last executing test programs:

2m31.176780369s ago: executing program 3 (id=4):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)

2m16.020714789s ago: executing program 32 (id=4):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x4011, 0x4)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x4251}, {{0x0, 0x0, &(0x7f0000007040)=[{&(0x7f0000006040)=""/4086, 0x1000}], 0x1}, 0x8000}], 0x3fffffffffffdfc, 0x10002, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xd, 0x20000000ec071, 0xffffffffffffffff, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000180)=0x2, 0x4)

2m5.269487035s ago: executing program 4 (id=148):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4)
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x42}}, 0x10)

2m5.012711594s ago: executing program 4 (id=150):
r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000001300)=ANY=[], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x37, &(0x7f0000000040)=ANY=[])
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read(r2, 0x0, 0x0)

2m1.544845869s ago: executing program 4 (id=170):
r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000096d5c4004233e0269d7010203010902120001000000000904"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000600)={0x24, &(0x7f0000000740)=ANY=[@ANYBLOB="800001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402)
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f00000009c0)={0x0, 0xe, 0x4, 'l\v3n'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x1, 0x7, 0x3, &(0x7f0000000100)={0x3, "537a1468df08000000758bd16868e0bf22c7b844c1b1f10186854fff98d2870c38"}})

1m59.238261023s ago: executing program 4 (id=174):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000400)={[{@fat=@debug}, {@shortname_winnt}, {@shortname_mixed}, {@utf8}, {@uni_xlate}, {@shortname_lower}, {@shortname_mixed}, {@fat=@showexec}, {@utf8no}, {@shortname_win95}, {@fat=@discard}, {@rodir}, {@shortname_win95}, {@shortname_lower}, {@rodir}, {}, {@utf8}, {@rodir}]}, 0x0, 0x2be, &(0x7f0000000840)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002c00)={0x2020}, 0x2020)

1m59.010613138s ago: executing program 4 (id=177):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
write$tun(0xffffffffffffffff, &(0x7f0000000340)={@void, @void, @eth={@empty, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @val={@void, {0x8100, 0x0, 0x0, 0x20}}, {@ipv6={0x86dd, @gre_packet={0x5, 0x6, "60fafc", 0x44, 0x2f, 0xff, @private2, @loopback, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x2}, {0x1}, {}, {0x8, 0x88be, 0x3, {{0x1, 0x1, 0x8, 0x1, 0x1, 0x2, 0x0, 0x3}, 0x1, {0xd}}}, {0x8, 0x22eb, 0x4, {{0x4, 0x2, 0xb2, 0x2, 0x1, 0x2, 0x0, 0xf3}, 0x2, {0xc9e5, 0xa, 0x3, 0x5, 0x0, 0x0, 0x3}}}, {0x8, 0x6558, 0x4}}}}}}}}, 0x7e)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r2, r1, <r3=>0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r2, r3, <r4=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r4, &(0x7f00000002c0)=[{0x1}], 0xdeadbeef, 0x8, 0x2000000000000189})

1m58.419562194s ago: executing program 4 (id=182):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0)

1m57.87771854s ago: executing program 33 (id=182):
r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x0)
fchdir(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000380)='./file1/file0\x00', 0x0, 0x1085408, 0x0)

1m36.172538726s ago: executing program 6 (id=306):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000140)={[{@discard}, {@dioread_lock}, {@test_dummy_encryption}]}, 0xfe, 0x244, &(0x7f0000000400)="$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")
symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181341, 0x84)
symlinkat(&(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x140)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x103500, 0x1)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000006880)=@v1={0x0, @adiantum, 0x2, @desc1})

1m35.456799363s ago: executing program 6 (id=312):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}]}, 0x3, 0x448, &(0x7f0000000780)="$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")
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000080)="0f20c035000000200f22c0b900090000b82f470000ba00000000b9e30a0000b80b000000ba000000000f30c46389224ed502652e46f7beed00000064f3400f09f028860080000066430f3804bc3ded00000047d03d00200000643e420f01c364673e0fc7ae00000000", 0x69}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

1m34.62526065s ago: executing program 6 (id=320):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02})
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0x80})
r2 = socket$netlink(0x10, 0x3, 0x0)
preadv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/6, 0x6}, {&(0x7f0000000100)=""/24, 0x18}], 0x2, 0xe, 0x6)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})

1m33.924160819s ago: executing program 6 (id=326):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000680)='./file0\x00', 0x2148c5, &(0x7f00000002c0)={[{@utf8no}, {@fat=@time_offset={'time_offset', 0x3d, 0x30a}}, {@shortname_mixed}, {@utf8}, {@uni_xlateno}, {@fat=@nfs_nostale_ro}, {@fat=@quiet}, {@uni_xlate}, {@shortname_mixed}, {@uni_xlateno}, {@shortname_lower}, {@shortname_mixed}, {@rodir}, {@utf8}]}, 0x0, 0x2c4, &(0x7f0000000a40)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333406, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005c48, 0x0)
read$FUSE(r0, &(0x7f0000004c40)={0x2020}, 0x2020)

1m33.606828388s ago: executing program 6 (id=327):
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x14, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x42804}, 0x0)

1m33.28881317s ago: executing program 6 (id=330):
unshare(0x22020400)
timer_create(0x3, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x1d0, 0x0, 0x368, 0x368, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x42}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x62, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)

1m32.832698704s ago: executing program 34 (id=330):
unshare(0x22020400)
timer_create(0x3, 0x0, &(0x7f0000000300)=<r0=>0x0)
timer_settime(r0, 0x0, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)
syz_emit_ethernet(0x42, 0x0, 0x0)
fsetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x4a0, 0x1d0, 0x0, 0x368, 0x368, 0x138, 0x408, 0x408, 0x408, 0x408, 0x408, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11, 0x0, 0x42}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00', {}, {}, 0x62, 0x3}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x500)

1m16.173809196s ago: executing program 1 (id=430):
setxattr$system_posix_acl(0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000010005000000000004000100000001000000e4dd8c61e54402"], 0x24, 0x2)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x353, 0x6, 0x88c, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x3, 0xe}, 0x50)
r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7})
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0})
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

1m15.948914281s ago: executing program 1 (id=434):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000006c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$HIDIOCGSTRING(r1, 0x81044804, 0x0)

1m13.136277985s ago: executing program 1 (id=453):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x32cc0000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x600000a, 0x12, r1, 0x0)
getsockopt$inet_tcp_buf(r0, 0x6, 0x13, 0x0, &(0x7f0000000040))

1m11.769667143s ago: executing program 1 (id=462):
mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b)
mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0)
mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0)
mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0)
syz_clone(0xae12e400, 0x0, 0x0, 0x0, 0x0, 0x0)
mount$bpf(0x0, &(0x7f0000000ac0)='./file0/../file0\x00', 0x0, 0x44000, 0x0)

1m11.359224153s ago: executing program 1 (id=468):
r0 = memfd_create(&(0x7f0000000040)='rootmode', 0x0)
mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x0)
r1 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080))
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f00000000c0)={{&(0x7f0000ffa000/0x4000)=nil, 0x4000}, 0x1})
pwritev(r0, &(0x7f0000000100)=[{&(0x7f0000000000)="e3", 0x1}], 0x1, 0x401, 0x8)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa07, &(0x7f0000000280)={{&(0x7f0000ffc000/0x2000)=nil, 0x2000}, 0x1})

1m11.003787374s ago: executing program 1 (id=471):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

1m10.464333695s ago: executing program 35 (id=471):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff)
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

26.588689491s ago: executing program 0 (id=784):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$hpfs(&(0x7f000000a000), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000000)={[{@eas_no}, {@eas_no}, {@case_asis}, {@check_none}]}, 0x1, 0x9e28, &(0x7f000000a040)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x184a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x8cf2826c8227b098, 0x0, {0x0, 0x11}}, 0x20)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x408, 0x1)
getdents(0xffffffffffffffff, 0x0, 0x56)

25.880950502s ago: executing program 0 (id=791):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f00000000c0)=ANY=[@ANYBLOB="0500000000000000711174000000000085100000020000008500f6ff0400000095010000000000009500a50500000000721a87401e3be1df5240f2a906d2ed0159f6383e"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="d1cc67"], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

25.626152464s ago: executing program 0 (id=793):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x258, @loopback, 0x4}], 0x1c)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x4e23, 0x80006, @loopback, 0x3fd}], 0x1c)
setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000080)=0x42, 0x4)
sendto$inet6(r0, &(0x7f0000000240)='S', 0x2a000, 0x40000201, 0x0, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]})
close_range(r1, 0xffffffffffffffff, 0x0)

24.638111853s ago: executing program 0 (id=804):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x2181099, 0x0)
umount2(&(0x7f0000000380)='./file0\x00', 0x0)

24.503741798s ago: executing program 0 (id=808):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000100)={[{@errors_remount}, {@mblk_io_submit}, {@inlinecrypt}, {@test_dummy_encryption_v1}, {@barrier}, {@mblk_io_submit}, {@nogrpid}]}, 0x3, 0x445, &(0x7f0000000800)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x5)

24.06057868s ago: executing program 0 (id=814):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000001300)={0xa, 0x3, 0x10, @local, 0x6}, 0x1c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x3}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)

23.650204146s ago: executing program 36 (id=814):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000001300)={0xa, 0x3, 0x10, @local, 0x6}, 0x1c)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x4100, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3f}}, 0x3}, 0x1c)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7d1}, 0x1c)
bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x4)

6.023309447s ago: executing program 7 (id=942):
socketpair$unix(0x1, 0x3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009)
fallocate(r0, 0x0, 0x1000000, 0x3)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc, 0x2010, r0, 0xffff9000)

5.395681993s ago: executing program 2 (id=949):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x201, 0x0, 0x0)
shutdown(r0, 0x1)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0)=0x9, 0x4)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

5.125215985s ago: executing program 2 (id=951):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x30, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xd}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x20040054)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x3a0, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@unspec=@physdev={{0x68}, {'dummy0\x00', {0xff}, 'macvtap0\x00', {0xff}, 0x0, 0x2}}, @common=@srh1={{0x90}, {0x1, 0x1, 0x0, 0x0, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3a}, @ipv4={'\x00', '\xff\xff', @multicast1}, [0xff000000, 0xffffff00, 0xffffffff, 0xffffffff], [0x0, 0x0, 0x0, 0xffffff00], [0xff, 0xffffffff, 0xff], 0x1, 0x1aeeb7877a132935}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x18, 0x3, 0x2, 0x80000001, '\x00', 'syz1\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)
write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x4, 0x4, 0x3a0, 0xffffffff, 0xf0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x35, {0x3}}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x1, 0x3d, {0x6}}}}, {{@ipv6={@private0, @loopback, [0xff, 0x0, 0xff000000, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'team0\x00', 'batadv_slave_0\x00', {0xff}, {}, 0xff, 0xe7, 0x4, 0x44}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00', 0x0, 0x2, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x400)

4.816471727s ago: executing program 2 (id=953):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000cc0)=ANY=[@ANYBLOB="1201c79f80350010"], 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmmsg$unix(r0, &(0x7f00000bd000), 0x318, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

4.753945954s ago: executing program 7 (id=954):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x103a42, 0x80)
r1 = fanotify_init(0x200, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
fanotify_mark(r1, 0x101, 0x8000011, r2, 0x0)
ftruncate(r0, 0x6000000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x4000)

3.882005304s ago: executing program 9 (id=957):
sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x4000080)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x1000200001ee0000, 0x3})
mmap$KVM_VCPU(&(0x7f0000000000/0xa000)=nil, 0x930, 0x1000001, 0x11, r2, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

2.731012651s ago: executing program 5 (id=961):
r0 = msgget$private(0x0, 0xe8)
r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0)
fstat(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, <r2=>0x0, <r3=>0x0})
setresuid(0x0, r2, r2)
msgrcv(r0, 0x0, 0x0, 0x0, 0x1000)
msgctl$IPC_SET(r0, 0x1, &(0x7f00000001c0)={{0x1, r2, 0x0, r2, r3, 0x0, 0x6e9}, 0x0, 0x0, 0xfffffffffffffff8, 0x3, 0xfffffffffffffffc, 0x8, 0x9, 0x0, 0x0, 0x5ed3})
msgctl$IPC_SET(r0, 0x1, &(0x7f0000000340)={{0x1, 0xee00, 0xee01, 0x0, 0x0, 0x8b, 0x101}, 0x0, 0x0, 0x6, 0xffffffffffffff26, 0x8, 0xde, 0x7, 0xc8f, 0x0, 0x7})

2.41179632s ago: executing program 5 (id=962):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000ac0)={0x2a, 0xffffffff, 0x8000}, 0xc)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}, 0x1}], 0x1, 0x2, 0x0)
connect$qrtr(r0, &(0x7f0000000a80)={0x2a, 0x0, 0x7fff}, 0xc)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x1, 0x4000}, 0xc)
writev(r1, &(0x7f0000000340)=[{&(0x7f0000000080)="fb", 0x1}], 0x1)

2.161173553s ago: executing program 9 (id=965):
mknod$loop(&(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x6, 0xfffe})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0xa9525000)
fcntl$setsig(r0, 0xa, 0x7)
link(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

2.113049728s ago: executing program 5 (id=966):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
r2 = epoll_create1(0x0)
r3 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x4000200a})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000002c0)={0xa0000013})
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000580))

2.047673654s ago: executing program 8 (id=967):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r2, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20)
sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="b0", 0x1}], 0x1}}], 0x2, 0x40040)

1.881070817s ago: executing program 8 (id=968):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000580)='highspeed', 0x9)
socket$key(0xf, 0x3, 0x2)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f00000000c0), 0xffffffffffffffef, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)

1.880949156s ago: executing program 5 (id=969):
unshare(0x64000600)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]})
close_range(r0, 0xffffffffffffffff, 0x200000000000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040))
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.750015806s ago: executing program 8 (id=970):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x2, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000, 0x200000})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x84, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000240)={0x28, 0x1, r2, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000200)})

1.644110983s ago: executing program 2 (id=971):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})
r1 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r1, &(0x7f0000000180)={0xa, 0x3, 0x3, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c)
sendmmsg$unix(r1, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2404c054}}], 0x1, 0x2000c080)
sendmsg(r1, &(0x7f00000000c0)={0x0, 0x33, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x584}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)

1.595939212s ago: executing program 7 (id=972):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5)
syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=<r1=>0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58)
io_setup(0x8, &(0x7f0000000600)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}])
recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0)
shutdown(r0, 0x0)

1.196358218s ago: executing program 2 (id=973):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='syz_tun\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0x10000)
sendfile(r0, r1, 0x0, 0x7ffff004)

1.036053808s ago: executing program 5 (id=974):
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x1c02, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff000060005400000000008000640"], 0x6c}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x8864000000000000)

815.577067ms ago: executing program 7 (id=975):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f0000000740)={0x30, 0x5, 0x0, {0x0, 0x2}}, 0x30)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd\x00')
fchdir(r1)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x42)
rmdir(0x0)

780.962647ms ago: executing program 9 (id=976):
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
write(r0, &(0x7f00000006c0)="2cd889f035a53e14", 0x8)
write$char_usb(r0, &(0x7f0000000480)="1f", 0x1)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x54, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x8], 0x0, 0x0, 0x1}}, 0x40)

621.802397ms ago: executing program 7 (id=977):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000c00)=ANY=[], 0x5, 0x6e7, &(0x7f0000002a00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x81c0, 0x8103)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f00000006c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103)
mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20, 0x0)
creat(&(0x7f0000002280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44)

547.684778ms ago: executing program 9 (id=978):
r0 = socket$kcm(0xa, 0x5, 0x0)
sendmsg$kcm(r0, &(0x7f0000002dc0)={&(0x7f0000001640)=@l2tp6={0xa, 0x0, 0x7fff, @local, 0x8}, 0x80, &(0x7f0000000340)=[{&(0x7f00000003c0)='`', 0x1}], 0x1}, 0x41)
setsockopt$sock_attach_bpf(r0, 0x84, 0x1e, &(0x7f0000000000), 0x4)
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000200)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400060000120800040043000000a80016000a00014006000d3f036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0xc3ff}, 0x0)

