348 res=0 errno=0
[  287.426958][ T8421] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  287.540800][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1124'.
[  287.551662][ T8424] netlink: 'syz.2.1124': attribute type 14 has an invalid length.
[  287.595321][ T8424] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  287.604806][ T8424] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  287.613617][ T8424] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  287.622452][ T8424] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  287.634349][ T8424] device vxlan0 entered promiscuous mode
[  289.564386][ T8419] sched: RT throttling activated
[  292.671286][ T8449] loop4: detected capacity change from 0 to 1024
[  292.716985][ T8453] loop0: detected capacity change from 0 to 4096
[  292.787458][ T8453] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  292.832635][ T8453] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  293.103281][ T8462] loop3: detected capacity change from 0 to 2048
[  293.200252][ T1075] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  293.778630][ T8446] delete_channel: no stack
[  293.803649][ T5767] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22.
[  293.835967][ T7411] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22.
[  293.931189][ T8469] loop2: detected capacity change from 0 to 8
[  293.971204][ T8469] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  293.980871][ T1075] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  293.991461][ T4229] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  294.000776][ T1075] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.030885][ T1075] usb 2-1: config 0 descriptor??
[  294.098065][ T8475] cramfs: Error -5 while decompressing!
[  294.103711][ T8475] cramfs: ffffffff915902c2(26)->ffff888050967000(4096)
[  294.110670][ T8475] cramfs: Error -3 while decompressing!
[  294.116307][ T8475] cramfs: ffffffff915902dc(16)->ffff888049d84000(4096)
[  294.123363][ T8475] cramfs: Error -5 while decompressing!
[  294.129023][ T8475] cramfs: ffffffff915902c2(26)->ffff888050967000(4096)
[  294.137122][   T26] audit: type=1800 audit(1722476656.993:63): pid=8475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1142" name="file3" dev="loop2" ino=348 res=0 errno=0
[  294.239156][ T8476] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1142'.
[  294.248184][ T8476] netlink: 'syz.2.1142': attribute type 14 has an invalid length.
[  296.575610][ T1075] cp210x 2-1:0.0: cp210x converter detected
[  296.710347][ T1075] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -71
[  296.717871][ T1075] cp210x 2-1:0.0: querying part number failed
[  296.754440][ T1075] usb 2-1: cp210x converter now attached to ttyUSB0
[  296.787413][ T1075] usb 2-1: USB disconnect, device number 14
[  296.810300][ T4229] usb 5-1: unable to read config index 0 descriptor/all
[  296.817416][ T4229] usb 5-1: can't read configurations, error -71
[  296.822411][ T1075] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  296.864367][ T1075] cp210x 2-1:0.0: device disconnected
[  296.919985][ T8489] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  297.179545][ T8504] netlink: 'syz.4.1155': attribute type 4 has an invalid length.
[  297.340136][ T5316] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  297.383802][ T8508] loop4: detected capacity change from 0 to 8
[  297.400167][ T1075] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  297.450957][ T8508] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  297.545194][ T8512] cramfs: Error -5 while decompressing!
[  297.550930][ T8512] cramfs: ffffffff915942c2(26)->ffff888049da3000(4096)
[  297.557998][ T8512] cramfs: Error -3 while decompressing!
[  297.563665][ T8512] cramfs: ffffffff915942dc(16)->ffff888048f6a000(4096)
[  297.572200][ T8512] cramfs: Error -5 while decompressing!
[  297.577792][ T8512] cramfs: ffffffff915942c2(26)->ffff888049da3000(4096)
[  297.585605][   T26] audit: type=1800 audit(1722476660.443:64): pid=8512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1157" name="file3" dev="loop4" ino=348 res=0 errno=0
[  297.737988][ T8513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1157'.
[  297.747003][ T8513] netlink: 'syz.4.1157': attribute type 14 has an invalid length.
[  297.761512][ T8513] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  297.770310][ T8513] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  297.779033][ T8513] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  297.787788][ T8513] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  297.796704][ T8513] device vxlan0 entered promiscuous mode
[  299.571439][ T6871] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  299.902970][ T5316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  300.619247][ T5316] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.637343][ T5316] usb 3-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  300.653769][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.662077][ T1075] usb 2-1: unable to read config index 0 descriptor/start: -71
[  300.671963][ T1075] usb 2-1: can't read configurations, error -71
[  300.685020][ T8498] delete_channel: no stack
[  300.690832][ T5316] usb 3-1: config 0 descriptor??
[  300.720385][ T5316] usb 3-1: can't set config #0, error -71
[  300.735160][ T5316] usb 3-1: USB disconnect, device number 17
[  300.953462][ T4229] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  300.964908][ T4229] Bluetooth: hci0: Injecting HCI hardware error event
[  300.993923][ T3576] Bluetooth: hci0: hardware error 0x00
[  301.212764][ T8536] loop4: detected capacity change from 0 to 8192
[  301.261177][ T8536] ntfs3: Unknown parameter 'Î3øÿÿÅÇ·(Å'
[  301.299427][ T8549] loop3: detected capacity change from 0 to 8
[  301.353449][ T8549] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  301.380152][ T5316] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  301.523185][ T8552] cramfs: Error -5 while decompressing!
[  301.528811][ T8552] cramfs: ffffffff915902c2(26)->ffff888052d9a000(4096)
[  301.536028][ T8552] cramfs: Error -3 while decompressing!
[  301.541894][ T8552] cramfs: ffffffff915902dc(16)->ffff888052d9b000(4096)
[  301.548957][ T8552] cramfs: Error -5 while decompressing!
[  301.554628][ T8552] cramfs: ffffffff915902c2(26)->ffff888052d9a000(4096)
[  301.568278][   T26] audit: type=1800 audit(1722476664.423:65): pid=8552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1174" name="file3" dev="loop3" ino=348 res=0 errno=0
[  301.743098][ T8556] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1174'.
[  301.752152][ T8556] netlink: 'syz.3.1174': attribute type 14 has an invalid length.
[  301.767707][ T8556] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  301.776533][ T8556] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  301.785323][ T8556] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  301.794091][ T8556] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  301.802923][ T8556] device vxlan0 entered promiscuous mode
[  303.669784][ T5316] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  304.341479][ T5316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.381448][ T5316] usb 3-1: config 0 descriptor??
[  304.397392][ T8560] program syz.0.1176 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  304.420302][ T5316] usb 3-1: can't set config #0, error -71
[  304.436734][ T5316] usb 3-1: USB disconnect, device number 18
[  305.091269][ T5312] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  305.576248][ T4229] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  305.584856][ T4229] Bluetooth: hci4: Injecting HCI hardware error event
[  305.592270][ T3583] Bluetooth: hci4: hardware error 0x00
[  305.650990][ T8598] program syz.0.1191 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  305.820821][ T5312] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  305.829929][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  305.879150][ T5312] usb 3-1: config 0 descriptor??
[  305.941702][ T5312] cp210x 3-1:0.0: cp210x converter detected
[  306.194589][ T8614] loop4: detected capacity change from 0 to 2048
[  306.380658][ T5312] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  306.790213][ T5173] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  306.883030][ T5312] usb 3-1: cp210x converter now attached to ttyUSB0
[  306.922015][ T8601] delete_channel: no stack
[  307.588860][ T4229] usb 3-1: USB disconnect, device number 19
[  307.597300][ T4229] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  307.610121][ T4229] cp210x 3-1:0.0: device disconnected
[  307.770398][ T5173] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  307.793538][ T5173] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  307.808096][ T5173] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  307.893237][ T8641] xt_time: invalid argument - start or stop time greater than 23:59:59
[  307.980348][ T5173] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  307.990888][ T5173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  308.007468][ T3613] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  308.017887][ T5173] usb 5-1: Product: syz
[  308.025494][ T5173] usb 5-1: Manufacturer: syz
[  308.035160][ T5173] usb 5-1: SerialNumber: syz
[  308.190115][ T5316] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  308.251349][ T3613] usb 2-1: Using ep0 maxpacket: 16
[  308.312614][ T5173] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[  308.380221][ T3613] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  308.397484][ T3613] usb 2-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  308.435075][ T3613] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.467982][ T3613] usb 2-1: config 0 descriptor??
