last executing test programs:

1m29.152249665s ago: executing program 4 (id=5):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000140)=ANY=[], 0x1, 0x69c, &(0x7f0000000800)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0x200000080000000)

1m28.615555682s ago: executing program 4 (id=15):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
eventfd(0x1)
dup(r0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r1, 0x29, 0x33, &(0x7f00000002c0)=0x7, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback, 0xd}, 0x1c)
sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback}, 0x1c)
recvmmsg(r1, &(0x7f0000004080)=[{{0x0, 0x0, &(0x7f00000005c0)=[{0x0}, {&(0x7f0000000400)=""/238, 0xee}], 0x2, &(0x7f0000000640)=""/108, 0x6c}, 0x7}], 0x1, 0x0, &(0x7f0000004180)={0x77359400})
sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x44001, 0x0, 0x0)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

1m26.220773529s ago: executing program 4 (id=25):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000700)={0x2, 0x5, "2a7106", 0x0, 0x4})

1m25.973439633s ago: executing program 4 (id=27):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)={[{@unhide}, {@cruft}, {@map_normal}, {@map_normal}, {@session={'session', 0x3d, 0xe}}, {@overriderock}, {@nocompress}, {@nocompress}, {@utf8}, {@mode={'mode', 0x3d, 0x3}}, {@session={'session', 0x3d, 0x9}}, {@map_acorn}, {@mode={'mode', 0x3d, 0x86}}], [{@uid_eq}], 0x2c}, 0x41, 0x9ea, &(0x7f0000004100)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

1m25.700120377s ago: executing program 4 (id=32):
chdir(&(0x7f0000000300)='./file0\x00')
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x41)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = gettid()
syz_open_dev$sndctrl(&(0x7f0000000100), 0x3, 0x801)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000640)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x32}, @void, @void}}, [@NL80211_ATTR_VENDOR_SUBCMD={0x8, 0xc4, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xffffff81}]}, 0x2c}}, 0x20040004)
setrlimit(0xe, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
madvise(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc)
socket$inet6_udplite(0xa, 0x2, 0x88)
listen(r4, 0x0)
connect$unix(r3, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r4, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1m25.243681034s ago: executing program 4 (id=34):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7b7, &(0x7f0000000f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

1m25.017512057s ago: executing program 32 (id=34):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file2\x00', 0x2000410, &(0x7f0000000080), 0x81, 0x7b7, &(0x7f0000000f80)="$eJzs3ctrXNcZAPDvjl6W7FYqFFp3JSi0AuNR5ap2C124dFEKNRjadW0xGgtXI43RjIwlBLYpgWwCScgikGy8zsPZZZvHNvkvsgg2TiKLKGQRJtzRHWlkzciSo5kR6PeDq3vOfeicb859nJlzmQngxBpP/+QizkbEq0nEaLY8iYiBeqo/4vLWdpvra4V0SqJW+/fXSX2bjfW1QjTtkzqdZX4dEZ+8FHEuly44tavcysrq/EypVFzK8pPVhVuTlZXV8zcXZuaKc8XFi1PT0xcu/enSxaOL9dvPV888fu0fv3//8vf//9XDVz5N4nKcydY1x3FUxmM8e00G0pdwl78fdWE9lvS6AryQ9NTs2zrL42yMRl891cZwN2sGAHTK3YioAQAnTOL+DwAnTONzgI31tUJj6u0nEt315G9bQ5Mb2djm5nb8/dmY3an6OOjIRrJrZCSJiLEjKH88It7+8L/vplN0aBwSoJV79yPi+tj43ut/sueZhcP6w34ra0P12fgzi13/oHs+Svs/f27V/8tt93+iRf9nqMW5+yKef/7nHh1BMW2l/b+/Nj3bttkUf2asL8v9rN7nG0hu3CwV02vbzyNiIgaG0vxUfdPWT0FNPP3habvym/t/37z+v3fS8tP5zha5R/1Du/eZnanO/NS4G57cj/hNf6v4k+32T9r0f68esIx//uXlt9qtS+NP421Me+PvrNqDiN+1bP+dtkz2fT5xsn44TDYOihY++OLNkXbl77T/UH2elt94L9ANafuP7B//WNL8vGbl8GV89mD043brmo//1vG3Pv4Hk//U04PZsjsz1erSVMRg8q+9yy/s7NvIN7ZP45/4bevzv93xn8uejb2+ndtf/+Ov3sv+Vcv46+61i7+z0vhnD9X++yRq2T7PrHq4Od/XrvyDtf90PTWRLTnI9e85NW0knt94AAAAAAAAAAAAAAAAAAAAAAAAAHAEchFxJpJcfjudy+XzW7/h/csYyZXKleq5G+Xlxdmo/1b2WAzkGl91Odr0fahT2ffhN/IXnsn/MSJ+ERFvDA3X8/lCuTTb6+ABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIHN69+//301n+fzWui+Hel07AKBjTvW6AgBA17n/A8DJc7j7/3DH6gEAdM+h3//Xks5UBADomgPf/693th4AQPcY/wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDDrl65kk6179bXCml+9vbK8nz59vnZYmU+v7BcyBfKS7fyc+XyXKmYL5QX2v6je1uzUrl8azoWl+9MVouV6mRlZfXaQnl5sXrt5sLMXPFacaBrkQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAwVVWVudnSqXiksS+ieHjUY1jk+iPY1GNI0vU+rbOh+NRn/5oLBnsWTWarxLDPbo6AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABx/PwYAAP//eUchiw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8000c61)
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

1m0.125948393s ago: executing program 2 (id=152):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x14008, &(0x7f00000000c0)={[{@grpquota}, {@lazytime}]}, 0x1, 0x52b, &(0x7f00000006c0)="$eJzs3cFvI1cZAPBvZpO1d5uSFHoAVGgphQVVayfedlX1QjlVCFVC9MhhGxJvFK0dr9ZOacIesv8DEpV6ghNnDkgckHrijsQBblzKAanACtQgcTDyeLx1nHjtNLG9xL+fNPKb9zz+3lvL70WfvfMCmFsvRMRBRFyOiHciYjmvT/Ij3ugened98vD+xuHD+xtJtNtv/yPJ2jt10XdNx1P5axYj4odvRvw4GQj6x4jm3v6d9Vqtei+vKrfqd8vNvf3r2/X1repWdadSubl2c/W1G69Wzm2sz9d//fGViPjdb7/y0R8Ovv3TTreW8rb+cZyn7tAXH8XpWIiI708i2Axcysdz+bNc/Jku4jylEfH5iHgx+/wvx6Xs3Tzq6Nv0nSn2DgCYhHZ7OdrL/ecAwEWXZjmwJC3luYClSNNSqZvDezauprVGs/Xy7cbuzmY3V7YSi+nt7Vp1Nc8VrsRicnt7obqWlXvntWpl4PxGRDwTET8rXMnOSxuN2uYs//ABgDn21MD6/+9Cd/0HAC644qfFwiz7AQBMT/HI2eCvdQGAi6g46w4AAFNn/QeA+WP9B4D5Y/0HgPlj/QeAufKDt97qHO3D/P7Xm+/u7d5pvHt9s9q8U6rvbpQ2GvfulrYaja3snj31Ua9XazTurr0Su++VW9Vmq9zc279Vb+zutG5l9/W+VV2cyqgAgMd55vkP/5xExMHrV7Ij+u73P3Ktfm7SvQMmKZ11B4CZuTTrDgAzc3y3L2BenCIff2WS/QBmp++mXw/6qovHCoPeH+vlU/uGwpPn2pfOkP8H/q/J/8P8OiH/P8ay7295uAjk/2F+tduJPf8BYM7I8QOjNv3q//5/td13MvD9v98TAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAME+WsiNJS/le4EuRpqVSxNMRsRKLye3tWnU1Ij4XEX8qLBY652vjbRIMADyx0r8l+f5f15ZfWhpsvVz4TyF7jIiffPD2z99bb7XurUVcTv75qL71fl5fmUX/AYBReut0bx3v+eTh/Y3eMc3+fPzd7uainbiH+dFtWYiF7LGY5Rqu/ivJz7uSc9pr9OBBRHzxpPEnWW5kJd/5dDB+J/bTU42fHomfZm3dx86/xRfOoS8wbz7szD9vnPT5S+OF7PHkz38xm6HOrjf/HR6b/9JH89+lIfPfgJWhMV75/feOVbaXu20PIr68EHHYe/G++acXPxkS/6Uxx/iX57764rC29i8irsVJ40+OxCq36nfLzb3969v19a3qVnWnUrm5dnP1tRuvVspZjrrcy1Qf9/fXk6HbW3fGf3VI/OKI8X9jzPH/8r/v/Ohrj4n/ra+f/P4/+5j4nTXxm2PGX7/6m+Kwtk78zSHjH/X+vzxm/I/+ur855lMBgClo7u3fWa/VqveOFXby7wJ6NYsnPOcUhfRsl/cK7VHPSSIOzhbiFIXCr5I3pxVrgoWYbtAPImLWQ1YYVZj1zARM2qcf+tNddx65LwAAAAAAAAAAAAAAYDwT+M9DURyomfUYAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLj+FwAA///yu87n")
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$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")
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, 0x0)
accept$inet6(r5, 0x0, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ftruncate(r8, 0x2000009)
write$cgroup_int(r7, 0x0, 0x0)
write$binfmt_script(r8, 0x0, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

57.291173676s ago: executing program 2 (id=156):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8a)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x0, 0x0})
socket$l2tp(0x2, 0x2, 0x73)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x40000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={0x0, 0xec0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r5, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40)

56.905711101s ago: executing program 2 (id=161):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, 0x0, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
preadv(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, 0x7, 0x0)

56.721902204s ago: executing program 2 (id=163):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)={[{@unhide}, {@cruft}, {@map_normal}, {@map_normal}, {@session={'session', 0x3d, 0xe}}, {@overriderock}, {@nocompress}, {@nocompress}, {@utf8}, {@mode={'mode', 0x3d, 0x3}}, {@session={'session', 0x3d, 0x9}}, {@map_acorn}, {@mode={'mode', 0x3d, 0x86}}], [{@uid_eq}], 0x2c}, 0x41, 0x9ea, &(0x7f0000004100)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

56.500096888s ago: executing program 2 (id=165):
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000480)='./file0\x00')
symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00')

56.133948173s ago: executing program 3 (id=168):
socket$inet(0x2, 0x4000000000080001, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
chdir(0x0)
pread64(0xffffffffffffffff, 0x0, 0x0, 0x41)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
r1 = socket(0x10, 0x3, 0x0)
write(r1, &(0x7f0000000140), 0x0)
connect$netlink(r1, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f00000002c0)={0x1, 0x5}, 0x2)
write$USERIO_CMD_REGISTER(r2, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r2, &(0x7f0000000180)={0x2, 0xfc}, 0x2)

55.747069929s ago: executing program 2 (id=169):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x210380)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x40)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000000000000001d2e9434000000445e4a89aac43f9e002000000000000000"], 0x24, 0x3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)

55.173644497s ago: executing program 33 (id=169):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0)
syz_open_dev$cec(0x0, 0x0, 0x210380)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x400, 0x0)
ioctl$RTC_AIE_ON(r3, 0x7001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000180)='rpc_pipefs\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x40)
mount$9p_virtio(&(0x7f0000000100), &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0), 0x814004, 0x0)
setxattr$system_posix_acl(&(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000400)=ANY=[@ANYBLOB="0200000001000000000000001d2e9434000000445e4a89aac43f9e002000000000000000"], 0x24, 0x3)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000800), r4)
sendmsg$NLBL_MGMT_C_ADDDEF(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4)

55.137916348s ago: executing program 3 (id=172):
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000080), 0x0, 0x0, 0x0)

54.883387592s ago: executing program 3 (id=173):
r0 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e24, 0xfffffffc, @local, 0x2}, 0x1c)
r1 = socket$inet6(0xa, 0x2, 0x3a)
setsockopt$inet6_int(r1, 0x29, 0x4e, 0x0, 0x0)
bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xa}, 0x1c)
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='net/icmp6\x00')
preadv(r2, &(0x7f0000000140)=[{&(0x7f00000002c0)=""/228, 0xe4}], 0x1, 0x7, 0x0)

