last executing test programs:

3m11.835525469s ago: executing program 0 (id=272):
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x1, 0xc, 0x4}, 0x20)
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
ioctl(r0, 0x8b32, &(0x7f0000000040))

3m10.813421958s ago: executing program 0 (id=287):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="05000000010000000400000004"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

3m10.596868181s ago: executing program 0 (id=290):
symlink(&(0x7f0000000080)='.\x00', &(0x7f0000000240)='./file0\x00')
chmod(&(0x7f0000000100)='./file0\x00', 0x35b)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file7\x00', 0x5)

3m10.337647686s ago: executing program 0 (id=292):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x1}, 0x4)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x2000}, 0x4)

3m10.021726405s ago: executing program 0 (id=295):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
sendmsg$nl_route_sched_retired(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0xf0, 0x32, 0x205, 0x70bd2d, 0x25dfdbfc, {}, [{0xc9}]}, 0xf0}, 0x1, 0x0, 0x0, 0x85}, 0x8000)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
fstat(r0, &(0x7f0000000340))

3m9.840221965s ago: executing program 0 (id=297):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x4, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @loopback}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r1, &(0x7f0000000380)=""/148, 0x94, 0x59)

2m54.729870482s ago: executing program 32 (id=297):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000001c0)={0x4, {{0x2, 0x4e20, @multicast1}}, {{0x2, 0x4e21, @loopback}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r1, &(0x7f0000000380)=""/148, 0x94, 0x59)

1m51.296358626s ago: executing program 2 (id=831):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
chdir(&(0x7f0000000340)='./file0\x00')
openat$incfs(0xffffffffffffff9c, &(0x7f00000a0040)='.pending_reads\x00', 0x80102, 0x10)

1m50.790149356s ago: executing program 2 (id=834):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r0}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

1m50.36546611s ago: executing program 2 (id=839):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x210048, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0000005733010312bb6086da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc32, &(0x7f0000002340)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r0, 0x0, 0x0, 0xa00}])

1m49.741429907s ago: executing program 3 (id=842):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0)
sendmsg$NFC_CMD_DEP_LINK_UP(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000fbdbdf250400"], 0x3c}, 0x1, 0x0, 0x0, 0x26040041}, 0x40)

1m49.707975169s ago: executing program 2 (id=844):
syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

1m49.272849414s ago: executing program 3 (id=848):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0xc}}], 0x30}], 0x1, 0x0)

1m48.924903324s ago: executing program 3 (id=850):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f00000002c0)={[{@nobarrier}, {@noflushoncommit}, {@nossd}, {@commit={'commit', 0x3d, 0x3f}}, {@nodatasum}, {@nodiscard}, {@nobarrier}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@noacl}]}, 0x9, 0x5104, &(0x7f0000005480)="$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")
truncate(&(0x7f0000000080)='./file1\x00', 0xf000)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x3, 0x4100, 0x8000c62)

1m48.808313771s ago: executing program 2 (id=853):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="d4fa0c510aad03aa5ed217677bc41c027d62944899b9a5a4d43daf49c27656009c830c439c7f821ddd78b6915cb170e7603acf9e433c2903bb6773f4b0130668a1e5b5e08d21d0b69c28ca3455aed65855c86f3d1e5789d26375a0d8e57ec5d0e19c9affcf76e7a94e76556d2b104ebf645747fadc91460f4b3c94e1a89b51be4a6aa4c65285f988329a8163b69c51b801500a5bacd0463976e2960e2679ef2feee5e6ce6bb78a51fb0e15820d13e4a5aa9e0742a6f8d677ad28fea356657bb550c8311b682d9003c82267a15aa7334bc53b65b9119a1a7d905c7dd365b85c230bbad0d5d0a79819e112637819d9a187cfdf782c6127d2d4281926ab0e22f7346b616fe28ed0b9f4a0c9fdac6d3a90a9c38b5e31448a45546388c95045bc22fe88c43b82a0a5d3eb61c238a5159ea98db9c00aeef644ae98a8cb8dff", 0x13c}], 0x2}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x34, 0x0, &(0x7f00000003c0)="ae7c18bc5a99ca36edfb2a8877ed05e0ac0cf1da03b371515d915d060d67ab3b904c15ed561cc257709744dadc1b3a34e826c29c", 0xb7122486e9b63210, 0x0, 0x1}, 0x50)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})

1m48.077687683s ago: executing program 2 (id=858):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

1m47.475473778s ago: executing program 33 (id=858):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c0000001800dd8d00000000000000000200000000000005000000000600150001000000280016802400010000000000000000000004010020000000000000000000000000000000000001"], 0x4c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000004c0)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x18840}, 0x4000841)
r0 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0)