[  308.523195][ T3613] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  308.552734][ T3613] usb 5-1: USB disconnect, device number 14
[  308.582973][ T5316] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  308.594902][ T3613] usblp0: removed
[  308.614619][ T5316] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  308.655555][ T5316] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  308.682369][ T5316] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  309.001471][ T3621] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  309.040178][ T8641] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  309.058509][ T3621] Bluetooth: hci3: Injecting HCI hardware error event
[  309.063441][ T8658] (syz.2.1217,8658,0):ocfs2_parse_options:1459 ERROR: Invalid heartbeat mount options
[  309.103958][ T3586] Bluetooth: hci3: hardware error 0x00
[  309.122980][ T5173] usb 2-1: USB disconnect, device number 17
[  309.132523][ T3621] Bluetooth: hci3: command 0x0406 tx timeout
[  309.140889][ T8658] (syz.2.1217,8658,1):ocfs2_fill_super:1177 ERROR: status = -22
[  310.236342][ T8692] loop4: detected capacity change from 0 to 512
[  310.317027][ T8692] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  310.426218][ T8692] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  310.497298][ T8692] EXT4-fs (loop4): 1 truncate cleaned up
[  310.532531][ T8692] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,quota,,errors=continue. Quota mode: writeback.
[  311.451372][ T1075] usb 1-1: USB disconnect, device number 13
[  311.670269][ T5173] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  311.910535][ T5173] usb 4-1: Using ep0 maxpacket: 16
[  312.030310][ T5173] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  312.056324][ T5173] usb 4-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  312.076359][ T5173] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.116895][ T5173] usb 4-1: config 0 descriptor??
[  312.171960][ T5173] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  312.714661][ T8743] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1249'.
[  312.723689][ T8743] netlink: 'syz.1.1249': attribute type 14 has an invalid length.
[  312.737284][ T8743] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  312.746146][ T8743] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  312.754877][ T8743] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  312.763603][ T8743] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  312.772581][ T8743] device vxlan0 entered promiscuous mode
[  315.579446][   T21] usb 4-1: USB disconnect, device number 10
[  315.948678][ T8728] delete_channel: no stack
[  317.276185][ T1390] ieee802154 phy0 wpan0: encryption failed: -22
[  317.282595][ T1390] ieee802154 phy1 wpan1: encryption failed: -22
[  317.573914][   T26] audit: type=1326 audit(1722476680.433:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.1258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0b31053b9 code=0x0
[  318.199025][ T8772] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1258'.
[  318.228752][   T26] audit: type=1326 audit(1722476680.953:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8765 comm="syz.4.1258" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff0b31053b9 code=0x0
[  318.538717][ T8782] loop4: detected capacity change from 0 to 1024
[  318.595290][ T8782] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled
[  318.635186][ T8782] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,jqfmt=vfsold,usrquota,data_err=abort,,errors=continue. Quota mode: writeback.
[  318.686334][   T21] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  319.100117][   T21] usb 1-1: Using ep0 maxpacket: 16
[  319.775900][ T5312] Bluetooth: hci6: command 0x0406 tx timeout
[  319.965672][   T21] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  319.976199][   T21] usb 1-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00
[  319.996236][   T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.021908][   T21] usb 1-1: config 0 descriptor??
[  320.127541][ T8794] xt_TPROXY: Can be used only with -p tcp or -p udp
[  320.260468][   T26] audit: type=1326 audit(1722476683.063:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8790 comm="syz.2.1265" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f07002483b9 code=0x0
[  320.379390][   T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  320.623091][   T21] usb 1-1: USB disconnect, device number 14
[  321.160441][ T5312] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  321.470311][ T5312] usb 2-1: Using ep0 maxpacket: 32
[  321.730217][ T5312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  322.593484][ T8827] tipc: Started in network mode
[  322.621885][ T8827] tipc: Node identity aaaaaaaaaa32, cluster identity 4711
[  322.698974][ T5312] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  322.721283][ T5312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.732263][ T5312] usb 2-1: Product: syz
[  322.736443][ T5312] usb 2-1: Manufacturer: syz
[  322.749875][ T8827] tipc: Enabled bearer <eth:vlan0>, priority 10
[  322.769278][ T5312] usb 2-1: SerialNumber: syz
[  323.299447][ T8827] tipc: Resetting bearer <eth:vlan0>
[  323.319758][ T5312] usb 2-1: config 0 descriptor??
[  323.382431][ T8808] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  323.430719][ T5312] hub 2-1:0.0: bad descriptor, ignoring hub
[  323.437397][ T5312] hub: probe of 2-1:0.0 failed with error -5
[  323.466890][ T5312] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input13
[  323.538770][ T8827] tipc: Disabling bearer <eth:vlan0>
[  323.674799][ T8814] delete_channel: no stack
[  323.687383][ T4229] usb 2-1: USB disconnect, device number 18
[  323.710322][ T1075] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  324.046912][ T1075] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  324.166396][ T1075] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  324.176457][ T1075] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  324.196019][ T1075] usb 1-1: config 0 interface 0 has no altsetting 0
[  324.293641][ T1075] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  324.306340][ T1075] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  324.321760][ T1075] usb 1-1: config 0 interface 0 has no altsetting 0
[  324.411241][ T1075] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  324.473709][ T1075] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  324.528684][ T1075] usb 1-1: config 0 interface 0 has no altsetting 0
[  324.640453][ T1075] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  324.667499][ T1075] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  324.860288][ T1075] usb 1-1: config 0 interface 0 has no altsetting 0
[  324.962891][ T1075] usb 1-1: unable to read config index 4 descriptor/start: -71
[  325.083779][ T1075] usb 1-1: can't read configurations, error -71
[  326.050465][ T3613] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  326.340841][ T3613] usb 2-1: Using ep0 maxpacket: 32
[  326.460480][ T3613] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  326.750254][ T3613] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  326.810216][ T3613] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  326.832033][ T3613] usb 2-1: Product: syz
[  326.832234][ T8898] x_tables: duplicate underflow at hook 2
[  326.836228][ T3613] usb 2-1: Manufacturer: syz
[  326.853764][ T3613] usb 2-1: SerialNumber: syz
[  326.873999][ T3613] usb 2-1: config 0 descriptor??