54.717741845s ago: executing program 3 (id=175):
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x3a0cc0a, &(0x7f0000000480)={[{@unhide}, {@cruft}, {@map_normal}, {@map_normal}, {@session={'session', 0x3d, 0xe}}, {@overriderock}, {@nocompress}, {@nocompress}, {@utf8}, {@mode={'mode', 0x3d, 0x3}}, {@session={'session', 0x3d, 0x9}}, {@map_acorn}, {@mode={'mode', 0x3d, 0x86}}], [{@uid_eq}], 0x2c}, 0x41, 0x9ea, &(0x7f0000004100)="$eJzs3U1sHOUZB/D/+CNxTRQCpDRFQDahAQOpYzslNOLSxF4npv6obEciqipCSVJFsUoFRQLUQypVPRW1h6oHekPqpSckLnCpcmuvvfRQqeLcG+op6qFbzew6tmOv1wn+Ivx+1nrn45n3fd6d2Xnl8e684cus0WhUj3ucv/Dn7UyW3efs2GcffvR++fjljexJd14oPkn6ktSSniSHkt7RsdmZqQ4FXU8uJbmZFEn2pvm8IZdS/Db7luZvpvhjWW/lwj02jA1p8JW208cfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsRsXo2NDQcJHJiekLr9Taq4YAb7eya6m8T6tRv4tPO9abFOUjfX2LQ30fOri0+tHy19E83px7vBqQPH1574FHD7z0SE/X4vbrJHw3/tcaDPmuN3zr3feuv7awcOXNTUrky+ZcfXpibmZi6sy5em1ibqZ2+tSpoRPnx+dq4xOT9bmLc/P1qdrobP3M/MxsbWD02drw6dMna/XBizMXps+NDU7WFxe++O2RoaFTtZcHf1A/Mzs3M33i5cG50fMTk5MT0+eqmHJ1GfNieSB+f2K+Nl8/M1WrXb22cOXkiozWOCTKoOFOLSmDRjoFjQyNjAwPj4wMn3rh9AsvDg31LC3oTrVg6A5Ztcntgzb7slnHLzvvg66NRm7yGRzuXVer/89kJjKdC3kltTV/RjOW2cxkqs36lsX+/9iJ+rr1Lu//F3v5Q0urH0vV/z/ZnHuyXf/fJpft+3kr7+a9XM9rWchCruTNFWv33kOJjcbarfrT35uvxU63eOXPudQznYnMZSYTmcqZakmttaSW0zmVUxnKqzmf8cyllvFMZDL1zOVi5jKfenVEjWY29ZzJfE+zjQMZzbOpZTinczonU0s9g7mYmVzIdM5lLGeqUq7mWvW6n1wnx9tBwxsJGlknaJ3+v7XgLvp/vqI2+xQO96zR6v/3dA4dGN2OhAAAAIBN982/Zf/Bh//6r6Q3T1TX2AEAAID7TfVxvcfLp95y6okU4xOT9aHVgW9vf24AAADA5iiq79gVSfpzuDm1+E2oNS4CAAAAAF9G1f//nyyf+supwyn8/Q8AAAD3m8732O8YURxPLTfKVbXLzcjLrYjWfX77xycm64OjM5MvDefp6i4D1TcNVpXWnQNJ9fWD53KkGXWkv/ncv7LEvjJqePCl4fTlaKshA0+VT08NrBE5UkY+l2eakc8sRvZlVeTJMhIA7ndH1+mPN9r/P5fjzYjjj1W3b+95bI0+eEjPCgC7RecxdjpGFN9ZHP6nzd//3bl6uPmRgsG8njeykMs5Xn3boPrEQavU3CyyVGr/so8hHO9wNaB/2QgvxxevBxzet+b1gP5lA70cX3VFoF3syTVfu2LT9wYAbI+jq/rhdfr/RqM5ter6//p///f7SCEA7Cq3R7Dfwok76+zdmaYCAC3te+l1dG9hQgAAAAAAAAAAAAAAAAAAAAAAAAAAAHAf2Mr7/3cl2dqRBb7AxI0kuyCNbZ74d2u3r1rVWn5jxzNcNrE3X7ycvm0Z4eLdH+3ZxYf6vU3s4EkJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAbVMk3Wst70r2Jj1DSU5sf1Zb58ZOJ7DDilu5lXeyf6fzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC437Tu/9+V5vMDzUXp6UqOJbmU5Ic7neNmurXTCeywZff/L/d5GkV6mrs9Re/o2OzMVLn7s7dc/9mHH71fPu6lnrKAsoYVg0u0ami/1UPVVv1jV966/vM3flYbO1sleXZ+fHJs6tzs95YCHy0+TmppPhYt5vuLonUUr2z5x2VLO9db1jJe1Tu2ut5vrLX17XqP/eV37du2ZCmNawtXRsqa5uuvzL/902vvLAt6OEeSpwaSgZU1/aR8tKnpSHrXq7f4vPh1sT9/yKVq/5dpFI2i3EUPVu3/2tVrC1cGX39j4XKbnA7kcJLLSd/Gczq8ek8sqo66rt6y1qEqqPx1sEN563qge3+j0SxxuE0bHqoOmf67akOtfRsqHV73VhtPtsnokTx913v66Q41tvy30dScKz4v/lmczz/yq2Xjf3SV+/9YNvLuLGOqyGVHSvs2H1tq+cjyFa/eGdn2XckW+E1+nO/e3v9dy87/rX21PeejZTVu2fuiaPZCLdX0wTt6pNbZp12WrTwPNqPa5Pn1PL96uw55Pt/hjLJJ7/+Vis+LD4qB/Cc3jP8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADsfkXSvdbyruRYkgNJHizna0ljM+rr6i82o5gN2rNqyY1trH336Lo9VdzKrbyT/TuaDgAAAAAAAACb5uzYZx9+9H75qP4f351vFZ8kfc3/9PckOVD8vnd0bHZmqkNBvcmlJDfL6b67y6HcLvuW5m+Wc4fuvi0AwMb8PwAA//9F2m9c")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

54.187591672s ago: executing program 3 (id=176):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x180, &(0x7f0000000c80)="$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")
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/keys\x00', 0x0, 0x0)
r1 = add_key$keyring(&(0x7f0000000180), &(0x7f0000002200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$set_timeout(0xf, r1, 0x4007f)
read$FUSE(r0, &(0x7f000000c140)={0x2020}, 0x2020)

53.547714962s ago: executing program 3 (id=178):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e6572696300"], 0xe0}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fa40", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a60000000000000000000800010070"], 0x3c}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

53.255192407s ago: executing program 34 (id=178):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e00000001500000029bd7000000000006469676573745f6e756c6c2d67656e6572696300"], 0xe0}}, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c00fa40", @ANYRES16=0x0, @ANYBLOB="000000000000000000004c0000000c00a60000000000000000000800010070"], 0x3c}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0)

11.476264137s ago: executing program 1 (id=331):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x2000000, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000480)='./file0\x00')
symlinkat(&(0x7f00000004c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./file0\x00')

11.416625838s ago: executing program 1 (id=333):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="021200"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)

10.973065925s ago: executing program 1 (id=335):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0)
write$binfmt_misc(r2, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40095}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x1, 0x2080)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x5b30, 0x0, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

9.770416013s ago: executing program 1 (id=340):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"/494], 0x1, 0x17d, &(0x7f00000004c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

8.960165675s ago: executing program 1 (id=343):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x14008, &(0x7f00000000c0)={[{@grpquota}, {@lazytime}]}, 0x1, 0x52b, &(0x7f00000006c0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
fanotify_init(0xf00, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$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")
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, 0x0, 0x0)

8.559737012s ago: executing program 7 (id=347):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8a)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]})
socket$l2tp(0x2, 0x2, 0x73)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x40000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40)

7.557078396s ago: executing program 7 (id=351):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x121b82, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x88)
lseek(r2, 0x3, 0x3)
getpgrp(0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
shutdown(r4, 0x0)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = gettid()
waitid(0x2, r5, 0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x50, 0xb6, 0x6, {0x0, 0x6}, {}, @cond=[{0x1, 0x0, 0x9, 0x11, 0x0, 0x2}, {0x0, 0xfffc, 0x80, 0x0, 0x6}]})
syz_usb_disconnect(r0)

7.461267378s ago: executing program 1 (id=352):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$eJzslb9rFEEUx78zu7e5BAlaaGFzFgEjmL3dPZU0FrEXhETU8jBjiE5y4XJFEhASbGysxX/EIpWFnVbWFioIFqa0EhyZ2dnb2dzuheX8UeR9IJPvzOybee/tu7cgCOLU8uXzj08vbi2uXAVwBnOYsuvfvPwZ7jz/8ZXXsPLt5uzTw+PnMQBK5XP/hPsDAG+WPGA/PVYp1xqYA3AWwAq40Zq74Lhi9T0whJmvKrcWYHhglx9vqWE0vWkrpGAPe3L10boUkR5iPSR66ACq4P/RAcMqgKa9gjn+be/uPelKoJ8KKTLRUNk9I1t1xbj8Gf+WOG46KdDv6/7zZwd6Htr1yMlfDI7Y6g4Ylq1exBTCMGzZqYid+C/6+fle+tpS9utE0pwsEXXFuYWSLV3h482npdDR/jE3fqm/EmBQKMF/l9Uyof2ob8Vbo1bBCeeIyX1mx1eYWxIXjg7fjVp9/a/pnUyYxgXA3Xqpy+bDjJS3S63OF1YuVfxksgqsLIm0fzAfuOz0J9/5KrQHG1vt7d29hfWN7ppYE5tJ0rkRXYui60nb9OZ0HNP/mqY/zTjnNyqeDViAne5g0I93gEE/Hs6TdHQ67vLr3ndjw03/45j/qVT2eTFhZx9KVryD2T9u/ms171U6TxAEQRAEQRAEQRAEQRAEUYsWGN7PDqeqHD+5Y7Z/BwAA//81gVqd")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = socket(0x2b, 0xa, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xe9b15470fc604c69, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
syz_pidfd_open(0x0, 0x0)
setns(0xffffffffffffffff, 0x4000000)
write$P9_RGETLOCK(r3, 0x0, 0x0)
dup3(r5, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fadvise64(r0, 0x8, 0xff39, 0x3)

7.225468072s ago: executing program 6 (id=354):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0)

6.056684829s ago: executing program 35 (id=352):
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000100)='./file1\x00', 0x810801, &(0x7f0000000140)=ANY=[], 0x4, 0x208, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
r2 = socket(0x2b, 0xa, 0x4)
sendmsg$TCPDIAG_GETSOCK(r2, 0x0, 0x0)
r3 = dup(0xffffffffffffffff)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0)
ioctl$TIOCSETD(r4, 0x5423, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0xe9b15470fc604c69, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
syz_pidfd_open(0x0, 0x0)
setns(0xffffffffffffffff, 0x4000000)
write$P9_RGETLOCK(r3, 0x0, 0x0)
dup3(r5, 0xffffffffffffffff, 0x80000)
ioctl$PPPIOCGFLAGS1(r5, 0x8004745a, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/pm_debug_messages', 0x100102, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fadvise64(r0, 0x8, 0xff39, 0x3)

6.034324629s ago: executing program 6 (id=357):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000840)=@ethtool_eeprom={0xb, 0xa000000, 0xfffffffe}})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socket(0x11, 0x3, 0x0)
r2 = epoll_create1(0x0)
r3 = epoll_create1(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000000)={0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x2, r6}, 0x38)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000000)={0xe000202b})
epoll_pwait(r3, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, 0xffffffffffffffff, &(0x7f0000000300)={0x200f})
ioctl$SIOCSIFHWADDR(r1, 0x8948, &(0x7f0000000140)={'bridge0\x00', @remote})

5.136889523s ago: executing program 6 (id=361):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8a)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]})
socket$l2tp(0x2, 0x2, 0x73)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x40000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40)

4.080961429s ago: executing program 6 (id=363):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file5\x00', 0x20c006, &(0x7f0000000580)={[{@dioread_nolock}, {@grpjquota}, {@quota}, {@errors_remount}, {@nobh}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}]}, 0x1, 0x43d, &(0x7f0000000900)="$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")
chdir(&(0x7f00000000c0)='./file0\x00')
unlink(&(0x7f0000000180)='./file1\x00')
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)

3.448925298s ago: executing program 7 (id=366):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000021c0)=ANY=[], 0xff, 0xc37, &(0x7f00000012c0)="$eJzs3U9sHNd9B/DfGy7FldxWTOwoThoXm6ZIZcVy9S+mYhXuqqbZBpBlIRRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgpYzOxbcUmRNi2SEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvHU6fSwWwEAPEiXR7926oz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYvbyaxqv3HfVL7f7bd8aGR7audjhVNfuq8uVP/fSZs+e+/MLQ+W5eak9/QP299tl4bfTqxcbLM7dm5ybn5ycnGmPT7eszE5M73sNu6292ojoBjVuv3564cWO+ceb5sxs+vjP4/sATxwYvDD178plu2bHhkZHR9SL13vK1+25Ix3YzPA5FEScjxXPf/1lqRUQRuz8X9Qc79psdrjpxourE2PBI1ZGpdmt6ofzwSvdEFBGNnkrN7jnaeiyi1v9A+7C9ZsRi2fyywSfK7o3OtuZa16YmG1dacwvthfbM9JXUaW3Zn0YUcT5FLEXEysC9u+uPImqR4rtHV9O1iOjrnocvVRODt29HsY993IGynY3+iKXiERizA2wging1Uvz8neNxPV9nqmvNFyNeLfOHEW+V+VJEKr8Y5yLe2+J7xKOpFkX8RTn+F1bTRHU96F5XLn298dXpGzM9ZbvXlY94f7jnSvGQ7g+HN+WDccCvTfUoolVd8VfT/f9mBwAAAAAAAAAAAAAAAIC9djiK+EykeOXf/7iaVxzVvPSjF4b+YPBXe+eMP/0h+ynLPh8Ri8XO5uQeyhMDr6QrKT3kucSPs3oU8Sd5/t+3H3ZjAAAAAAAAAAAAAAAAAAAAHmtF/DRSvPju8bQUvWuKt6dvNq62rk11VoXtrv3bXTN9bW1trZE62cw5nnMx51LO5ZwrOaPI9XM2c47nXMy5lHM550rO6Mv1czZzjudc7PtCp35+v5xzJWfUcv2czZzjORdzLuVczrmSMw7I2r0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8nRRTxy0jxnW+upkgR0YwYj04uDzzs1gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAApYFUxA8iReMPm3e31SIiVf92HC9/ORfNQ2V+MppDZb4UzYs5W1XWmt9+CO1nd/pTET+JFAP1t+8OeB7//s67u1+DeOtb6+8+W+tkX/fDwfcHnjh29MLQyG88vd3rtFUDTlxqT9++0xgbHhkZ7dlcy0f/ZM+2wXzcYm+6TkTMv/Hm662pqcm5+39RfgV2Uf0RepFqj0tPvaheRO1ANOPh9J3HQHn/fy9S/M67/9G94Xfu//X4lc67u3f4+MWfrt//X9y8ox3e/2ub6+X7f3lP3+r+/2TPthfz70b6axH1hVuz/cci6vNvvHmyfat1c/Lm5PS5U6e+MjT0lbOn+g9F1G+0pyZ7Xu3J6QIAAAAAAAAAAAAAAAB4cFIRvxcpWj9ZTY2IuFPN1xq8MPTsyWf6oq+ab7Vh3vZro1cvNl6euTU7Nzk/PznRGJtuX5+ZmNzp4erVdK+x4ZF96cyHOrzP7T9cf3lm9o259s0/Wtjy8yP1i9fmF+Za17f+OA5HEdHs3XKiavDY8EjV6Kl2a7qqemXLyfQfXX8q4j8jxfVzjfT5vC3P/988w3/D/P/FzTvap/n/n+jZVh4zpSJ+ESl++y+fjs9X7TwS95yzXO5vI8WJ85/L5eJQWa7bhs5zBTozA8uy/xsp/vGXG8t250M+uV729I5P7COiHP+jkeIHf/69+M28bePzH7Ye/yObd7RP4/9Uz7YjG55XsOuuk8f/ZKR46cm34wt52wc9/6P77I3jufDd53Ps0/h/qmfbYD7ub+1N1wEAAAAAAAAAAB5p/amIv4sUPxqppRfytp38/b+JzTvap7//9emebRN7s17Rh77Y9UkFAAAAgAOiPxXx00hxc+Htu3OoN87/7pn/+bvr8z+H06ZPqz/n+7XquQF7+ed/vQbzccd3320AAAAAAAAAAAAAAAAAAAA4UFIq4oW8nvp4NZ9/Ytv11JcjxSv//Vwul46V5brrwA9Wv9Yvz0yfvDg1NXO9tdC6NjXZGJ1tXZ8s6z4VKVb/5nO5blGtr95db76zxvv6WuxzkWLk77tlO2uxd9cmf2q97Omy7CcixX/9w8ay3XWsP7Ve9kxZ9q8jxTf+eeuyx9bLni3Lfi9S/PgbjW7ZI2XZ7vNRP71e9vnrM8U+jAoAAAAAAAAAAAAAAAAAAACPm/5UxJ9Fiv+5tXR3Ln9e/7+/523lrW/1rPe/yZ1qnf/Bav3/7V7fz/r/1XMFFrc7KgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfDylKOLNSDF7eTUtD5TvO+qX2tO374wNj2xd7XCqavZV5cuf+ukzZ899+YWh89384Pp77TPx2ujVi42XZ27Nzk3Oz09ONMam29dnJiZ3vIfd1t/sRHUCGrdevz1x48Z848zzZzd8fGfw/YEnjg1eGHr25DPdsmPDIyOj3QJrRyP67/vo90jbbD8URfxVpHju+z9LPxqIKGL35+JDvjv77XDViRNVJ8aGR6qOTLVb0wvlh1e6J6KIaPRUanbP0VZjERG1PRyLXWlGLJbNLxt8ouze6GxrrnVtarJxpTW30F5oz0xfSZ3Wlv1pRBHnU8RSRKwM3Lu7/iji9Ujx3aOr6V8GIvq65+FLl0e/durM9u0o9rGPO1C2s9EfsVQ8AmN2gA1EEf8UKX7+zvH414GIWnR+4osRr5b5w4i3ojPeqfxinIt4b4vvEY+mWhTxf+X4X1hN7wzkW051Xbn09cZXp2/M9JTtXlce+fvDg3TAr031KOLH1RV/Nf2b/64BAAAAAAAAAAAAAAAADpAifj1SvPju8VTND747p7g9fbNxtXVtqjOtrzv3rztnem1tba2ROtnMOZ5zMedSzuWcKzmjyPVzNsusr63V834X8/alnMs5V3JGX66fs5lzPOdizqWcyzlXckYt18/ZzDmeczHnUs7lnCs593JePgAAAAAAAAAAAAAAAAAAQFdR/ZPiO99cTWsDnfWlx6OTy9YD/dj7/wAAAP//cPn5fg==")
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