1m46.737840511s ago: executing program 3 (id=864):
syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x2, 0x1b4, &(0x7f0000000800)="$eJzsVU+L00AU/71k2jQexKsieFC0PbRN45+rnqQfwA9gaWMtpqhNQVs8xFO/hwj9Gh7Er+BB2Uv3sCzsYfe6LFkm8yZN2sKyLGzLMj9If7/3ezOZN5ny5n30OXIAnFno4hVS2LiNf0QQAB6Q8l47ig/LihscHwjFNfZ/MP9njibTD50wDEYbRVIFio6NVedioVUdl5p2wwRtSMW41jL+OFg7ghjATnyf7QswiilYWy3M3fpnyQkSBce56guX4cvvFo7SXvb3+FtXircAkiRJpNdTD+XHyE70W41xpXdPpA/ZSLIxsvnJ4AmA05/DT81oMq0Php1+0A/I95++8J553nO/+W4QBp76pdwSFv8hJNcAyJ7q5vIlAHvcYG9hHbp8zpO7Ur5G9eFSE6+n5yYsCL+yudzbId/xBo9RAfAlpqWrC0e6pTYINkQatERuHbW3SppodD+GvRkIxCO9OQQsPW2BUhb4WSAK250Bd2VpjzhuM8+ZF8z6ztJ3kZA9CPscVWOgjK+d8XjUkpZSqadrVp5/J0bugOSqJ+Xi5u47G07FwMDAwMDAwGCncR4AAP//mMZQbw==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
listxattr(&(0x7f0000000040)='./file1\x00', 0x0, 0x0)

1m45.139167274s ago: executing program 3 (id=870):
r0 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfec9}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x40012141, 0x1})
io_uring_enter(r0, 0xdb4, 0x0, 0x0, 0x0, 0x0)

1m44.513745s ago: executing program 3 (id=875):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9c8a4f967ca55468510ec76d6db61f", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESOCT], 0xfe, 0x4b5, &(0x7f0000000680)="$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")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000540)='./bus\x00')
lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200))

1m44.101670254s ago: executing program 34 (id=875):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000500)='./bus\x00', 0x18418, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="9c8a4f967ca55468510ec76d6db61f", @ANYRES32=0x0, @ANYRESHEX, @ANYRESDEC=0x0, @ANYRESHEX=0x0, @ANYRESOCT=0x0, @ANYRESOCT], 0xfe, 0x4b5, &(0x7f0000000680)="$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")
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000540)='./bus\x00')
lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200))

31.449740354s ago: executing program 6 (id=1430):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x8]}, 0x8)

30.466135301s ago: executing program 6 (id=1445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000480)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x81000002, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}}, {0x8, 0x22eb, 0x0, {{}, 0x2, {0x4, 0x5}}}}}}}}, 0x0)

30.096939352s ago: executing program 6 (id=1450):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0xfffffff8, 0x0, 0x400}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000012009703000000000000000007"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x880)

29.866694166s ago: executing program 6 (id=1452):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x51c, &(0x7f0000000700)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000080)='./file0\x00')
open(&(0x7f0000000000)='./file1\x00', 0x4000, 0x0)

29.667867897s ago: executing program 6 (id=1453):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}, {0x0, 0x2}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0x0)

29.081180041s ago: executing program 6 (id=1458):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)

28.551536722s ago: executing program 35 (id=1458):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000005c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r0, 0x121, 0x70bd2c, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MGMT_SUBTYPE={0x5, 0x29, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0)

28.206813282s ago: executing program 7 (id=1465):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe)
connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000300))

27.880189101s ago: executing program 7 (id=1467):
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

27.581623329s ago: executing program 7 (id=1469):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0xa08802, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=0x0, @ANYRESOCT=r0], 0x1, 0x693, &(0x7f0000000ec0)="$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")
setxattr$incfs_metadata(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, 0x0, 0x1)
setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x1)

27.244644927s ago: executing program 7 (id=1472):
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x800082, &(0x7f0000000680)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303030303030303030333737372c616c6c6f775f7574696d653d30303030303030332c000000000083ec4c0d6e84de0249d09f31ef580c3d00000000"], 0x1, 0x1b1, &(0x7f0000000240)="$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")
mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104)
fallocate(r0, 0x10, 0x4000, 0x4000)

26.770400846s ago: executing program 7 (id=1476):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0)
fcntl$notify(r0, 0x402, 0x20)
r1 = syz_open_procfs(0x0, &(0x7f0000000280)='pagemap\x00')
preadv(r1, &(0x7f0000000700)=[{&(0x7f0000001740)=""/4096, 0x1000}], 0x1, 0x40000000, 0x6)

25.909750406s ago: executing program 7 (id=1481):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r1, 0x5, 0xffffdfff, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="ed88b9"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac12]}, @NL80211_ATTR_PMK={0x4}]]}, 0x30}}, 0x488c4)

25.429477123s ago: executing program 36 (id=1481):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x30, r1, 0x5, 0xffffdfff, 0x8, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0x7, 0x34, @random="ed88b9"}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x8, 0x4c, [0xfac12]}, @NL80211_ATTR_PMK={0x4}]]}, 0x30}}, 0x488c4)

3.350320966s ago: executing program 9 (id=1633):
gettid()
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000880)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x20008040)

3.249730621s ago: executing program 1 (id=1634):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x1)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000200), 0x20a00, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000480)=0x1)

3.087646461s ago: executing program 9 (id=1637):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x85, 0x1d, 0x7ffc0001}]})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x2208c08, 0x0)
umount2(&(0x7f00000000c0)='./file0\x00', 0xa)

2.811408597s ago: executing program 9 (id=1640):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000001180))
mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, r0, 0x0)
mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000ffa000/0x1000)=nil)

2.606378889s ago: executing program 1 (id=1642):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_clone3(&(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8)