[  326.950726][ T8877] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  327.021972][ T3613] hub 2-1:0.0: bad descriptor, ignoring hub
[  327.035004][ T3613] hub: probe of 2-1:0.0 failed with error -5
[  327.075536][ T3613] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input14
[  327.310124][ T1075] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  327.476246][ T5173] usb 2-1: USB disconnect, device number 19
[  327.482328][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  327.610215][ T1075] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  327.690177][ T1075] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  327.699092][ T1075] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  327.711403][ T1075] usb 5-1: config 0 interface 0 has no altsetting 0
[  327.937199][ T1075] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  327.946779][ T1075] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  327.958204][ T1075] usb 5-1: config 0 interface 0 has no altsetting 0
[  328.201470][ T1075] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.244510][ T1075] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.368187][ T1075] usb 5-1: config 0 interface 0 has no altsetting 0
[  328.530817][ T1075] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.564993][ T1075] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.678060][ T1075] usb 5-1: config 0 interface 0 has no altsetting 0
[  328.808625][ T1075] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  328.828220][ T1075] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  328.849768][ T1075] usb 5-1: config 0 interface 0 has no altsetting 0
[  328.974601][ T8932] lo speed is unknown, defaulting to 1000
[  328.996882][ T8932] lo speed is unknown, defaulting to 1000
[  329.003727][ T1075] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  329.018792][ T1075] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  329.034829][ T8932] lo speed is unknown, defaulting to 1000
[  329.041111][ T1075] usb 5-1: config 0 interface 0 has no altsetting 0
[  329.052410][ T8934] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  329.070178][ T5173] usb 2-1: new low-speed USB device number 20 using dummy_hcd
[  329.088404][ T8934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  329.118707][ T8934] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  329.150302][ T1075] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  329.164723][ T1075] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  329.190354][ T8934] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  329.211452][ T1075] usb 5-1: config 0 interface 0 has no altsetting 0
[  329.310633][ T1075] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  329.329888][ T1075] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  329.352328][ T4229] lo speed is unknown, defaulting to 1000
[  329.362051][ T8932] infiniband syz0: set active
[  329.369299][ T1075] usb 5-1: config 0 interface 0 has no altsetting 0
[  329.372745][ T8932] infiniband syz0: added lo
[  329.425827][ T8932] infiniband syz0: Couldn't open port 1
[  329.441705][ T5173] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt
[  329.489732][ T8932] RDS/IB: syz0: added
[  329.495989][ T8932] smc: adding ib device syz0 with port count 1
[  329.503270][ T8932] smc:    ib device syz0 port 1 has pnetid 
[  329.514849][ T4229] lo speed is unknown, defaulting to 1000
[  329.543592][ T8932] lo speed is unknown, defaulting to 1000
[  329.576440][ T1075] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  329.588994][ T1075] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  329.614438][ T1075] usb 5-1: Product: syz
[  329.635650][ T1075] usb 5-1: Manufacturer: syz
[  329.642949][ T1075] usb 5-1: SerialNumber: syz
[  329.650750][ T1075] usb 5-1: config 0 descriptor??
[  329.692775][ T1075] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  329.703568][ T5173] usb 2-1: string descriptor 0 read error: -22
[  329.715381][ T5173] usb 2-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33
[  329.730450][ T8932] lo speed is unknown, defaulting to 1000
[  329.749731][ T5173] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  329.779442][ T5173] usb 2-1: config 0 descriptor??
[  329.812659][ T8927] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  329.834287][ T5173] r8712u: register rtl8712_netdev_ops to netdev_ops
[  329.855482][ T5173] usb 2-1: r8712u: USB_SPEED_LOW with 1 endpoints
[  329.913050][ T1075] usb 5-1: USB disconnect, device number 15
[  329.939461][ T1075] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  330.018388][ T3613] kernel write not supported for file bpf-prog (pid: 3613 comm: kworker/0:5)
[  330.063556][ T8932] lo speed is unknown, defaulting to 1000
[  330.076863][ T8958] loop4: detected capacity change from 0 to 1764
[  330.180265][ T5173] usb 2-1: r8712u: Boot from EFUSE: Autoload Failed
[  330.197296][ T5173] usb 2-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  330.205380][ T5173] usb 2-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  330.235310][ T5173] usb 2-1: USB disconnect, device number 20
[  330.284213][ T8962] loop4: detected capacity change from 0 to 512
[  330.305061][ T8932] lo speed is unknown, defaulting to 1000
[  330.373637][ T8962] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  330.410400][ T3613] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  330.458847][ T8962] EXT4-fs (loop4): 1 truncate cleaned up
[  330.468715][ T8962] EXT4-fs (loop4): mounted filesystem without journal. Opts: noload,resuid=0x000000000000ee01,debug_want_extra_isize=0x0000000000000068,lazytime,data=journal,quota,,errors=continue. Quota mode: writeback.
[  330.525851][ T8932] lo speed is unknown, defaulting to 1000
[  330.670158][ T3613] usb 3-1: Using ep0 maxpacket: 32
[  331.100577][ T3613] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36
[  331.406569][ T8932] lo speed is unknown, defaulting to 1000
[  331.445301][ T8981] x_tables: duplicate underflow at hook 2
[  331.519027][ T3613] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  331.548525][ T3613] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.568758][ T3613] usb 3-1: Product: syz
[  331.599146][ T3613] usb 3-1: Manufacturer: syz
[  331.606902][ T8986] loop4: detected capacity change from 0 to 256
[  331.613502][ T3613] usb 3-1: SerialNumber: syz
[  331.634551][ T3613] usb 3-1: config 0 descriptor??
[  331.660377][ T8960] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  331.721729][ T3613] hub 3-1:0.0: bad descriptor, ignoring hub
[  331.727674][ T3613] hub: probe of 3-1:0.0 failed with error -5
[  331.911765][ T8986] FAT-fs (loop4): Unrecognized mount option "nonumtailÂ0" or missing value
[  331.949213][ T3613] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input15
[  332.003517][ T3613] usb 3-1: USB disconnect, device number 20
[  332.020160][    C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  332.076528][ T8986] loop4: detected capacity change from 0 to 1024
[  332.470398][ T4671] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  332.760420][ T4671] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  332.906707][ T3621] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  333.351132][ T3621] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  333.410077][ T3621] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  333.419846][ T3621] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  333.510349][ T4671] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  333.519286][ T4671] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  333.536759][ T4671] usb 1-1: config 0 interface 0 has no altsetting 0
[  333.961287][ T3621] usb 5-1: New USB device found, idVendor=2304, idProduct=021a, bcdDevice=18.29
[  334.002626][ T3621] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.070472][   T21] usb 3-1: new low-speed USB device number 21 using dummy_hcd
[  334.081722][ T3621] usb 5-1: Product: syz
[  334.124652][ T3621] usb 5-1: Manufacturer: syz
[  334.165743][ T3621] usb 5-1: SerialNumber: syz
[  334.276324][ T3621] usb 5-1: config 0 descriptor??
[  334.330855][ T3621] em28xx 5-1:0.0: New device syz syz @ 12 Mbps (2304:021a, interface 0, class 0)
[  334.340571][ T3621] em28xx 5-1:0.0: Device initialization failed.
[  334.346376][ T4671] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.352529][ T3621] em28xx 5-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  334.370388][ T4671] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.406546][ T4671] usb 1-1: config 0 interface 0 has no altsetting 0
[  334.490239][ T4671] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.503651][   T21] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt
[  334.509376][ T4671] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.542392][ T4671] usb 1-1: config 0 interface 0 has no altsetting 0
[  334.549639][ T9018] binder: 9017:9018 ioctl c018620c 0 returned -14
[  334.571901][ T3621] usb 5-1: USB disconnect, device number 16
[  334.633433][ T4671] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 9
[  334.653519][ T4671] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  334.669014][ T4671] usb 1-1: config 0 interface 0 has no altsetting 0
[  334.780313][   T21] usb 3-1: string descriptor 0 read error: -22
[  334.790126][   T21] usb 3-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33
[  334.818684][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.830242][ T4671] usb 1-1: unable to read config index 4 descriptor/all
[  334.837222][ T4671] usb 1-1: can't read configurations, error -71
[  334.841171][   T21] usb 3-1: config 0 descriptor??