442.870734ms ago: executing program 8 (id=979):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="400000001435010026bd0c333c84df250a4022fe", @ANYRES32, @ANYBLOB="140006000000000005"], 0x40}, 0x1, 0x0, 0x0, 0x811}, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000c80)={'batadv_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)=@ipv4_newaddr={0x40, 0x14, 0x509, 0x70bd27, 0x25dfdbfc, {0x2, 0x1f, 0x0, 0xff, r2}, [@IFA_BROADCAST={0x8, 0x4, @rand_addr=0x64010104}, @IFA_FLAGS={0x8, 0x8, 0x100}, @IFA_LOCAL={0x8, 0x2, @multicast2}, @IFA_ADDRESS={0x8, 0x1, @private=0xa010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040014}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800"], 0x18}}, 0x0)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)

236.899201ms ago: executing program 8 (id=980):
bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x2], 0x0, 0x0, 0x1, 0x1}}, 0x40)
write$P9_RSTATu(r0, &(0x7f00000007c0)={0x18f, 0x7d, 0xa, {{0x0, 0x173, 0x3, 0x5, {0x0, 0x1, 0x5}, 0x100000, 0x8, 0x7, 0x2, 0xcb, '\x1a\x8f\xbc\xd2\xf7\t\a\xc6\xb9\xf8\x8d\x00q\x9fI,\x06\xa9\f\xbe\'\xe8\xda\xab,\xbfb\x8dT\xbe\xbfE\x17\x02k\x12\xa4\"X\xa8\xc8/\x19Z\x95\xb2\xd1\xa2\xa9\xfaN\xb9\x81\xd6+O\xd5\x13\xeb\xd6z\xb0\xbd\x19Q\b\xcd\x91\xbcM>\x8en\xde\xd0\bR1^\xd3S\"p\x8c\xdb%]C\xdc\x9fs^\x81\r6\xe4\x0e\xc8\xf9\xe9\xd9\xb1\xaf\xe7\x00[\tou\xa8\x81\x95\x91e\xfd\x8b\xe1\x18\xech*&\tC8|\xe9\xb0\x1c\x87\xf4\xb5\xe3\xa5\xc6V\xda\xf13\x81X\x01p\xed\v\x18\x91\x0e\xd4imb\xaf\xb3m=\xcc\xc2\x7f\xe5\xfd\x7fv\x97\"+\xf6\xfcxP!HG\xb0\xd5M\xc0,\xe8\xdf\x19c\x1e\xee\xa7\'U\x8b\x188\x11^\xd3\xb9\x12.\xb0,\xc0\x88\xf8\x97\xfc', 0x1, '\x00', 0x73, '\x17\xe0_|s/\xec\xcf\x1e|~\xf4*wIX\xbe[_\x12\xd4zZs\x85\xc4/\xa2?\xbc=\x82O\xc7\xf7\xf1\r\xd0\x06\x14\xbb\xf1\xbb\x99\xaa\xdb\xf1\xf0\xe3\xdf\x1c\x16{\"\f\x8c0\xd0I\xff\x02):9\xe7\xa6\x9e~\xa9\xa3\xf7\xaaW)o\x96\x1bm+\xcb\xf1\xbf\x0e\xaa\xd6|\"\xf73r+F\x10\xf2P\xcc\x1f\xd7\x7f\xfc\x0e,x\xe5\x10^\xff\xf9\x12\x00\x00\x00\x00\x00\x00', 0x1, '{'}, 0x7, '\x97\xfe\xef\x85z\x03\x86'}}, 0x18f)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

235.393119ms ago: executing program 9 (id=981):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
shutdown(r0, 0x1)
ppoll(&(0x7f0000000080)=[{r0, 0x9085}], 0x1, 0x0, 0x0, 0x0)

124.571435ms ago: executing program 2 (id=982):
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x40, 0x1, 0x3}, 0x18, 0x0)
landlock_restrict_self(r0, 0x4)
landlock_restrict_self(r0, 0x2)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r2, 0x0)
get_robust_list(r1, 0x0, 0x0)

64.569882ms ago: executing program 9 (id=983):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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")
syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x80, 0x0, &(0x7f0000000140))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8ffff)
syz_mount_image$hfsplus(&(0x7f0000001380), &(0x7f0000000a40)='./file2\x00', 0x800094, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0, @ANYRES64, @ANYRESDEC=0x0, @ANYRES32, @ANYRES64=0x0, @ANYRESOCT=0x0, @ANYRES64], 0x5, 0x686, &(0x7f00000001c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x143041, 0x0)
pwritev2(r1, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)

26.218423ms ago: executing program 7 (id=984):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000a40)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4$alg(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000001000)=[{0x0, 0x0, &(0x7f0000001180)=[{&(0x7f0000001100)="a9", 0x1}], 0x1, 0x0, 0x0, 0x44011}], 0x1, 0x4)
io_setup(0xff, &(0x7f0000000380)=<r2=>0x0)
io_submit(r2, 0x2000000000000225, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0xfffb, r1, &(0x7f0000000340), 0x2d}])

10.292748ms ago: executing program 8 (id=985):
r0 = fsopen(&(0x7f0000001140)='hugetlbfs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x4)
fcntl$lock(r2, 0x6, &(0x7f0000000000)={0x0, 0x2, 0x3a, 0x8, 0xffffffffffffffff})
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))

0s ago: executing program 5 (id=986):
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x37}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="d80000001b00010000000000fdfffffffc000000000000000000000000000000200100000000000000000000000000004e240000000000010000000000000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000ffffffffffffff7ffcffffffffffffff04000000000000000000000000000000fdffffffffffffff00000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000006fcffff00000000000003000000000000000000000000000c0008"], 0xd8}, 0x1, 0x0, 0x0, 0x40044}, 0x20008004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'bond0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'gretap0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="400d0000000000003000128008000100687372002400028008000200", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r1], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x8000)

kernel console output (not intermixed with test programs):