3.296913621s ago: executing program 0 (id=367):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0)
write$binfmt_misc(r2, 0x0, 0x0)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40095}, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x1, 0x2080)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x5b30, 0x0, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.970486066s ago: executing program 6 (id=369):
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r0, 0x1)

2.820748838s ago: executing program 7 (id=370):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x14008, &(0x7f00000000c0)={[{@grpquota}, {@lazytime}]}, 0x1, 0x52b, &(0x7f00000006c0)="$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")
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r1 = fanotify_init(0xf00, 0x0)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x10008, &(0x7f0000000700), 0xff, 0x49d, &(0x7f0000000740)="$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")
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, 0x0, 0x0)
accept$inet6(r5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x0)
ftruncate(r7, 0x2000009)
write$binfmt_script(r7, 0x0, 0x0)
fanotify_mark(r1, 0x105, 0x40009975, r0, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB], 0x48)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x20}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)

2.68005982s ago: executing program 5 (id=371):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="02120000"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0)

2.547281092s ago: executing program 5 (id=372):
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0xc8a)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10, 0x2}, &(0x7f0000000340)=<r2=>0x0, 0x0)
syz_io_uring_submit(r2, 0x0, 0x0)
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0002}]})
socket$l2tp(0x2, 0x2, 0x73)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, 0x0, 0x40000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$IPVS_CMD_GET_DAEMON(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x40)

2.215665607s ago: executing program 5 (id=373):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1218088, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x6, 0x2c5, &(0x7f0000000640)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0)
fanotify_init(0x0, 0x101000)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
pselect6(0x40, &(0x7f0000000800)={0x7, 0x8, 0x100, 0xf, 0x7, 0x80, 0x0, 0x7fffffff}, &(0x7f0000000840)={0xdca, 0x3, 0xf21c, 0x6, 0xe997, 0x1, 0x1}, &(0x7f0000000880)={0x9, 0xfffffffffffff94e, 0x100, 0x10, 0x1, 0x5, 0xfffffffffffffff8, 0x985a}, &(0x7f00000008c0), &(0x7f0000000940)={&(0x7f0000000900)={[0x73]}, 0x8})
mount$cgroup(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)={[{@subsystem='cpuset'}, {@subsystem='memory'}, {@subsystem='cpuacct'}]})
sendmsg$TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x8005)
syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x1818c42, &(0x7f0000000d80)=ANY=[], 0xfe, 0x27a, &(0x7f0000000540)="$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")
chdir(0x0)
mremap(&(0x7f00006b7000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x8c80, &(0x7f0000000440)={[{@fmask={'fmask', 0x3d, 0x1}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x3, 0x1510, &(0x7f0000003640)="$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")
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000f80)=""/4096, 0x1000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x23, &(0x7f0000000000), &(0x7f00000000c0)=0x14)
fchown(r0, 0x0, 0x0)

1.282339251s ago: executing program 0 (id=374):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f00000000c0)={0x74, 0x0, 0x34})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000300)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

1.169423403s ago: executing program 7 (id=375):
socket$packet(0x11, 0x3, 0x300)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea080006000700000008000400", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040084)

1.144294233s ago: executing program 6 (id=376):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000007112370000000000950000000000000089e2d90aa1795cc26efb1dacf01150510936875c66d6a7d6eb12d4cdbc5c0ce0d29df91940d8ca08008e7aa5b3c9a10909d6e18b263131bf965f55746df5189a2e23905ae4dc5340e0eb74eb523d5b77a763cccb768b4453c8b1b1dd0a71983b5c2cfe11f3d30228772b0b798ebaf5abde2ce3ec34f8c6f13ee1f181ac563ba7a7edc9be94452da6d7eb67ae3243cb393245efd0dd21de9553cbd1a8516282de458c44d1ddae97af584de743d44ed18d20dd3b2c42cf1e8b27788dfc562367d46197198cd19fda89a6feca6c738b1d4b2522"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f010400000009058303"], 0x0)
ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309)
syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000080)=ANY=[])
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x4)
openat$sysfs(0xffffffffffffff9c, 0x0, 0x121b82, 0x1)
r2 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x88)
lseek(r2, 0x3, 0x3)
getpgrp(0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r4, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r4, 0x0)
shutdown(r4, 0x0)
connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r5 = gettid()
waitid(0x2, r5, 0x0, 0x4, 0x0)
ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000300)={0x50, 0xb6, 0x6, {0x0, 0x6}, {}, @cond=[{0x1, 0x0, 0x9, 0x11, 0x0, 0x2}, {0x0, 0xfffc, 0x80, 0x0, 0x6}]})
syz_usb_disconnect(r0)

580.435331ms ago: executing program 5 (id=377):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_init_net_socket$x25(0x9, 0x5, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x6ee80, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c)
r3 = socket$inet6(0xa, 0x3, 0xff)
socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000000)=0x659f, 0x4)
write$binfmt_script(r3, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000013c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40002000, 0x0)
openat$cgroup_ro(r2, 0x0, 0x275a, 0x0)
close(0xffffffffffffffff)
socket$inet(0x2, 0x4000000000000001, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)
io_setup(0x1, &(0x7f00000004c0)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f00000000c0)=[&(0x7f0000000140)={0x3a0012fb, 0x2759, 0x1f, 0x0, 0x0, r1, &(0x7f0000000000)="98", 0x1, 0x1000000, 0x0, 0x10, r2}])
ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f0000000040)=<r5=>0x0)
connect$nfc_raw(r2, &(0x7f0000000080)={0x27, r5, 0xffffffffffffffff, 0x1}, 0x10)
bind$rose(0xffffffffffffffff, &(0x7f00000000c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @default, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x40)
r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r6, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

515.658893ms ago: executing program 0 (id=378):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000040)=[{r1, 0x118a}, {r1, 0x54}], 0x2, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000000)=[{&(0x7f00000003c0)=""/150, 0x96}], 0x1)

435.868804ms ago: executing program 7 (id=379):
syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x800080, &(0x7f0000000000)={[{@test_dummy_encryption}, {@usrquota}, {@nombcache}]}, 0x2, 0x45c, &(0x7f0000000f00)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x850c01, 0x0, 0x0, 0x0, &(0x7f0000000080))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000000c0)=""/85, 0x55)

378.383025ms ago: executing program 0 (id=380):
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0xff}, 0x1c, 0x0}}], 0x1, 0x0)
recvmmsg(r0, &(0x7f0000000940)=[{{0x0, 0x0, 0x0}, 0xdb30}], 0x1, 0x40002042, 0x0)

207.728857ms ago: executing program 5 (id=381):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5df6, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0)
sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0)
sendmsg$key(r1, 0x0, 0x0)

130.971359ms ago: executing program 0 (id=382):
open(&(0x7f0000000380)='./file0\x00', 0x14927e, 0x0)
mount$9p_tcp(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f00000003c0)={'trans=tcp,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@cache_mmap}, {@noextend}, {@privport}, {@noxattr}, {@access_client}, {@noxattr}, {@dfltuid={'dfltuid', 0x3d, 0xffffffffffffffff}}, {@directio}, {@afid={'afid', 0x3d, 0xd5}}], [{@dont_measure}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '\\'}}]}})

1.58085ms ago: executing program 0 (id=383):
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x81, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, 0x0, 0x0)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, 0x0, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$video4linux(0x0, 0x1, 0x2080)
r3 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121)
r4 = dup(r3)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
r5 = syz_io_uring_setup(0x5b30, 0x0, &(0x7f0000000180)=<r6=>0x0, &(0x7f00000001c0)=<r7=>0x0)
syz_io_uring_submit(r6, r7, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3})
io_uring_enter(r5, 0x2def, 0x4000, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

0s ago: executing program 5 (id=384):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@acl}, {}, {@noacl}, {}, {@nouser_xattr}, {@cache_strategy_readahead}]}, 0x1, 0x177, &(0x7f0000000680)="$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")
listxattr(&(0x7f0000000280)='./file1\x00', 0x0, 0x0)

kernel console output (not intermixed with test programs):