2.597288969s ago: executing program 8 (id=1643):
socket(0x10, 0x3, 0x0)
r0 = syz_io_uring_setup(0x7b1, &(0x7f0000000200)={0x0, 0x200086f7, 0x80, 0x0, 0x3b6}, &(0x7f0000002000)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x23})
io_uring_enter(r0, 0x48e9, 0x0, 0x3, 0x0, 0x0)

2.546220352s ago: executing program 4 (id=1644):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000200)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010800000000030000000b00000008000300", @ANYRES32=r2, @ANYBLOB="280050800500020007000000080003000bac0f00090001"], 0x68}}, 0x20000000)

2.380986942s ago: executing program 9 (id=1645):
r0 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100))
openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x1a7825)

2.197830052s ago: executing program 8 (id=1647):
r0 = socket$inet(0x2, 0xa, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x1e, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_RESET_TIMEOUT={0x8, 0x4, 0x8}, @TCA_HHF_HH_FLOWS_LIMIT={0x8, 0x3, 0x9}]}}]}, 0x40}}, 0x0)

2.122722137s ago: executing program 4 (id=1648):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x84, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x58, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x1c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xac}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a01"], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094)

2.037177922s ago: executing program 9 (id=1649):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000040)='./file0\x00', 0x43440, 0x0, 0x1, 0x0, &(0x7f0000000040))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fdatasync(r0)

1.808339975s ago: executing program 4 (id=1651):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3804402, &(0x7f0000000380)={[{@mblk_io_submit}, {@quota}, {@resuid}, {@oldalloc}, {@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@nolazytime}, {@nodioread_nolock}, {@nomblk_io_submit}, {@nodelalloc}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400}}]}, 0x1, 0x55f, &(0x7f0000000c80)="$eJzs3d9rW+UbAPDnpO1+77sOxvgqIoVdOJlL19YfE7yYl6LDgd7PkmRlNFlGk461Dtwu3I03MgQRB+K1eu/l8B/wrxjoYMgoingTOelJl7VJm3XZmpnPB077vuec9D1Pznnevm9OQgIYWhPpj1zECxHxZRJxqG3baGQbJ1b3W3lwrZAuSTQaH/2RRJKta+2fZL/3Z5X/R8Qvn0ecyG1st7a0PD9bLpcWsvpkvXJ5sra0fPJiZXauNFe6ND0zc/qNmem333qzb7G+eu6vbz68897pL46tfP3TvcO3kjgTB7Jt7XE8gevtlYmYyJ6TsTizbsepPjQ2SJKdPgC2ZSTL87FI+4BDMZJlPfDf91lENIAhlch/GFKtcUBrbt+nefBz4/67qxOgjfGPrr42Enuac6N9K8kjM6N0vjveh/bTNn7+/fatdIn+vQ4BsKXrNyLi1Ojoxv4vyfq/7TvVwz7r29D/wbNzJx3/vNZp/JNbG/9Eh/HP/g65ux1b53/uXh+a6Sod/73Tcfy7dtNqfCSrHWyO+caSCxfLpbRv+19EHI+x3Wl9s/s5p1fuNrptax//pUvafmssmB3HvdHdjz6mOFuffZKY292/EfFix/Fvsnb+kw7nP30+zvXYxtHS7Ze7bds6/qer8X3EKx3P/8M7Wsnm9ycnm9fDZOuq2OjPm0d/7db+Tsefnv99q/H/nU0J18c/nrTfr609fhvf7fmn1G3bdq//XcnHzfKubN3V2Xp9YSpiV/LBxvXTDx/bqrf2T+M/fmzz/q/T9b83Ij7pMf6bR358afvxP11p/MXNr/915//xC3ff//Tbbu33dv5fb5aOZ2t66f96PcAnee4AAAAAAABg0OQi4kAkufxaOZfL51ff33Ek9uXK1Vr9xIXq4qViND8rOx5judad7kNt74eYyt4P26pPr6vPRMThiPhqZG+zni9Uy8WdDh4AAAAAAAAAAAAAAAAAAAAGxP4un/9P/Tay00cHPHW+8huG15b5349vegIGkv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX507ezZdGisPrhXSevHK0uJ89crJYqk2n68sFvKF6sLl/Fy1Olcu5QvVylZ/r1ytXp6ajsWrk/VSrT5ZW1o+X6kuXqqfv1j54WBEaeyZRAUAAAAAAAAAAAAAAAAAAADPl9rS8vxsuVxaUGgWdsdAHMZzVBgdjMNQ6HNhp3smAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjo3wAAAP//waw5Ug==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x0, 0x0, 0x8000c62)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)

1.791511286s ago: executing program 5 (id=1652):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x0, 0x1}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe)

1.757441698s ago: executing program 1 (id=1653):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x3, 0x4)
syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x68, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback}, "00186371ae9b1c03"}}}}}, 0x0)

1.670031653s ago: executing program 8 (id=1654):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x800000000c, 0xfffffffffffffffd})
fcntl$lock(r0, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x9, 0x1000})
fcntl$lock(r0, 0x7, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x9})

1.529586071s ago: executing program 5 (id=1655):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x3, @mcast2, 0xffbfffff}, 0x1c)
syz_emit_ethernet(0x3a, &(0x7f0000000180)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x18, @multicast1}, {0x0, 0xe22, 0x18, 0x0, @wg=@data}}}}}, 0x0)