_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   82.047473][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   82.145037][ T5843] hsr_slave_0: entered promiscuous mode
[   82.152071][ T5843] hsr_slave_1: entered promiscuous mode
[   82.159350][ T5843] debugfs: 'hsr0' already exists in 'hsr'
[   82.165188][ T5843] Cannot create hsr debugfs directory
[   82.242864][ T5852] hsr_slave_0: entered promiscuous mode
[   82.250428][ T5852] hsr_slave_1: entered promiscuous mode
[   82.257865][ T5852] debugfs: 'hsr0' already exists in 'hsr'
[   82.264089][ T5852] Cannot create hsr debugfs directory
[   82.290582][ T5844] hsr_slave_0: entered promiscuous mode
[   82.297489][ T5844] hsr_slave_1: entered promiscuous mode
[   82.304430][ T5844] debugfs: 'hsr0' already exists in 'hsr'
[   82.310438][ T5844] Cannot create hsr debugfs directory
[   82.347203][ T5855] hsr_slave_0: entered promiscuous mode
[   82.354279][ T5855] hsr_slave_1: entered promiscuous mode
[   82.361206][ T5855] debugfs: 'hsr0' already exists in 'hsr'
[   82.366954][ T5855] Cannot create hsr debugfs directory
[   83.069683][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   83.084573][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   83.096862][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   83.119603][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   83.191611][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   83.206573][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   83.222587][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   83.234186][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   83.346430][ T5852] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   83.358186][ T5852] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   83.368986][ T5857] Bluetooth: hci1: command tx timeout
[   83.377790][ T5852] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   83.389976][ T5852] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   83.448842][ T5857] Bluetooth: hci4: command tx timeout
[   83.449274][ T5858] Bluetooth: hci2: command tx timeout
[   83.454332][ T5857] Bluetooth: hci0: command tx timeout
[   83.459804][ T5858] Bluetooth: hci3: command tx timeout
[   83.554679][ T5844] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   83.575805][ T5844] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   83.589145][ T5844] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   83.603250][ T5844] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   83.749853][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   83.762074][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   83.775279][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   83.786929][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   83.803400][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.881952][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0
[   83.913284][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   83.965165][   T35] bridge0: port 1(bridge_slave_0) entered blocking state
[   83.972673][   T35] bridge0: port 1(bridge_slave_0) entered forwarding state
[   83.996500][ T5843] 8021q: adding VLAN 0 to HW filter on device team0
[   84.027039][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.034231][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.059743][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.076808][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.084017][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.123234][   T58] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.130392][   T58] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.175483][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.204930][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   84.251087][  T133] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.258219][  T133] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.291536][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.298751][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.324950][ T5844] 8021q: adding VLAN 0 to HW filter on device team0
[   84.394127][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.401308][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.427026][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.434188][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.613593][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0
[   84.790255][ T5855] 8021q: adding VLAN 0 to HW filter on device team0
[   84.853634][   T58] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.860875][   T58] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.930908][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.941160][   T35] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.948385][   T35] bridge0: port 2(bridge_slave_1) entered forwarding state
[   85.052722][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.189734][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.238910][ T5843] veth0_vlan: entered promiscuous mode
[   85.284237][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.330526][ T5843] veth1_vlan: entered promiscuous mode
[   85.392868][ T5845] veth0_vlan: entered promiscuous mode
[   85.448577][ T5858] Bluetooth: hci1: command tx timeout
[   85.488918][ T5852] veth0_vlan: entered promiscuous mode
[   85.502929][ T5845] veth1_vlan: entered promiscuous mode
[   85.528758][   T51] Bluetooth: hci0: command tx timeout
[   85.528789][ T5848] Bluetooth: hci4: command tx timeout
[   85.534407][ T5858] Bluetooth: hci3: command tx timeout
[   85.539698][ T5857] Bluetooth: hci2: command tx timeout
[   85.591109][ T5852] veth1_vlan: entered promiscuous mode
[   85.610941][ T5843] veth0_macvtap: entered promiscuous mode
[   85.623104][ T5844] veth0_vlan: entered promiscuous mode
[   85.642450][ T5843] veth1_macvtap: entered promiscuous mode
[   85.666395][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0
[   85.728106][ T5844] veth1_vlan: entered promiscuous mode
[   85.760239][ T5845] veth0_macvtap: entered promiscuous mode
[   85.781439][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0
[   85.797090][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1
[   85.830398][ T5845] veth1_macvtap: entered promiscuous mode
[   85.873269][ T5852] veth0_macvtap: entered promiscuous mode
[   85.887225][   T35] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   85.900177][   T35] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   85.920804][   T35] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   85.944571][   T35] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   85.966426][ T5852] veth1_macvtap: entered promiscuous mode
[   85.981710][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.049318][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.062793][ T5844] veth0_macvtap: entered promiscuous mode
[   86.099072][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.112607][ T5844] veth1_macvtap: entered promiscuous mode
[   86.135109][   T58] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.144853][   T58] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.168093][   T58] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.177963][   T58] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.196689][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.269640][   T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.279850][   T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.305102][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0
[   86.315606][   T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.326637][   T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.344723][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.353959][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.367439][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1
[   86.478093][ T1004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   86.502694][ T5855] veth0_vlan: entered promiscuous mode
[   86.504099][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.514947][ T1004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   86.517343][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.536267][ T1004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   86.570398][ T3487] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   86.660438][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.669605][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.684889][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.692642][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.723173][ T5843] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   86.760027][ T5855] veth1_vlan: entered promiscuous mode
[   86.829268][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.838995][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.946500][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.956996][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.061780][   T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.112477][   T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.254615][ T5855] veth0_macvtap: entered promiscuous mode
[   87.298178][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.312299][ T5855] veth1_macvtap: entered promiscuous mode
[   87.329658][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.436995][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.472525][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.528006][ T3487] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.537916][ T5857] Bluetooth: hci1: command tx timeout
[   87.555964][ T3487] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.587522][ T3487] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.611009][ T5857] Bluetooth: hci3: command tx timeout
[   87.612915][ T5858] Bluetooth: hci0: command tx timeout
[   87.616526][ T5848] Bluetooth: hci2: command tx timeout
[   87.623384][   T51] Bluetooth: hci4: command tx timeout
[   87.639245][ T5846] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   87.652983][ T3487] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.839214][ T5846] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   87.870297][ T5846] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.900444][ T5846] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   87.925978][ T5846] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.943494][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.975493][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   87.983747][ T5846] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   88.014208][ T5846] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   88.042822][ T5846] usb 3-1: Product: syz
[   88.058030][ T5846] usb 3-1: Manufacturer: syz
[   88.130280][ T5846] cdc_wdm 3-1:1.0: skipping garbage
[   88.137599][ T3487] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.146585][ T5846] cdc_wdm 3-1:1.0: skipping garbage
[   88.162315][ T3487] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.176724][ T5846] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   88.189038][ T5846] cdc_wdm 3-1:1.0: Unknown control protocol
[   88.234356][ T5984] netlink: 172 bytes leftover after parsing attributes in process `syz.0.7'.
[   88.388799][    T9] usb 3-1: USB disconnect, device number 2
[   88.494932][ T5987] evm: overlay not supported
[   88.518908][ T5989] Zero length message leads to an empty skb
[   89.059521][    T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.145499][   T29] audit: type=1326 audit(1773786130.325:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6004 comm="syz.0.14" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0bbb59c799 code=0x0
[   89.262554][    T9] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   89.277355][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.313638][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   89.336052][    T9] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   89.363224][    T9] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   89.395964][    T9] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   89.438610][    T9] usb 3-1: Product: syz
[   89.452298][    T9] usb 3-1: Manufacturer: syz
[   89.493976][    T9] cdc_wdm 3-1:1.0: skipping garbage
[   89.515491][    T9] cdc_wdm 3-1:1.0: skipping garbage
[   89.561461][    T9] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   89.588062][    T9] cdc_wdm 3-1:1.0: Unknown control protocol
[   90.521650][ T6028] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   90.611488][ T6017] mmap: syz.0.17 (6017) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   90.729445][ T6031] loop1: detected capacity change from 0 to 1024
[   90.750465][ T6031] =======================================================
[   90.750465][ T6031] WARNING: The mand mount option has been deprecated and
[   90.750465][ T6031]          and is ignored by this kernel. Remove the mand
[   90.750465][ T6031]          option from the mount to silence this warning.
[   90.750465][ T6031] =======================================================
[   90.832519][ T6031] EXT4-fs: inline encryption not supported
[   90.844513][ T5980] usb 3-1: USB disconnect, device number 3
[   90.999771][ T6031] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   91.036193][ T6031] ext4 filesystem being mounted at /7/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   91.134700][   T29] audit: type=1800 audit(1773786132.315:3): pid=6031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.21" name="file1" dev="loop1" ino=15 res=0 errno=0
[   91.152645][ T6031] EXT4-fs error (device loop1): ext4_map_blocks:821: inode #15: comm syz.1.21: lblock 0 mapped to illegal pblock 0 (length 1)
[   91.225550][ T6031] EXT4-fs error (device loop1): ext4_map_blocks:821: inode #15: comm syz.1.21: lblock 0 mapped to illegal pblock 0 (length 1)
[   91.245275][ T6040] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set
[   91.274130][ T6031] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[   91.316672][ T6031] EXT4-fs (loop1): This should not happen!! Data will be lost
[   91.316672][ T6031] 
[   91.580979][  T133] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 117
[   91.614394][  T133] EXT4-fs (loop1): This should not happen!! Data will be lost
[   91.614394][  T133] 
[   91.680616][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   91.809428][   T10] cfg80211: failed to load regulatory.db
[   92.128402][ T5846] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   92.322493][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   92.348008][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   92.360229][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   92.372424][ T5846] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   92.389595][ T5846] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   92.402615][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.464791][ T5846] usb 2-1: config 0 descriptor??
[   92.483192][ T6054] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.936570][ T5846] plantronics 0003:047F:FFFF.0001: reserved main item tag 0xd
[   92.987104][ T5846] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[   93.792898][ T6088] loop4: detected capacity change from 0 to 4096
[   93.924968][ T6092] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.014065][   T29] audit: type=1800 audit(1773786135.195:4): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.40" name="file1" dev="loop4" ino=15 res=0 errno=0
[   95.013632][    T9] usb 2-1: USB disconnect, device number 2
[   95.983833][ T6117] loop4: detected capacity change from 0 to 256
[   96.001516][ T6117] exfat: Deprecated parameter 'utf8'
[   96.018525][ T6117] exfat: Deprecated parameter 'utf8'
[   96.110823][ T6117] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[   97.489779][ T6135] loop4: detected capacity change from 0 to 32768
[   97.611583][   T29] audit: type=1800 audit(1773786138.795:5): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.57" name="file1" dev="loop4" ino=7 res=0 errno=0
[   97.642516][   T29] audit: type=1800 audit(1773786138.815:6): pid=6155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.57" name="file1" dev="loop4" ino=7 res=0 errno=0
[   97.877301][ T6143] loop1: detected capacity change from 0 to 32768
[   97.993386][ T6143] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   98.221244][ T6143] XFS (loop1): Ending clean mount
[   98.304107][ T6143] XFS (loop1): Quotacheck needed: Please wait.
[   98.449390][ T6143] XFS (loop1): Quotacheck: Done.
[   98.495488][   T29] audit: type=1800 audit(1773786139.675:7): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.61" name="file1" dev="loop1" ino=9286 res=0 errno=0
[   98.873526][ T5843] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   99.211044][ T6176] loop4: detected capacity change from 0 to 512
[   99.248553][ T6176] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   99.353253][ T6176] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e028, mo2=0002]
[   99.400294][ T6176] System zones: 0-2, 18-18, 34-34
[   99.505426][ T6176] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 42 vs 41 free clusters
[   99.588751][    C0] EXT4-fs (loop4): error count since last fsck: 1
[   99.595747][    C0] EXT4-fs (loop4): initial error at time 1773786140: ext4_mb_generate_buddy:1315
[   99.604928][    C0] EXT4-fs (loop4): last error at time 1773786140: ext4_mb_generate_buddy:1315
[   99.619481][ T6176] EXT4-fs (loop4): Remounting filesystem read-only
[   99.631559][ T6176] EXT4-fs (loop4): 1 truncate cleaned up
[   99.642028][ T6176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   99.659698][ T6176] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   99.664868][ T3487] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[   99.703025][ T3487] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   99.716314][ T3487] Quota error (device loop4): write_blk: dquota write failed
[   99.726575][ T3487] Quota error (device loop4): remove_free_dqentry: Can't write block (5) with free entries
[   99.737109][ T3487] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started
[   99.748102][ T3487] Quota error (device loop4): write_blk: dquota write failed
[   99.760312][ T3487] Quota error (device loop4): free_dqentry: Can't move quota data block (5) to free list
[   99.773341][ T6176] v: renamed from ip6_vti0 (while UP)
[   99.780035][ T3487] EXT4-fs (loop4): Quota write (off=8, len=24) cancelled because transaction is not started
[   99.815849][ T3487] Quota error (device loop4): v2_write_file_info: Can't write info structure
[   99.841841][ T3487] Quota error (device loop4): dquot_write_dquot: Can't write quota structure (error -30). Quota may get out of sync!
[  100.061531][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.488368][ T6226] bridge0: entered promiscuous mode
[  102.513215][ T6226] bridge0: entered allmulticast mode
[  102.571676][   T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  102.583511][   T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  102.591906][   T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  102.607885][   T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  102.616394][   T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  103.515284][ T6244] netlink: 'syz.2.90': attribute type 10 has an invalid length.
[  103.861386][ T6238] loop1: detected capacity change from 0 to 32768
[  103.958372][ T6002]  loop1: p1 p3 < >
[  104.024506][ T6238]  loop1: p1 p3 < >
[  104.364377][ T6002] udevd[6002]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  104.378533][ T5906] udevd[5906]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  104.426464][ T6002] udevd[6002]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  104.445183][ T5906] udevd[5906]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  104.503283][ T6251] loop1: detected capacity change from 0 to 8
[  104.571292][ T6251] SQUASHFS error: Failed to read block 0xe000000000001ea: -5
[  104.579336][ T6251] unable to read xattr id index table
[  104.648706][   T51] Bluetooth: hci5: command tx timeout
[  105.657202][ T6244] 8021q: adding VLAN 0 to HW filter on device team0
[  105.666609][ T6244] bond0: (slave team0): Enslaving as an active interface with an up link
[  106.287930][ T6230] chnl_net:caif_netlink_parms(): no params data found
[  106.441958][ T6290] loop1: detected capacity change from 0 to 64
[  106.556575][ T6298] loop2: detected capacity change from 0 to 128
[  106.586198][ T6298] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  106.625700][ T6298] ext4 filesystem being mounted at /28/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  106.668887][ T6230] bridge0: port 1(bridge_slave_0) entered blocking state
[  106.689682][ T6230] bridge0: port 1(bridge_slave_0) entered disabled state
[  106.699183][ T6230] bridge_slave_0: entered allmulticast mode
[  106.719332][ T6230] bridge_slave_0: entered promiscuous mode