: link becomes ready
[   65.682473][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   65.697338][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.707448][ T4176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   65.720268][ T4176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   65.734244][ T4176] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.747483][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.756263][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   65.765045][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.774764][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.786673][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   65.796374][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   65.810712][ T4172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.820420][ T4172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.829421][ T4172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.838306][ T4172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.859850][ T4178] device veth1_vlan entered promiscuous mode
[   65.871548][ T4176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.881135][ T4176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.890292][ T4176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.899478][ T4176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.911261][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   65.930332][ T4179] device veth0_vlan entered promiscuous mode
[   65.957682][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   65.966459][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   65.975981][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   65.984234][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.016929][ T4177] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.035168][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.045612][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.070338][ T4179] device veth1_vlan entered promiscuous mode
[   66.097719][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.109810][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.126809][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.153632][ T4178] device veth0_macvtap entered promiscuous mode
[   66.199366][ T4178] device veth1_macvtap entered promiscuous mode
[   66.258783][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.269438][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.280140][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.290213][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.299199][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.312920][ T4179] device veth0_macvtap entered promiscuous mode
[   66.322155][ T4179] device veth1_macvtap entered promiscuous mode
[   66.339755][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.351847][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.362227][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.373068][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.384926][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.404370][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.417739][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.446247][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.461345][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.470678][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.485976][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.495966][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.508885][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.520642][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.531166][ T4178] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.542038][ T4178] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.554990][ T4178] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.568704][ T4178] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.577637][ T4178] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.587112][ T4216] Bluetooth: hci1: command 0x040f tx timeout
[   66.588123][ T4178] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.593486][ T4216] Bluetooth: hci4: command 0x040f tx timeout
[   66.593923][ T4216] Bluetooth: hci0: command 0x040f tx timeout
[   66.608035][ T4178] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.626471][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.637796][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.648086][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.659050][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.663565][ T4216] Bluetooth: hci2: command 0x040f tx timeout
[   66.670638][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.681427][ T4216] Bluetooth: hci3: command 0x040f tx timeout
[   66.686186][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.703564][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.711652][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.722328][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.731505][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.740830][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.762848][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.770936][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.776088][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.789864][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   66.798434][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.817415][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.829344][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.839982][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.850824][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.861075][ T4179] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.871690][ T4179] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.883864][ T4179] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.900932][ T4179] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.911658][ T4179] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.920665][ T4179] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.929592][ T4179] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.947322][  T428] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.953044][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   66.965253][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.968326][  T428] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.974733][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.993685][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.002406][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.011529][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.058890][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.069788][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.080357][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.088698][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.114996][ T4177] device veth0_vlan entered promiscuous mode
[   67.224946][ T4177] device veth1_vlan entered promiscuous mode
[   67.292545][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.311682][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.367195][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.381675][ T4254] loop0: detected capacity change from 0 to 2048
[   67.386017][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.404287][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.418167][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.425037][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.433970][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.471302][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.493611][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.509575][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.510908][ T4177] device veth0_macvtap entered promiscuous mode
[   67.533892][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.534935][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.551255][ T4177] device veth1_macvtap entered promiscuous mode
[   67.554721][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.572968][ T4254] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,usrjquota=,quota,norecovery,auto_da_alloc,noquota,grpquota,barrier=0x0000000000000000,grpjquota=,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[   67.573886][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.638752][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.647239][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.650317][ T4254] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.1: bg 0: block 234: padding at end of block bitmap is not set
[   67.655693][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.715349][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.753442][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.770325][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.781582][ T1110] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   67.802966][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.817299][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.828564][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.840593][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.851662][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.868715][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.894657][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.914888][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.935042][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.990179][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.024216][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.047235][ T4264] loop0: detected capacity change from 0 to 256
[   68.060997][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.084250][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.102539][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.128311][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.140448][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.145641][ T4267] loop3: detected capacity change from 0 to 164
[   68.158331][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.175686][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.188378][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.198030][ T1110] usb 2-1: config 9 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.200045][ T4267] =======================================================
[   68.200045][ T4267] WARNING: The mand mount option has been deprecated and
[   68.200045][ T4267]          and is ignored by this kernel. Remove the mand
[   68.200045][ T4267]          option from the mount to silence this warning.
[   68.200045][ T4267] =======================================================
[   68.216985][ T4269] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8'.
[   68.259683][ T4264] exfat: Deprecated parameter 'namecase'
[   68.269842][ T4269] netlink: 3 bytes leftover after parsing attributes in process `syz.2.8'.
[   68.276012][ T4264] exfat: Deprecated parameter 'namecase'
[   68.279428][ T4177] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.309261][ T1110] usb 2-1: config 9 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.322325][ T4267] Unable to read rock-ridge attributes
[   68.335573][ T1110] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   68.350911][ T4177] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.363138][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.371887][ T4177] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.395712][ T4267] Unable to read rock-ridge attributes
[   68.397048][ T4177] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.509204][ T4264] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[   68.664538][ T4216] Bluetooth: hci0: command 0x0419 tx timeout
[   68.850563][ T4216] Bluetooth: hci4: command 0x0419 tx timeout
[   69.105893][ T4216] Bluetooth: hci1: command 0x0419 tx timeout
[   69.116554][ T1107] Bluetooth: hci3: command 0x0419 tx timeout
[   69.126222][ T1107] Bluetooth: hci2: command 0x0419 tx timeout
[   69.558085][ T1110] hid-led: probe of 0003:27B8:01ED.0001 failed with error -71
[   69.654674][ T1110] usb 2-1: USB disconnect, device number 2
[   69.665147][ T4235] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.746389][ T4235] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.760934][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.801492][ T4272] netlink: 100 bytes leftover after parsing attributes in process `syz.2.9'.
[   69.846874][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.881162][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.930881][ T4258] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.033259][ T4216] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   70.472755][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   70.486213][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #82!!!
[   70.542580][ T4287] loop4: detected capacity change from 0 to 1024
[   70.807601][ T4290] loop2: detected capacity change from 0 to 128
[   70.862574][ T4287] hfsplus: request for non-existent node 16777216 in B*Tree
[   70.871443][ T4290] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   70.912659][ T4287] hfsplus: request for non-existent node 16777216 in B*Tree
[   70.942746][ T4216] usb 4-1: Using ep0 maxpacket: 8
[   70.956288][ T4295] loop1: detected capacity change from 0 to 256
[   71.083182][ T4216] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   71.101022][ T4295] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   71.103068][ T4216] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   71.121059][ T4295] FAT-fs (loop1): Filesystem has been set read-only
[   71.134222][ T4295] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   71.149646][ T4295] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   71.170732][   T26] audit: type=1800 audit(1744488553.343:2): pid=4295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.14" name="file1" dev="loop1" ino=1048590 res=0 errno=0
[   71.299002][ T4302] loop0: detected capacity change from 0 to 512
[   71.343080][ T4216] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   71.352181][ T4216] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.352209][ T4216] usb 4-1: Product: syz
[   71.352227][ T4216] usb 4-1: Manufacturer: syz
[   71.352244][ T4216] usb 4-1: SerialNumber: syz
[   71.469252][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[   71.476473][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[   71.507049][ T4302] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[   71.559726][ T4310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   71.562411][ T4312] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'.
[   71.577440][ T4302] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.693286][ T4216] usb 4-1: 0:2 : does not exist
[   71.698863][ T4216] usb 4-1: unit 6 not found!
[   71.986099][ T4216] usb 4-1: USB disconnect, device number 2
[   73.599879][ T4330] netlink: 'syz.2.23': attribute type 6 has an invalid length.
[   73.639687][ T4190] udevd[4190]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   73.797406][ T4339] capability: warning: `syz.2.29' uses deprecated v2 capabilities in a way that may be insecure
[   73.821986][ T4336] loop4: detected capacity change from 0 to 1764
[   73.887564][ T4342] loop2: detected capacity change from 0 to 512
[   73.930670][ T4342] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[   74.008015][ T4342] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[   74.011827][ T4344] loop3: detected capacity change from 0 to 2048
[   74.050010][ T4348] loop1: detected capacity change from 0 to 2048
[   74.059606][ T4219] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   74.061995][ T4342] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz.2.31: attempt to clear invalid blocks 2 len 1
[   74.087454][ T4342] EXT4-fs (loop2): Remounting filesystem read-only
[   74.100133][ T4342] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[   74.128389][ T4344] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.133229][ T4348] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   74.139686][ T4342] EXT4-fs (loop2): Remounting filesystem read-only
[   74.154287][ T4342] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.31: invalid indirect mapped block 1819239214 (level 0)
[   74.171997][ T4342] EXT4-fs (loop2): Remounting filesystem read-only
[   74.185631][ T4342] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.31: invalid indirect mapped block 1819239214 (level 1)
[   74.207035][ T4342] EXT4-fs (loop2): Remounting filesystem read-only
[   74.215737][ T4348] UDF-fs: Scanning with blocksize 512 failed
[   74.215760][ T4342] EXT4-fs (loop2): 1 truncate cleaned up
[   74.228096][ T4342] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback.
[   74.276608][ T4348] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.338248][ T4219] usb 1-1: Using ep0 maxpacket: 8
[   74.490689][  T428] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.502959][ T4219] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[   74.511258][ T4219] usb 1-1: config 179 has no interface number 0
[   74.552726][ T4219] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   74.578026][ T4219] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   74.590014][ T4219] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   74.646949][ T4219] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   74.676714][ T4219] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   74.690592][ T4219] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   74.700151][ T4219] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.741027][ T4334] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   74.827671][  T428] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.844645][ T4357] loop2: detected capacity change from 0 to 128
[   74.880386][ T4357] EXT4-fs (loop2): Ignoring removed nobh option
[   74.905824][  T428] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   74.951549][ T4357] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[   74.974122][ T4181] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   74.984443][ T4357] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.036330][  T428] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   75.078060][ T4216] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input5
[   75.222725][ T4181] usb 4-1: Using ep0 maxpacket: 32
[   75.246416][ T1110] usb 1-1: USB disconnect, device number 2
[   75.252753][    C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   75.262090][    C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[   75.270921][ T1110] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   75.357724][ T4181] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[   75.376151][ T4181] usb 4-1: config 0 has no interface number 0
[   75.396991][ T4181] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   75.411159][ T4181] usb 4-1: config 0 interface 85 has no altsetting 0
[   75.552895][   T21] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   75.583663][ T4181] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   75.632754][ T4181] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.651693][ T4358] chnl_net:caif_netlink_parms(): no params data found
[   75.674442][ T4181] usb 4-1: Product: syz
[   75.678672][ T4181] usb 4-1: Manufacturer: syz
[   75.718502][ T4181] usb 4-1: SerialNumber: syz
[   75.770094][ T4181] usb 4-1: config 0 descriptor??
[   75.896859][ T4378] loop2: detected capacity change from 0 to 8192
[   75.923299][   T21] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[   75.945126][   T21] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.051102][   T21] usb 2-1: config 0 descriptor??
[   76.099905][ T4179] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF
[   76.104487][   T21] cp210x 2-1:0.0: cp210x converter detected
[   76.132974][ T4179] FAT-fs (loop2): Filesystem has been set read-only
[   76.156418][ T4358] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.164082][ T4358] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.174086][ T4358] device bridge_slave_0 entered promiscuous mode
[   76.197626][ T4358] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.240300][ T4358] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.261731][ T4358] device bridge_slave_1 entered promiscuous mode
[   76.401575][ T4358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.443051][ T4358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.473029][ T4181] appletouch 4-1:0.85: Geyser mode initialized.
[   76.487279][ T4181] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input6
[   76.656082][ T4358] team0: Port device team_slave_0 added
[   76.682821][ T4217] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   76.687426][ T4358] team0: Port device team_slave_1 added
[   76.709152][ T4181] usb 4-1: USB disconnect, device number 3
[   76.769855][   T21] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[   76.790594][   T21] cp210x 2-1:0.0: GPIO initialisation failed: -71
[   76.832975][   T21] usb 2-1: cp210x converter now attached to ttyUSB0
[   76.859526][   T21] usb 2-1: USB disconnect, device number 3
[   76.877222][   T21] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[   76.892021][   T21] cp210x 2-1:0.0: device disconnected
[   76.914246][ T4181] appletouch 4-1:0.85: input: appletouch disconnected
[   76.922108][ T4358] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.935004][ T4358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.965690][ T4358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.993223][ T4163] Bluetooth: hci2: command 0x0409 tx timeout
[   77.011000][ T4358] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.020435][ T4358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.048314][ T4358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.053208][ T4217] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   77.095069][ T4217] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1536, setting to 1024
[   77.110956][ T4217] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[   77.114143][ T4358] device hsr_slave_0 entered promiscuous mode
[   77.129252][ T4358] device hsr_slave_1 entered promiscuous mode
[   77.136998][ T4358] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.138307][ T4217] usb 1-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   77.146563][ T4358] Cannot create hsr debugfs directory