1.449196616s ago: executing program 1 (id=1656):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0x9, &(0x7f0000000080)=0x2, 0x4)
r1 = socket$netlink(0x10, 0x3, 0x4)
write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27)

1.330181413s ago: executing program 8 (id=1657):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f00000007c0)={[{@nobarrier}, {@nobarrier}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp874'}}, {@umask={'umask', 0x3d, 0x1f}}, {@umask={'umask', 0x3d, 0x9}}]}, 0x3, 0x6a4, &(0x7f0000000a00)="$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")
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000500)=ANY=[@ANYBLOB="6e6c733d63703933362c63726561746f723d762ae76f2c6e6f626172726965722c756d61736b3d303030303030303030303030303030303030303030302c00907b99c243555fdaa0fa82f76c7040e292995ad97add6fa99378b851e65fe4d778ac499b31b2675243e5ea2f1840cdf32686d7a44ea9a49acf89647d4da2267bfe88c9df34b3c06356bb7ea2c23196a9e84f73ae08b1725a8c11a363e846e9b1e32cf9d3b5ba96f7ee318325e2bf96a15d2cf49576e5cdd0d5f841afcffab8699de74d466901f310d66e8706ba6ccddf"], 0x1, 0x6b3, &(0x7f0000000780)="$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")
setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB='osx.:'], 0x0, 0x0, 0x0)
llistxattr(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

1.269595646s ago: executing program 5 (id=1658):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x100000000000000, &(0x7f0000000080)={0x77359400}, &(0x7f0000001b40))

1.166282392s ago: executing program 1 (id=1659):
r0 = socket$inet6(0xa, 0x3, 0xff)
syz_emit_ethernet(0x46, &(0x7f0000000480)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x200}}}}}}, 0x0)
connect$inet6(r0, &(0x7f0000000500)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
write$binfmt_elf64(r0, 0x0, 0xc9)

1.128791045s ago: executing program 5 (id=1660):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bind$netlink(r0, &(0x7f00000007c0)={0x10, 0x0, 0x25dfdbfd, 0x10000000}, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/netlink\x00')
syz_fuse_handle_req(r1, &(0x7f0000000980)="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", 0x2000, &(0x7f0000004d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

881.967949ms ago: executing program 5 (id=1661):
openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r0 = syz_io_uring_setup(0xc97, &(0x7f00000000c0)={0x0, 0x6015, 0x800, 0x1, 0x302}, &(0x7f00000003c0)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x4000, @fd_index=0x3, 0x5, 0x0, 0x0, 0x4})
io_uring_enter(r0, 0x4002109, 0x6355, 0x0, 0x0, 0x0)

793.145954ms ago: executing program 1 (id=1662):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
write$cgroup_int(r0, &(0x7f0000000180)=0x3, 0x12)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000ec0)={0x0, 0x8000000003ff, 0x5, 0x6, 0x1, 0x0, [{0xff, 0x7fffffffffffffff, 0x62, '\x00', 0x208}]})

786.951044ms ago: executing program 8 (id=1663):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000280)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427bd7000fadbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000005000300fdff000008"], 0x58}, 0x1, 0x0, 0x0, 0x10008001}, 0x44080)

559.234347ms ago: executing program 5 (id=1664):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x0, 0x37, 0xc, "11b1419b0560cb7aee6e260f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000640)={0x2c, &(0x7f0000000300)={0x20, 0x12, 0x28, "433303beb9731786bb3d1e4da4007150bd036163db37f1cda29e6aecce390a1d1ebb4ef0623fe90c"}, 0x0, 0x0, 0x0, 0x0})

417.690616ms ago: executing program 4 (id=1665):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000f40)=@ipv6_newaddr={0x40, 0x14, 0x101, 0x70bd26, 0x25dffbf8, {0xa, 0x38, 0x78, 0xff, r1}, [@IFA_LOCAL={0x14, 0x2, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xd, 0x8, 0x9}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x4)

316.521022ms ago: executing program 8 (id=1666):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002c40)=[{{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000a80)="2a73ed35", 0x732a}], 0x1}}], 0x400000000000292, 0x0)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x28, 0x0, 0x0, 0xfefff038}, {0x6}]}, 0x10)
sendmmsg$unix(r0, &(0x7f00000023c0)=[{{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000000200)="6880d9df", 0x4}], 0x1, 0x0, 0x0, 0x20000800}}], 0x52b, 0x2900)

268.775194ms ago: executing program 4 (id=1667):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'xfrm0\x00', <r2=>0x0})
sendto$packet(r1, &(0x7f0000000240)="29a73daa0bdcb542f1", 0x9, 0x4004, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0xe0}, 0x14)

9.763319ms ago: executing program 9 (id=1668):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x8080)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)={0x4c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, 0x4c}}, 0x0)