[  334.890371][ T9011] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  334.912357][   T21] r8712u: register rtl8712_netdev_ops to netdev_ops
[  334.924990][   T21] usb 3-1: r8712u: USB_SPEED_LOW with 1 endpoints
[  335.250181][   T21] usb 3-1: r8712u: Boot from EFUSE: Autoload Failed
[  335.260323][   T21] usb 3-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  335.953823][   T21] usb 3-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  336.062949][ T9052] x_tables: duplicate underflow at hook 2
[  336.077938][   T21] usb 3-1: USB disconnect, device number 21
[  336.308106][ T9057] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1353'.
[  336.520318][ T9057] device bond1 entered promiscuous mode
[  337.316914][ T9061] device veth3 entered promiscuous mode
[  337.337806][ T9061] bond1: (slave veth3): Enslaving as an active interface with an up link
[  337.371589][ T9064] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1353'.
[  337.414215][ T9064] bond1 (unregistering): (slave veth3): Releasing backup interface
[  337.432792][ T9064] device veth3 left promiscuous mode
[  337.461790][ T9064] bond1 (unregistering): Released all slaves
[  338.080259][ T1075] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  338.431255][ T9096] x_tables: duplicate underflow at hook 1
[  339.150128][ T1075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.172041][ T1075] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  339.195971][ T1075] usb 4-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  339.223771][ T1075] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.277289][ T1075] usb 4-1: config 0 descriptor??
[  339.676816][ T9107] loop4: detected capacity change from 0 to 256
[  339.772078][ T1075] wacom 0003:056A:0016.000C: Unknown device_type for 'HID 056a:0016'. Assuming pen.
[  339.793500][ T1075] wacom 0003:056A:0016.000C: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.3-1/input0
[  339.839377][ T1075] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:056A:0016.000C/input/input16
[  339.982755][ T1075] usb 4-1: USB disconnect, device number 11
[  340.277976][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1369'.
[  340.386580][ T9113] device bond1 entered promiscuous mode
[  340.459035][ T9115] device veth3 entered promiscuous mode
[  340.472051][ T9115] bond1: (slave veth3): Enslaving as an active interface with an up link
[  340.514879][ T9118] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1369'.
[  340.576335][ T9118] bond1 (unregistering): (slave veth3): Releasing backup interface
[  340.621150][ T9118] device veth3 left promiscuous mode
[  340.646442][ T9118] bond1 (unregistering): Released all slaves
[  340.671249][ T9127] loop4: detected capacity change from 0 to 512
[  340.756389][ T9127] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  340.819485][ T9127] EXT4-fs (loop4): 1 truncate cleaned up
[  340.850405][ T9127] EXT4-fs (loop4): mounted filesystem without journal. Opts: resuid=0x0000000000000000,init_itable,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  340.930483][   T26] audit: type=1800 audit(1722476703.783:69): pid=9127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1373" name="bus" dev="loop4" ino=18 res=0 errno=0
[  341.350123][ T3621] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  341.520133][ T1078] usb 5-1: new low-speed USB device number 17 using dummy_hcd
[  341.620190][ T3621] usb 2-1: Using ep0 maxpacket: 16
[  341.740318][ T3621] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  341.763766][ T3621] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  341.900209][ T1078] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8 is Bulk; changing to Interrupt
[  341.992719][ T3621] usb 2-1: New USB device found, idVendor=061d, idProduct=c160, bcdDevice=8f.9a
[  342.023314][ T3621] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.060956][ T3621] usb 2-1: Product: syz
[  342.090194][ T3621] usb 2-1: Manufacturer: syz
[  342.105706][ T3621] usb 2-1: SerialNumber: syz
[  342.125013][ T3621] usb 2-1: config 0 descriptor??
[  342.160269][ T1078] usb 5-1: string descriptor 0 read error: -22
[  342.170311][ T1078] usb 5-1: New USB device found, idVendor=2019, idProduct=4901, bcdDevice=59.33
[  342.181778][ T3621] quatech2 2-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected
[  342.189696][ T1078] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  342.241055][ T1078] usb 5-1: config 0 descriptor??
[  342.260393][ T9149] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  342.282223][ T1078] r8712u: register rtl8712_netdev_ops to netdev_ops
[  342.288877][ T1078] usb 5-1: r8712u: USB_SPEED_LOW with 1 endpoints
[  342.446676][ T3621] usb 2-1: qt2_setup_urbs - submit read urb failed -90
[  342.456491][ T3621] quatech2: probe of 2-1:0.0 failed with error -90
[  342.506739][ T9158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1385'.
[  342.530187][ T1078] usb 5-1: r8712u: Boot from EFUSE: Autoload Failed
[  342.536812][ T1078] usb 5-1: r8712u: MAC Address from efuse = 00:e0:4c:87:00:00
[  342.556771][ T1078] usb 5-1: r8712u: Loading firmware from "rtlwifi/rtl8712u.bin"
[  342.591758][ T1078] usb 5-1: USB disconnect, device number 17
[  342.610074][ T9158] device bond1 entered promiscuous mode
[  342.688782][   T21] usb 2-1: USB disconnect, device number 21
[  342.742206][ T9160] device veth5 entered promiscuous mode
[  342.749016][ T9160] bond1: (slave veth5): Enslaving as an active interface with an up link
[  342.806255][ T9161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1385'.
[  342.831081][ T9161] bond1 (unregistering): (slave veth5): Releasing backup interface
[  342.851386][ T9161] device veth5 left promiscuous mode
[  342.881876][ T9161] bond1 (unregistering): Released all slaves
[  343.136542][ T9165] loop4: detected capacity change from 0 to 1024
[  343.205169][ T9165] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  343.279998][ T9165] EXT4-fs (loop4): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,nomblk_io_submit,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,data_err=abort,,errors=continue. Quota mode: none.
[  343.570145][ T1078] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  343.916981][ T9205] loop4: detected capacity change from 0 to 4096
[  343.950324][ T1078] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  343.980094][ T1078] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  344.039028][ T1078] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  344.109385][ T1078] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  344.152517][ T9205] ntfs3: loop4: Failed to load $MFT.
[  344.173773][ T1078] usb 3-1: config 0 descriptor??