[   77.328908][ T4217] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   77.349110][ T4217] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.377565][ T4217] usb 1-1: Product: syz
[   77.400323][ T4217] usb 1-1: Manufacturer: syz
[   77.415236][ T4217] usb 1-1: SerialNumber: syz
[   77.514592][ T4441] loop1: detected capacity change from 0 to 128
[   77.704086][ T4409] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   77.775234][  T428] device hsr_slave_0 left promiscuous mode
[   77.794888][  T428] device hsr_slave_1 left promiscuous mode
[   77.828318][  T428] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.866975][  T428] batman_adv: batadv0: Removing interface: batadv_slave_0
[   77.948694][  T428] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.976227][  T428] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.008890][  T428] device bridge_slave_1 left promiscuous mode
[   78.017730][  T428] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.050135][  T428] device bridge_slave_0 left promiscuous mode
[   78.057111][  T428] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.184264][  T428] device veth1_macvtap left promiscuous mode
[   78.199890][  T428] device veth0_macvtap left promiscuous mode
[   78.219310][  T428] device veth1_vlan left promiscuous mode
[   78.271130][  T428] device veth0_vlan left promiscuous mode
[   78.376049][ T4463] ptrace attach of "./syz-executor exec"[4179] was attempted by ""[4463]
[   78.484298][ T4409] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   78.853771][ T4217] cdc_ncm 1-1:1.0: bind() failure
[   79.062855][ T4219] Bluetooth: hci2: command 0x041b tx timeout
[   79.074510][ T4217] cdc_ncm: probe of 1-1:1.1 failed with error -71
[   79.208045][ T4217] cdc_mbim: probe of 1-1:1.1 failed with error -71
[   79.232985][ T4217] usbtest: probe of 1-1:1.1 failed with error -71
[   79.243439][ T4217] usb 1-1: USB disconnect, device number 3
[   79.348708][ T4466] loop2: detected capacity change from 0 to 8192
[   79.726329][ T4470] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   80.282127][ T4472] loop0: detected capacity change from 0 to 2048
[   80.443947][ T4472] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   80.460417][  T428] team0 (unregistering): Port device team_slave_1 removed
[   80.527495][  T428] team0 (unregistering): Port device team_slave_0 removed
[   80.594370][  T428] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   80.662585][ T4481] loop1: detected capacity change from 0 to 512
[   80.702315][  T428] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   80.718614][ T4481] EXT4-fs (loop1): inline encryption not supported
[   80.743136][ T4481] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.793579][ T4481] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   80.852554][ T4481] EXT4-fs (loop1): 1 truncate cleaned up
[   80.868817][ T4481] EXT4-fs (loop1): mounted filesystem without journal. Opts: minixdf,jqfmt=vfsv0,inlinecrypt,noblock_validity,usrjquota=,,errors=continue. Quota mode: none.
[   80.902385][ T4275] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[   80.922447][ T4275] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   80.936038][ T4275] EXT4-fs (loop0): This should not happen!! Data will be lost
[   80.936038][ T4275] 
[   80.947698][ T4275] EXT4-fs (loop0): Total free blocks count 0
[   80.955178][ T4275] EXT4-fs (loop0): Free/Dirty block details
[   80.961246][ T4275] EXT4-fs (loop0): free_blocks=4096
[   80.982891][ T4275] EXT4-fs (loop0): dirty_blocks=512
[   80.988151][ T4275] EXT4-fs (loop0): Block reservation details
[   80.995476][ T4275] EXT4-fs (loop0): i_reserved_data_blocks=32
[   81.003989][ T4275] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[   81.016619][ T4275] EXT4-fs (loop0): This should not happen!! Data will be lost
[   81.016619][ T4275] 
[   81.031562][ T4481] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.66: bg 0: block 472: padding at end of block bitmap is not set
[   81.104838][  T428] bond0 (unregistering): Released all slaves
[   81.142933][ T4163] Bluetooth: hci2: command 0x040f tx timeout
[   81.285564][ T4358] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   81.317178][ T4358] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   81.375671][ T4358] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   81.496773][ T4358] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   81.667201][ T4497] loop2: detected capacity change from 0 to 2048
[   81.804738][    T7] cfg80211: failed to load regulatory.db
[   81.849037][ T4497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   81.923663][ T4502] ptrace attach of "./syz-executor exec"[4172] was attempted by ""[4502]
[   82.622929][ T4358] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.688264][ T4506] loop0: detected capacity change from 0 to 16
[   82.840142][ T4506] erofs: (device loop0): mounted with root inode @ nid 36.
[   82.876742][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   82.902587][ T4511] loop1: detected capacity change from 0 to 1024
[   82.913486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   82.955540][ T4513] loop2: detected capacity change from 0 to 512
[   83.215472][ T4358] 8021q: adding VLAN 0 to HW filter on device team0
[   83.229088][ T4163] Bluetooth: hci2: command 0x0419 tx timeout
[   83.306771][ T4519] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[   83.317111][ T4519] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 36
[   83.328931][ T4519] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[   83.338642][ T4519] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36
[   83.348554][ T4519] attempt to access beyond end of device
[   83.348554][ T4519] loop0: rw=524288, want=312, limit=16
[   83.360215][ T4519] attempt to access beyond end of device
[   83.360215][ T4519] loop0: rw=524288, want=1049280, limit=16
[   83.372540][ T4519] attempt to access beyond end of device
[   83.372540][ T4519] loop0: rw=524288, want=6536, limit=16
[   83.384665][ T4519] attempt to access beyond end of device
[   83.384665][ T4519] loop0: rw=524288, want=34359736344, limit=16
[   83.396984][ T4519] attempt to access beyond end of device
[   83.396984][ T4519] loop0: rw=524288, want=24, limit=16
[   83.408632][ T4519] attempt to access beyond end of device
[   83.408632][ T4519] loop0: rw=524288, want=736, limit=16
[   83.421778][ T4519] attempt to access beyond end of device
[   83.421778][ T4519] loop0: rw=524288, want=536576872, limit=16
[   83.961964][ T4513] EXT4-fs (loop2): Ignoring removed nobh option
[   84.059276][ T4513] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[   84.170568][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   84.215748][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   84.273438][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[   84.280562][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state
[   84.310810][ T4532] 9pnet: Insufficient options for proto=fd
[   84.372362][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   84.416232][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   84.453175][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[   84.460331][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state
[   84.523115][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   84.568796][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   84.591171][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   84.975043][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   85.020886][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   85.108013][ T4547] ptrace attach of "./syz-executor exec"[4176] was attempted by ""[4547]
[   85.331846][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   85.870297][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   85.879455][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   85.900090][ T4358] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   85.942499][ T4550] loop0: detected capacity change from 0 to 512
[   85.997674][ T4358] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   86.031256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   86.057274][ T4550] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   86.086326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   86.121272][ T4550] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   86.139806][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   86.226104][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   86.292453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   86.306076][ T4558] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #2: block 3: comm syz.0.86: lblock 0 mapped to illegal pblock 3 (length 1)
[   86.694549][ T4565] 9pnet_virtio: no channels available for device syz
[   86.791823][ T4577] loop0: detected capacity change from 0 to 512
[   86.824615][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   86.832048][ T4565] netlink: 8 bytes leftover after parsing attributes in process `syz.1.82'.
[   86.832168][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   86.906945][ T4580] 9pnet: Insufficient options for proto=fd
[   86.940944][ T4577] EXT4-fs (loop0): Ignoring removed nobh option
[   86.962568][ T4358] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.000717][ T4577] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[   87.591516][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   87.592890][ T4221] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   87.611015][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   87.690243][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   87.703544][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   87.730027][ T4358] device veth0_vlan entered promiscuous mode
[   87.754239][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   87.769296][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   87.772798][ T4601] loop0: detected capacity change from 0 to 8192
[   87.808937][ T4358] device veth1_vlan entered promiscuous mode
[   87.873027][ T4221] usb 3-1: Using ep0 maxpacket: 8
[   87.912216][ T4601] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   87.917639][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   87.938623][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   87.992839][ T4221] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[   88.001790][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   88.032977][ T4221] usb 3-1: config 179 has no interface number 0
[   88.040573][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   88.049616][ T4221] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   88.080945][ T4358] device veth0_macvtap entered promiscuous mode
[   88.106817][ T4221] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   88.125591][ T4358] device veth1_macvtap entered promiscuous mode
[   88.142185][ T4221] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   88.213770][ T4221] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   88.232838][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.262723][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.282806][ T4221] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   88.319160][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.330965][ T4221] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.379739][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.393260][ T4594] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   88.442829][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.509955][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.542804][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   88.594270][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.644905][ T4358] batman_adv: batadv0: Interface activated: batadv_slave_0
[   88.696603][ T4221] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7
[   88.719853][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   88.740025][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   88.802129][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   88.852907][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   88.885450][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.913523][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   88.944269][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   88.967194][ T4278] usb 3-1: USB disconnect, device number 2
[   88.972713][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   88.981445][ T4278] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   89.022426][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.069932][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.096669][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.116900][ T4358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   89.145155][ T4358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   89.159173][ T4358] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.192908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   89.222494][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   89.287352][ T4358] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.293289][ T4625] loop1: detected capacity change from 0 to 2048
[   89.316581][ T4358] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.333355][ T4358] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.342185][ T4358] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.434451][ T4625] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   90.062089][ T4284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.122011][ T4284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.233727][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   90.274564][ T4235] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.295725][ T4235] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.384737][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   90.500572][ T4643] 9pnet: Insufficient options for proto=fd
[   90.638623][ T4650] loop2: detected capacity change from 0 to 512
[   90.770386][ T4654] loop5: detected capacity change from 0 to 2048
[   90.842551][ T4650] EXT4-fs (loop2): Ignoring removed nobh option
[   90.960682][ T4650] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[   91.409437][ T4670] input: syz1 as /devices/virtual/input/input8
[   92.202465][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.2.112'.
[   92.326398][ T4699] 9pnet_virtio: no channels available for device syz
[   92.426190][ T4703] loop2: detected capacity change from 0 to 512
[   92.531198][ T4703] EXT4-fs (loop2): Ignoring removed nobh option
[   92.605401][ T4703] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[   92.654785][ T4720] loop3: detected capacity change from 0 to 8
[   92.736188][ T4720] squashfs: Unknown parameter ''
[   93.128254][ T4732] loop3: detected capacity change from 0 to 512
[   93.138312][ T4728] loop2: detected capacity change from 0 to 1764
[   93.239671][ T4738] loop5: detected capacity change from 0 to 256
[   93.260486][ T4732] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[   93.334042][ T4732] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.382482][ T4738] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   93.548416][ T4742] loop1: detected capacity change from 0 to 512
[   93.575371][ T4738] FAT-fs (loop5): Filesystem has been set read-only
[   93.608161][ T4738] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   93.654220][ T4749] input: syz1 as /devices/virtual/input/input9
[   93.686132][ T4738] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   93.783436][   T26] audit: type=1800 audit(1744488575.963:3): pid=4738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.124" name="file1" dev="loop5" ino=1048634 res=0 errno=0
[   94.103083][ T4221] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   94.308916][ T4757] loop5: detected capacity change from 0 to 512
[   94.410308][ T4757] EXT4-fs (loop5): invalid first ino: 4294967295
[   94.429982][ T4766] loop0: detected capacity change from 0 to 512
[   94.454056][ T4767] loop2: detected capacity change from 0 to 512
[   94.483010][ T4221] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.501256][ T4221] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   94.506484][ T4767] EXT4-fs (loop2): Ignoring removed nobh option
[   94.542147][ T4221] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   94.562047][ T4221] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has an invalid bInterval 88, changing to 10
[   94.576237][ T4221] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 50459, setting to 1024
[   94.578447][ T4757] loop5: detected capacity change from 0 to 512
[   94.599597][ T4766] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=continue,,errors=continue. Quota mode: writeback.
[   94.625934][ T4767] EXT4-fs (loop2): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[   94.627103][ T4766] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   94.733164][ T4757] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[   94.742947][ T4221] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   94.752074][ T4221] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.781197][ T4757] EXT4-fs (loop5): 1 truncate cleaned up
[   94.794826][ T4221] usb 2-1: Product: syz
[   94.800931][ T4757] EXT4-fs (loop5): mounted filesystem without journal. Opts: abort,errors=remount-ro,. Quota mode: none.
[   94.829295][ T4221] usb 2-1: Manufacturer: syz
[   94.873096][ T4221] usb 2-1: SerialNumber: syz
[   95.155083][ T4781] loop0: detected capacity change from 0 to 128
[   95.172958][ T4742] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   95.221341][ T4781] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[   95.261772][ T4781] ext4 filesystem being mounted at /24/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.350914][ T4787] loop2: detected capacity change from 0 to 512
[   95.383150][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   95.392322][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   95.403228][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!!
[   95.562668][ T4788] Zero length message leads to an empty skb
[   95.744668][ T4787] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[   95.760747][ T4787] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   95.977451][ T4742] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   96.287070][ T4795] loop3: detected capacity change from 0 to 512
[   96.341488][ T4221] cdc_ncm 2-1:1.0: bind() failure
[   96.362890][ T4221] cdc_ncm: probe of 2-1:1.1 failed with error -71
[   96.859947][ T4221] cdc_mbim: probe of 2-1:1.1 failed with error -71
[   96.889293][ T4795] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[   96.893690][ T4221] usbtest: probe of 2-1:1.1 failed with error -71
[   96.912926][ T4795] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.982998][ T4221] usb 2-1: USB disconnect, device number 4
[   97.481556][ T4810] loop0: detected capacity change from 0 to 256
[   97.543910][ T4813] 9pnet_virtio: no channels available for device syz
[   97.553215][ T4813] netlink: 8 bytes leftover after parsing attributes in process `syz.1.142'.
[   97.711009][ T4812] loop5: detected capacity change from 0 to 512
[   97.797686][ T4810] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   97.817140][ T4812] EXT4-fs (loop5): Ignoring removed nobh option
[   97.840172][ T4810] FAT-fs (loop0): Filesystem has been set read-only
[   97.873947][ T4810] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   97.890420][ T4812] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[   97.969128][ T4810] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[   98.171041][   T26] audit: type=1800 audit(1744488580.343:4): pid=4810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.144" name="file1" dev="loop0" ino=1048649 res=0 errno=0
[  100.296990][ T4860] loop2: detected capacity change from 0 to 512
[  100.474573][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[  101.064669][ T4860] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  101.112922][ T4860] ext4 filesystem being mounted at /53/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  101.190839][ T4874] loop3: detected capacity change from 0 to 512
[  101.370860][ T4874] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  101.409641][ T4874] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  102.183294][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  102.192676][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  102.201670][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  102.210562][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[  102.514408][ T4888] loop3: detected capacity change from 0 to 8
[  102.547449][ T4892] loop0: detected capacity change from 0 to 512
[  102.595700][ T4892] EXT4-fs (loop0): Ignoring removed nobh option
[  102.604123][ T4896] loop1: detected capacity change from 0 to 256
[  102.647913][ T4892] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000004,bsddf,nobh,init_itable=0x0000000000000003,data_err=ignore,,errors=continue. Quota mode: none.
[  102.717805][ T4896] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  102.732046][ T4896] FAT-fs (loop1): Filesystem has been set read-only
[  102.740738][ T4896] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  102.753214][ T4896] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  102.787918][ T4905] loop5: detected capacity change from 0 to 2048
[  102.793113][   T26] audit: type=1800 audit(1744488584.973:5): pid=4896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.159" name="file1" dev="loop1" ino=1048651 res=0 errno=0
[  102.889876][ T4905] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.004718][ T4913] loop2: detected capacity change from 0 to 1764
[  103.082563][ T4918] loop1: detected capacity change from 0 to 512
[  103.116974][ T4918] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[  103.206426][ T4918] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,journal_dev=0x0000000000000008,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  103.327281][ T4918] ext4 filesystem being mounted at /34/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  103.405614][ T4924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.167'.
[  104.173271][ T4933] 9pnet_virtio: no channels available for device syz
[  104.500095][ T4939] loop1: detected capacity change from 0 to 512