[  106.728846][ T5858] Bluetooth: hci5: command tx timeout
[  106.736227][ T6230] bridge0: port 2(bridge_slave_1) entered blocking state
[  106.744537][ T6230] bridge0: port 2(bridge_slave_1) entered disabled state
[  106.752869][ T6230] bridge_slave_1: entered allmulticast mode
[  106.761557][ T6230] bridge_slave_1: entered promiscuous mode
[  106.829003][ T6230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  106.844071][ T6230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  106.968892][ T6230] team0: Port device team_slave_0 added
[  106.987691][ T6230] team0: Port device team_slave_1 added
[  107.022561][ T6298] fscrypt: Adiantum using implementation "adiantum(xchacha12-lib,aes-lib)"
[  107.089307][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.104440][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.160676][ T6230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  107.192114][ T5852] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  107.207550][ T6230] batman_adv: batadv0: Adding interface: batadv_slave_1
[  107.222308][ T6230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  107.278661][ T6230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  107.466196][ T6230] hsr_slave_0: entered promiscuous mode
[  107.478160][ T6230] hsr_slave_1: entered promiscuous mode
[  107.486794][ T6230] debugfs: 'hsr0' already exists in 'hsr'
[  107.493564][ T6230] Cannot create hsr debugfs directory
[  107.929594][   T51] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  107.936465][ T5858] Bluetooth: hci6: command 0x1003 tx timeout
[  108.298609][ T6230] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  108.327690][ T6230] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  108.391926][ T6230] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  108.457349][ T6230] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  108.499582][   T29] kauditd_printk_skb: 1 callbacks suppressed
[  108.499601][   T29] audit: type=1326 audit(1773786149.675:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6339 comm="syz.2.123" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fd1ef596517 code=0x0
[  108.812893][   T51] Bluetooth: hci5: command tx timeout
[  108.814345][ T6230] 8021q: adding VLAN 0 to HW filter on device bond0
[  109.005846][ T6230] 8021q: adding VLAN 0 to HW filter on device team0
[  109.068003][ T3487] bridge0: port 1(bridge_slave_0) entered blocking state
[  109.075262][ T3487] bridge0: port 1(bridge_slave_0) entered forwarding state
[  109.126686][  T133] bridge0: port 2(bridge_slave_1) entered blocking state
[  109.133979][  T133] bridge0: port 2(bridge_slave_1) entered forwarding state
[  109.555763][ T6353] loop0: detected capacity change from 0 to 32768
[  109.626888][ T6365] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  109.655912][ T6353] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  109.785111][   T29] audit: type=1326 audit(1773786150.965:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6372 comm="syz.2.131" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd1ef59c799 code=0x0
[  109.840308][ T6353] XFS (loop0): Ending clean mount
[  109.951632][ T6381] kernel profiling enabled (shift: 0)
[  110.037359][ T6230] 8021q: adding VLAN 0 to HW filter on device batadv0
[  110.073750][ T5844] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  110.790543][ T6230] veth0_vlan: entered promiscuous mode
[  110.809294][ T6402] loop0: detected capacity change from 0 to 128
[  110.842183][ T6230] veth1_vlan: entered promiscuous mode
[  110.866400][ T6402] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  110.888812][ T5846] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  110.890683][   T51] Bluetooth: hci5: command tx timeout
[  110.915036][ T6402] hpfs: filesystem error: improperly stopped
[  110.926672][ T6402] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  110.946449][ T6402] hpfs: You really don't want any checks? You are crazy...
[  110.999339][ T6402] hpfs: Code page index out of array
[  111.021377][ T6402] hpfs: code page support is disabled
[  111.035893][ T6402] hpfs: hpfs_map_4sectors(): unaligned read
[  111.042526][ T6402] hpfs: hpfs_map_4sectors(): unaligned read
[  111.063864][ T6230] veth0_macvtap: entered promiscuous mode
[  111.072114][ T6402] hpfs: filesystem error: unable to find root dir
[  111.085150][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.112288][ T6230] veth1_macvtap: entered promiscuous mode
[  111.118187][ T5846] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.136211][ T5846] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  111.169042][ T5846] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.209073][ T5846] usb 2-1: config 0 descriptor??
[  111.214860][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_0
[  111.276700][ T6230] batman_adv: batadv0: Interface activated: batadv_slave_1
[  111.324901][ T3487] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  111.356042][ T3487] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  111.389641][ T3487] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  111.411732][ T3487] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  111.623484][ T6408] netlink: 'syz.0.142': attribute type 5 has an invalid length.
[  111.745445][ T3487] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.781669][ T3487] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  111.924411][  T133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  111.956121][  T133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  112.048706][ T5846] hid-led 0003:27B8:01ED.0002: probe with driver hid-led failed with error -71
[  112.117272][ T5846] usb 2-1: USB disconnect, device number 3
[  113.288785][ T5905] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  113.469901][ T5905] usb 2-1: Using ep0 maxpacket: 8
[  113.487204][ T5905] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.498544][ T5905] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  113.518458][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.554787][ T5905] usb 2-1: config 0 descriptor??
[  113.569104][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  113.602010][ T5905] gspca_main: vc032x-2.14.0 probing 046d:0892
[  113.759445][   T24] usb 5-1: Using ep0 maxpacket: 32
[  113.774494][   T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  113.798729][   T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  113.832014][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  113.861039][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  113.887327][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  113.939747][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  114.075736][   T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  114.167291][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.334216][   T24] usb 5-1: config 0 descriptor??
[  114.429341][ T6474] trusted_key: syz.2.155 sent an empty control message without MSG_MORE.
[  114.624646][   T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  114.663597][ T6478] capability: warning: `syz.5.156' uses 32-bit capabilities (legacy support in use)
[  114.703870][ T6480] kvm: emulating exchange as write
[  114.727772][   T24] usb 5-1: USB disconnect, device number 2
[  114.797827][   T24] usblp0: removed
[  115.051837][ T5905] gspca_vc032x: reg_w err -71
[  115.067815][ T5905] vc032x 2-1:0.0: probe with driver vc032x failed with error -71
[  115.103130][ T5905] usb 2-1: USB disconnect, device number 4
[  115.190155][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  115.359107][   T24] usb 5-1: Using ep0 maxpacket: 32
[  115.383733][   T24] usb 5-1: config index 0 descriptor too short (expected 29220, got 36)
[  115.413528][   T24] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  115.433736][   T24] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81
[  115.462264][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  115.489212][   T24] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  115.522977][   T24] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  115.561570][   T24] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  115.580482][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.639719][   T24] usb 5-1: config 0 descriptor??
[  115.883989][   T24] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  116.122157][ T5905] usb 5-1: USB disconnect, device number 3
[  116.170458][ T5905] usblp0: removed
[  116.896877][ T6498] loop0: detected capacity change from 0 to 32768
[  117.066314][ T6498] JBD2: Ignoring recovery information on journal
[  117.099478][ T5905] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  117.300720][ T6498] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  117.324691][ T5905] usb 5-1: New USB device found, idVendor=2304, idProduct=023e, bcdDevice=d7.69
[  117.345084][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.354790][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  117.376751][ T5905] usb 5-1: Product: syz
[  117.387124][ T5905] usb 5-1: Manufacturer: syz
[  117.395924][ T5905] usb 5-1: SerialNumber: syz
[  117.422026][ T5905] usb 5-1: config 0 descriptor??
[  117.440490][ T5905] hub 5-1:0.0: bad descriptor, ignoring hub
[  117.457803][ T5905] hub 5-1:0.0: probe with driver hub failed with error -5
[  117.529477][   T24] usb 2-1: Using ep0 maxpacket: 8
[  117.538677][   T24] usb 2-1: config 0 has no interfaces?
[  117.545759][   T24] usb 2-1: config 0 has no interfaces?
[  117.552851][   T24] usb 2-1: config 0 has no interfaces?
[  117.569991][   T24] usb 2-1: config 0 has no interfaces?
[  117.575719][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=08b3, bcdDevice=6d.2a
[  117.595117][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.621903][   T24] usb 2-1: config 0 descriptor??
[  117.649349][ T5905] dvb-usb: found a 'Pinnacle PCTV Hybrid Stick Solo' in warm state.
[  117.667256][ T6513] loop2: detected capacity change from 0 to 32768
[  117.736361][ T6513] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  117.750734][ T5905] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  117.770561][ T5905] dvbdev: DVB: registering new adapter (Pinnacle PCTV Hybrid Stick Solo)
[  117.780306][ T5905] usb 5-1: media controller created
[  117.805537][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  117.876587][ T6513] XFS (loop2): Ending clean mount
[  117.921819][ T6513] XFS (loop2): Quotacheck needed: Please wait.
[  118.094274][ T6513] XFS (loop2): Quotacheck: Done.
[  118.138459][ T5844] ocfs2: Unmounting device (7,0) on (node local)
[  118.141465][ T5905] DVB: Unable to find symbol dib7000p_attach()
[  118.168638][ T5905] dvb-usb: no frontend was attached by 'Pinnacle PCTV Hybrid Stick Solo'
[  118.366961][ T5905] rc_core: IR keymap rc-dib0700-rc5 not found
[  118.392296][ T5905] Registered IR keymap rc-empty
[  118.422682][ T5905] dvb-usb: could not initialize remote control.
[  118.456225][ T5905] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully initialized and connected.
[  118.475858][ T5852] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  118.512667][ T5905] usb 5-1: USB disconnect, device number 4
[  118.719036][   T24] usb 2-1: USB disconnect, device number 5
[  118.809816][ T5905] dvb-usb: Pinnacle PCTV Hybrid Stick Solo successfully deinitialized and disconnected.
[  119.105970][ T6542] loop4: detected capacity change from 0 to 128
[  120.256277][  T133] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.363850][  T133] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.541818][  T133] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.614870][ T6560] netlink: 24 bytes leftover after parsing attributes in process `syz.1.179'.
[  120.783382][ T6573] xt_hashlimit: max too large, truncated to 1048576
[  120.826174][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  120.837130][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  120.846916][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  120.856659][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  120.864752][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  120.869434][ T6573] xt_hashlimit: Unknown mode mask 20000, kernel too old?
[  120.887593][  T133] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.868175][  T133] bridge_slave_1: left allmulticast mode
[  121.882994][  T133] bridge_slave_1: left promiscuous mode
[  121.897423][  T133] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.939446][  T133] bridge_slave_0: left allmulticast mode
[  121.969154][  T133] bridge_slave_0: left promiscuous mode
[  121.989978][  T133] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.387063][  T133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  122.414884][  T133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  122.432033][  T133] bond0 (unregistering): Released all slaves
[  122.480323][ T6605] loop2: detected capacity change from 0 to 32768
[  122.543977][ T6605] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.195 (6605)
[  122.635449][ T6605] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  122.647386][ T6605] BTRFS info (device loop2): using sha256 checksum algorithm
[  122.905162][ T6605] BTRFS info (device loop2): rebuilding free space tree
[  122.968901][   T51] Bluetooth: hci3: command tx timeout
[  123.044923][ T6605] BTRFS info (device loop2): enabling ssd optimizations
[  123.052414][ T6605] BTRFS info (device loop2): using spread ssd allocation scheme
[  123.060876][ T5905] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  123.070771][ T6605] BTRFS info (device loop2): turning on async discard
[  123.090816][ T6605] BTRFS info (device loop2): enabling free space tree
[  123.104620][ T6605] BTRFS info (device loop2): force clearing of disk cache
[  123.253049][ T5905] usb 1-1: unable to read config index 0 descriptor/start: -71
[  123.274576][ T5905] usb 1-1: can't read configurations, error -71
[  123.288187][ T6605] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000)
[  123.577311][  T133] hsr_slave_0: left promiscuous mode
[  123.612629][  T133] hsr_slave_1: left promiscuous mode
[  123.630835][  T133] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.652892][  T133] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.683002][  T133] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.699962][  T133] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.811769][  T133] veth1_macvtap: left promiscuous mode
[  123.825903][ T5852] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.831564][  T133] veth0_macvtap: left promiscuous mode
[  123.894151][  T133] veth1_vlan: left promiscuous mode
[  123.920477][  T133] veth0_vlan: left promiscuous mode
[  125.050261][   T51] Bluetooth: hci3: command tx timeout
[  125.673656][ T6680] loop2: detected capacity change from 0 to 512
[  125.753530][  T133] team0 (unregistering): Port device team_slave_1 removed
[  125.786137][ T6680] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.212: invalid indirect mapped block 256 (level 2)
[  125.815072][  T133] team0 (unregistering): Port device team_slave_0 removed
[  125.832228][ T6680] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  125.838313][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  125.853968][    C1] EXT4-fs (loop2): initial error at time 1773786167: ext4_free_branches:1023: inode 11
[  125.863710][    C1] EXT4-fs (loop2): last error at time 1773786167: ext4_free_branches:1023: inode 11
[  125.888870][ T6680] EXT4-fs (loop2): 2 truncates cleaned up
[  125.908609][ T6680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.934677][   T29] audit: type=1800 audit(1773786167.115:10): pid=6680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.212" name="file1" dev="loop2" ino=15 res=0 errno=0
[  125.952882][ T6680] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.212: bg 0: block 5: invalid block bitmap
[  125.971591][ T6680] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  125.984008][ T6680] EXT4-fs (loop2): This should not happen!! Data will be lost
[  125.984008][ T6680] 
[  125.993754][ T6680] EXT4-fs (loop2): Total free blocks count 0
[  126.000871][ T6680] EXT4-fs (loop2): Free/Dirty block details
[  126.008885][ T6680] EXT4-fs (loop2): free_blocks=0
[  126.013897][ T6680] EXT4-fs (loop2): dirty_blocks=4
[  126.019274][ T6680] EXT4-fs (loop2): Block reservation details
[  126.025287][ T6680] EXT4-fs (loop2): i_reserved_data_blocks=4
[  126.074132][ T5852] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  126.264151][ T6575] chnl_net:caif_netlink_parms(): no params data found
[  126.426712][ T6692] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[  126.501818][ T6692] erspan0: entered promiscuous mode
[  126.507393][ T6692] macvtap1: entered promiscuous mode
[  126.520444][ T6692] macvtap1: entered allmulticast mode
[  126.525903][ T6692] erspan0: entered allmulticast mode
[  126.593005][ T6695] erspan0: left allmulticast mode
[  126.614450][ T6695] erspan0: left promiscuous mode
[  126.646791][ T6695] macvtap1: left promiscuous mode
[  126.664288][ T6695] macvtap1: left allmulticast mode
[  127.129449][   T51] Bluetooth: hci3: command tx timeout
[  127.255272][ T6694] loop5: detected capacity change from 0 to 32768
[  127.357587][ T6694] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  127.506969][ T6694] XFS (loop5): Ending clean mount
[  127.575395][ T6694] XFS (loop5): Quotacheck needed: Please wait.
[  127.638153][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.684374][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.718191][ T6575] bridge_slave_0: entered allmulticast mode
[  127.755751][ T6575] bridge_slave_0: entered promiscuous mode
[  127.810937][ T6694] XFS (loop5): Quotacheck: Done.
[  127.817934][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.843741][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.865462][ T6575] bridge_slave_1: entered allmulticast mode
[  127.897384][ T6575] bridge_slave_1: entered promiscuous mode
[  127.943782][   T29] audit: type=1800 audit(1773786169.125:11): pid=6734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.217" name="file1" dev="loop5" ino=4428 res=0 errno=0
[  128.096934][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.145534][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.333745][ T6230] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.460471][ T6575] team0: Port device team_slave_0 added
[  128.510459][ T6575] team0: Port device team_slave_1 added
[  129.008101][   T29] audit: type=1326 audit(1773786170.175:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz.5.227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f007ab9c799 code=0x0
[  129.209810][   T51] Bluetooth: hci3: command tx timeout
[  129.242332][ T6745] loop2: detected capacity change from 0 to 32768
[  129.271074][ T6745] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.228 (6745)
[  129.566985][ T6745] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.587622][ T6745] BTRFS info (device loop2): using crc32c checksum algorithm
[  129.754222][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  129.777631][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  129.862355][ T6745] BTRFS info (device loop2): enabling ssd optimizations
[  129.905935][ T6745] BTRFS info (device loop2): turning on flush-on-commit
[  129.915092][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.960074][ T6745] BTRFS info (device loop2): enabling free space tree
[  129.987371][ T6745] BTRFS info (device loop2): enabling auto defrag
[  130.024529][ T6745] BTRFS info (device loop2): use lzo compression, level 1
[  130.046821][ T6745] BTRFS info (device loop2): max_inline set to 4096
[  130.151868][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.207504][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  130.297840][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.622998][ T6575] hsr_slave_0: entered promiscuous mode
[  130.687266][ T6575] hsr_slave_1: entered promiscuous mode
[  130.716803][ T6575] debugfs: 'hsr0' already exists in 'hsr'
[  130.744751][ T6575] Cannot create hsr debugfs directory
[  130.995210][ T5852] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.472363][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.238'.
[  131.500478][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.238'.
[  131.645656][ T1018] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  131.646234][ T6802] netlink: 12 bytes leftover after parsing attributes in process `syz.5.238'.
[  131.666433][ T6802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.238'.
[  131.676381][ T1018] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  131.695625][ T1018] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  131.729709][ T1018] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.920809][ T6815] netlink: 'syz.0.241': attribute type 1 has an invalid length.
[  132.098093][ T6815] 8021q: adding VLAN 0 to HW filter on device bond1