[  344.552624][ T9213] loop4: detected capacity change from 0 to 2048
[  344.617820][ T9213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  344.685232][ T1078] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  344.702941][ T1078] plantronics 0003:047F:FFFF.000D: unknown main item tag 0x0
[  344.733646][ T1078] plantronics 0003:047F:FFFF.000D: No inputs registered, leaving
[  344.769487][ T1078] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  344.798063][ T7408] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  344.815375][ T9226] option changes via remount are deprecated (pid=9225 comm=syz.3.1413)
[  344.823045][ T7408] UDF-fs: error (device loop4): udf_read_inode: (ino 1440) failed !bh
[  345.003420][ T3613] usb 3-1: USB disconnect, device number 22
[  345.176063][ T3659] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.244835][ T3659] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.321897][ T3659] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.353128][ T3659] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.445750][ T3659] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.477189][ T3659] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.630094][ T3659] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  345.660726][ T3659] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.761042][ T9241] lo speed is unknown, defaulting to 1000
[  346.465830][ T9241] chnl_net:caif_netlink_parms(): no params data found
[  346.817363][ T9241] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.849042][ T9241] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.883465][ T9241] device bridge_slave_0 entered promiscuous mode
[  346.944599][ T9241] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.970858][ T9241] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.978940][ T9241] device bridge_slave_1 entered promiscuous mode
[  347.110767][ T9241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  347.169239][ T9241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  347.248648][ T3659] device hsr_slave_0 left promiscuous mode
[  347.255981][ T3659] device hsr_slave_1 left promiscuous mode
[  347.280822][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  347.288290][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_0
[  347.307054][ T3659] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  347.318741][ T3659] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.346906][ T3659] device bridge_slave_1 left promiscuous mode
[  347.370247][ T3659] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.403891][ T3659] device bridge_slave_0 left promiscuous mode
[  347.440223][ T3659] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.493181][ T3659] device veth1_macvtap left promiscuous mode
[  347.499268][ T3659] device veth0_macvtap left promiscuous mode
[  347.520679][ T3659] device veth1_vlan left promiscuous mode
[  347.537156][ T3659] device veth0_vlan left promiscuous mode
[  347.796510][ T1075] Bluetooth: hci0: command 0x0409 tx timeout
[  348.097999][ T3659] team0 (unregistering): Port device team_slave_1 removed
[  348.139876][ T3659] team0 (unregistering): Port device team_slave_0 removed
[  348.169145][ T3659] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  348.209466][ T3659] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  348.462883][ T3659] bond0 (unregistering): Released all slaves
[  348.548894][ T9241] team0: Port device team_slave_0 added
[  348.581074][ T9241] team0: Port device team_slave_1 added
[  348.692890][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_0
[  348.699863][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.726299][ T3621] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  348.734895][ T9241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  348.747882][ T9241] batman_adv: batadv0: Adding interface: batadv_slave_1
[  348.760314][ T9241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  348.813516][ T9241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  349.001793][ T9241] device hsr_slave_0 entered promiscuous mode
[  349.022100][ T9241] device hsr_slave_1 entered promiscuous mode
[  349.044046][ T9241] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  349.057898][ T9241] Cannot create hsr debugfs directory
[  349.150345][ T3621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  349.169340][ T3621] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  349.198666][ T3621] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00
[  349.230052][ T3621] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.259830][ T3621] usb 3-1: config 0 descriptor??
[  349.691107][ T9241] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  349.721044][ T9241] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  349.740975][ T9241] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  349.753511][ T3621] wacom 0003:056A:0016.000E: Unknown device_type for 'HID 056a:0016'. Assuming pen.
[  349.772245][ T9241] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  349.811141][ T3621] wacom 0003:056A:0016.000E: hidraw0: USB HID v0.00 Device [HID 056a:0016] on usb-dummy_hcd.2-1/input0
[  349.831774][ T4671] Bluetooth: hci0: command 0x041b tx timeout
[  349.841646][ T3621] input: Wacom Graphire4 6x8 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0016.000E/input/input19
[  349.974470][ T3621] usb 3-1: USB disconnect, device number 23
[  350.022145][ T9241] 8021q: adding VLAN 0 to HW filter on device bond0
[  350.062768][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  350.086530][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  350.103651][ T9241] 8021q: adding VLAN 0 to HW filter on device team0
[  350.134140][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  350.145284][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  350.164422][   T21] bridge0: port 1(bridge_slave_0) entered blocking state
[  350.171554][   T21] bridge0: port 1(bridge_slave_0) entered forwarding state
[  350.210483][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  350.232957][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  350.253310][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  350.273336][ T1075] bridge0: port 2(bridge_slave_1) entered blocking state
[  350.280467][ T1075] bridge0: port 2(bridge_slave_1) entered forwarding state
[  350.318938][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  350.341029][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  350.380287][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  350.392651][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  350.420933][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  350.429888][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  350.479376][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  350.511557][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  350.519962][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  350.569700][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  350.589242][ T9241] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  350.618006][ T3621] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  350.890764][ T9241] 8021q: adding VLAN 0 to HW filter on device batadv0
[  350.898659][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  350.906742][ T3619] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  351.370460][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  351.389534][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  351.423474][ T9345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.455688][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  351.481285][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  351.497145][ T9241] device veth0_vlan entered promiscuous mode
[  351.519169][ T9241] device veth1_vlan entered promiscuous mode
[  351.555437][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  351.556816][ T9345] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  351.566024][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  351.617822][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  351.687145][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  351.718984][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  351.744285][ T3613] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  351.774377][ T9241] device veth0_macvtap entered promiscuous mode
[  351.807008][ T9241] device veth1_macvtap entered promiscuous mode
[  351.875060][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.910229][ T1078] Bluetooth: hci0: command 0x040f tx timeout
[  351.920211][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  351.967497][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  351.998426][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.036299][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.060101][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.106869][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.137817][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.175673][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  352.215533][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.271535][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_0
[  352.284495][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  352.303853][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  352.338951][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  352.362197][ T5173] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  352.391889][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.430423][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.471496][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.490072][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.528105][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.539004][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.557244][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.569189][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.589558][ T9241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  352.610239][ T9241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  352.668784][ T9241] batman_adv: batadv0: Interface activated: batadv_slave_1
[  352.687877][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  352.703958][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  352.725720][ T9241] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  352.759861][ T9241] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  352.788256][ T9241] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  352.825004][ T9241] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  353.036825][ T9364] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[  353.098571][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1465'.
[  353.148010][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.185843][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.211596][ T5767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  353.232601][ T5767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  353.245360][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  353.279266][ T1078] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  353.516129][ T9382] option changes via remount are deprecated (pid=9376 comm=syz.2.1469)
[  353.985165][ T9388] lo speed is unknown, defaulting to 1000
[  353.994390][ T4671] Bluetooth: hci0: command 0x0419 tx timeout
[  354.085234][ T9377] loop4: detected capacity change from 0 to 32768
[  354.141313][ T1075] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  354.196283][ T5767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.240330][ T5767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.271043][ T9377] XFS (loop4): Mounting V5 Filesystem
[  354.313375][ T5767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.370399][ T5767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.553043][ T9377] XFS (loop4): Ending clean mount
[  354.560328][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.596686][ T1075] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  354.614612][ T1075] usb 1-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  354.634082][ T1075] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.658141][ T1075] usb 1-1: config 0 descriptor??
[  354.672544][ T9241] XFS (loop4): Unmounting Filesystem
[  354.812135][ T5767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  354.837155][ T5767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  354.904767][ T9388] chnl_net:caif_netlink_parms(): no params data found
[  354.969256][ T5767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  355.013650][ T5767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  355.218981][ T9388] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.265143][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.294291][ T9388] device bridge_slave_0 entered promiscuous mode
[  355.345081][ T9388] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.370247][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.407201][ T9388] device bridge_slave_1 entered promiscuous mode
[  355.485724][ T5767] tipc: Left network mode
[  355.487930][ T9388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  355.809152][ T1075] hid-led 0003:27B8:01ED.000F: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.0-1/input0
[  356.047593][ T1078] Bluetooth: hci5: command 0x0409 tx timeout
[  356.054300][ T9388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.068416][ T1075] hid-led 0003:27B8:01ED.000F: ThingM blink(1) initialized
[  356.135958][ T1075] usb 1-1: USB disconnect, device number 19
[  356.157316][ T9430] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0
[  356.258061][ T9425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1484'.