[  104.641917][ T4939] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  104.737513][ T4939] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.040320][ T4949] loop3: detected capacity change from 0 to 1764
[  105.900880][ T4944] chnl_net:caif_netlink_parms(): no params data found
[  106.056908][ T4464] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.197595][ T4464] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.429430][ T4464] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.812107][ T4163] Bluetooth: hci4: command 0x0409 tx timeout
[  107.013751][ T4944] bridge0: port 1(bridge_slave_0) entered blocking state
[  107.129115][ T4944] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.214523][ T4944] device bridge_slave_0 entered promiscuous mode
[  107.237229][ T4464] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  107.251793][ T4944] bridge0: port 2(bridge_slave_1) entered blocking state
[  107.281276][ T4944] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.311097][ T4944] device bridge_slave_1 entered promiscuous mode
[  107.452699][ T4216] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  107.513987][ T4944] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  107.587715][ T4944] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  107.660126][ T4944] team0: Port device team_slave_0 added
[  107.677854][ T4944] team0: Port device team_slave_1 added
[  107.722791][ T4216] usb 1-1: Using ep0 maxpacket: 16
[  107.838462][ T4944] batman_adv: batadv0: Adding interface: batadv_slave_0
[  107.845950][ T4216] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.870282][ T4216] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  107.886242][ T5003] loop1: detected capacity change from 0 to 16
[  107.892988][ T4944] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  107.929502][ T4216] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.961603][ T4216] usb 1-1: config 0 descriptor??
[  107.976167][ T5003] erofs: (device loop1): mounted with root inode @ nid 36.
[  107.996333][ T4944] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  108.277210][ T5009] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[  108.287176][ T5009] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36
[  108.296506][ T5009] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  108.306122][ T5009] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36
[  108.315219][ T5009] attempt to access beyond end of device
[  108.315219][ T5009] loop1: rw=524288, want=312, limit=16
[  108.326281][ T5009] attempt to access beyond end of device
[  108.326281][ T5009] loop1: rw=524288, want=1049280, limit=16
[  108.337866][ T5009] attempt to access beyond end of device
[  108.337866][ T5009] loop1: rw=524288, want=6536, limit=16
[  108.349031][ T5009] attempt to access beyond end of device
[  108.349031][ T5009] loop1: rw=524288, want=34359736344, limit=16
[  108.360807][ T5009] attempt to access beyond end of device
[  108.360807][ T5009] loop1: rw=524288, want=24, limit=16
[  108.371822][ T5009] attempt to access beyond end of device
[  108.371822][ T5009] loop1: rw=524288, want=736, limit=16
[  108.382951][ T5009] attempt to access beyond end of device
[  108.382951][ T5009] loop1: rw=524288, want=536576872, limit=16
[  108.445712][ T4944] batman_adv: batadv0: Adding interface: batadv_slave_1
[  108.452882][ T4944] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  108.484750][ T4216] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  108.510358][ T4944] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  108.766391][ T4944] device hsr_slave_0 entered promiscuous mode
[  108.794597][ T4944] device hsr_slave_1 entered promiscuous mode
[  108.883252][ T4944] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  108.886533][   T21] usb 1-1: USB disconnect, device number 4
[  108.890858][ T4944] Cannot create hsr debugfs directory
[  109.099931][ T5026] loop1: detected capacity change from 0 to 2048
[  109.112135][ T4987] chnl_net:caif_netlink_parms(): no params data found
[  109.169410][ T5026] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.242998][ T4163] Bluetooth: hci4: command 0x041b tx timeout
[  109.312957][ T4219] Bluetooth: hci3: command 0x0409 tx timeout
[  110.162918][ T5048] loop1: detected capacity change from 0 to 512
[  110.173754][ T4987] bridge0: port 1(bridge_slave_0) entered blocking state
[  110.185110][ T4987] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.201016][ T4987] device bridge_slave_0 entered promiscuous mode
[  110.247978][ T4987] bridge0: port 2(bridge_slave_1) entered blocking state
[  110.255952][ T4987] bridge0: port 2(bridge_slave_1) entered disabled state
[  110.266402][ T4987] device bridge_slave_1 entered promiscuous mode
[  110.271184][ T5048] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  110.316421][ T5048] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.433732][ T5057] 9pnet_virtio: no channels available for device syz
[  110.453133][ T4944] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  110.905678][ T4944] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  110.924580][ T4944] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  110.936152][ T5057] netlink: 8 bytes leftover after parsing attributes in process `syz.5.190'.
[  110.949806][ T4944] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  110.988820][ T4987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.137423][ T4987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.243730][ T4464] device hsr_slave_0 left promiscuous mode
[  111.253576][ T4464] device hsr_slave_1 left promiscuous mode
[  111.287593][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  111.302931][   T13] Bluetooth: hci4: command 0x040f tx timeout
[  111.345300][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_0
[  111.376391][ T4464] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  111.382974][   T13] Bluetooth: hci3: command 0x041b tx timeout
[  111.401385][ T4464] batman_adv: batadv0: Removing interface: batadv_slave_1
[  111.432953][ T4464] device bridge_slave_1 left promiscuous mode
[  111.474244][ T4464] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.642216][ T4464] device bridge_slave_0 left promiscuous mode
[  111.679491][ T4464] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.718280][ T5077] loop1: detected capacity change from 0 to 16
[  111.777828][ T4464] device veth1_macvtap left promiscuous mode
[  111.791722][ T4464] device veth0_macvtap left promiscuous mode
[  111.798961][ T4464] device veth1_vlan left promiscuous mode
[  111.823548][ T5077] erofs: (device loop1): mounted with root inode @ nid 36.
[  111.841750][ T4464] device veth0_vlan left promiscuous mode
[  112.029489][ T5079] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[  112.039562][ T5079] erofs: (device loop1): z_erofs_readahead: readahead error at page 10 @ nid 36
[  112.049536][ T5079] erofs: (device loop1): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  112.059188][ T5079] erofs: (device loop1): z_erofs_readahead: readahead error at page 0 @ nid 36
[  112.068345][ T5079] attempt to access beyond end of device
[  112.068345][ T5079] loop1: rw=524288, want=312, limit=16
[  112.079481][ T5079] attempt to access beyond end of device
[  112.079481][ T5079] loop1: rw=524288, want=1049280, limit=16
[  112.091007][ T5079] attempt to access beyond end of device
[  112.091007][ T5079] loop1: rw=524288, want=6536, limit=16
[  112.511713][ T4464] team0 (unregistering): Port device team_slave_1 removed
[  112.522846][ T4278] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  112.531393][ T4464] team0 (unregistering): Port device team_slave_0 removed
[  112.630592][ T4464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  112.648925][ T4464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  112.752789][   T21] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  112.813163][ T4464] bond0 (unregistering): Released all slaves
[  112.922701][ T4278] usb 1-1: Using ep0 maxpacket: 8
[  113.043229][ T4278] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  113.132863][   T21] usb 6-1: Using ep0 maxpacket: 8
[  113.140396][ T4278] usb 1-1: config 179 has no interface number 0
[  113.267864][ T4987] team0: Port device team_slave_0 added
[  113.276151][   T21] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  113.289584][ T4278] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  113.324368][   T21] usb 6-1: config 179 has no interface number 0
[  113.432964][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  113.485819][ T4987] team0: Port device team_slave_1 added
[  113.498358][ T4278] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  114.012659][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  114.032748][ T4278] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  114.052669][   T21] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  114.072065][ T4278] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  114.092676][   T21] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  114.116772][ T4278] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  114.142726][   T21] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  114.153053][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.179416][   T21] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.213788][ T5081] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  114.251937][ T5085] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  114.342215][ T4987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  114.373596][ T4987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.470228][ T4987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  114.484425][ T4278] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input15
[  114.532608][    C0] sched: RT throttling activated
[  114.538255][ T5045] Bluetooth: hci4: command 0x0419 tx timeout
[  114.549404][ T5045] Bluetooth: hci3: command 0x040f tx timeout
[  114.566506][ T4987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  114.619916][ T4278] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input16
[  114.686513][ T4987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  114.796972][ T4278] usb 1-1: USB disconnect, device number 5
[  114.802937][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  114.802987][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  114.924707][ T4987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  114.938985][ T4278] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  115.074158][ T4217] usb 6-1: USB disconnect, device number 2
[  115.092669][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  115.106409][ T4944] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.118819][ T4217] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  115.170998][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.201169][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.290185][ T4944] 8021q: adding VLAN 0 to HW filter on device team0
[  115.358202][ T5111] loop1: detected capacity change from 0 to 512
[  115.373542][ T4987] device hsr_slave_0 entered promiscuous mode
[  115.382944][ T4987] device hsr_slave_1 entered promiscuous mode
[  115.398892][ T4987] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  115.410604][ T4987] Cannot create hsr debugfs directory
[  115.484751][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.494956][ T5111] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  115.545372][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  115.560825][ T5111] ext4 filesystem being mounted at /48/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.575136][ T4285] bridge0: port 1(bridge_slave_0) entered blocking state
[  115.582273][ T4285] bridge0: port 1(bridge_slave_0) entered forwarding state
[  115.657549][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  115.856131][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.471608][ T4285] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.478825][ T4285] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.582697][ T4217] Bluetooth: hci3: command 0x0419 tx timeout
[  116.589888][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  116.602081][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  116.622231][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  116.707768][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  116.750376][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  116.790809][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  116.822179][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  116.849860][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  116.889065][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.914134][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  116.929937][ T5144] loop0: detected capacity change from 0 to 1024
[  116.963529][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  116.982469][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.990841][ T5142] 9pnet_virtio: no channels available for device syz
[  117.018459][ T4944] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  117.269525][ T5153] hfsplus: xattr searching failed
[  117.297513][ T5142] netlink: 8 bytes leftover after parsing attributes in process `syz.5.206'.
[  117.361922][ T4987] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  117.412326][ T4987] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  117.466889][ T4987] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  117.536925][ T4273] hfsplus: b-tree write err: -5, ino 3
[  117.547324][ T4987] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  117.566140][ T4176] hfsplus: node 4:3 still has 2 user(s)!
[  117.590484][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  117.632990][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  117.691867][ T4944] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.982106][ T4987] 8021q: adding VLAN 0 to HW filter on device bond0
[  118.001942][ T5176] loop1: detected capacity change from 0 to 512
[  118.065790][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  118.095463][ T4285] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  118.116620][ T5176] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  118.139112][ T5176] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  118.143082][ T4987] 8021q: adding VLAN 0 to HW filter on device team0
[  118.163348][   T23] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  118.301186][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  118.313403][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  118.373223][ T4273] bridge0: port 1(bridge_slave_0) entered blocking state
[  118.380371][ T4273] bridge0: port 1(bridge_slave_0) entered forwarding state
[  118.408795][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  118.973605][ T4987] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  119.030444][ T4987] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  119.117889][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  119.153785][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  119.162323][ T4273] bridge0: port 2(bridge_slave_1) entered blocking state
[  119.169448][ T4273] bridge0: port 2(bridge_slave_1) entered forwarding state
[  119.212854][   T23] usb 1-1: Using ep0 maxpacket: 8
[  119.251836][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  119.273529][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  119.311851][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  119.332921][   T23] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  119.355745][   T23] usb 1-1: config 179 has no interface number 0
[  119.370016][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  119.382441][   T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  119.405511][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  119.428739][   T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  119.441826][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  119.460920][   T23] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  119.474829][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  119.493050][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  119.504851][   T23] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  119.527317][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  119.544648][   T23] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  119.555969][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  119.572931][   T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.622700][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  119.672751][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  119.683095][ T5173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  119.753376][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  119.762481][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  119.822038][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  119.845205][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  119.908473][ T4944] device veth0_vlan entered promiscuous mode
[  119.924731][ T4217] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input17
[  119.959704][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  120.000733][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  120.083951][ T4944] device veth1_vlan entered promiscuous mode
[  120.126709][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  120.213466][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  120.236074][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  120.283390][ T4944] device veth0_macvtap entered promiscuous mode
[  120.316781][ T4944] device veth1_macvtap entered promiscuous mode
[  120.377730][ T4944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.388981][ T4944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.399084][ T4944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.416650][ T4944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.437757][ T4944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.465186][ T4944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.483812][ T4944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  120.523023][ T4944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.553928][   T21] usb 1-1: USB disconnect, device number 6
[  120.557433][ T4944] batman_adv: batadv0: Interface activated: batadv_slave_0
[  120.562736][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  120.575478][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  120.587727][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  120.593147][   T21] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  120.597218][ T4163] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  120.621033][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  120.651683][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  120.671297][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  120.712206][ T4944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.724890][ T4944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.736867][ T4944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.752031][ T4944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.764728][ T4944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.790439][ T4944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.800746][ T4944] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  120.811588][ T4944] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  120.824748][ T4944] batman_adv: batadv0: Interface activated: batadv_slave_1
[  120.840435][ T4944] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  120.849731][ T4944] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  120.892297][ T4944] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  120.901563][ T4163] usb 6-1: Using ep0 maxpacket: 32
[  120.942650][ T4944] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  120.989382][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  121.006629][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  121.019261][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  121.043064][ T4163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  121.119030][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  121.198524][ T4163] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.375058][ T4163] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  121.545428][ T4163] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.751031][ T5224] loop0: detected capacity change from 0 to 1024
[  121.780422][ T4163] usb 6-1: config 0 descriptor??
[  121.804410][ T4987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  122.040775][ T5224] hfsplus: xattr searching failed
[  122.077353][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.103365][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.110427][ T5224] hfsplus: xattr searching failed
[  122.181381][ T4273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  122.183933][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  122.225204][ T4273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  122.263143][ T4273] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  122.374985][ T4163] savu 0003:1E7D:2D5A.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0
[  122.493032][ T5248] loop0: detected capacity change from 0 to 512
[  122.580404][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  122.620095][ T4276] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  122.644291][ T5251] loop6: detected capacity change from 0 to 512
[  122.707804][ T5248] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  122.709412][ T4219] usb 6-1: USB disconnect, device number 3
[  122.773120][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  122.802138][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  122.810040][ T5248] ext4 filesystem being mounted at /46/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.846847][ T4987] device veth0_vlan entered promiscuous mode
[  122.857134][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  122.866863][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  122.873190][ T5251] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  122.884622][ T4987] device veth1_vlan entered promiscuous mode
[  122.905484][ T5251] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.963823][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  122.972979][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  122.981306][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  122.992187][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  123.004409][ T4987] device veth0_macvtap entered promiscuous mode