0s ago: executing program 4 (id=1669):
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
r0 = syz_open_dev$vim2m(&(0x7f0000000080), 0x80020001, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x4})
ioctl$VIDIOC_QUERYBUF_DMABUF(r0, 0xc0585609, &(0x7f00000002c0)={0x0, 0x1, 0x4, 0x2, 0x10001, {}, {0x1, 0x2, 0x6, 0x6, 0x9, 0x2, "26fd4de3"}, 0x6, 0x4, {}, 0x5})

kernel console output (not intermixed with test programs):

unting filesystem.
[  178.500531][ T6399] loop1: detected capacity change from 0 to 4096
[  178.675066][ T6406] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.794735][ T4366] hfsplus: b-tree write err: -5, ino 4
[  178.995400][ T6413] loop5: detected capacity change from 0 to 1024
[  179.128464][ T6413] hfsplus: xattr searching failed
[  179.254939][ T4292] hfsplus: b-tree write err: -5, ino 3
[  179.748118][ T4327] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  179.832902][ T6433] loop1: detected capacity change from 0 to 1024
[  179.896827][ T6433] hfsplus: bad catalog entry type
[  179.953877][ T4327] usb 4-1: Using ep0 maxpacket: 16
[  179.960990][ T4327] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  180.002943][ T4327] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  180.022708][ T4327] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.051047][ T4327] usb 4-1: config 0 descriptor??
[  180.057008][   T41] hfsplus: b-tree write err: -5, ino 4
[  180.208750][ T6444] netem: change failed
[  180.449321][ T6451] syzkaller1: tun_chr_ioctl cmd 1074025675
[  180.471700][ T6451] syzkaller1: persist disabled
[  180.496698][ T4327] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  180.513472][ T4327] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  180.530840][ T4327] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  180.541021][ T4327] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  180.561328][ T4327] elan 0003:04F3:0755.0004: unknown main item tag 0x0
[  180.612440][ T4327] elan 0003:04F3:0755.0004: hidraw0: USB HID v0.05 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  180.987271][ T4327] usb 4-1: USB disconnect, device number 5
[  181.034428][ T6458] loop1: detected capacity change from 0 to 4096
[  181.100204][ T6457] fido_id[6457]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  181.128622][ T6458] ntfs: volume version 3.1.
[  181.336048][ T6458] __ntfs_error: 62 callbacks suppressed
[  181.336068][ T6458] ntfs: (device loop1): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  181.425458][ T6458] ntfs: (device loop1): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  182.106600][ T6504] process 'syz.4.680' launched './file0' with NULL argv: empty string added
[  182.720186][ T6526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.688'.
[  182.749410][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.688'.
[  182.780469][ T6526] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  182.789573][ T6526] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  182.799369][ T6526] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  182.808550][ T6526] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  182.838150][ T6531] loop3: detected capacity change from 0 to 64
[  183.146843][ T6538] loop1: detected capacity change from 0 to 64
[  183.337792][ T6538] hfs: request for non-existent node 131072 in B*Tree
[  183.379991][ T6538] hfs: request for non-existent node 131072 in B*Tree
[  183.701285][ T6557] loop3: detected capacity change from 0 to 2048
[  183.839799][ T6557] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  183.856937][ T6564] program syz.1.703 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  183.935016][ T4489] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  184.050846][ T5357] EXT4-fs (loop3): unmounting filesystem.
[  184.139763][ T4489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.165818][ T4489] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.196515][ T4489] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  184.225986][ T6577] loop1: detected capacity change from 0 to 256
[  184.249198][ T4489] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.270158][ T4489] usb 6-1: config 0 descriptor??
[  184.399844][ T6577] FAT-fs (loop1): Directory bread(block 64) failed
[  184.419093][ T6577] FAT-fs (loop1): Directory bread(block 65) failed
[  184.447398][ T6577] FAT-fs (loop1): Directory bread(block 66) failed
[  184.471630][ T6577] FAT-fs (loop1): Directory bread(block 67) failed
[  184.488650][ T6577] FAT-fs (loop1): Directory bread(block 68) failed
[  184.519646][ T6577] FAT-fs (loop1): Directory bread(block 69) failed
[  184.530984][ T6577] FAT-fs (loop1): Directory bread(block 70) failed
[  184.551610][ T6577] FAT-fs (loop1): Directory bread(block 71) failed
[  184.569089][ T6577] FAT-fs (loop1): Directory bread(block 72) failed
[  184.586330][ T6577] FAT-fs (loop1): Directory bread(block 73) failed
[  184.644383][ T6585] loop3: detected capacity change from 0 to 2048
[  184.723724][ T4489] playstation 0003:054C:0DF2.0005: item fetching failed at offset 1/5
[  184.738702][ T6585] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  184.788851][ T4489] playstation 0003:054C:0DF2.0005: Parse failed
[  184.821135][ T4489] playstation: probe of 0003:054C:0DF2.0005 failed with error -22
[  184.972389][ T4327] usb 6-1: USB disconnect, device number 2
[  185.740742][    C0] sched: RT throttling activated
[  185.959081][ T6599] netlink: 16 bytes leftover after parsing attributes in process `syz.5.715'.
[  186.069085][ T6606] netlink: 12 bytes leftover after parsing attributes in process `syz.5.715'.
[  186.222976][ T6572] loop2: detected capacity change from 0 to 40427
[  186.317556][ T6572] F2FS-fs (loop2): invalid crc value
[  186.338187][ T6610] loop1: detected capacity change from 0 to 128
[  186.353450][ T6572] F2FS-fs (loop2): Found nat_bits in checkpoint
[  186.391455][ T6610] EXT4-fs: Ignoring removed nobh option