[  132.169505][ T6822] bond1: (slave dummy0): making interface the new active one
[  132.200482][ T6822] bond1: (slave dummy0): Enslaving as an active interface with an up link
[  132.278491][   T10] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  132.314968][ T6575] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  132.358861][ T6575] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  132.414387][ T6575] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  132.452158][ T6575] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  132.473771][   T10] usb 3-1: Using ep0 maxpacket: 16
[  132.488001][   T10] usb 3-1: config index 0 descriptor too short (expected 12306, got 18)
[  132.508503][   T10] usb 3-1: config 55 has too many interfaces: 49, using maximum allowed: 32
[  132.517301][   T10] usb 3-1: config 55 has an invalid descriptor of length 55, skipping remainder of the config
[  132.542184][   T10] usb 3-1: config 55 has 0 interfaces, different from the descriptor's value: 49
[  132.570731][   T10] usb 3-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4
[  132.610596][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.639394][   T10] usb 3-1: Product: syz
[  132.653483][   T10] usb 3-1: Manufacturer: syz
[  132.670187][   T10] usb 3-1: SerialNumber: syz
[  132.739361][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  132.749558][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  132.989583][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.073811][ T6575] 8021q: adding VLAN 0 to HW filter on device team0
[  133.113620][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.120926][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  133.161959][   T10] usb 3-1: USB disconnect, device number 4
[  133.229648][ T1018] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.236919][ T1018] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.953742][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  134.888037][ T6575] veth0_vlan: entered promiscuous mode
[  134.923918][ T6898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.257'.
[  134.937756][ T6575] veth1_vlan: entered promiscuous mode
[  135.136004][ T6898] bridge1: entered promiscuous mode
[  135.147012][ T6898] bridge1: left promiscuous mode
[  135.246630][ T6900] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  135.317618][ T6575] veth0_macvtap: entered promiscuous mode
[  135.360493][ T6575] veth1_macvtap: entered promiscuous mode
[  135.404206][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.260'.
[  135.485869][ T6906] netlink: 4 bytes leftover after parsing attributes in process `syz.5.260'.
[  135.508456][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.592038][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.672845][   T58] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.703942][ T3529] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.744135][ T3529] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.785555][ T3529] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  136.648026][ T6463] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.681335][ T6463] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.757906][ T6921] loop5: detected capacity change from 0 to 32768
[  136.798755][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  136.825613][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  136.852457][ T6921] OCFS2: ERROR (device loop5): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode 72: suballoc slot 44543
[  136.879827][ T6921] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  136.942915][ T6921] OCFS2: File system is now read-only.
[  136.991922][ T6921] (syz.5.263,6921,1):ocfs2_read_locked_inode:599 ERROR: status = -30
[  137.021853][ T6921] (syz.5.263,6921,0):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  137.049337][ T6921] (syz.5.263,6921,0):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=7, slot=0
[  137.098093][ T6921] (syz.5.263,6921,0):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  137.118360][ T6921] (syz.5.263,6921,0):ocfs2_mount_volume:1758 ERROR: status = -30
[  137.156459][ T6921] (syz.5.263,6921,0):ocfs2_fill_super:1177 ERROR: status = -30
[  137.299643][ T6938] loop1: detected capacity change from 0 to 32768
[  137.336750][ T6938] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.268 (6938)
[  137.380920][ T5936] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  137.439270][ T6938] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.494109][ T6938] BTRFS info (device loop1): using crc32c checksum algorithm
[  137.583705][ T5936] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  137.635720][ T5936] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  137.699172][ T6938] BTRFS info (device loop1): enabling ssd optimizations
[  137.708840][ T5936] usb 1-1: config 0 has no interface number 0
[  137.748411][ T6938] BTRFS info (device loop1): turning on async discard
[  137.776765][ T6938] BTRFS info (device loop1): enabling free space tree
[  137.787293][ T5936] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  137.806475][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.833133][ T5936] usb 1-1: Product: syz
[  137.847703][ T5936] usb 1-1: Manufacturer: syz
[  137.864664][ T5936] usb 1-1: SerialNumber: syz
[  137.893418][ T5936] usb 1-1: config 0 descriptor??
[  137.939550][ T5936] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22
[  138.162675][ T5936] usb 1-1: USB disconnect, device number 4
[  138.726878][ T6977] loop6: detected capacity change from 0 to 256
[  138.759673][ T5843] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.953002][ T6977] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x1d73664b, utbl_chksum : 0xe619d30d)
[  139.261729][ T6983] loop5: detected capacity change from 0 to 1
[  139.304362][ T6983] ldm_validate_privheads(): Disk read failed.
[  139.343895][ T6983] Dev loop5: unable to read RDB block 1
[  139.366516][ T6983]  loop5: AHDI p2 p3
[  139.392934][ T6983] loop5: partition table partially beyond EOD, truncated
[  139.440855][ T6983] loop5: p3 start 335544320 is beyond EOD, truncated
[  139.875921][ T6995] Illegal XDP return value 51 on prog  (id 28) dev syz_tun, expect packet loss!
[  140.055785][ T6981] loop5: detected capacity change from 0 to 32768
[  140.096597][ T6981] (syz.5.279,6981,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  140.148130][ T6981] (syz.5.279,6981,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  140.244785][ T6981] JBD2: Ignoring recovery information on journal
[  140.398479][ T7007] geneve2: entered promiscuous mode
[  140.438394][ T6981] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  141.347822][ T6230] ocfs2: Unmounting device (7,5) on (node local)
[  142.232093][ T7055] loop6: detected capacity change from 0 to 128
[  142.274871][ T7058] loop1: detected capacity change from 0 to 512
[  142.293106][ T7055] EXT4-fs (loop6): Test dummy encryption mode enabled
[  142.306295][ T7058] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  142.361482][ T7058] EXT4-fs (loop1): 1 truncate cleaned up
[  142.396403][ T7055] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.431422][ T7055] ext4 filesystem being mounted at /13/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  142.474959][ T7058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.529139][ T7055] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  142.628769][ T7065] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  142.644137][ T7064] bond1: (slave dummy0): Releasing active interface
[  142.714479][ T7072] fuse: Bad value for 'fd'
[  142.741875][   T29] audit: type=1800 audit(1773786183.915:13): pid=7068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.307" name="file1" dev="loop1" ino=13 res=0 errno=0
[  142.787212][ T7064] bridge_slave_0: left allmulticast mode
[  142.801387][ T7064] bridge_slave_0: left promiscuous mode
[  142.819470][ T7064] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.849027][ T7064] bridge_slave_1: left allmulticast mode
[  142.869503][ T7064] bridge_slave_1: left promiscuous mode
[  142.881468][ T7064] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.892749][ T6575] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  142.926153][ T7064] bond0: (slave bond_slave_0): Releasing backup interface
[  142.982317][ T7064] bond0: (slave bond_slave_1): Releasing backup interface
[  143.061317][ T7077] loop6: detected capacity change from 0 to 512
[  143.071950][ T7064] team0: Port device team_slave_0 removed
[  143.086102][ T7077] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  143.114920][ T7079] 9p: Bad value for 'wfdno'
[  143.126504][ T7077] EXT4-fs error (device loop6): ext4_iget_extra_inode:5028: inode #15: comm syz.6.312: corrupted in-inode xattr: invalid ea_ino
[  143.143880][ T7064] team0: Port device team_slave_1 removed
[  143.163195][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.189727][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.196778][ T7077] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  143.198910][    C0] EXT4-fs (loop6): initial error at time 1773786184: ext4_iget_extra_inode:5028: inode 15
[  143.218074][    C0] EXT4-fs (loop6): last error at time 1773786184: ext4_iget_extra_inode:5028: inode 15
[  143.235810][ T7077] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.312: couldn't read orphan inode 15 (err -117)
[  143.255081][ T7064] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.262779][ T7064] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.264629][ T7077] loop6: lost filesystem error report for type 5 error -117
[  143.275339][ T7064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check.
[  143.324301][ T7077] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.465516][ T5843] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.645369][ T7087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.317'.
[  143.681653][ T6575] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.468741][ T7113] loop6: detected capacity change from 0 to 128
[  144.503078][ T7113] FAT-fs (loop6): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  145.534757][ T7123] netlink: 'syz.0.332': attribute type 39 has an invalid length.
[  145.831307][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  145.860225][ T5858] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  145.870744][ T5858] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  145.883534][ T5858] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  145.893294][ T5858] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  146.382909][ T7146] loop0: detected capacity change from 0 to 128
[  146.466852][ T7146] EXT4-fs (loop0): Test dummy encryption mode enabled
[  146.557834][ T7146] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  146.658482][ T7146] ext4 filesystem being mounted at /80/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  146.946676][ T5844] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.031472][ T7126] chnl_net:caif_netlink_parms(): no params data found
[  147.188063][ T7172] netlink: 165240 bytes leftover after parsing attributes in process `syz.0.340'.
[  147.421016][ T7126] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.428648][ T7126] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.436059][ T7126] bridge_slave_0: entered allmulticast mode
[  147.445448][ T7126] bridge_slave_0: entered promiscuous mode
[  147.468621][ T7126] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.476099][ T7126] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.483563][ T7126] bridge_slave_1: entered allmulticast mode
[  147.494349][ T7126] bridge_slave_1: entered promiscuous mode
[  147.543284][ T7126] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  147.558642][ T7126] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  147.650484][ T7126] team0: Port device team_slave_0 added
[  147.684820][ T7126] team0: Port device team_slave_1 added
[  147.773475][ T7189] process 'syz.0.344' launched '/dev/fd/4' with NULL argv: empty string added
[  147.890049][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_0
[  147.911812][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  147.938872][   T51] Bluetooth: hci3: command tx timeout
[  148.006586][ T7126] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  148.044214][ T7126] batman_adv: batadv0: Adding interface: batadv_slave_1
[  148.070224][ T7126] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  148.191436][ T7126] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.517171][ T7126] hsr_slave_0: entered promiscuous mode
[  148.540730][ T7126] hsr_slave_1: entered promiscuous mode
[  148.571493][ T7126] debugfs: 'hsr0' already exists in 'hsr'
[  148.583720][ T7126] Cannot create hsr debugfs directory
[  149.952980][ T7126] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  149.992952][ T7126] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  150.012008][   T51] Bluetooth: hci3: command tx timeout
[  150.071217][ T7126] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  150.123676][ T7126] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  150.596059][ T7126] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.734874][ T7126] 8021q: adding VLAN 0 to HW filter on device team0
[  150.801374][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.808617][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.904969][ T3569] bridge0: port 2(bridge_slave_1) entered blocking state
[  150.912237][ T3569] bridge0: port 2(bridge_slave_1) entered forwarding state
[  150.944516][ T5905] IPVS: starting estimator thread 0...
[  151.063904][ T7269] IPVS: using max 28 ests per chain, 67200 per kthread
[  151.877183][ T7126] 8021q: adding VLAN 0 to HW filter on device batadv0
[  152.088374][   T51] Bluetooth: hci3: command tx timeout
[  152.438343][    T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  152.504554][ T7256] loop1: detected capacity change from 0 to 32768
[  152.638921][    T9] usb 1-1: Using ep0 maxpacket: 16
[  152.659151][    T9] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.699365][    T9] usb 1-1: config 0 interface 0 has no altsetting 0
[  152.706121][ T7256] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.735469][ T7126] veth0_vlan: entered promiscuous mode
[  152.765843][    T9] usb 1-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  152.797279][ T7126] veth1_vlan: entered promiscuous mode
[  152.819789][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.840176][    T9] usb 1-1: Product: syz
[  152.849586][ T7256] XFS (loop1): Ending clean mount
[  152.854818][    T9] usb 1-1: Manufacturer: syz
[  152.864342][    T9] usb 1-1: SerialNumber: syz
[  152.875065][    T9] usb 1-1: config 0 descriptor??
[  153.049115][ T7126] veth0_macvtap: entered promiscuous mode
[  153.104598][ T7126] veth1_macvtap: entered promiscuous mode
[  153.152846][ T5843] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  153.201921][    T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7
[  153.247358][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_0
[  153.278437][ T7126] batman_adv: batadv0: Interface activated: batadv_slave_1
[  153.361258][ T3529] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  153.386312][ T3529] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  153.430941][ T3529] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  153.468410][ T3529] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  153.590397][    T9] rc_core: IR keymap rc-imon-pad not found
[  153.620190][    T9] Registered IR keymap rc-empty
[  153.648701][    T9] imon 1-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  153.735892][    T9] imon 1-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  153.817981][    T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  153.870661][    T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8
[  153.884763][  T133] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  153.905573][  T133] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  153.926839][    T9] imon 1-1:0.0: iMON device (15c2:0041, intf0) on usb<1:5> initialized
[  154.069831][ T3529] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  154.109507][ T3529] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  154.178478][   T51] Bluetooth: hci3: command tx timeout
[  154.255435][    C0] imon 1-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  154.261566][   T24] usb 1-1: USB disconnect, device number 5
[  154.565393][ T5914] IPVS: starting estimator thread 0...
[  154.582031][ T7315] IPVS: set_ctl: invalid protocol: 29 10.1.1.1:20001
[  154.609483][ T7315] IPVS: lblc: FWM 3 0x00000003 - no destination available
[  154.718668][ T7319] IPVS: using max 27 ests per chain, 64800 per kthread
[  155.031989][    T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  155.212887][    T9] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  158.378402][  T992] usb 8-1: new low-speed USB device number 2 using dummy_hcd
[  158.621067][  T992] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  158.630661][  T992] usb 8-1: config 179 has no interface number 0
[  158.645102][  T992] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  158.730245][  T992] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[  158.757408][  T992] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  158.790771][  T992] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[  158.868671][  T992] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  158.906781][  T992] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  158.982711][  T992] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.043899][ T7389] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  159.051712][ T7389] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  159.366966][ T5936] usb 8-1: USB disconnect, device number 2
[  159.366974][    C1] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  159.383931][    C1] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  159.688634][ T1018] Bluetooth: hci6: Frame reassembly failed (-84)
[  160.956006][   T29] audit: type=1326 audit(1773786202.135:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7429 comm="syz.7.418" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5fad99c799 code=0x0
[  161.324472][ T7343] Set syz1 is full, maxelem 65536 reached
[  161.689939][   T51] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  161.691700][ T5858] Bluetooth: hci6: command 0x1003 tx timeout
[  161.865999][ T7444] netlink: 7 bytes leftover after parsing attributes in process `syz.2.424'.
[  162.436997][ T7462] netlink: 'syz.2.432': attribute type 10 has an invalid length.
[  162.498708][ T7465] netlink: 'syz.2.432': attribute type 10 has an invalid length.
[  162.567996][ T7462] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  162.620351][ T7439] loop5: detected capacity change from 0 to 40427
[  162.632994][ T7462] team0: Failed to send options change via netlink (err -105)
[  162.663599][ T7462] team0: Port device dummy0 added
[  162.679631][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  162.730938][ T7465] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  162.757300][ T7439] F2FS-fs (loop5): invalid crc value
[  162.876284][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  162.940543][ T7465] team0: Failed to send options change via netlink (err -105)
[  162.952399][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  162.987300][ T7465] team0: Failed to send port change of device dummy0 via netlink (err -105)
[  163.007497][ T5914] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  163.026880][ T7465] team0: Port device dummy0 removed
[  163.040616][ T5914] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  163.086283][ T7465] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  163.096978][ T5914] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  163.134093][ T5914] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.195951][ T5914] usb 2-1: config 0 descriptor??
[  163.360139][ T7458] loop7: detected capacity change from 0 to 131072
[  163.412113][ T7458] F2FS-fs (loop7): Test dummy encryption mode enabled
[  163.428169][ T7458] F2FS-fs (loop7): invalid crc value
[  163.527475][ T7458] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.543466][ T7458] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  163.698148][ T5914] plantronics 0003:047F:FFFF.0004: ignoring exceeding usage max
[  163.715867][ T7439] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.781189][ T7439] F2FS-fs (loop5): Start checkpoint disabled!
[  163.910707][ T7439] F2FS-fs (loop5): f2fs_disable_checkpoint() finish, err:0
[  163.919823][ T7439] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  163.966986][ T5914] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  164.184836][ T5914] usb 2-1: USB disconnect, device number 6
[  164.194108][   T29] audit: type=1800 audit(1773786205.375:15): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.422" name="file1" dev="loop5" ino=10 res=0 errno=0