[  123.034939][ T4987] device veth1_macvtap entered promiscuous mode
[  123.093468][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  123.154500][  T428] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  123.215711][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.584927][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.673134][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.765329][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.775283][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.796531][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.808738][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.823869][ T5270] loop1: detected capacity change from 0 to 128
[  123.840984][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.866928][ T5270] EXT4-fs (loop1): Ignoring removed nobh option
[  123.873403][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  123.893036][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  123.922206][ T4987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  123.942212][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  123.978841][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.009756][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.057572][ T5270] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  124.079206][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.104751][ T5270] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  124.188867][ T5274] 9pnet_virtio: no channels available for device syz
[  124.220782][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz.5.226'.
[  124.374710][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.580891][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.832682][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.872663][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.902388][ T4987] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  124.913525][ T4987] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  124.925008][ T4987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  124.939178][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  124.951292][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  124.960321][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  125.002031][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  125.042443][ T4987] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.071803][ T4987] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.102204][ T4987] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.132729][ T4987] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.352136][ T5287] loop5: detected capacity change from 0 to 2048
[  125.362652][ T4219] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  125.408763][ T4464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.438977][ T5287] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.446275][ T4464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.510298][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  125.522818][ T4285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.564304][ T4285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.577639][ T1445] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  125.622922][ T4219] usb 2-1: Using ep0 maxpacket: 8
[  125.763165][ T4219] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[  125.805811][ T4219] usb 2-1: config 179 has no interface number 0
[  125.825798][ T4219] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  126.684467][ T4219] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  126.696631][ T4219] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  126.720470][ T4219] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  126.732011][ T5306] loop7: detected capacity change from 0 to 512
[  126.748697][ T5309] loop0: detected capacity change from 0 to 512
[  126.768653][ T4219] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  126.788229][ T4219] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.833319][ T5279] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  126.937510][ T5309] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  126.981831][ T5309] ext4 filesystem being mounted at /51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.059550][ T5306] EXT4-fs (loop7): Test dummy encryption mode enabled
[  127.077416][ T4163] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input18
[  127.094962][ T5306] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  127.114187][ T5306] EXT4-fs (loop7): 1 truncate cleaned up
[  127.121771][ T5306] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,nombcache,,errors=continue. Quota mode: writeback.
[  127.162978][ T5326] loop6: detected capacity change from 0 to 128
[  127.212666][ T5326] EXT4-fs (loop6): Ignoring removed nobh option
[  127.451352][ T5330] 9pnet_virtio: no channels available for device syz
[  127.471689][ T5330] netlink: 8 bytes leftover after parsing attributes in process `syz.5.239'.
[  128.087890][ T5326] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  128.174684][ T5326] ext4 filesystem being mounted at /1/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  128.360558][ T5306] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  128.390355][   T13] usb 2-1: USB disconnect, device number 5
[  128.396497][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  128.396550][    C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  128.469861][   T13] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  128.484757][ T5348] loop6: detected capacity change from 0 to 1024
[  128.592758][ T1110] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  128.675939][ T5353] loop0: detected capacity change from 0 to 764
[  128.842737][ T1110] usb 6-1: Using ep0 maxpacket: 8
[  128.889929][ T5360] loop6: detected capacity change from 0 to 2048
[  128.963053][ T1110] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  128.971457][ T1110] usb 6-1: config 179 has no interface number 0
[  129.007604][ T5367] loop1: detected capacity change from 0 to 8
[  129.022105][ T5360] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.032407][ T1110] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  129.058264][ T1110] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  129.119428][ T1110] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  129.175756][ T1110] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  129.238086][ T1110] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  129.299856][ T1110] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  129.326213][ T5306] EXT4-fs error (device loop7): ext4_find_dest_de:2115: inode #2: block 13: comm syz.7.180: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  129.373938][ T5377] loop6: detected capacity change from 0 to 512
[  129.392981][ T5343] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  129.471807][ T5377] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  129.498453][ T5377] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.744382][ T4217] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input19
[  129.797797][ T5389] loop1: detected capacity change from 0 to 128
[  130.908002][   T13] usb 6-1: USB disconnect, device number 4
[  130.922664][    C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  130.927493][ T5389] EXT4-fs (loop1): Ignoring removed nobh option
[  130.931019][    C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  131.026747][ T5389] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  131.134057][ T5389] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  131.191389][   T13] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  131.274064][ T5399] loop6: detected capacity change from 0 to 512
[  131.343147][ T5399] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.252: casefold flag without casefold feature
[  131.465299][ T5399] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.252: couldn't read orphan inode 15 (err -117)
[  131.490998][ T5399] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  131.623381][ T5409] loop1: detected capacity change from 0 to 1024
[  131.653252][ T5412] loop7: detected capacity change from 0 to 164
[  131.720320][ T5409] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  131.762680][ T5421] loop0: detected capacity change from 0 to 2048
[  131.783112][ T5412] Unable to read rock-ridge attributes
[  131.803535][ T5421] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  131.814748][ T5412] Unable to read rock-ridge attributes
[  131.879246][ T5409] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,min_batch_time=0x0000000000000005,dioread_nolock,. Quota mode: none.
[  131.913353][ T5409] ext4 filesystem being mounted at /65/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.080234][ T5429] binder: 5428:5429 ioctl c018620c 0 returned -14
[  132.328187][ T5434] loop7: detected capacity change from 0 to 2048
[  132.400115][ T5434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.500417][ T5438] 9pnet_virtio: no channels available for device syz
[  132.524147][ T5438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.263'.
[  132.551858][ T1110] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  132.862852][ T1110] usb 1-1: Using ep0 maxpacket: 8
[  132.900343][   T26] audit: type=1800 audit(1744488615.063:6): pid=5434 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.261" name="file1" dev="loop7" ino=1415 res=0 errno=0
[  132.953928][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.960979][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  133.217163][ T5444] loop1: detected capacity change from 0 to 512
[  133.227642][ T1110] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  133.236909][ T1110] usb 1-1: config 179 has no interface number 0
[  133.245003][ T1110] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  133.257518][ T1110] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  133.269652][ T1110] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  133.287011][ T5446] loop5: detected capacity change from 0 to 128
[  133.293377][ T1110] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  133.308016][ T1110] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  133.320830][ T1110] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.353219][ T5427] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  133.356371][ T5446] EXT4-fs (loop5): Ignoring removed nobh option
[  133.400713][ T5444] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  133.426556][ T5441] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  133.445056][ T5446] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  133.470191][ T5441] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  133.480177][ T5444] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  133.556732][ T5446] ext4 filesystem being mounted at /35/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  133.761328][ T4181] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input20
[  133.863061][ T4163] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  134.007278][   T13] usb 1-1: USB disconnect, device number 7
[  134.012684][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  134.021480][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  134.053176][   T13] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  134.245100][ T4163] usb 8-1: Using ep0 maxpacket: 8
[  134.373059][ T4163] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  134.403143][ T4163] usb 8-1: config 179 has no interface number 0
[  134.430280][ T4163] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  134.501525][ T4163] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  134.508060][ T5478] loop5: detected capacity change from 0 to 2048
[  134.519518][ T4163] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  134.537717][ T4163] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  134.558755][ T4163] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  134.582911][ T4163] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.623018][ T5461] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  134.627544][ T5478] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.865783][ T5486] loop0: detected capacity change from 0 to 512
[  134.895002][   T13] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input21
[  134.951548][ T5487] loop1: detected capacity change from 0 to 2048
[  135.097649][   T13] usb 8-1: USB disconnect, device number 2
[  135.118965][ T5487] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.122680][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  135.145937][   T13] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  135.238234][ T5499] 9pnet_virtio: no channels available for device syz
[  135.263076][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.275'.
[  135.531804][ T5486] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  135.897819][ T5486] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.192824][ T5507] loop6: detected capacity change from 0 to 512
[  136.226508][ T5510] loop7: detected capacity change from 0 to 2048
[  136.280933][ T5507] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  136.316226][ T5510] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  136.337883][ T5510] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  136.357693][ T5507] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  136.397875][ T5520] loop1: detected capacity change from 0 to 128
[  136.448840][ T5507] EXT4-fs (loop6): 1 truncate cleaned up
[  136.461565][ T5507] EXT4-fs (loop6): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  136.583387][ T5507] EXT4-fs error (device loop6): __ext4_iget:4872: inode #12: block 2: comm syz.6.277: invalid block
[  136.609519][ T5520] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  136.643033][ T5520] ext4 filesystem being mounted at /69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  136.698626][ T5529] EXT4-fs error (device loop6): __ext4_iget:4872: inode #12: block 2: comm syz.6.277: invalid block
[  136.780472][ T5533] loop0: detected capacity change from 0 to 512
[  136.887960][ T5532] EXT4-fs error (device loop6): __ext4_iget:4872: inode #12: block 2: comm syz.6.277: invalid block
[  136.918643][ T5533] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  136.962703][ T4219] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  136.991653][ T5533] ext4 filesystem being mounted at /61/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.939923][ T4219] usb 6-1: Using ep0 maxpacket: 8
[  138.088908][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.311194][ T5562] loop6: detected capacity change from 0 to 512
[  138.373856][ T5562] EXT4-fs (loop6): Ignoring removed oldalloc option
[  138.442985][ T4219] usb 6-1: config 179 has an invalid interface number: 65 but max is 0
[  138.445990][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.466635][ T4219] usb 6-1: config 179 has no interface number 0
[  138.479168][ T4219] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  138.539148][ T5562] EXT4-fs (loop6): orphan cleanup on readonly fs
[  138.540461][ T4219] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  138.570421][ T5562] Quota error (device loop6): find_tree_dqentry: Getting block too big (196613 >= 6)
[  138.583082][ T5562] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  138.600543][ T5562] EXT4-fs error (device loop6): ext4_acquire_dquot:6204: comm syz.6.290: Failed to acquire dquot type 1
[  138.607872][ T5573] loop7: detected capacity change from 0 to 512
[  138.612461][ T4219] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  138.622720][ T4278] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  138.639486][ T5562] EXT4-fs (loop6): 1 truncate cleaned up
[  138.646246][ T4219] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  138.646546][ T5562] EXT4-fs (loop6): mounted filesystem without journal. Opts: bsdgroups,nodiscard,oldalloc,grpjquota=,nobarrier,noquota,abort,nodiscard,nodiscard,,errors=continue. Quota mode: writeback.
[  138.679503][ T4219] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  138.690844][ T4219] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.743173][ T5531] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  138.776573][ T5573] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  138.795140][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.807369][ T5579] loop1: detected capacity change from 0 to 1024
[  138.824818][ T5573] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.847601][ T5562] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3186385535 (6372771070 ns) > initial count (1345844 ns). Using initial count to start timer.
[  138.891894][ T5579] EXT4-fs (loop1): Unrecognized mount option "fscontext=unconfined_u" or missing value
[  139.001710][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  139.035491][   T13] input: Generic X-Box pad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input22
[  139.039646][ T4278] usb 1-1: Using ep0 maxpacket: 8
[  139.163072][ T4278] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[  139.179550][ T4278] usb 1-1: config 179 has no interface number 0
[  139.206753][ T4278] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  139.281991][ T4278] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  139.344139][ T4278] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  139.404586][ T4278] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  139.420844][ T4278] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  139.431570][ T4278] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.452452][   T21] usb 6-1: USB disconnect, device number 5
[  139.462932][    C0] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  139.462981][ T5559] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  139.471444][    C0] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  139.605191][   T21] xpad 6-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  139.762549][ T5594] loop7: detected capacity change from 0 to 16
[  139.775010][ T4278] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input23
[  139.923817][ T5600] loop1: detected capacity change from 0 to 512
[  139.940845][ T5594] erofs: (device loop7): mounted with root inode @ nid 36.
[  139.975011][   T13] usb 1-1: USB disconnect, device number 8
[  139.994391][    C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  140.003342][   T13] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  140.266815][ T5609] loop5: detected capacity change from 0 to 512
[  140.288632][ T5600] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  140.316139][ T5612] erofs: (device loop7): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[  140.327009][ T5612] erofs: (device loop7): z_erofs_readahead: readahead error at page 10 @ nid 36
[  140.336448][ T5612] erofs: (device loop7): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  140.346120][ T5612] erofs: (device loop7): z_erofs_readahead: readahead error at page 0 @ nid 36
[  140.355250][ T5612] handle_bad_sector: 4 callbacks suppressed
[  140.355272][ T5612] attempt to access beyond end of device
[  140.355272][ T5612] loop7: rw=524288, want=312, limit=16
[  140.372297][ T5612] attempt to access beyond end of device
[  140.372297][ T5612] loop7: rw=524288, want=1049280, limit=16
[  140.383911][ T5612] attempt to access beyond end of device
[  140.383911][ T5612] loop7: rw=524288, want=6536, limit=16
[  140.395263][ T5612] attempt to access beyond end of device
[  140.395263][ T5612] loop7: rw=524288, want=34359736344, limit=16
[  140.407116][ T5612] attempt to access beyond end of device
[  140.407116][ T5612] loop7: rw=524288, want=24, limit=16
[  140.419034][ T5612] attempt to access beyond end of device
[  140.419034][ T5612] loop7: rw=524288, want=736, limit=16
[  140.430515][ T5612] attempt to access beyond end of device
[  140.430515][ T5612] loop7: rw=524288, want=536576872, limit=16
[  140.503111][ T5600] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.581794][ T5609] EXT4-fs (loop5): Test dummy encryption mode enabled
[  140.653026][ T5609] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  140.914076][ T5609] EXT4-fs (loop5): 1 truncate cleaned up
[  140.919781][ T5609] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,nombcache,,errors=continue. Quota mode: writeback.
[  141.577389][ T5626] 9pnet_virtio: no channels available for device syz
[  141.600350][ T5626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.301'.
[  142.514334][ T5638] loop1: detected capacity change from 0 to 2048
[  142.537800][ T5650] loop5: detected capacity change from 0 to 512
[  142.966059][ T5650] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  143.472210][ T5650] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.652046][ T5667] loop0: detected capacity change from 0 to 16
[  143.782847][ T5667] erofs: (device loop0): mounted with root inode @ nid 36.
[  143.991447][ T5672] loop1: detected capacity change from 0 to 512
[  144.189341][ T5674] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[  144.200020][ T5674] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 36
[  144.209574][ T5674] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  144.219223][ T5674] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36
[  144.228296][ T5674] attempt to access beyond end of device
[  144.228296][ T5674] loop0: rw=524288, want=312, limit=16
[  144.239461][ T5674] attempt to access beyond end of device
[  144.239461][ T5674] loop0: rw=524288, want=1049280, limit=16
[  144.250940][ T5674] attempt to access beyond end of device
[  144.250940][ T5674] loop0: rw=524288, want=6536, limit=16
[  144.447751][   T21] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  144.782716][   T21] usb 8-1: Using ep0 maxpacket: 8
[  144.824731][ T5672] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  144.849923][ T5672] ext4 filesystem being mounted at /78/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.941219][ T5687] 9pnet_virtio: no channels available for device syz
[  144.963641][ T5687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.314'.
[  145.053282][   T21] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  145.213649][   T21] usb 8-1: config 179 has no interface number 0
[  145.558994][   T21] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  145.588569][ T5693] loop6: detected capacity change from 0 to 128