[  186.485155][ T6610] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  186.541356][ T6617] loop5: detected capacity change from 0 to 1024
[  186.586245][ T6610] ext4 filesystem being mounted at /170/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  186.632614][ T6617] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  186.739727][ T6617] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.756286][ T6572] F2FS-fs (loop2): Start checkpoint disabled!
[  186.839703][ T6572] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  186.998272][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  187.086452][ T5472] EXT4-fs (loop5): unmounting filesystem.
[  187.354725][ T4366] kworker/u4:8: attempt to access beyond end of device
[  187.354725][ T4366] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427
[  187.944947][ T6036] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  188.137446][ T6650] loop2: detected capacity change from 0 to 1024
[  188.147083][ T6036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.196721][ T6036] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.206898][ T6036] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  188.216504][ T6036] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.233942][ T6036] usb 2-1: config 0 descriptor??
[  188.260071][ T6650] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  188.448730][ T6650] EXT4-fs warning (device loop2): empty_inline_dir:1884: bad inline directory (dir #12) - no `..'
[  188.643759][ T4276] EXT4-fs (loop2): unmounting filesystem.
[  188.663535][ T6036] playstation 0003:054C:0DF2.0006: item fetching failed at offset 1/5
[  188.679996][ T6036] playstation 0003:054C:0DF2.0006: Parse failed
[  188.695095][ T6036] playstation: probe of 0003:054C:0DF2.0006 failed with error -22
[  188.897712][ T6036] usb 2-1: USB disconnect, device number 10
[  190.243769][ T6719] loop2: detected capacity change from 0 to 8192
[  190.315836][ T6719] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  190.460015][ T6719] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  190.521513][ T6719] REISERFS (device loop2): using ordered data mode
[  190.538446][ T6719] reiserfs: using flush barriers
[  190.587365][ T6719] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  190.658823][ T6719] REISERFS (device loop2): checking transaction log (loop2)
[  190.928482][ T6717] loop1: detected capacity change from 0 to 32768
[  190.952381][ T6742] loop5: detected capacity change from 0 to 64
[  191.036095][ T6719] REISERFS (device loop2): Using tea hash to sort names
[  191.061118][ T6717] read_mapping_page failed!
[  191.083249][ T6719] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  191.086072][ T6742] syz.5.761: attempt to access beyond end of device
[  191.086072][ T6742] loop5: rw=0, sector=1024, nr_sectors = 2 limit=64
[  191.123167][ T6717] ERROR: (device loop1): txCommit: 
[  191.123167][ T6717] 
[  191.162950][ T6717] ERROR: (device loop1): remounting filesystem as read-only
[  191.228426][ T6742] Buffer I/O error on dev loop5, logical block 512, async page read
[  191.259848][ T6742] syz.5.761: attempt to access beyond end of device
[  191.259848][ T6742] loop5: rw=0, sector=113152, nr_sectors = 2 limit=64
[  191.304096][ T6742] Buffer I/O error on dev loop5, logical block 56576, async page read
[  191.424107][  T107] ERROR: (device loop1): diUpdatePMap: the inode is not allocated in the working map
[  191.424107][  T107] 
[  192.571650][ T6753] loop2: detected capacity change from 0 to 131072
[  192.590393][ T6753] F2FS-fs (loop2): QUOTA feature is enabled, so ignore qf_name
[  192.598160][ T4327] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  192.604341][ T6753] F2FS-fs (loop2): invalid crc value
[  192.644097][ T6753] F2FS-fs (loop2): Disable nat_bits due to incorrect cp_ver (15359802341028777995, 275811881701387)
[  192.718618][ T6753] F2FS-fs (loop2): recover fsync data on readonly fs
[  192.727949][ T6753] F2FS-fs (loop2): Mounted with checkpoint version = 753bd00b
[  192.817430][ T4327] usb 6-1: Using ep0 maxpacket: 32
[  192.833182][ T4327] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  192.867391][ T4327] usb 6-1: config 0 has no interface number 0
[  192.875094][ T4327] usb 6-1: config 0 interface 184 has no altsetting 0
[  192.925176][ T4327] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  192.976699][ T4327] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.023082][ T4327] usb 6-1: Product: syz
[  193.044497][ T4327] usb 6-1: Manufacturer: syz
[  193.070101][ T4327] usb 6-1: SerialNumber: syz
[  193.104404][ T4327] usb 6-1: config 0 descriptor??
[  193.174833][ T4327] smsc75xx v1.0.0
[  193.532805][ T6782] loop3: detected capacity change from 0 to 2048
[  193.693110][ T6782] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  193.757729][ T6782] ext4 filesystem being mounted at /64/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.808264][ T4327] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  193.861971][ T4327] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  193.915560][ T4327] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind
[  193.974711][ T4327] smsc75xx: probe of 6-1:0.184 failed with error -71
[  194.027375][ T4327] usb 6-1: USB disconnect, device number 3
[  194.060881][ T6782] overlayfs: failed to create directory ./bus/index (errno: 28); mounting read-only
[  194.106725][ T6782] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[  194.277569][ T6801] loop2: detected capacity change from 0 to 4096
[  194.342551][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  194.349746][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  194.414162][ T5357] EXT4-fs (loop3): unmounting filesystem.
[  194.688531][ T6809] netlink: 28 bytes leftover after parsing attributes in process `syz.1.778'.
[  194.723229][ T4276] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  194.761769][ T4276] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  195.022783][ T6820] loop5: detected capacity change from 0 to 24