[  164.372485][ T1018] kworker/u8:8: attempt to access beyond end of device
[  164.372485][ T1018] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  164.443257][ T1018] CPU: 1 UID: 0 PID: 1018 Comm: kworker/u8:8 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  164.443287][ T1018] Tainted: [L]=SOFTLOCKUP
[  164.443293][ T1018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  164.443304][ T1018] Workqueue: writeback wb_workfn (flush-7:5)
[  164.443334][ T1018] Call Trace:
[  164.443345][ T1018]  <TASK>
[  164.443353][ T1018]  dump_stack_lvl+0xe8/0x150
[  164.443383][ T1018]  f2fs_handle_critical_error+0x37c/0x540
[  164.443419][ T1018]  f2fs_write_end_io+0x1274/0x1740
[  164.443462][ T1018]  __submit_merged_bio+0x256/0x700
[  164.443490][ T1018]  __submit_merged_write_cond+0x3c9/0x4e0
[  164.443520][ T1018]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  164.443563][ T1018]  f2fs_write_data_pages+0x287e/0x34f0
[  164.443588][ T1018]  ? unwind_next_frame+0xa5/0x23c0
[  164.443604][ T1018]  ? lock_release+0x4b/0x3d0
[  164.443660][ T1018]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.443698][ T1018]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  164.443747][ T1018]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  164.443791][ T1018]  ? __lock_acquire+0x6b5/0x2cf0
[  164.443832][ T1018]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.443858][ T1018]  do_writepages+0x32e/0x550
[  164.443885][ T1018]  ? reacquire_held_locks+0x104/0x190
[  164.443903][ T1018]  ? writeback_sb_inodes+0x477/0x1a20
[  164.443931][ T1018]  __writeback_single_inode+0x133/0x11a0
[  164.443955][ T1018]  ? do_raw_spin_unlock+0xf5/0x210
[  164.443981][ T1018]  writeback_sb_inodes+0x992/0x1a20
[  164.444021][ T1018]  ? __lock_acquire+0x6b5/0x2cf0
[  164.444052][ T1018]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  164.444072][ T1018]  ? do_raw_spin_lock+0x12b/0x2f0
[  164.444129][ T1018]  ? rcu_is_watching+0x15/0xb0
[  164.444155][ T1018]  wb_writeback+0x456/0xb70
[  164.444179][ T1018]  ? queue_io+0x211/0x4a0
[  164.444208][ T1018]  ? __pfx_wb_writeback+0x10/0x10
[  164.444228][ T1018]  ? do_raw_spin_lock+0x12b/0x2f0
[  164.444269][ T1018]  wb_workfn+0x414/0xf50
[  164.444292][ T1018]  ? look_up_lock_class+0x57/0x110
[  164.444330][ T1018]  ? __pfx_wb_workfn+0x10/0x10
[  164.444355][ T1018]  ? do_raw_spin_lock+0x12b/0x2f0
[  164.444382][ T1018]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  164.444435][ T1018]  ? process_one_work+0x8bb/0x1780
[  164.444464][ T1018]  process_one_work+0x9ab/0x1780
[  164.444517][ T1018]  ? __pfx_process_one_work+0x10/0x10
[  164.444543][ T1018]  ? do_raw_spin_lock+0x12b/0x2f0
[  164.444585][ T1018]  worker_thread+0xba8/0x11e0
[  164.444614][ T1018]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  164.444638][ T1018]  ? __kthread_parkme+0x7a/0x1f0
[  164.444658][ T1018]  ? __kthread_parkme+0x19c/0x1f0
[  164.444702][ T1018]  kthread+0x388/0x470
[  164.444727][ T1018]  ? __pfx_worker_thread+0x10/0x10
[  164.444743][ T1018]  ? __pfx_kthread+0x10/0x10
[  164.444769][ T1018]  ret_from_fork+0x51e/0xb90
[  164.444801][ T1018]  ? __pfx_ret_from_fork+0x10/0x10
[  164.444829][ T1018]  ? __switch_to+0xc7d/0x1450
[  164.444859][ T1018]  ? __pfx_kthread+0x10/0x10
[  164.444884][ T1018]  ret_from_fork_asm+0x1a/0x30
[  164.444923][ T1018]  </TASK>
[  164.738477][ T1018] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  164.984275][ T7504] netlink: 7 bytes leftover after parsing attributes in process `syz.2.451'.
[  165.248483][ T7509] netlink: 'syz.2.452': attribute type 1 has an invalid length.
[  165.401688][ T7509] bond1: entered promiscuous mode
[  165.430787][ T7509] bond1: entered allmulticast mode
[  165.453476][ T7509] 8021q: adding VLAN 0 to HW filter on device bond1
[  165.510591][ T7513] erspan1: entered allmulticast mode
[  165.570312][ T7513] bond1: (slave erspan1): making interface the new active one
[  165.588513][ T7513] erspan1: entered promiscuous mode
[  165.618525][ T7513] bond1: (slave erspan1): Enslaving as an active interface with an up link
[  166.303869][ T7533] loop0: detected capacity change from 0 to 512
[  166.361886][ T7533] EXT4-fs: inline encryption not supported
[  166.379557][ T7533] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  166.415714][ T7533] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002]
[  166.438756][ T7533] System zones: 1-12
[  166.450775][ T7533] EXT4-fs (loop0): 1 truncate cleaned up
[  166.498848][ T7533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.754382][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.944654][ T7555] overlayfs: failed to resolve './cgroup': -2
[  167.656151][ T3529] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.916660][ T3529] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.989488][ T7569] capability: warning: `syz.7.476' uses deprecated v2 capabilities in a way that may be insecure
[  168.036129][ T7569] overlayfs: cleanup of 'bus/work' failed (-13)
[  168.060216][ T7569] overlayfs: failed to create directory ./bus/work (errno: 17); mounting read-only
[  168.252462][ T5858] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  168.267344][ T5858] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  168.275767][ T5858] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  168.284959][ T5858] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  168.298957][ T5858] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  168.311866][ T3529] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.545396][ T3529] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.613911][ T7581] loop0: detected capacity change from 0 to 256
[  168.666097][ T7581] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf3da6b1f, utbl_chksum : 0xe619d30d)
[  169.269326][ T5936] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  169.473111][ T7572] chnl_net:caif_netlink_parms(): no params data found
[  169.489230][ T5936] usb 6-1: config 1 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  169.518603][ T5936] usb 6-1: config 1 interface 0 has no altsetting 0
[  169.550911][ T3529] bridge_slave_1: left allmulticast mode
[  169.557157][ T3529] bridge_slave_1: left promiscuous mode
[  169.563525][ T3529] bridge0: port 2(bridge_slave_1) entered disabled state
[  169.563529][ T5936] usb 6-1: string descriptor 0 read error: -22
[  169.563919][ T5936] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.40
[  169.590488][ T3529] bridge_slave_0: left allmulticast mode
[  169.602853][ T5936] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.603471][ T3529] bridge_slave_0: left promiscuous mode
[  169.629440][ T3529] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.025063][ T3529] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  170.047331][ T3529] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  170.068147][ T3529] bond0 (unregistering): Released all slaves
[  170.154345][ T7603] netlink: 52 bytes leftover after parsing attributes in process `syz.0.488'.
[  170.175548][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.186737][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.194834][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.204617][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.216165][ T7606] netlink: 52 bytes leftover after parsing attributes in process `syz.0.488'.
[  170.226165][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.233273][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.244578][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.251673][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.261588][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.272093][ T5936] lenovo 0003:17EF:6047.0005: unknown main item tag 0x0
[  170.358918][ T5936] lenovo 0003:17EF:6047.0005: hidraw0: USB HID v0.01 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0
[  170.386428][ T5936] lenovo 0003:17EF:6047.0005: Failed to switch F7/9/11 mode: -71
[  170.408600][ T5936] lenovo 0003:17EF:6047.0005: Failed to switch middle button: -71
[  170.417329][ T5936] lenovo 0003:17EF:6047.0005: Fn-lock setting failed: -71
[  170.425196][   T51] Bluetooth: hci0: command tx timeout
[  170.439971][ T5936] lenovo 0003:17EF:6047.0005: Sensitivity setting failed: -71
[  170.480301][ T5936] usb 6-1: USB disconnect, device number 2
[  170.913570][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.926148][ T7572] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.947166][ T7572] bridge_slave_0: entered allmulticast mode
[  170.972264][ T7572] bridge_slave_0: entered promiscuous mode
[  170.993669][ T7572] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.018637][ T7572] bridge0: port 2(bridge_slave_1) entered disabled state
[  171.046019][ T7572] bridge_slave_1: entered allmulticast mode
[  171.066208][ T7572] bridge_slave_1: entered promiscuous mode
[  171.241344][ T3529] hsr_slave_0: left promiscuous mode
[  171.274414][ T3529] hsr_slave_1: left promiscuous mode
[  171.311424][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  171.337070][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_0
[  171.375526][ T3529] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  171.402366][ T3529] batman_adv: batadv0: Removing interface: batadv_slave_1
[  171.478657][ T3529] veth1_macvtap: left promiscuous mode
[  171.490231][ T3529] veth0_macvtap: left promiscuous mode
[  171.503934][ T3529] veth1_vlan: left promiscuous mode
[  171.515760][ T3529] veth0_vlan: left promiscuous mode
[  172.183496][ T7632] loop0: detected capacity change from 0 to 32768
[  172.232646][ T7632] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.494 (7632)
[  172.314182][ T7632] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.352790][ T7632] BTRFS info (device loop0): using crc32c checksum algorithm
[  172.362700][ T7652] netlink: 4 bytes leftover after parsing attributes in process `syz.5.499'.
[  172.461225][ T3529] team0 (unregistering): Port device team_slave_1 removed
[  172.477156][ T7632] BTRFS info (device loop0): enabling ssd optimizations
[  172.488738][   T51] Bluetooth: hci0: command tx timeout
[  172.499608][ T7632] BTRFS info (device loop0): turning on async discard
[  172.509374][ T7632] BTRFS info (device loop0): enabling free space tree
[  172.516783][ T3529] team0 (unregistering): Port device team_slave_0 removed
[  172.831561][ T5844] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  172.995055][ T7652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.055922][ T7652] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.160291][ T7572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.191678][ T7572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.249862][ T7572] team0: Port device team_slave_0 added
[  173.271614][ T7572] team0: Port device team_slave_1 added
[  173.405007][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_0
[  173.439450][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.472372][ T7572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  173.533581][ T7572] batman_adv: batadv0: Adding interface: batadv_slave_1
[  173.550742][ T7572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  173.600046][ T7572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  173.895927][ T7572] hsr_slave_0: entered promiscuous mode
[  173.934172][ T7572] hsr_slave_1: entered promiscuous mode
[  173.960983][ T7572] debugfs: 'hsr0' already exists in 'hsr'
[  173.983416][ T7690] loop7: detected capacity change from 0 to 2048
[  173.985140][ T7572] Cannot create hsr debugfs directory
[  174.001359][ T7692] af_packet: tpacket_rcv: packet too big, clamped from 65232 to 4294967272. macoff=96
[  174.118683][ T7690] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.554892][ T7706] syz.2.512 uses obsolete (PF_INET,SOCK_PACKET)
[  174.568981][   T51] Bluetooth: hci0: command tx timeout
[  175.212882][ T7721] ipvlan2: entered promiscuous mode
[  175.265708][ T7721] ipvlan2: entered allmulticast mode
[  175.333354][ T7721] gretap0: entered allmulticast mode
[  175.427459][ T7721] team0: Device ipvlan2 failed to register rx_handler
[  176.217818][ T7738] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.227160][ T7738] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.405122][ T7572] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  176.440902][ T7572] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  176.509365][ T7572] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  176.567975][ T7572] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  176.648550][   T51] Bluetooth: hci0: command tx timeout
[  177.207141][ T7572] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.361277][ T7572] 8021q: adding VLAN 0 to HW filter on device team0
[  177.447400][ T1018] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.454609][ T1018] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.539240][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.546746][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.598166][ T7778] fuse: Bad value for 'fd'
[  178.681693][ T7572] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.851574][ T5914] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  179.018987][ T5914] usb 8-1: Using ep0 maxpacket: 16
[  179.041699][ T5914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.071354][ T5914] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.096592][ T5914] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  179.134738][ T5914] usb 8-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  179.171392][ T5914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.215349][ T5914] usb 8-1: config 0 descriptor??
[  179.458352][  T992] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  179.562677][ T7572] veth0_vlan: entered promiscuous mode
[  179.612831][ T7572] veth1_vlan: entered promiscuous mode
[  179.635889][  T992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.672763][  T992] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  179.683650][ T5914] hid_parser_main: 4007 callbacks suppressed
[  179.683667][ T5914] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  179.716516][  T992] usb 1-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  179.737291][ T5914] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  179.760066][  T992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.776355][ T5914] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  179.801991][ T5914] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  179.810097][  T992] usb 1-1: config 0 descriptor??
[  179.833526][ T5914] shield 0003:0955:7214.0006: unknown main item tag 0x0
[  179.846019][ T7572] veth0_macvtap: entered promiscuous mode
[  179.861874][ T7797] random: crng reseeded on system resumption
[  179.890399][ T7572] veth1_macvtap: entered promiscuous mode
[  179.897144][ T5914] input: HID 0955:7214 Haptics as /devices/virtual/input/input9
[  179.994332][ T7572] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.056879][ T7572] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.120724][   T14] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.151699][ T1018] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.192346][ T1018] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.212051][ T1018] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  180.530599][ T5914] shield 0003:0955:7214.0006: Registered Thunderstrike controller
[  180.545619][ T1018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.561394][ T5914] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.7-1/input0
[  180.570863][ T1018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.682565][  T992] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO
[  180.704957][ T5914] usb 8-1: USB disconnect, device number 3
[  180.764408][  T992] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  180.785026][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.821529][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.831380][  T992] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  180.892534][  T992] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV
[  181.353289][ T7865] batadv_slave_1: entered promiscuous mode
[  181.384002][ T7865] syz_tun: entered promiscuous mode
[  181.532657][ T7870] loop7: detected capacity change from 0 to 736
[  182.271539][    T9] usb 1-1: USB disconnect, device number 6
[  182.547000][ T7864] syz_tun: left promiscuous mode
[  182.553361][ T7864] batadv_slave_1: left promiscuous mode
[  182.766424][ T7886] netlink: 'syz.7.559': attribute type 10 has an invalid length.
[  182.808062][ T7886] 8021q: adding VLAN 0 to HW filter on device team0
[  182.863329][ T7886] bond0: (slave team0): Enslaving as an active interface with an up link
[  183.582929][ T7898] loop5: detected capacity change from 0 to 32768
[  183.607676][ T7898] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.564 (7898)
[  183.697497][ T7898] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.712168][ T7898] BTRFS info (device loop5): using crc32c checksum algorithm
[  183.855414][ T7898] BTRFS info (device loop5): enabling ssd optimizations
[  183.868378][ T7898] BTRFS info (device loop5): turning on flush-on-commit
[  183.878777][ T7898] BTRFS info (device loop5): enabling free space tree
[  183.888565][ T7898] BTRFS info (device loop5): enabling auto defrag
[  183.899741][ T7898] BTRFS info (device loop5): use lzo compression, level 1
[  183.964870][ T7898] BTRFS info (device loop5): max_inline set to 4096
[  184.723928][ T6230] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  185.428687][ T7945] netlink: 28 bytes leftover after parsing attributes in process `syz.5.575'.
[  185.791105][ T7949] overlayfs: failed to clone upperpath
[  186.142607][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.2.582'.
[  187.947171][   T29] audit: type=1326 audit(1773786229.125:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8006 comm="syz.5.593" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f007ab9c799 code=0x0
[  189.557568][ T8024] loop7: detected capacity change from 0 to 32768
[  189.655892][   T29] audit: type=1800 audit(1773786230.835:17): pid=8024 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.596" name="file1" dev="loop7" ino=7 res=0 errno=0
[  189.984173][ T8069] fuse: Bad value for 'fd'
[  190.401763][   T29] audit: type=1800 audit(1773786231.585:18): pid=8060 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.596" name="file1" dev="loop7" ino=7 res=0 errno=0
[  192.127386][ T8124] netlink: 20 bytes leftover after parsing attributes in process `syz.5.621'.
[  193.598564][ T8169] netlink: 4 bytes leftover after parsing attributes in process `syz.0.633'.
[  194.187878][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[  194.196950][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[  195.351719][ T8208] bridge0: port 2(bridge_slave_1) entered disabled state
[  195.359703][ T8208] bridge0: port 1(bridge_slave_0) entered disabled state
[  195.382451][ T8221] netlink: 'syz.5.645': attribute type 10 has an invalid length.
[  195.801587][   T29] audit: type=1800 audit(1773786236.985:19): pid=8241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.647" name="file1" dev="tmpfs" ino=299 res=0 errno=0
[  195.865762][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  195.901739][ T8208] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.179819][ T8221] bond0: (slave wlan1): Opening slave failed
[  196.250351][ T6468] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.288397][ T6468] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.322148][ T6468] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.357202][ T6468] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  196.879791][ T8279] 9pnet_fd: p9_fd_create_unix (8279): problem connecting socket: ./file0: -13
[  197.189385][ T8290] netlink: 212368 bytes leftover after parsing attributes in process `syz.8.663'.
[  197.897518][ T8309] netlink: 4 bytes leftover after parsing attributes in process `syz.7.669'.
[  197.931399][ T8309] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  198.050389][ T8309] batman_adv: batadv0: Removing interface: batadv_slave_0
[  198.115405][ T8313] gretap0: entered promiscuous mode
[  198.140126][ T8315] netlink: 8 bytes leftover after parsing attributes in process `syz.0.670'.
[  198.179425][ T8315] gretap0: left promiscuous mode
[  198.452806][ T8323] netlink: 'syz.0.672': attribute type 10 has an invalid length.
[  198.519478][ T8323] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  198.548741][ T8306] loop5: detected capacity change from 0 to 40427
[  198.566417][ T8306] f2fs: Bad value for 'resgid'
[  198.592165][ T8306] f2fs: Bad value for 'resgid'
[  198.870592][  T992] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  199.053391][  T992] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.096177][  T992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  199.148111][  T992] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  199.170022][  T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  199.193513][  T992] usb 6-1: SerialNumber: syz