[  356.298075][ T9388] team0: Port device team_slave_0 added
[  356.324831][ T9388] team0: Port device team_slave_1 added
[  356.414120][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_0
[  356.433550][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.474410][ T9435] loop4: detected capacity change from 0 to 32768
[  356.475668][ T9388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  356.500255][   T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  356.520577][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_1
[  356.527542][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  356.534958][ T9435] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1485 (9435)
[  356.588777][ T9388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  356.629793][ T9435] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  356.645812][ T9435] BTRFS info (device loop4): setting nodatacow, compression disabled
[  356.665537][ T9435] BTRFS info (device loop4): force clearing of disk cache
[  356.702591][ T9388] device hsr_slave_0 entered promiscuous mode
[  356.714692][ T9388] device hsr_slave_1 entered promiscuous mode
[  356.816827][ T9388] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  356.825360][ T9435] BTRFS info (device loop4): setting datacow
[  356.841118][ T9435] BTRFS info (device loop4): doing ref verification
[  356.896903][ T9435] BTRFS info (device loop4): turning off barriers
[  356.909308][ T9388] Cannot create hsr debugfs directory
[  356.994680][ T9435] BTRFS info (device loop4): enabling ssd optimizations
[  357.079965][ T9435] BTRFS info (device loop4): using spread ssd allocation scheme
[  357.177036][ T9435] BTRFS info (device loop4): not using ssd optimizations
[  357.294390][ T9435] BTRFS info (device loop4): not using spread ssd allocation scheme
[  357.312864][ T9435] BTRFS info (device loop4): using free space tree
[  357.319479][ T9435] BTRFS info (device loop4): has skinny extents
[  357.403737][ T9452] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1492'.
[  357.522732][   T23] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  357.540966][   T23] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  357.562198][ T9473] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1493'.
[  357.579750][ T9473] netlink: 'syz.0.1493': attribute type 7 has an invalid length.
[  357.587725][   T23] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  357.623941][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  357.641173][ T9473] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  357.649971][ T9473] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  357.658948][ T9473] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  357.667713][ T9473] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  357.679277][ T9435] BTRFS info (device loop4): clearing free space tree
[  357.686421][ T9473] device vxlan0 entered promiscuous mode
[  357.691142][ T9435] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  357.730346][ T9435] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  357.876797][ T9435] BTRFS info (device loop4): creating free space tree
[  357.887509][ T9435] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  357.887542][ T9435] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  358.071889][ T4229] Bluetooth: hci5: command 0x041b tx timeout
[  358.580283][   T23] usb 4-1: string descriptor 0 read error: -22
[  358.782986][   T23] usb 4-1: USB disconnect, device number 12
[  359.015088][ T9487] netlink: 'syz.0.1497': attribute type 7 has an invalid length.
[  359.169273][ T9388] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  359.199546][ T9388] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  359.229530][ T5767] device hsr_slave_0 left promiscuous mode
[  359.239857][ T5767] device hsr_slave_1 left promiscuous mode
[  359.252574][ T5767] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  359.270412][ T5767] batman_adv: batadv0: Removing interface: batadv_slave_0
[  359.310705][ T5767] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  359.318517][ T5767] batman_adv: batadv0: Removing interface: batadv_slave_1
[  359.362163][ T5767] device bridge_slave_1 left promiscuous mode
[  359.368412][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state
[  359.398562][ T9512] loop4: detected capacity change from 0 to 2048
[  359.414528][ T5767] device bridge_slave_0 left promiscuous mode
[  359.425490][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state
[  359.473121][ T5767] device veth1_macvtap left promiscuous mode
[  359.479490][ T5767] device veth0_macvtap left promiscuous mode
[  359.517213][ T5767] device veth1_vlan left promiscuous mode
[  359.570463][ T1293] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  359.731079][ T5767] device veth0_vlan left promiscuous mode
[  359.731615][ T9512] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  359.987559][   T26] audit: type=1800 audit(1722476722.843:70): pid=9512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1504" name="bus" dev="loop4" ino=18 res=0 errno=0
[  360.031850][ T9512] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  360.144479][ T1293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  360.173878][ T1293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  360.191350][ T1293] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  360.206954][ T1293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.217358][ T3613] Bluetooth: hci5: command 0x040f tx timeout
[  360.231984][ T1293] usb 1-1: config 0 descriptor??
[  360.350753][ T5767] team0 (unregistering): Port device team_slave_1 removed
[  360.376944][ T5767] team0 (unregistering): Port device team_slave_0 removed
[  360.395927][ T5767] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  360.419970][ T5767] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  360.480358][   T21] Bluetooth: hci2: command 0x0406 tx timeout
[  360.530440][ T5767] bond0 (unregistering): Released all slaves
[  360.576064][ T9388] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  360.592936][ T9523] tipc: Enabling of bearer <euh:v> rejected, media not registered
[  360.607229][ T9388] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  360.701768][ T1293] cp2112 0003:10C4:EA90.0010: unknown main item tag 0x0
[  360.727390][ T1293] cp2112 0003:10C4:EA90.0010: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.0-1/input0
[  360.854432][ T9388] 8021q: adding VLAN 0 to HW filter on device bond0
[  361.151134][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  361.159967][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  361.160307][ T1293] cp2112 0003:10C4:EA90.0010: Part Number: 0x82 Device Version: 0xFE
[  361.171068][ T9388] 8021q: adding VLAN 0 to HW filter on device team0
[  361.950687][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  361.976923][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  362.000800][   T23] bridge0: port 1(bridge_slave_0) entered blocking state
[  362.007909][   T23] bridge0: port 1(bridge_slave_0) entered forwarding state
[  362.029089][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  362.045729][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  362.057868][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  362.074061][ T4671] bridge0: port 2(bridge_slave_1) entered blocking state
[  362.081253][ T4671] bridge0: port 2(bridge_slave_1) entered forwarding state
[  362.106215][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  362.116425][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  362.137983][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  362.170840][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  362.181299][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  362.198520][ T4671] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  362.238784][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  362.240352][ T9554] loop4: detected capacity change from 0 to 1024
[  362.246977][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  362.290417][ T4230] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  362.302846][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  362.326386][ T9554] hfsplus: request for non-existent node 3 in B*Tree
[  362.326553][   T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  362.349674][ T9554] hfsplus: request for non-existent node 3 in B*Tree
[  362.363428][ T9388] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  362.371074][   T23] Bluetooth: hci5: command 0x0419 tx timeout
[  362.380353][ T4671] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  362.404855][ T9554] 
[  362.407206][ T9554] ======================================================
[  362.414214][ T9554] WARNING: possible circular locking dependency detected
[  362.421232][ T9554] 5.15.164-syzkaller #0 Not tainted
[  362.426417][ T9554] ------------------------------------------------------
[  362.433518][ T9554] syz.4.1518/9554 is trying to acquire lock:
[  362.439514][ T9554] ffff8880216bbdc8 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}, at: hfsplus_get_block+0x37f/0x14e0
[  362.450391][ T9554] 
[  362.450391][ T9554] but task is already holding lock:
[  362.457756][ T9554] ffff888064ce80b0 (&tree->tree_lock#2/2){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  362.467587][ T9554] 
[  362.467587][ T9554] which lock already depends on the new lock.