[  145.752759][ T5693] EXT4-fs (loop6): Ignoring removed nobh option
[  145.768665][ T5695] loop0: detected capacity change from 0 to 2048
[  145.789759][   T21] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  145.826797][ T5693] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobh,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  145.873399][ T5693] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  146.242800][   T21] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  146.254673][   T21] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  146.268044][ T5695] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.276946][   T21] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  146.286073][   T21] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.316253][   T21] usb 8-1: can't set config #179, error -71
[  146.338686][   T21] usb 8-1: USB disconnect, device number 3
[  146.342422][ T5695] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  146.427680][ T5695] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  146.513211][  T154] device hsr_slave_0 left promiscuous mode
[  146.533428][ T5705] UDF-fs: error (device loop0): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  146.605129][ T5705] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  146.617202][  T154] device hsr_slave_1 left promiscuous mode
[  146.717742][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  146.750000][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  146.869701][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  146.983034][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  147.094956][  T154] device bridge_slave_1 left promiscuous mode
[  147.096013][ T5716] loop6: detected capacity change from 0 to 512
[  147.101346][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.164626][ T5719] loop0: detected capacity change from 0 to 16
[  147.221447][ T5719] erofs: (device loop0): mounted with root inode @ nid 36.
[  147.253153][ T5716] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  147.379941][ T5716] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.413418][  T154] device bridge_slave_0 left promiscuous mode
[  147.419751][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.707571][ T5727] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[  147.717602][ T5727] erofs: (device loop0): z_erofs_readahead: readahead error at page 10 @ nid 36
[  147.726970][ T5727] erofs: (device loop0): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  147.736606][ T5727] erofs: (device loop0): z_erofs_readahead: readahead error at page 0 @ nid 36
[  147.746072][ T5727] handle_bad_sector: 4 callbacks suppressed
[  147.746092][ T5727] attempt to access beyond end of device
[  147.746092][ T5727] loop0: rw=524288, want=312, limit=16
[  147.763181][ T5727] attempt to access beyond end of device
[  147.763181][ T5727] loop0: rw=524288, want=1049280, limit=16
[  147.774742][ T5727] attempt to access beyond end of device
[  147.774742][ T5727] loop0: rw=524288, want=6536, limit=16
[  147.786415][ T5727] attempt to access beyond end of device
[  147.786415][ T5727] loop0: rw=524288, want=34359736344, limit=16
[  147.798244][ T5727] attempt to access beyond end of device
[  147.798244][ T5727] loop0: rw=524288, want=24, limit=16
[  147.809335][ T5727] attempt to access beyond end of device
[  147.809335][ T5727] loop0: rw=524288, want=736, limit=16
[  147.822092][ T5727] attempt to access beyond end of device
[  147.822092][ T5727] loop0: rw=524288, want=536576872, limit=16
[  147.945362][ T5730] loop5: detected capacity change from 0 to 128
[  148.170204][ T5730] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  148.187321][  T154] device veth1_macvtap left promiscuous mode
[  148.202427][  T154] device veth0_macvtap left promiscuous mode
[  148.273140][  T154] device veth1_vlan left promiscuous mode
[  148.336227][  T154] device veth0_vlan left promiscuous mode
[  149.056597][ T5752] loop5: detected capacity change from 0 to 2048
[  149.169515][ T5752] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  149.724577][ T5757] loop6: detected capacity change from 0 to 512
[  149.800405][ T5759] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  149.908022][ T5757] EXT4-fs (loop6): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  149.921789][ T5757] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.940535][ T5765] loop1: detected capacity change from 0 to 16
[  149.954681][ T5766] loop5: detected capacity change from 0 to 16
[  150.060430][  T154] team0 (unregistering): Port device team_slave_1 removed
[  150.078179][  T154] team0 (unregistering): Port device team_slave_0 removed
[  150.096945][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  150.115564][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  150.137769][ T5765] erofs: (device loop1): mounted with root inode @ nid 36.
[  150.161862][ T5766] erofs: (device loop5): mounted with root inode @ nid 36.
[  150.413004][ T5766] erofs: (device loop5): z_erofs_map_blocks_iter: unknown type 3 @ offset 45055 of nid 36
[  150.423047][ T5766] erofs: (device loop5): z_erofs_readahead: readahead error at page 10 @ nid 36
[  150.432361][ T5766] erofs: (device loop5): z_erofs_map_blocks_iter: invalid logical cluster 0 at nid 36
[  150.442004][ T5766] erofs: (device loop5): z_erofs_readahead: readahead error at page 0 @ nid 36
[  150.451615][ T5766] attempt to access beyond end of device
[  150.451615][ T5766] loop5: rw=524288, want=312, limit=16
[  150.462731][ T5766] attempt to access beyond end of device
[  150.462731][ T5766] loop5: rw=524288, want=1049280, limit=16
[  150.474307][ T5766] attempt to access beyond end of device
[  150.474307][ T5766] loop5: rw=524288, want=6536, limit=16
[  150.848286][  T154] bond0 (unregistering): Released all slaves
[  151.267747][ T5787] 9pnet_virtio: no channels available for device syz
[  151.291518][ T5787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.346'.
[  152.016543][ T5791] loop6: detected capacity change from 0 to 1024
[  152.019873][ T5792] loop0: detected capacity change from 0 to 2048
[  152.102844][ T5792] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.414557][   T13] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  153.472942][   T13] usb 8-1: Using ep0 maxpacket: 8
[  153.629134][   T13] usb 8-1: config 179 has an invalid interface number: 65 but max is 0
[  153.651391][   T13] usb 8-1: config 179 has no interface number 0
[  153.678057][   T13] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  153.742744][   T13] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  153.859622][   T13] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  153.948590][   T13] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  154.284441][   T13] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  154.312838][   T13] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.414828][ T5799] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  154.627424][ T5832] loop5: detected capacity change from 0 to 512
[  154.716231][ T5045] input: Generic X-Box pad as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:179.65/input/input24
[  154.864002][ T5841] 9pnet_virtio: no channels available for device syz
[  154.885472][ T5841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.360'.
[  155.115478][ T5832] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  155.343366][   T21] usb 8-1: USB disconnect, device number 4
[  155.352645][    C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  155.360992][    C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  155.462859][ T5832] ext4 filesystem being mounted at /58/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.589122][   T21] xpad 8-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  155.639338][ T5850] loop6: detected capacity change from 0 to 512
[  155.817094][ T5850] EXT4-fs (loop6): Ignoring removed nobh option
[  155.855969][ T5850] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  155.919648][ T5850] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  155.992152][ T5850] EXT4-fs (loop6): 1 truncate cleaned up
[  156.059251][ T5850] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,grpjquota=,quota,errors=remount-ro,nobh,journal_ioprio=0x0000000000000004,. Quota mode: writeback.
[  156.315872][ T5850] EXT4-fs error (device loop6): ext4_generic_delete_entry:2729: inode #12: block 7: comm syz.6.363: bad entry in directory: inode out of bounds - offset=0, inode=16777215, rec_len=16, size=56 fake=0
[  156.429149][ T5850] EXT4-fs (loop6): Remounting filesystem read-only
[  156.442739][ T5850] EXT4-fs error (device loop6) in ext4_delete_inline_entry:1782: Corrupt filesystem
[  156.518169][ T5865] loop7: detected capacity change from 0 to 2048
[  156.633743][ T5850] EXT4-fs (loop6): Remounting filesystem read-only
[  156.647641][ T5865] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.750730][ T5847] chnl_net:caif_netlink_parms(): no params data found
[  157.029622][ T5882] loop7: detected capacity change from 0 to 512
[  157.142829][ T5882] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,lazytime,,errors=continue. Quota mode: writeback.
[  157.223582][ T5882] ext4 filesystem being mounted at /22/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.284056][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.325236][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.346267][ T5847] device bridge_slave_0 entered promiscuous mode
[  157.355689][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.364822][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.373462][ T5847] device bridge_slave_1 entered promiscuous mode
[  157.564452][ T5900] loop5: detected capacity change from 0 to 256
[  158.343291][ T4217] Bluetooth: hci0: command 0x0409 tx timeout
[  158.498730][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.678202][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  159.044674][ T5910] netlink: 276 bytes leftover after parsing attributes in process `syz.7.375'.
[  159.136985][    T7] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  159.147253][ T5847] team0: Port device team_slave_0 added
[  159.175959][ T5847] team0: Port device team_slave_1 added
[  159.270586][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.298283][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.300269][ T5917] loop7: detected capacity change from 0 to 512
[  159.345852][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.377963][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.386949][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.413734][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.427605][    T7] usb 7-1: Using ep0 maxpacket: 8
[  159.448104][ T5917] EXT4-fs (loop7): Test dummy encryption mode enabled
[  159.480771][ T5917] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  159.543432][ T5917] EXT4-fs (loop7): 1 truncate cleaned up
[  159.549134][ T5917] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,usrquota,nombcache,,errors=continue. Quota mode: writeback.
[  159.583059][    T7] usb 7-1: config 179 has an invalid interface number: 65 but max is 0
[  159.613709][ T5917] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  159.618004][    T7] usb 7-1: config 179 has no interface number 0
[  159.632427][ T5917] ------------[ cut here ]------------
[  159.648916][ T5917] WARNING: CPU: 1 PID: 5917 at fs/crypto/fname.c:543 fscrypt_fname_siphash+0xb9/0xf0
[  159.669639][ T5917] Modules linked in:
[  159.677961][    T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  159.679833][ T5917] CPU: 1 PID: 5917 Comm: syz.7.379 Not tainted 5.15.180-syzkaller #0
[  159.718479][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  159.733477][ T5929] loop5: detected capacity change from 0 to 16
[  159.749961][ T5917] RIP: 0010:fscrypt_fname_siphash+0xb9/0xf0
[  159.752643][    T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  159.763245][ T5917] Code: 42 0f b6 04 28 84 c0 75 38 41 8b 34 24 49 83 c6 40 4c 89 ff 4c 89 f2 5b 41 5c 41 5d 41 5e 41 5f e9 5c 9f 4a 02 e8 47 7e 92 ff <0f> 0b eb aa 89 d9 80 e1 07 38 c1 7c 8c 48 89 df e8 92 71 dc ff eb
[  159.808413][    T7] usb 7-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  159.821747][ T5917] RSP: 0018:ffffc9000412f470 EFLAGS: 00010287
[  159.827713][ T5929] erofs: (device loop5): mounted with root inode @ nid 36.
[  159.835766][ T5917] RAX: ffffffff81ee1f99 RBX: 0000000000000000 RCX: 0000000000080000
[  159.876930][ T5917] RDX: ffffc90010141000 RSI: 00000000000000f5 RDI: 00000000000000f6
[  159.913401][    T7] usb 7-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  159.915654][ T5917] RBP: ffffc9000412f630 R08: ffffffff81ee1f3e R09: ffffffff8219de69
[  159.944354][ T5917] R10: 0000000000000007 R11: ffff88801e4e5940 R12: ffffc9000412f5c0
[  159.961392][ T5917] R13: dffffc0000000000 R14: ffff888074e930c0 R15: ffff888074ffe650
[  159.978886][    T7] usb 7-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  159.988493][ T5917] FS:  00007f11e55026c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  160.007990][    T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.026307][ T5917] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  160.060105][ T5847] device hsr_slave_0 entered promiscuous mode
[  160.066513][ T5917] CR2: 000020000026e000 CR3: 00000000760b0000 CR4: 00000000003506f0
[  160.103169][ T5906] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  160.152770][ T5917] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  160.166973][ T5847] device hsr_slave_1 entered promiscuous mode
[  160.186296][ T5917] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  160.239650][ T5917] Call Trace:
[  160.255344][ T5917]  <TASK>
[  160.267897][ T5917]  __ext4fs_dirhash+0xdd2/0x14c0
[  160.283538][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  160.297919][ T5917]  ? ext4fs_dirhash+0x320/0x320
[  160.315802][ T5917]  ext4fs_dirhash+0x1b8/0x320
[  160.338648][ T5917]  ? ext4_sync_file+0xb90/0xb90
[  160.345640][    T7] input: Generic X-Box pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input25
[  160.351584][ T5917]  htree_dirblock_to_tree+0x723/0x10d0
[  160.361912][ T5917]  ? ext4_htree_fill_tree+0x13f0/0x13f0
[  160.368088][ T5917]  ? ____kasan_kmalloc+0xba/0xf0
[  160.376585][ T5917]  ? kmem_cache_alloc_trace+0x143/0x290
[  160.395069][ T5847] Cannot create hsr debugfs directory
[  160.400704][ T5917]  ? ext4_readdir+0x523/0x3970
[  160.408630][ T5917]  ? iterate_dir+0x224/0x570
[  160.423025][ T4217] Bluetooth: hci0: command 0x041b tx timeout
[  160.442828][ T5917]  ? __se_sys_getdents64+0x209/0x4f0
[  160.502966][ T5917]  ? do_syscall_64+0x3b/0xb0
[  160.513918][ T5917]  ext4_htree_fill_tree+0x73d/0x13f0
[  160.535232][ T5045] usb 7-1: USB disconnect, device number 2
[  160.542727][    C0] xpad 7-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  160.551082][    C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  160.583124][ T5917]  ? ext4_handle_dirty_dirblock+0x6e0/0x6e0
[  160.606347][ T5917]  ? ext4_readdir+0x523/0x3970
[  160.611504][ T5917]  ext4_readdir+0x2f8e/0x3970
[  160.617057][ T5045] xpad 7-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  160.633125][ T5917]  ? ext4_dir_llseek+0x500/0x500
[  160.657835][ T5917]  ? read_lock_is_recursive+0x10/0x10
[  160.669187][ T5917]  ? ext4_dir_llseek+0x500/0x500
[  160.675707][ T5917]  ? __might_sleep+0xc0/0xc0
[  160.680433][ T5917]  ? __fdget_pos+0x2cb/0x380
[  160.712523][ T5917]  ? mutex_lock_io_nested+0x60/0x60
[  160.735678][ T5917]  ? end_current_label_crit_section+0x147/0x170
[  160.742555][ T5917]  ? ext4_dir_llseek+0x500/0x500
[  160.750383][ T5917]  ? iterate_dir+0x10a/0x570
[  160.756505][ T5917]  ? iterate_dir+0x10a/0x570
[  160.768602][ T5917]  ? fsnotify_perm+0x442/0x590
[  160.789128][ T5917]  iterate_dir+0x224/0x570
[  160.811879][ T5917]  ? ext4_dir_llseek+0x500/0x500
[  160.818535][ T5917]  __se_sys_getdents64+0x209/0x4f0
[  160.825916][ T5917]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  160.831969][ T5917]  ? __x64_sys_getdents64+0x80/0x80
[  160.840185][ T5917]  ? filldir+0x720/0x720
[  160.844684][ T5917]  ? syscall_enter_from_user_mode+0x2e/0x240
[  160.850704][ T5917]  ? lockdep_hardirqs_on+0x94/0x130
[  160.870097][ T5917]  ? syscall_enter_from_user_mode+0x2e/0x240
[  160.900166][ T5917]  do_syscall_64+0x3b/0xb0
[  160.907389][ T5917]  ? clear_bhb_loop+0x15/0x70
[  160.912184][ T5917]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  160.930303][ T5917] RIP: 0033:0x7f11e7699169
[  160.940450][ T5917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  160.967475][ T5917] RSP: 002b:00007f11e5502038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  160.977401][ T5917] RAX: ffffffffffffffda RBX: 00007f11e78b1fa0 RCX: 00007f11e7699169
[  160.985438][ T5847] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  160.996678][ T5847] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  161.006568][ T5917] RDX: 0000000000000055 RSI: 00002000000000c0 RDI: 0000000000000004
[  161.022068][ T5917] RBP: 00007f11e771a990 R08: 0000000000000000 R09: 0000000000000000
[  161.030465][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.031464][ T5847] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  161.048315][ T5917] R13: 0000000000000000 R14: 00007f11e78b1fa0 R15: 00007ffe3429a4c8
[  161.072387][ T5917]  </TASK>
[  161.073984][ T5847] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  161.087665][ T5917] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  161.095013][ T5917] CPU: 1 PID: 5917 Comm: syz.7.379 Not tainted 5.15.180-syzkaller #0
[  161.103107][ T5917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  161.113173][ T5917] Call Trace:
[  161.116477][ T5917]  <TASK>
[  161.119441][ T5917]  dump_stack_lvl+0x1e3/0x2d0
[  161.124164][ T5917]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  161.129837][ T5917]  ? panic+0x860/0x860
[  161.133949][ T5917]  ? fscrypt_fname_siphash+0x20/0xf0
[  161.139271][ T5917]  ? fscrypt_fname_siphash+0x20/0xf0
[  161.144574][ T5917]  panic+0x318/0x860
[  161.148479][ T5917]  ? __warn+0x16a/0x300
[  161.152641][ T5917]  ? fb_is_primary_device+0xd0/0xd0
[  161.157865][ T5917]  ? fscrypt_fname_siphash+0xb9/0xf0
[  161.163189][ T5917]  __warn+0x2b2/0x300
[  161.167209][ T5917]  ? fscrypt_fname_siphash+0xb9/0xf0
[  161.172529][ T5917]  report_bug+0x1b7/0x2e0
[  161.176906][ T5917]  handle_bug+0x3d/0x70
[  161.181100][ T5917]  exc_invalid_op+0x16/0x40
[  161.185641][ T5917]  asm_exc_invalid_op+0x16/0x20
[  161.190528][ T5917] RIP: 0010:fscrypt_fname_siphash+0xb9/0xf0
[  161.196547][ T5917] Code: 42 0f b6 04 28 84 c0 75 38 41 8b 34 24 49 83 c6 40 4c 89 ff 4c 89 f2 5b 41 5c 41 5d 41 5e 41 5f e9 5c 9f 4a 02 e8 47 7e 92 ff <0f> 0b eb aa 89 d9 80 e1 07 38 c1 7c 8c 48 89 df e8 92 71 dc ff eb
[  161.216182][ T5917] RSP: 0018:ffffc9000412f470 EFLAGS: 00010287
[  161.222288][ T5917] RAX: ffffffff81ee1f99 RBX: 0000000000000000 RCX: 0000000000080000
[  161.230300][ T5917] RDX: ffffc90010141000 RSI: 00000000000000f5 RDI: 00000000000000f6
[  161.238314][ T5917] RBP: ffffc9000412f630 R08: ffffffff81ee1f3e R09: ffffffff8219de69
[  161.246316][ T5917] R10: 0000000000000007 R11: ffff88801e4e5940 R12: ffffc9000412f5c0
[  161.254322][ T5917] R13: dffffc0000000000 R14: ffff888074e930c0 R15: ffff888074ffe650
[  161.262337][ T5917]  ? __ext4fs_dirhash+0x289/0x14c0
[  161.267492][ T5917]  ? fscrypt_fname_siphash+0x5e/0xf0
[  161.272819][ T5917]  ? fscrypt_fname_siphash+0xb9/0xf0
[  161.278161][ T5917]  __ext4fs_dirhash+0xdd2/0x14c0
[  161.283160][ T5917]  ? ext4fs_dirhash+0x320/0x320
[  161.288140][ T5917]  ext4fs_dirhash+0x1b8/0x320
[  161.292865][ T5917]  ? ext4_sync_file+0xb90/0xb90
[  161.297769][ T5917]  htree_dirblock_to_tree+0x723/0x10d0
[  161.303287][ T5917]  ? ext4_htree_fill_tree+0x13f0/0x13f0
[  161.308891][ T5917]  ? ____kasan_kmalloc+0xba/0xf0
[  161.313872][ T5917]  ? kmem_cache_alloc_trace+0x143/0x290
[  161.319449][ T5917]  ? ext4_readdir+0x523/0x3970
[  161.324249][ T5917]  ? iterate_dir+0x224/0x570
[  161.328883][ T5917]  ? __se_sys_getdents64+0x209/0x4f0
[  161.334206][ T5917]  ? do_syscall_64+0x3b/0xb0
[  161.338840][ T5917]  ext4_htree_fill_tree+0x73d/0x13f0
[  161.344186][ T5917]  ? ext4_handle_dirty_dirblock+0x6e0/0x6e0
[  161.350136][ T5917]  ? ext4_readdir+0x523/0x3970
[  161.354930][ T5917]  ext4_readdir+0x2f8e/0x3970
[  161.359672][ T5917]  ? ext4_dir_llseek+0x500/0x500
[  161.364651][ T5917]  ? read_lock_is_recursive+0x10/0x10
[  161.370058][ T5917]  ? ext4_dir_llseek+0x500/0x500
[  161.375031][ T5917]  ? __might_sleep+0xc0/0xc0
[  161.379665][ T5917]  ? __fdget_pos+0x2cb/0x380
[  161.384301][ T5917]  ? mutex_lock_io_nested+0x60/0x60
[  161.389541][ T5917]  ? end_current_label_crit_section+0x147/0x170
[  161.395831][ T5917]  ? ext4_dir_llseek+0x500/0x500
[  161.400808][ T5917]  ? iterate_dir+0x10a/0x570
[  161.405435][ T5917]  ? iterate_dir+0x10a/0x570
[  161.410065][ T5917]  ? fsnotify_perm+0x442/0x590
[  161.414873][ T5917]  iterate_dir+0x224/0x570
[  161.419466][ T5917]  ? ext4_dir_llseek+0x500/0x500
[  161.424444][ T5917]  __se_sys_getdents64+0x209/0x4f0
[  161.429602][ T5917]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  161.435623][ T5917]  ? __x64_sys_getdents64+0x80/0x80
[  161.440842][ T5917]  ? filldir+0x720/0x720
[  161.445091][ T5917]  ? syscall_enter_from_user_mode+0x2e/0x240
[  161.451339][ T5917]  ? lockdep_hardirqs_on+0x94/0x130
[  161.456551][ T5917]  ? syscall_enter_from_user_mode+0x2e/0x240
[  161.462537][ T5917]  do_syscall_64+0x3b/0xb0
[  161.466971][ T5917]  ? clear_bhb_loop+0x15/0x70
[  161.471651][ T5917]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  161.477548][ T5917] RIP: 0033:0x7f11e7699169
[  161.481983][ T5917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.501708][ T5917] RSP: 002b:00007f11e5502038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9
[  161.510139][ T5917] RAX: ffffffffffffffda RBX: 00007f11e78b1fa0 RCX: 00007f11e7699169
[  161.518118][ T5917] RDX: 0000000000000055 RSI: 00002000000000c0 RDI: 0000000000000004
[  161.526118][ T5917] RBP: 00007f11e771a990 R08: 0000000000000000 R09: 0000000000000000
[  161.534097][ T5917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  161.542072][ T5917] R13: 0000000000000000 R14: 00007f11e78b1fa0 R15: 00007ffe3429a4c8
[  161.550161][ T5917]  </TASK>
[  161.553521][ T5917] Kernel Offset: disabled
[  161.558103][ T5917] Rebooting in 86400 seconds..