[  199.507092][  T992] usb 6-1: 0:2 : does not exist
[  199.706116][ T8346] loop0: detected capacity change from 0 to 512
[  199.752912][ T8346] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.677: invalid indirect mapped block 4294967295 (level 1)
[  199.779712][ T8346] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  199.786062][ T8346] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.677: invalid indirect mapped block 4294967295 (level 1)
[  199.795286][    C1] EXT4-fs (loop0): error count since last fsck: 1
[  199.795314][    C1] EXT4-fs (loop0): initial error at time 1773786240: ext4_free_branches:1023: inode 11
[  199.795337][    C1] EXT4-fs (loop0): last error at time 1773786240: ext4_free_branches:1023: inode 11
[  199.908015][ T8346] loop0: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  199.909640][ T8346] EXT4-fs (loop0): 2 truncates cleaned up
[  199.964187][ T8328] loop7: detected capacity change from 0 to 32768
[  199.995448][ T8346] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.047463][ T8328] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.673 (8328)
[  200.146784][ T8328] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  200.185650][ T8328] BTRFS info (device loop7): using crc32c checksum algorithm
[  200.200440][   T29] audit: type=1326 audit(1773786241.385:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  200.229548][ T8328] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  200.270880][ T5844] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.284691][  T992] usb 6-1: USB disconnect, device number 3
[  200.305026][   T29] audit: type=1326 audit(1773786241.405:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  200.501150][   T29] audit: type=1326 audit(1773786241.405:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  200.629241][ T8328] BTRFS info (device loop7): rebuilding free space tree
[  200.677659][   T29] audit: type=1326 audit(1773786241.415:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  200.790961][   T29] audit: type=1326 audit(1773786241.415:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  200.901707][ T6002] udevd[6002]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  200.917732][   T29] audit: type=1326 audit(1773786241.435:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  200.962878][ T8328] BTRFS info (device loop7): disabling free space tree
[  200.994763][ T8328] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  201.012584][   T29] audit: type=1326 audit(1773786241.435:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  201.031391][ T8328] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  201.108336][   T29] audit: type=1326 audit(1773786241.435:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  201.180423][   T29] audit: type=1326 audit(1773786241.435:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8356 comm="syz.2.678" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd1ef59c799 code=0x7ffc0000
[  201.273606][ T8328] BTRFS info (device loop7): enabling ssd optimizations
[  201.312137][ T8328] BTRFS info (device loop7): turning off barriers
[  201.345390][ T8328] BTRFS info (device loop7): enabling disk space caching
[  201.365517][ T8328] BTRFS info (device loop7): force clearing of disk cache
[  201.379015][ T8328] BTRFS info (device loop7): force lzo compression, level 1
[  201.385086][   T51] Bluetooth: hci1: command 0x0406 tx timeout
[  201.392508][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  201.423997][ T8328] BTRFS info (device loop7): max_inline set to 0
[  201.901404][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'.
[  201.952385][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'.
[  202.420940][ T7126] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.627496][ T5935] IPVS: starting estimator thread 0...
[  202.744643][ T8418] IPVS: using max 32 ests per chain, 76800 per kthread
[  203.481818][ T8436] tipc: Failed to remove unknown binding: 66,1,1/0:360809130/360809132
[  204.114461][ T8457] overlayfs: failed to clone upperpath
[  205.120886][ T8503] netlink: 'syz.0.713': attribute type 1 has an invalid length.
[  205.138624][ T5936] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  205.320843][ T5936] usb 8-1: Using ep0 maxpacket: 16
[  205.361700][ T5936] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.430436][ T5936] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.443463][ T8518] fuse: Bad value for 'fd'
[  205.466079][ T8509] bond2: (slave bridge1): making interface the new active one
[  205.482193][ T5936] usb 8-1: config 0 interface 0 has no altsetting 0
[  205.497570][ T5936] usb 8-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  205.523060][ T5936] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.536809][ T8509] bond2: (slave bridge1): Enslaving as an active interface with an up link
[  205.574126][ T5936] usb 8-1: config 0 descriptor??
[  206.189390][  T992] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  206.222788][ T5980] usb 8-1: USB disconnect, device number 4
[  206.352934][  T992] usb 6-1: config 0 has no interfaces?
[  206.361604][  T992] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  206.371837][  T992] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.385180][  T992] usb 6-1: config 0 descriptor??
[  206.491661][ T8553] fuse: fd is not a fuse device
[  206.502740][ T5857] Bluetooth: hci4: command 0x0406 tx timeout
[  206.648043][  T992] usb 6-1: USB disconnect, device number 4
[  206.988521][ T5936] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  207.111437][  T992] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  207.149054][ T5936] usb 9-1: Using ep0 maxpacket: 32
[  207.160051][ T5936] usb 9-1: config 0 has an invalid interface number: 132 but max is 0
[  207.182756][ T5936] usb 9-1: config 0 has no interface number 0
[  207.201028][ T5936] usb 9-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  207.241214][ T5936] usb 9-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  207.250671][ T5936] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.259070][ T5936] usb 9-1: Product: syz
[  207.263459][ T5936] usb 9-1: Manufacturer: syz
[  207.268163][ T5936] usb 9-1: SerialNumber: syz
[  207.268661][  T992] usb 8-1: Using ep0 maxpacket: 16
[  207.295710][ T5936] usb 9-1: config 0 descriptor??
[  207.316834][  T992] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  207.331301][ T5936] em28xx 9-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  207.355520][ T5936] em28xx 9-1:0.132: Video interface 132 found:
[  207.365630][  T992] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.383507][  T992] usb 8-1: Product: syz
[  207.395838][  T992] usb 8-1: Manufacturer: syz
[  207.402613][  T992] usb 8-1: SerialNumber: syz
[  207.743721][ T5936] em28xx 9-1:0.132: unknown em28xx chip ID (0)
[  208.097093][ T8600] loop0: detected capacity change from 0 to 32768
[  208.157914][ T8600]  loop0: p9 p11 p16
[  208.170661][ T5936] em28xx 9-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[  208.184671][   T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  208.219739][ T5936] em28xx 9-1:0.132: board has no eeprom
[  208.318632][ T5936] em28xx 9-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  208.336609][ T5936] em28xx 9-1:0.132: analog set to bulk mode.
[  208.348311][   T10] usb 6-1: Using ep0 maxpacket: 32
[  208.361371][ T5935] em28xx 9-1:0.132: Registering V4L2 extension
[  208.376894][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.415600][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.463468][   T10] usb 6-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  208.503099][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.515678][ T5936] usb 9-1: USB disconnect, device number 2
[  208.547687][ T5936] em28xx 9-1:0.132: Disconnecting em28xx
[  208.559815][   T10] usb 6-1: config 0 descriptor??
[  208.602438][   T10] hub 6-1:0.0: USB hub found
[  208.806887][ T5935] em28xx 9-1:0.132: Config register raw data: 0xffffffed
[  208.815449][   T10] hub 6-1:0.0: 6 ports detected
[  208.832907][   T10] hub 6-1:0.0: insufficient power available to use all downstream ports
[  208.846540][ T5935] em28xx 9-1:0.132: AC97 chip type couldn't be determined
[  208.855068][  T992] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71
[  208.872303][ T5935] em28xx 9-1:0.132: No AC97 audio processor
[  208.903243][  T992] usb 8-1: USB disconnect, device number 5
[  208.952376][ T5935] usb 9-1: Decoder not found
[  208.964205][ T5935] em28xx 9-1:0.132: failed to create media graph
[  208.988969][ T5935] em28xx 9-1:0.132: V4L2 device video103 deregistered
[  208.999470][ T5906] udevd[5906]: inotify_add_watch(7, /dev/loop0p11, 10) failed: No such file or directory
[  209.020514][ T5990] udevd[5990]: inotify_add_watch(7, /dev/loop0p16, 10) failed: No such file or directory
[  209.039753][ T6483] udevd[6483]: inotify_add_watch(7, /dev/loop0p9, 10) failed: No such file or directory
[  209.097822][ T5935] em28xx 9-1:0.132: Remote control support is not available for this card.
[  209.117076][ T5936] em28xx 9-1:0.132: Closing input extension
[  209.397509][ T5936] em28xx 9-1:0.132: Freeing device
[  209.522601][ T8642] fuse: fd is not a fuse device
[  209.833628][ T8650] loop8: detected capacity change from 0 to 128
[  209.852852][ T5848] Bluetooth: hci6: Opcode 0x1003 failed: -110
[  209.859530][ T5857] Bluetooth: hci6: command 0x1003 tx timeout
[  209.967884][   T10] hub 6-1:0.0: hub_hub_status failed (err = -32)
[  210.024895][   T10] hub 6-1:0.0: config failed, can't get hub status (err -32)
[  210.046627][ T8657] netlink: 4 bytes leftover after parsing attributes in process `syz.7.774'.
[  210.088706][ T8650] FAT-fs (loop8): Invalid FSINFO signature: 0x41000006, 0x61417272 (sector = 1)
[  210.100635][   T10] usbhid 6-1:0.0: can't add hid device: -32
[  210.122637][   T10] usbhid 6-1:0.0: probe with driver usbhid failed with error -32
[  210.721773][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.775'.
[  210.845072][ T6468] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  210.854252][ T8677] netlink: 4 bytes leftover after parsing attributes in process `syz.8.775'.
[  210.881184][ T6468] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  210.912754][ T6468] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  210.943563][ T6468] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  211.010054][ T5980] usb 6-1: USB disconnect, device number 5
[  211.085907][ T8681] netlink: 4 bytes leftover after parsing attributes in process `syz.5.777'.
[  211.175720][ T8684] netlink: 4 bytes leftover after parsing attributes in process `syz.5.777'.
[  211.574062][ T8691] loop5: detected capacity change from 0 to 128
[  211.710637][ T8691] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  211.731280][ T8691] ext4 filesystem being mounted at /99/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  211.873710][ T8703] loop0: detected capacity change from 0 to 128
[  211.912486][ T6230] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  211.930695][ T8703] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  212.016479][ T8705] batadv_slave_1: entered promiscuous mode
[  212.037109][ T8703] hpfs: filesystem error: improperly stopped
[  212.057815][ T8705] netlink: 4 bytes leftover after parsing attributes in process `syz.2.786'.
[  212.074149][ T8703] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  212.111591][ T8703] hpfs: You really don't want any checks? You are crazy...
[  212.125693][ T8705] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.135484][ T8709] loop7: detected capacity change from 0 to 128
[  212.150023][ T8703] hpfs: Code page index out of array
[  212.157829][ T8709] EXT4-fs: Ignoring removed i_version option
[  212.177181][ T8703] hpfs: code page support is disabled
[  212.202606][ T8709] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0003]
[  212.215317][ T8703] hpfs: hpfs_map_4sectors(): unaligned read
[  212.244313][ T8709] System zones: 1-3, 19-19, 35-36
[  212.252524][ T8703] hpfs: hpfs_map_4sectors(): unaligned read
[  212.261176][ T8703] hpfs: filesystem error: unable to find root dir
[  212.270022][ T8705] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.303347][ T8709] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  212.375767][ T8709] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  212.394612][ T8716] netlink: 3 bytes leftover after parsing attributes in process `syz.8.790'.
[  212.555351][ T8704] batadv_slave_1: left promiscuous mode
[  212.690089][   T29] audit: type=1800 audit(1773786253.865:29): pid=8719 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.789" name="file1" dev="loop7" ino=13 res=0 errno=0
[  212.832129][ T7126] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  213.996711][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'.
[  214.032396][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz.5.809'.
[  214.513439][ T1009] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.802621][ T1009] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.010097][ T1009] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.043260][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  215.070523][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  215.085286][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  215.098038][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  215.107289][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  215.217897][   T10] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  215.263280][ T1009] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  215.351675][ T8801] loop8: detected capacity change from 0 to 1024
[  215.385688][   T10] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  215.430217][   T10] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  215.486301][   T10] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  215.506039][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.735688][   T10] usb 8-1: GET_CAPABILITIES returned 0
[  215.742977][   T10] usbtmc 8-1:16.0: can't read capabilities
[  215.790388][   T29] audit: type=1800 audit(1773786256.975:30): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.824" name="file1" dev="loop8" ino=2 res=0 errno=0
[  216.118688][   T10] usb 8-1: USB disconnect, device number 6
[  216.764295][ T1009] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  216.857901][ T1009] bond2 (unregistering): (slave bridge1): Releasing active interface
[  216.960285][ T1009] bond0 (unregistering): Released all slaves
[  217.013857][ T1009] bond1 (unregistering): Released all slaves
[  217.047463][ T1009] bond2 (unregistering): Released all slaves
[  217.211520][ T5857] Bluetooth: hci1: command tx timeout
[  217.630921][ T8794] chnl_net:caif_netlink_parms(): no params data found
[  218.188339][ T5936] usb 8-1: new full-speed USB device number 7 using dummy_hcd
[  218.364789][ T5936] usb 8-1: unable to get BOS descriptor or descriptor too short
[  218.395323][ T5936] usb 8-1: not running at top speed; connect to a high speed hub
[  218.422369][ T5936] usb 8-1: config 15 has an invalid interface number: 131 but max is 0
[  218.443105][ T5936] usb 8-1: config 15 has no interface number 0
[  218.445790][ T8794] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.463261][ T5936] usb 8-1: config 15 interface 131 has no altsetting 0
[  218.475552][ T8794] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.492160][ T8794] bridge_slave_0: entered allmulticast mode
[  218.514444][ T5936] usb 8-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=ea.30
[  218.524099][ T8794] bridge_slave_0: entered promiscuous mode
[  218.545889][ T5936] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.588348][ T5936] usb 8-1: Product: syz
[  218.613594][ T8794] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.618350][ T5936] usb 8-1: Manufacturer: syz
[  218.635889][ T5936] usb 8-1: SerialNumber: syz
[  218.647015][ T8794] bridge0: port 2(bridge_slave_1) entered disabled state
[  218.676072][ T8794] bridge_slave_1: entered allmulticast mode
[  218.722994][ T8794] bridge_slave_1: entered promiscuous mode
[  218.822943][ T1009] hsr_slave_0: left promiscuous mode
[  218.842234][ T1009] hsr_slave_1: left promiscuous mode
[  218.888112][ T1009] veth1_macvtap: left promiscuous mode
[  218.919789][ T1009] veth0_macvtap: left promiscuous mode
[  219.058656][ T5936] gspca_main: mr97310a-2.14.0 probing 093a:010f
[  219.083495][ T5936] gspca_mr97310a: reg write [21] error -22
[  219.102427][ T5936] mr97310a 8-1:15.131: probe with driver mr97310a failed with error -22
[  219.147062][ T5936] usb 8-1: USB disconnect, device number 7
[  219.288885][ T5857] Bluetooth: hci1: command tx timeout
[  219.594545][ T8889] loop5: detected capacity change from 0 to 128
[  219.686547][ T8889] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  219.760111][ T8889] ext4 filesystem being mounted at /118/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  219.996501][ T6230] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  220.306355][ T8794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  220.351652][ T8794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  220.466618][ T8794] team0: Port device team_slave_0 added
[  220.493774][ T8794] team0: Port device team_slave_1 added
[  220.665041][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_0
[  220.680359][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  220.734695][ T8794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  220.775883][ T8915] warning: `syz.7.857' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  220.802259][ T8794] batman_adv: batadv0: Adding interface: batadv_slave_1
[  220.817694][ T8794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  220.876407][ T8794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  220.945316][ T1009] IPVS: stop unused estimator thread 0...
[  221.193443][ T8794] hsr_slave_0: entered promiscuous mode
[  221.226641][ T8794] hsr_slave_1: entered promiscuous mode
[  221.261571][ T8794] debugfs: 'hsr0' already exists in 'hsr'
[  221.278460][ T8794] Cannot create hsr debugfs directory
[  221.378800][ T5857] Bluetooth: hci1: command tx timeout
[  222.541335][ T8794] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  222.600594][ T8794] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  222.661122][ T8794] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  222.725657][ T8794] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  222.812565][ T8980] overlayfs: failed to clone upperpath
[  223.093709][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.8.878'.
[  223.132141][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz.8.878'.
[  223.448782][ T5857] Bluetooth: hci1: command tx timeout
[  223.456334][ T8794] 8021q: adding VLAN 0 to HW filter on device bond0
[  223.709678][ T8794] 8021q: adding VLAN 0 to HW filter on device team0
[  223.790196][ T1009] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.797435][ T1009] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.877888][ T6469] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.885273][ T6469] bridge0: port 2(bridge_slave_1) entered forwarding state
[  224.825581][ T8794] 8021q: adding VLAN 0 to HW filter on device batadv0
[  225.564396][ T8794] veth0_vlan: entered promiscuous mode
[  225.607678][ T8794] veth1_vlan: entered promiscuous mode
[  225.618626][ T5905] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  225.750598][ T8794] veth0_macvtap: entered promiscuous mode
[  225.797460][ T8794] veth1_macvtap: entered promiscuous mode
[  225.800462][ T5905] usb 6-1: Using ep0 maxpacket: 32
[  225.832219][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.867385][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.909657][ T5905] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  225.933589][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.945359][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_0
[  225.986117][ T5905] usb 6-1: config 0 descriptor??
[  226.047718][ T8794] batman_adv: batadv0: Interface activated: batadv_slave_1
[  226.122152][   T58] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  226.146919][   T58] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  226.175289][ T6469] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  226.215276][ T6469] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  226.299129][ T5935] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  226.482156][ T5905] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[  226.499483][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  226.529558][ T5935] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  226.564343][ T5905] ft260 0003:0403:6030.0008: unknown main item tag 0x0