[  362.467587][ T9554] 
[  362.477971][ T9554] 
[  362.477971][ T9554] the existing dependency chain (in reverse order) is:
[  362.486967][ T9554] 
[  362.486967][ T9554] -> #2 (&tree->tree_lock#2/2){+.+.}-{3:3}:
[  362.495035][ T9554]        lock_acquire+0x1db/0x4f0
[  362.500042][ T9554]        __mutex_lock_common+0x1da/0x25a0
[  362.505743][ T9554]        mutex_lock_nested+0x17/0x20
[  362.511021][ T9554]        hfsplus_find_init+0x146/0x1c0
[  362.516461][ T9554]        hfsplus_attr_exists+0xfb/0x1c0
[  362.521982][ T9554]        __hfsplus_setxattr+0x453/0x22c0
[  362.527591][ T9554]        __vfs_setxattr+0x3e7/0x420
[  362.532769][ T9554]        __vfs_setxattr_noperm+0x12a/0x5e0
[  362.538552][ T9554]        vfs_setxattr+0x21d/0x420
[  362.543551][ T9554]        setxattr+0x27e/0x2e0
[  362.548205][ T9554]        path_setxattr+0x1bc/0x2a0
[  362.553294][ T9554]        __x64_sys_setxattr+0xb7/0xd0
[  362.558645][ T9554]        do_syscall_64+0x3b/0xb0
[  362.563557][ T9554]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  362.569952][ T9554] 
[  362.569952][ T9554] -> #1 (&tree->tree_lock#2){+.+.}-{3:3}:
[  362.577845][ T9554]        lock_acquire+0x1db/0x4f0
[  362.582848][ T9554]        __mutex_lock_common+0x1da/0x25a0
[  362.588558][ T9554]        mutex_lock_nested+0x17/0x20
[  362.593818][ T9554]        hfsplus_file_truncate+0x864/0xb80
[  362.599599][ T9554]        hfsplus_setattr+0x1b9/0x280
[  362.604865][ T9554]        notify_change+0xc6d/0xf50
[  362.609953][ T9554]        do_truncate+0x21c/0x300
[  362.614864][ T9554]        vfs_truncate+0x2dd/0x3a0
[  362.619864][ T9554]        do_sys_truncate+0xda/0x190
[  362.625035][ T9554]        do_syscall_64+0x3b/0xb0
[  362.629950][ T9554]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  362.636342][ T9554] 
[  362.636342][ T9554] -> #0 (&HFSPLUS_I(inode)->extents_lock){+.+.}-{3:3}:
[  362.645348][ T9554]        validate_chain+0x1649/0x5930
[  362.650699][ T9554]        __lock_acquire+0x1295/0x1ff0
[  362.656072][ T9554]        lock_acquire+0x1db/0x4f0
[  362.661072][ T9554]        __mutex_lock_common+0x1da/0x25a0
[  362.666765][ T9554]        mutex_lock_nested+0x17/0x20
[  362.672023][ T9554]        hfsplus_get_block+0x37f/0x14e0
[  362.677549][ T9554]        block_read_full_page+0x2f9/0xde0
[  362.683255][ T9554]        do_read_cache_page+0x752/0x1040
[  362.688891][ T9554]        __hfs_bnode_create+0x4f2/0xbb0
[  362.694430][ T9554]        hfsplus_bnode_find+0x22e/0xe80
[  362.699957][ T9554]        hfsplus_brec_find+0x17f/0x570
[  362.705394][ T9554]        __hfsplus_getxattr+0x360/0xb10
[  362.710918][ T9554]        hfsplus_getxattr+0x98/0xd0
[  362.716092][ T9554]        vfs_getxattr_alloc+0x449/0x590
[  362.721617][ T9554]        ima_read_xattr+0x35/0x60
[  362.726619][ T9554]        process_measurement+0x117d/0x21c0
[  362.732399][ T9554]        ima_file_check+0xf3/0x180
[  362.737491][ T9554]        path_openat+0x2748/0x2f20
[  362.742583][ T9554]        do_filp_open+0x21c/0x460
[  362.747584][ T9554]        do_sys_openat2+0x13b/0x4f0
[  362.752760][ T9554]        __x64_sys_openat+0x243/0x290
[  362.758105][ T9554]        do_syscall_64+0x3b/0xb0
[  362.763023][ T9554]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  362.769439][ T9554] 
[  362.769439][ T9554] other info that might help us debug this:
[  362.769439][ T9554] 
[  362.779640][ T9554] Chain exists of:
[  362.779640][ T9554]   &HFSPLUS_I(inode)->extents_lock --> &tree->tree_lock#2 --> &tree->tree_lock#2/2
[  362.779640][ T9554] 
[  362.794744][ T9554]  Possible unsafe locking scenario:
[  362.794744][ T9554] 
[  362.802166][ T9554]        CPU0                    CPU1
[  362.807503][ T9554]        ----                    ----
[  362.812868][ T9554]   lock(&tree->tree_lock#2/2);
[  362.817704][ T9554]                                lock(&tree->tree_lock#2);
[  362.824897][ T9554]                                lock(&tree->tree_lock#2/2);
[  362.832251][ T9554]   lock(&HFSPLUS_I(inode)->extents_lock);
[  362.838031][ T9554] 
[  362.838031][ T9554]  *** DEADLOCK ***
[  362.838031][ T9554] 
[  362.846147][ T9554] 2 locks held by syz.4.1518/9554:
[  362.851232][ T9554]  #0: ffff888069227520 (&iint_mutex_key[depth]){+.+.}-{3:3}, at: process_measurement+0x7d7/0x21c0
[  362.861909][ T9554]  #1: ffff888064ce80b0 (&tree->tree_lock#2/2){+.+.}-{3:3}, at: hfsplus_find_init+0x146/0x1c0
[  362.872164][ T9554] 
[  362.872164][ T9554] stack backtrace:
[  362.878066][ T9554] CPU: 0 PID: 9554 Comm: syz.4.1518 Not tainted 5.15.164-syzkaller #0
[  362.886210][ T9554] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  362.896256][ T9554] Call Trace:
[  362.899520][ T9554]  <TASK>
[  362.902435][ T9554]  dump_stack_lvl+0x1e3/0x2d0
[  362.907097][ T9554]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  362.912711][ T9554]  ? print_circular_bug+0x12b/0x1a0
[  362.917900][ T9554]  check_noncircular+0x2f8/0x3b0
[  362.922906][ T9554]  ? add_chain_block+0x850/0x850
[  362.927822][ T9554]  ? lockdep_lock+0x11f/0x2a0
[  362.932476][ T9554]  ? __lock_acquire+0x1295/0x1ff0
[  362.937484][ T9554]  ? _find_first_zero_bit+0xcf/0xf0
[  362.942665][ T9554]  validate_chain+0x1649/0x5930
[  362.947501][ T9554]  ? reacquire_held_locks+0x660/0x660
[  362.952853][ T9554]  ? reacquire_held_locks+0x660/0x660
[  362.958202][ T9554]  ? __lock_acquire+0x1ff0/0x1ff0
[  362.963204][ T9554]  ? unwind_next_frame+0x1437/0x1fa0
[  362.968468][ T9554]  ? deref_stack_reg+0xbe/0x110
[  362.973297][ T9554]  ? look_up_lock_class+0x77/0x120
[  362.978388][ T9554]  ? register_lock_class+0x100/0x9a0
[  362.983654][ T9554]  ? is_dynamic_key+0x1f0/0x1f0
[  362.988482][ T9554]  ? validate_chain+0x112/0x5930
[  362.993396][ T9554]  ? mark_lock+0x98/0x340
[  362.997704][ T9554]  __lock_acquire+0x1295/0x1ff0
[  363.002542][ T9554]  lock_acquire+0x1db/0x4f0
[  363.007022][ T9554]  ? hfsplus_get_block+0x37f/0x14e0
[  363.012201][ T9554]  ? read_lock_is_recursive+0x10/0x10
[  363.017551][ T9554]  ? __might_sleep+0xc0/0xc0
[  363.022121][ T9554]  ? mark_lock+0x98/0x340
[  363.026430][ T9554]  __mutex_lock_common+0x1da/0x25a0
[  363.031609][ T9554]  ? hfsplus_get_block+0x37f/0x14e0
[  363.036792][ T9554]  ? hfsplus_get_block+0x37f/0x14e0
[  363.041970][ T9554]  ? mutex_lock_io_nested+0x60/0x60
[  363.047146][ T9554]  ? lockdep_softirqs_off+0x420/0x420
[  363.052498][ T9554]  mutex_lock_nested+0x17/0x20
[  363.057245][ T9554]  hfsplus_get_block+0x37f/0x14e0
[  363.062253][ T9554]  ? hfsplus_ext_write_extent+0x1f0/0x1f0
[  363.067953][ T9554]  ? do_raw_spin_unlock+0x137/0x8b0
[  363.073128][ T9554]  ? create_empty_buffers+0x5c0/0x6d0
[  363.078484][ T9554]  ? create_page_buffers+0x24b/0x330
[  363.083753][ T9554]  block_read_full_page+0x2f9/0xde0
[  363.088935][ T9554]  ? hfsplus_ext_write_extent+0x1f0/0x1f0
[  363.094634][ T9554]  ? block_is_partially_uptodate+0x2c0/0x2c0
[  363.100597][ T9554]  ? hfsplus_writepage+0x30/0x30
[  363.105518][ T9554]  do_read_cache_page+0x752/0x1040
[  363.110701][ T9554]  __hfs_bnode_create+0x4f2/0xbb0
[  363.115707][ T9554]  ? read_lock_is_recursive+0x10/0x10
[  363.121059][ T9554]  ? __lock_acquire+0x1ff0/0x1ff0
[  363.126063][ T9554]  ? hfsplus_bnode_get+0x40/0x40
[  363.130982][ T9554]  ? do_raw_spin_unlock+0x137/0x8b0
[  363.136162][ T9554]  hfsplus_bnode_find+0x22e/0xe80
[  363.141165][ T9554]  ? char2uni+0xe2/0x1c0
[  363.145388][ T9554]  ? hfsplus_bnode_unlink+0x5e0/0x5e0
[  363.150739][ T9554]  ? __mutex_lock_common+0x444/0x25a0