[  195.087273][ T6820] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  195.200596][ T6821] loop2: detected capacity change from 0 to 4096
[  195.220091][ T6820] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  195.301913][ T6821] ntfs: volume version 3.1.
[  195.457314][ T6821] ntfs: (device loop2): ntfs_cluster_alloc(): Failed to allocate clusters, aborting (error -28).
[  195.499872][ T6821] ntfs: (device loop2): ntfs_attr_extend_allocation(): Cannot extend allocation of inode 0x43, attribute type 0x80, because the allocation of clusters failed with error code -28.
[  195.777572][ T6836] netlink: 40 bytes leftover after parsing attributes in process `syz.5.787'.
[  195.831117][ T6836] netlink: 2 bytes leftover after parsing attributes in process `syz.5.787'.
[  196.071712][ T6843] loop3: detected capacity change from 0 to 512
[  196.181658][ T6843] EXT4-fs: Ignoring removed nobh option
[  196.248842][ T6845] loop5: detected capacity change from 0 to 2048
[  196.282993][ T6843] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  196.331635][ T6845] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  196.395618][ T6843] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.791: iget: bad i_size value: 38620345925642
[  196.428132][ T6843] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.791: couldn't read orphan inode 15 (err -117)
[  196.472367][ T6843] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  196.581928][ T6819] loop1: detected capacity change from 0 to 40427
[  196.621384][ T6849] loop2: detected capacity change from 0 to 8192
[  196.653739][ T6819] F2FS-fs (loop1): Invalid segment/section count (31, 24 x 1)
[  196.688023][ T6819] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  196.778077][   T11] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm kworker/u4:1: bg 0: block 5: invalid block bitmap
[  196.792470][ T6819] F2FS-fs (loop1): invalid crc value
[  196.797954][ T6819] F2FS-fs (loop1): Ignore s_resuid=0, s_resgid=60928 w/o reserve_root
[  196.807110][ T6849] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  196.848823][   T11] EXT4-fs (loop3): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28
[  196.873938][ T6819] F2FS-fs (loop1): Found nat_bits in checkpoint
[  196.905466][ T6849] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  196.924159][ T6849] REISERFS (device loop2): using journaled data mode
[  196.950896][ T6849] reiserfs: using flush barriers
[  196.957006][   T11] EXT4-fs (loop3): This should not happen!! Data will be lost
[  196.957006][   T11] 
[  196.991670][ T6849] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  197.036211][   T11] EXT4-fs (loop3): Total free blocks count 0
[  197.042381][   T11] EXT4-fs (loop3): Free/Dirty block details
[  197.087520][ T6849] REISERFS (device loop2): checking transaction log (loop2)
[  197.111867][   T11] EXT4-fs (loop3): free_blocks=0
[  197.126885][ T6849] REISERFS (device loop2): Using r5 hash to sort names
[  197.135465][   T11] EXT4-fs (loop3): dirty_blocks=1
[  197.140556][   T11] EXT4-fs (loop3): Block reservation details
[  197.173198][ T6819] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  197.176325][ T6849] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  197.205096][   T11] EXT4-fs (loop3): i_reserved_data_blocks=1
[  197.222718][ T6819] F2FS-fs (loop1): Cannot turn on quotas: -2 on 1
[  197.231243][ T5357] EXT4-fs (loop3): unmounting filesystem.
[  197.254109][ T6849] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  197.325202][ T6819] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  197.332336][ T6819] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  197.547945][   T26] audit: type=1800 audit(1769824116.138:84): pid=6819 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.784" name="file1" dev="loop1" ino=10 res=0 errno=0
[  197.593142][ T6819] syz.1.784: attempt to access beyond end of device
[  197.593142][ T6819] loop1: rw=34817, sector=77824, nr_sectors = 128 limit=40427
[  197.884350][ T4267] syz-executor: attempt to access beyond end of device
[  197.884350][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  198.682146][ T6864] loop3: detected capacity change from 0 to 32768
[  198.744977][ T6864] 
[  198.744977][ T6864]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  198.744977][ T6864] 
[  198.863422][ T6864] read_mapping_page failed!
[  198.924524][ T6864] ERROR: (device loop3): txCommit: 
[  198.924524][ T6864] 
[  198.979623][ T6884] read_mapping_page failed!
[  199.024347][ T6884] ERROR: (device loop3): txCommit: 
[  199.024347][ T6884] 
[  199.093192][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.5.802'.
[  199.245483][ T5357] 
[  199.245483][ T5357]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.245483][ T5357] 
[  199.284174][ T5357] 
[  199.284174][ T5357]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  199.284174][ T5357] 
[  199.400605][ T6897] netlink: 'syz.4.803': attribute type 34 has an invalid length.
[  199.573258][ T6906] loop2: detected capacity change from 0 to 64
[  200.429020][ T6928] loop1: detected capacity change from 0 to 256
[  200.477471][ T6928] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  200.524473][ T6928] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  200.639716][ T6902] loop3: detected capacity change from 0 to 32768
[  200.688046][ T6928] syz.1.818: attempt to access beyond end of device
[  200.688046][ T6928] loop1: rw=524288, sector=280, nr_sectors = 128 limit=256
[  200.736639][ T6902] (syz.3.806,6902,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  200.757950][ T6902] (syz.3.806,6902,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  200.801340][ T6902] JBD2: Ignoring recovery information on journal
[  200.808670][ T6928] syz.1.818: attempt to access beyond end of device
[  200.808670][ T6928] loop1: rw=524288, sector=408, nr_sectors = 256 limit=256
[  200.825270][ T6928] syz.1.818: attempt to access beyond end of device