[  226.566900][ T5935] usb 8-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  226.623127][ T5935] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.636071][   T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.667203][ T5935] usb 8-1: config 0 descriptor??
[  226.682580][ T5905] ft260 0003:0403:6030.0008: chip code: 0000 0000
[  226.689425][   T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.702775][ T5935] hub 8-1:0.0: USB hub found
[  226.801450][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  226.814537][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  226.890215][ T5905] ft260 0003:0403:6030.0008: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0
[  226.907882][ T5935] hub 8-1:0.0: 1 port detected
[  226.969185][ T5848] Bluetooth: hci5: command 0x0406 tx timeout
[  227.092336][ T5905] ft260 0003:0403:6030.0008: failed to retrieve status: -32, no wakeup
[  227.337254][ T5905] ft260 0003:0403:6030.0008: failed to reset I2C controller: -71
[  227.483807][ T9096] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  227.493655][ T9096] overlayfs: failed to set xattr on upper
[  227.502522][ T9096] overlayfs: ...falling back to index=off.
[  227.510040][ T9096] overlayfs: ...falling back to uuid=null.
[  227.534174][ T5936] hub 8-1:0.0: activate --> -90
[  227.559216][ T5905] usb 6-1: USB disconnect, device number 6
[  227.947273][ T5914] usb 8-1: USB disconnect, device number 8
[  227.948548][ T5935] usb 8-1-port1: config error
[  228.097844][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'.
[  228.132100][ T5935] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  228.193264][ T9109] input: syz0 as /devices/virtual/input/input10
[  228.212200][ T9113] netlink: 12 bytes leftover after parsing attributes in process `syz.2.909'.
[  228.213412][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  228.287024][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  228.318030][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  228.331020][ T5935] usb 9-1: Using ep0 maxpacket: 16
[  228.360530][ T5935] usb 9-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  228.363519][ T9117] loop9: detected capacity change from 0 to 1024
[  228.399899][ T6469] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  228.404763][ T5935] usb 9-1: config 0 interface 0 has no altsetting 0
[  228.420640][ T9117] EXT4-fs: Ignoring removed oldalloc option
[  228.458041][ T5935] usb 9-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  228.473531][ T9117] EXT4-fs: Ignoring removed bh option
[  228.480204][ T5935] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.508166][ T5935] usb 9-1: config 0 descriptor??
[  228.684529][ T9117] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.938039][ T8794] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.014201][ T5935] nzxt-smart2 0003:1E71:2009.0009: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.8-1/input0
[  229.485373][ T5905] usb 9-1: USB disconnect, device number 3
[  229.912107][ T9156] loop7: detected capacity change from 0 to 4096
[  230.000251][ T9160] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  230.090884][   T29] audit: type=1800 audit(1773786271.275:31): pid=9156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.923" name="file1" dev="loop7" ino=15 res=0 errno=0
[  233.562731][ T9231] bridge0: port 2(bridge_slave_1) entered disabled state
[  233.570588][ T9231] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.776781][ T9231] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  233.802509][ T9231] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  234.343397][ T9243] netlink: 4 bytes leftover after parsing attributes in process `syz.8.956'.
[  234.358407][   T58] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.377716][   T58] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.515237][ T9243] team1: entered promiscuous mode
[  234.533743][ T9243] team1: entered allmulticast mode
[  234.543513][ T9243] 8021q: adding VLAN 0 to HW filter on device team1
[  234.563869][   T58] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  234.590496][   T58] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  236.652948][ T9280] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  237.750697][ T9315] loop7: detected capacity change from 0 to 1024
[  237.925212][ T9321] netlink: 7 bytes leftover after parsing attributes in process `syz.8.979'.
[  237.970107][ T9317] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  238.278555][ T6469] hfsplus: b-tree write err: -5, ino 3
[  238.332717][   T30] INFO: task syz.3.4:5971 blocked for more than 143 seconds.
[  238.368550][   T30]       Tainted: G             L      syzkaller #0
[  238.390578][   T30]       Blocked by coredump.
[  238.405445][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  238.421915][   T30] task:syz.3.4         state:D stack:25504 pid:5971  tgid:5971  ppid:5845   task_flags:0x40004c flags:0x00080000
[  238.443762][   T30] Call Trace:
[  238.450961][   T30]  <TASK>
[  238.455584][   T30]  __schedule+0x1665/0x5590
[  238.460520][   T30]  ? __pfx___schedule+0x10/0x10
[  238.465451][   T30]  ? schedule+0x90/0x360
[  238.469827][   T30]  schedule+0x164/0x360
[  238.474213][   T30]  schedule_preempt_disabled+0x13/0x30
[  238.479905][   T30]  rwsem_down_read_slowpath+0x6d9/0x940
[  238.485678][   T30]  ? rwsem_down_read_slowpath+0x596/0x940
[  238.513730][   T30]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  238.532184][   T30]  ? do_futex+0x395/0x420
[  238.546830][   T30]  down_read+0x99/0x2e0
[  238.552770][ T9344] netlink: 'syz.5.986': attribute type 8 has an invalid length.
[  238.563552][   T30]  ? exit_mm+0x64/0x250
[  238.573603][   T30]  exit_mm+0x73/0x250
[  238.577961][ T9344] netlink: 4 bytes leftover after parsing attributes in process `syz.5.986'.
[  238.602382][   T30]  ? unwind_deferred_task_exit+0x67/0xa0
[  238.609500][   T30]  do_exit+0x8b9/0x2490
[  238.627249][   T30]  ? try_to_wake_up+0x7fc/0x1390
[  238.644278][ T9344] bond0: entered promiscuous mode
[  238.651122][   T30]  ? __pfx_do_exit+0x10/0x10
[  238.667481][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  238.668533][ T9344] bond_slave_0: entered promiscuous mode
[  238.678079][   T30]  do_group_exit+0x21b/0x2d0
[  238.693802][   T30]  __x64_sys_exit_group+0x3f/0x40
[  238.712278][ T9344] bond_slave_1: entered promiscuous mode
[  238.719666][   T30]  x64_sys_call+0x221a/0x2240
[  238.736392][ T9344] gretap0: entered promiscuous mode
[  238.744800][   T30]  do_syscall_64+0x14d/0xf80
[  238.758535][   T30]  ? trace_irq_disable+0x3b/0x150
[  238.770762][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.784126][   T30]  ? clear_bhb_loop+0x40/0x90
[  238.793608][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  238.806489][   T30] RIP: 0033:0x7f7400d9c799
[  238.816845][   T30] RSP: 002b:00007fffe79a3928 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[  238.835012][   T30] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7400d9c799
[  238.851293][   T30] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000
[  238.868667][   T30] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007f7400fe63e0
[  238.884351][   T30] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000
[  238.902051][   T30] R13: 00007f7400fe63e0 R14: 0000000000000003 R15: 00007fffe79a39e0
[  238.918090][   T30]  </TASK>
[  238.924787][   T30] INFO: task syz.3.4:5972 blocked for more than 143 seconds.
[  238.941187][   T30]       Tainted: G             L      syzkaller #0
[  238.955041][   T30]       Blocked by coredump.
[  238.965459][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  238.986107][   T30] task:syz.3.4         state:D stack:25240 pid:5972  tgid:5971  ppid:5845   task_flags:0x40044c flags:0x00080001
[  239.009987][   T30] Call Trace:
[  239.017901][   T30]  <TASK>
[  239.024294][   T30]  __schedule+0x1665/0x5590
[  239.033541][   T30]  ? __pfx___schedule+0x10/0x10
[  239.044538][   T30]  ? schedule+0x90/0x360
[  239.053479][   T30]  schedule+0x164/0x360
[  239.063323][   T30]  schedule_preempt_disabled+0x13/0x30
[  239.073996][   T30]  rwsem_down_read_slowpath+0x6d9/0x940
[  239.080215][ T9333] loop9: detected capacity change from 0 to 32768
[  239.087093][   T30]  ? rwsem_down_read_slowpath+0x596/0x940
[  239.104219][   T30]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  239.111146][   T30]  ? do_futex+0x395/0x420
[  239.127468][ T9333] JBD2: Ignoring recovery information on journal
[  239.129040][   T30]  down_read+0x99/0x2e0
[  239.138986][   T30]  ? exit_mm+0x64/0x250
[  239.143697][   T30]  exit_mm+0x73/0x250
[  239.147767][   T30]  ? unwind_deferred_task_exit+0x67/0xa0
[  239.153996][   T30]  do_exit+0x8b9/0x2490
[  239.158411][   T30]  ? __pfx_do_exit+0x10/0x10
[  239.163083][   T30]  do_group_exit+0x21b/0x2d0
[  239.167835][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.173627][   T30]  get_signal+0x1284/0x1330
[  239.178474][   T30]  arch_do_signal_or_restart+0xbc/0x830
[  239.184107][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  239.190782][   T30]  ? __x64_sys_recvmmsg+0x198/0x250
[  239.196162][   T30]  exit_to_user_mode_loop+0x86/0x480
[  239.201918][   T30]  ? rcu_is_watching+0x15/0xb0
[  239.206766][   T30]  do_syscall_64+0x32d/0xf80
[  239.211983][   T30]  ? trace_irq_disable+0x3b/0x150
[  239.217255][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.224408][   T30]  ? clear_bhb_loop+0x40/0x90
[  239.229364][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.235454][   T30] RIP: 0033:0x7f7400d9c799
[  239.240164][   T30] RSP: 002b:00007f7401cb6028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  239.248917][   T30] RAX: 0000000000006f99 RBX: 00007f7401015fa0 RCX: 00007f7400d9c799
[  239.256954][   T30] RDX: 03fffffffffffdfc RSI: 00002000000099c0 RDI: 0000000000000003
[  239.265478][   T30] RBP: 00007f7400e32c99 R08: 0000000000000000 R09: 0000000000000000
[  239.276112][   T30] R10: 0000000000010002 R11: 0000000000000246 R12: 0000000000000000
[  239.285042][   T30] R13: 00007f7401016038 R14: 00007f7401015fa0 R15: 00007fffe79a35e8
[  239.308544][   T30]  </TASK>
[  239.311870][   T30] INFO: task syz.3.4:5979 blocked for more than 144 seconds.
[  239.319809][ T9344] bond0: left promiscuous mode
[  239.328102][ T9344] bond_slave_0: left promiscuous mode
[  239.336167][ T9333] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  239.347762][ T9344] bond_slave_1: left promiscuous mode
[  239.354450][   T30]       Tainted: G             L      syzkaller #0
[  239.391875][   T30]       Blocked by coredump.
[  239.419515][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  239.431157][   T30] task:syz.3.4         state:D stack:28800 pid:5979  tgid:5971  ppid:5845   task_flags:0x40044c flags:0x00080000
[  239.443877][   T30] Call Trace:
[  239.452544][   T30]  <TASK>
[  239.462922][   T30]  __schedule+0x1665/0x5590
[  239.473686][   T30]  ? __pfx___schedule+0x10/0x10
[  239.485013][   T30]  ? schedule+0x90/0x360
[  239.493800][   T30]  schedule+0x164/0x360
[  239.505176][   T30]  schedule_preempt_disabled+0x13/0x30
[  239.516674][   T30]  rwsem_down_read_slowpath+0x6d9/0x940
[  239.532755][   T30]  ? rwsem_down_read_slowpath+0x596/0x940
[  239.546236][   T30]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  239.557866][   T30]  ? do_futex+0x395/0x420
[  239.567386][   T30]  down_read+0x99/0x2e0
[  239.576573][   T30]  ? exit_mm+0x64/0x250
[  239.586444][   T30]  exit_mm+0x73/0x250
[  239.594640][   T30]  ? unwind_deferred_task_exit+0x67/0xa0
[  239.606713][   T30]  do_exit+0x8b9/0x2490
[  239.612346][   T30]  ? __pfx_do_exit+0x10/0x10
[  239.617144][   T30]  do_group_exit+0x21b/0x2d0
[  239.625744][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.631561][   T30]  get_signal+0x1284/0x1330
[  239.636250][   T30]  arch_do_signal_or_restart+0xbc/0x830
[  239.642917][   T30]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  239.649727][   T30]  exit_to_user_mode_loop+0x86/0x480
[  239.655283][   T30]  ? rcu_is_watching+0x15/0xb0
[  239.660527][   T30]  do_syscall_64+0x32d/0xf80
[  239.665283][   T30]  ? trace_irq_disable+0x3b/0x150
[  239.670555][   T30]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.676932][   T30]  ? clear_bhb_loop+0x40/0x90
[  239.681903][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  239.688033][   T30] RIP: 0033:0x7f7400d9c799
[  239.692784][   T30] RSP: 002b:00007f7401c740e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  239.701496][   T30] RAX: fffffffffffffe00 RBX: 00007f7401016188 RCX: 00007f7400d9c799
[  239.709818][   T30] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7401016188
[  239.717958][   T30] RBP: 00007f7401016180 R08: 0000000000000000 R09: 0000000000000000
[  239.727630][   T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  239.736041][   T30] R13: 00007f7401016218 R14: 00007fffe79a3500 R15: 00007fffe79a35e8
[  239.745910][   T30]  </TASK>
[  239.750211][   T30] 
[  239.750211][   T30] Showing all locks held in the system:
[  239.751480][ T9344] gretap0: left promiscuous mode
[  239.758473][   T30] 1 lock held by khungtaskd/30:
[  239.767953][   T30]  #0: ffffffff8e75d6a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  239.791377][   T30] 2 locks held by kworker/1:2/992:
[  239.796906][   T30] 1 lock held by dhcpcd/5510:
[  239.801891][   T30]  #0: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0
[  239.811776][   T30] 2 locks held by getty/5600:
[  239.816593][   T30]  #0: ffff8880373e70a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  239.827606][   T30]  #1: ffffc9000322b2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0
[  239.839888][   T30] 1 lock held by syz.3.4/5971:
[  239.844821][   T30]  #0: ffff88801b09c1b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250
[  239.855110][   T30] 1 lock held by syz.3.4/5972:
[  239.860333][   T30]  #0: ffff88801b09c1b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250
[  239.870875][   T30] 1 lock held by syz.3.4/5979:
[  239.875777][   T30]  #0: ffff88801b09c1b8 (&mm->mmap_lock){++++}-{4:4}, at: exit_mm+0x73/0x250
[  239.885119][   T30] 2 locks held by syz.9.983/9332:
[  239.893269][   T30] 3 locks held by syz.5.986/9344:
[  239.898488][   T30]  #0: ffffffff901461a8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250
[  239.908095][   T30]  #1: ffffffff8fbd5d80 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0
[  239.917746][   T30]  #2: ffffffff8e7638e8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770
[  239.929130][   T30] 
[  239.931533][   T30] =============================================
[  239.931533][   T30] 
[  239.940536][   T30] NMI backtrace for cpu 1
[  239.940553][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  239.940595][   T30] Tainted: [L]=SOFTLOCKUP
[  239.940602][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  239.940613][   T30] Call Trace:
[  239.940621][   T30]  <TASK>
[  239.940629][   T30]  dump_stack_lvl+0xe8/0x150
[  239.940663][   T30]  nmi_cpu_backtrace+0x274/0x2d0
[  239.940691][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  239.940722][   T30]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  239.940755][   T30]  sys_info+0x135/0x170
[  239.940780][   T30]  watchdog+0x1002/0x1060
[  239.940812][   T30]  ? watchdog+0x1da/0x1060
[  239.940841][   T30]  kthread+0x388/0x470
[  239.940866][   T30]  ? __pfx_watchdog+0x10/0x10
[  239.940887][   T30]  ? __pfx_kthread+0x10/0x10
[  239.940912][   T30]  ret_from_fork+0x51e/0xb90
[  239.940962][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  239.940987][   T30]  ? __switch_to+0xc7d/0x1450
[  239.941013][   T30]  ? __pfx_kthread+0x10/0x10
[  239.941035][   T30]  ret_from_fork_asm+0x1a/0x30
[  239.941068][   T30]  </TASK>
[  239.941075][   T30] Sending NMI from CPU 1 to CPUs 0:
[  240.062190][    C0] NMI backtrace for cpu 0
[  240.062210][    C0] CPU: 0 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  240.062234][    C0] Tainted: [L]=SOFTLOCKUP
[  240.062239][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  240.062250][    C0] Workqueue: events_unbound nsim_dev_trap_report_work
[  240.062282][    C0] RIP: 0010:lock_release+0xd1/0x3d0
[  240.062310][    C0] Code: 11 c7 44 24 24 01 00 00 00 83 3d 79 9f 6f 0e 00 0f 84 90 01 00 00 41 8b 87 48 0b 00 00 85 c0 0f 84 17 01 00 00 4c 89 6c 24 18 <48> 89 5c 24 08 44 8d 60 ff 49 8d af 50 0b 00 00 4d 63 ec 48 89 04
[  240.062325][    C0] RSP: 0018:ffffc900015f7510 EFLAGS: 00000006
[  240.062338][    C0] RAX: 0000000000000005 RBX: 0000000000000202 RCX: 0000000080000001
[  240.062350][    C0] RDX: ffffc900015f7601 RSI: ffffffff8df56d02 RDI: ffffffff8c284e00
[  240.062362][    C0] RBP: dffffc0000000000 R08: ffffc900015f7b30 R09: 0000000000000000
[  240.062374][    C0] R10: ffffc900015f7698 R11: fffff520002beed5 R12: ffffc900015f7b40
[  240.062386][    C0] R13: ffffffff81774bb5 R14: ffffffff8e75d6a0 R15: ffff88801c3f8000
[  240.062399][    C0] FS:  0000000000000000(0000) GS:ffff888125435000(0000) knlGS:0000000000000000
[  240.062412][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  240.062423][    C0] CR2: 0000001b32206ff8 CR3: 000000000e54a000 CR4: 00000000003526f0
[  240.062439][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  240.062449][    C0] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  240.062459][    C0] Call Trace:
[  240.062465][    C0]  <TASK>
[  240.062473][    C0]  ? deref_stack_reg+0x19f/0x230
[  240.062491][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  240.062509][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  240.062524][    C0]  unwind_next_frame+0x1aaa/0x23c0
[  240.062544][    C0]  ? unwind_next_frame+0xa5/0x23c0
[  240.062560][    C0]  ? nsim_dev_trap_report_work+0x7cf/0xb80
[  240.062586][    C0]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  240.062608][    C0]  arch_stack_walk+0x11b/0x150
[  240.062628][    C0]  ? process_one_work+0x9ab/0x1780
[  240.062654][    C0]  stack_trace_save+0xa9/0x100
[  240.062681][    C0]  ? __pfx_stack_trace_save+0x10/0x10
[  240.062701][    C0]  ? process_one_work+0x9ab/0x1780
[  240.062725][    C0]  ? ret_from_fork_asm+0x1a/0x30
[  240.062743][    C0]  kasan_save_track+0x3e/0x80
[  240.062768][    C0]  ? kasan_save_track+0x3e/0x80
[  240.062791][    C0]  ? kasan_save_free_info+0x46/0x50
[  240.062811][    C0]  ? __kasan_slab_free+0x5c/0x80
[  240.062825][    C0]  ? kmem_cache_free+0x189/0x640
[  240.062840][    C0]  ? nsim_dev_trap_report_work+0x7cf/0xb80
[  240.062887][    C0]  kasan_save_free_info+0x46/0x50
[  240.062908][    C0]  __kasan_slab_free+0x5c/0x80
[  240.062924][    C0]  kmem_cache_free+0x189/0x640
[  240.062939][    C0]  ? nsim_dev_trap_report_work+0x7cf/0xb80
[  240.062966][    C0]  nsim_dev_trap_report_work+0x7cf/0xb80
[  240.063000][    C0]  ? process_one_work+0x8bb/0x1780
[  240.063023][    C0]  process_one_work+0x9ab/0x1780
[  240.063056][    C0]  ? __pfx_process_one_work+0x10/0x10
[  240.063079][    C0]  ? do_raw_spin_lock+0x12b/0x2f0
[  240.063106][    C0]  worker_thread+0xba8/0x11e0
[  240.063125][    C0]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  240.063144][    C0]  ? __kthread_parkme+0x7a/0x1f0
[  240.063161][    C0]  ? __kthread_parkme+0x19c/0x1f0
[  240.063180][    C0]  kthread+0x388/0x470
[  240.063199][    C0]  ? __pfx_worker_thread+0x10/0x10
[  240.063213][    C0]  ? __pfx_kthread+0x10/0x10
[  240.063232][    C0]  ret_from_fork+0x51e/0xb90
[  240.063257][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  240.063279][    C0]  ? __switch_to+0xc7d/0x1450
[  240.063301][    C0]  ? __pfx_kthread+0x10/0x10
[  240.063320][    C0]  ret_from_fork_asm+0x1a/0x30
[  240.063342][    C0]  </TASK>
[  240.467980][ T8794] ocfs2: Unmounting device (7,9) on (node local)
[  240.477928][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  240.484837][   T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  240.495543][   T30] Tainted: [L]=SOFTLOCKUP
[  240.499902][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  240.509995][   T30] Call Trace:
[  240.513297][   T30]  <TASK>
[  240.516241][   T30]  vpanic+0x56c/0xa60
[  240.520254][   T30]  ? __pfx___schedule+0x10/0x10
[  240.525148][   T30]  ? __pfx_vpanic+0x10/0x10
[  240.529698][   T30]  ? nmi_trigger_cpumask_backtrace+0x1f4/0x300
[  240.535897][   T30]  panic+0xc5/0xd0
[  240.539646][   T30]  ? __pfx_panic+0x10/0x10
[  240.544089][   T30]  ? preempt_schedule_thunk+0x16/0x30
[  240.549485][   T30]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  240.555665][   T30]  watchdog+0x105b/0x1060
[  240.560036][   T30]  ? watchdog+0x1da/0x1060
[  240.564470][   T30]  kthread+0x388/0x470
[  240.568555][   T30]  ? __pfx_watchdog+0x10/0x10
[  240.573258][   T30]  ? __pfx_kthread+0x10/0x10
[  240.577871][   T30]  ret_from_fork+0x51e/0xb90
[  240.582487][   T30]  ? __pfx_ret_from_fork+0x10/0x10
[  240.587614][   T30]  ? __switch_to+0xc7d/0x1450
[  240.592309][   T30]  ? __pfx_kthread+0x10/0x10
[  240.596922][   T30]  ret_from_fork_asm+0x1a/0x30
[  240.601737][   T30]  </TASK>
[  240.605539][   T30] Kernel Offset: disabled
[  240.609873][   T30] Rebooting in 86400 seconds..