[  363.156093][ T9554]  ? hfsplus_asc2uni+0xa2e/0xbb0
[  363.161011][ T9554]  hfsplus_brec_find+0x17f/0x570
[  363.165938][ T9554]  ? hfs_find_1st_rec_by_cnid+0x3c0/0x3c0
[  363.171654][ T9554]  ? __hfsplus_brec_find+0x880/0x880
[  363.176943][ T9554]  ? hfsplus_find_attr+0x1b2/0x390
[  363.182050][ T9554]  __hfsplus_getxattr+0x360/0xb10
[  363.187071][ T9554]  ? hfsplus_setxattr+0xe0/0xe0
[  363.191913][ T9554]  ? hfsplus_getxattr+0x60/0xd0
[  363.196744][ T9554]  hfsplus_getxattr+0x98/0xd0
[  363.201399][ T9554]  ? hfsplus_initxattrs+0x220/0x220
[  363.206576][ T9554]  vfs_getxattr_alloc+0x449/0x590
[  363.211671][ T9554]  ima_read_xattr+0x35/0x60
[  363.216153][ T9554]  process_measurement+0x117d/0x21c0
[  363.221420][ T9554]  ? ima_file_mmap+0x1c0/0x1c0
[  363.226171][ T9554]  ? apparmor_file_open+0x3e3/0x820
[  363.231348][ T9554]  ? apparmor_task_getsecid+0xb2/0x110
[  363.236784][ T9554]  ima_file_check+0xf3/0x180
[  363.241351][ T9554]  ? do_dentry_open+0xc15/0xfb0
[  363.246180][ T9554]  ? ima_bprm_check+0x2b0/0x2b0
[  363.251009][ T9554]  path_openat+0x2748/0x2f20
[  363.255587][ T9554]  ? do_filp_open+0x460/0x460
[  363.260247][ T9554]  do_filp_open+0x21c/0x460
[  363.264728][ T9554]  ? vfs_tmpfile+0x2e0/0x2e0
[  363.269302][ T9554]  ? _raw_spin_unlock+0x24/0x40
[  363.274132][ T9554]  ? alloc_fd+0x598/0x630
[  363.278442][ T9554]  do_sys_openat2+0x13b/0x4f0
[  363.283099][ T9554]  ? do_sys_open+0x220/0x220
[  363.287671][ T9554]  __x64_sys_openat+0x243/0x290
[  363.292499][ T9554]  ? __ia32_sys_open+0x270/0x270
[  363.297418][ T9554]  ? syscall_enter_from_user_mode+0x2e/0x240
[  363.303376][ T9554]  ? lockdep_hardirqs_on+0x94/0x130
[  363.308554][ T9554]  ? syscall_enter_from_user_mode+0x2e/0x240
[  363.314513][ T9554]  do_syscall_64+0x3b/0xb0
[  363.318909][ T9554]  ? clear_bhb_loop+0x15/0x70
[  363.323564][ T9554]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  363.329447][ T9554] RIP: 0033:0x7f8f992b33b9
[  363.333842][ T9554] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.353433][ T9554] RSP: 002b:00007f8f97732048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  363.361832][ T9554] RAX: ffffffffffffffda RBX: 00007f8f99441f80 RCX: 00007f8f992b33b9
[  363.370044][ T9554] RDX: 000000000000275a RSI: 0000000020000100 RDI: ffffffffffffff9c
[  363.377996][ T9554] RBP: 00007f8f993208e6 R08: 0000000000000000 R09: 0000000000000000
[  363.385945][ T9554] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  363.393902][ T9554] R13: 000000000000000b R14: 00007f8f99441f80 R15: 00007ffdbf92e9f8
[  363.401859][ T9554]  </TASK>
[  363.470058][ T3613] usb 1-1: reset high-speed USB device number 20 using dummy_hcd
[  363.570383][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  363.582219][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  363.603898][ T9388] 8021q: adding VLAN 0 to HW filter on device batadv0
[  363.632303][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  363.651002][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  363.679612][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  363.690272][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  363.698656][ T9388] device veth0_vlan entered promiscuous mode
[  363.715043][ T9388] device veth1_vlan entered promiscuous mode
[  363.732359][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  363.740668][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  363.741398][ T9554] hfsplus: xattr searching failed
[  363.748388][ T1075] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  363.766571][ T9556] hfsplus: xattr searching failed
[  363.773964][   T26] audit: type=1800 audit(1722476726.633:71): pid=9556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1518" name="bus" dev="loop4" ino=1027 res=0 errno=0
[  363.800385][ T4671] usb 4-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config
[  363.800702][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  363.830692][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  363.839159][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  363.870466][ T9388] device veth0_macvtap entered promiscuous mode
[  363.879239][ T9388] device veth1_macvtap entered promiscuous mode
[  363.897574][ T4671] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1
[  363.906930][ T4671] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  363.918026][ T4671] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.932101][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  363.960137][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  363.980150][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.010266][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.022199][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.044957][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.062022][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.072835][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.092358][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  364.122139][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.141228][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_0
[  364.161053][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.180569][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.216668][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.230636][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.252865][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.267235][ T9556] hfsplus: xattr searching failed
[  364.272436][ T9556] hfsplus: extend alloc file! (0,512,366)
[  364.277039][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.290764][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.305066][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.316246][ T9388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  364.329664][ T9388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  364.342588][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_1
[  364.352641][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  364.362020][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  364.371841][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  364.380945][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  364.389662][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  364.400154][ T4671] usb 4-1: string descriptor 0 read error: -22
[  364.400755][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  364.417440][ T9388] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  364.427180][ T9388] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  364.439941][ T9388] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  364.449283][ T9388] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  364.468472][ T1078] usb 1-1: USB disconnect, device number 20
[  364.502875][ T9388] ieee80211 phy45: Selected rate control algorithm 'minstrel_ht'
[  364.524909][ T5767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.536836][ T9388] ieee80211 phy46: Selected rate control algorithm 'minstrel_ht'
[  364.546640][ T5767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.560082][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  364.582411][ T5767] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  364.593110][ T5767] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  364.601388][ T6871] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  364.612961][ T1293] usb 4-1: USB disconnect, device number 13