[  200.825270][ T6928] loop1: rw=0, sector=280, nr_sectors = 8 limit=256
[  200.927176][ T6902] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  200.969824][   T26] audit: type=1800 audit(1769824119.549:85): pid=6928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.818" name="file1" dev="loop1" ino=1048627 res=0 errno=0
[  201.282812][ T6947] loop1: detected capacity change from 0 to 64
[  201.533143][ T4280] Bluetooth: hci4: command 0x0406 tx timeout
[  201.539881][ T4280] Bluetooth: hci1: command 0x0406 tx timeout
[  201.740987][ T6954] loop2: detected capacity change from 0 to 64
[  201.761878][ T5357] ocfs2: Unmounting device (7,3) on (node local)
[  202.026122][ T6957] loop1: detected capacity change from 0 to 256
[  202.094952][ T6957] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  202.164304][ T6957] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  203.527858][ T6994] device ipvlan3 entered promiscuous mode
[  203.603275][ T6994] 8021q: adding VLAN 0 to HW filter on device ipvlan3
[  203.691061][ T6994] bond0: (slave ipvlan3): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  203.738289][ T6999] program syz.5.837 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  203.789914][ T7002] loop2: detected capacity change from 0 to 2048
[  203.812851][ T6975] loop3: detected capacity change from 0 to 32768
[  203.857312][ T7002] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  203.893623][ T6975] 
[  203.893623][ T6975]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.893623][ T6975] 
[  203.947412][ T7002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.998980][ T6975] 
[  203.998980][ T6975]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.998980][ T6975] 
[  204.061984][ T6975] 
[  204.061984][ T6975]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.061984][ T6975] 
[  204.508605][ T7013] netlink: 40 bytes leftover after parsing attributes in process `syz.3.842'.
[  204.520680][ T7014] loop2: detected capacity change from 0 to 8
[  204.838690][ T7021] SQUASHFS error: Unable to read directory block [629:0]
[  205.192524][ T4276] SQUASHFS error: Unable to read directory block [629:1f]
[  205.298185][ T4276] SQUASHFS error: Unable to read directory block [629:1f]
[  206.168592][   T71] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.275971][ T7035] loop3: detected capacity change from 0 to 32768
[  206.308379][ T7035] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.850 (7035)
[  206.389984][ T7035] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  206.421684][ T7035] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  206.446684][ T7035] BTRFS info (device loop3): turning off barriers
[  206.469531][   T71] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.506575][ T7035] BTRFS info (device loop3): setting nodatasum
[  206.571197][ T7035] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  206.601930][ T7033] loop5: detected capacity change from 0 to 40427
[  206.640372][ T7035] BTRFS info (device loop3): use zstd compression, level 3
[  206.647713][ T7035] BTRFS info (device loop3): using free space tree
[  206.659960][ T7033] F2FS-fs (loop5): invalid crc value
[  206.738428][ T7033] F2FS-fs (loop5): Found nat_bits in checkpoint
[  206.936410][   T71] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.988518][ T7033] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  207.307362][   T71] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  207.351453][ T5357] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  207.398444][ T7087] loop1: detected capacity change from 0 to 512
[  207.490962][ T7087] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[  207.618320][ T7087] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #17: comm syz.1.863: inode has both inline data and extents flags
[  207.630647][ T4456] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop3 scanned by udevd (4456)
[  207.643736][ T7087] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.863: couldn't read orphan inode 17 (err -117)
[  207.667618][ T7087] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  207.735815][ T7087] EXT4-fs error (device loop1): ext4_lookup:1862: inode #2: comm syz.1.863: deleted inode referenced: 15
[  207.972944][ T7092] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 65: padding at end of block bitmap is not set
[  208.073665][   T48] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  208.086801][   T48] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  208.120169][   T48] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  208.140201][   T48] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  208.147991][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  208.160487][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  208.196952][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  208.469155][ T7109] loop3: detected capacity change from 0 to 8
[  208.743689][   T71] tipc: Left network mode
[  208.768249][ T7100] chnl_net:caif_netlink_parms(): no params data found
[  208.891227][ T5357] SQUASHFS error: Unable to read directory block [629:1f]
[  208.934681][ T5357] SQUASHFS error: Unable to read directory block [629:1f]
[  209.366999][ T7100] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.413557][ T7100] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.457596][ T7100] device bridge_slave_0 entered promiscuous mode
[  209.522294][ T7129] input: syz1 as /devices/virtual/input/input9
[  209.563122][ T7100] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.589109][ T7100] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.597534][ T7100] device bridge_slave_1 entered promiscuous mode
[  209.791156][ T7100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  209.826491][ T7100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  209.899157][ T4455] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  210.011235][ T7100] team0: Port device team_slave_0 added
[  210.031277][ T7100] team0: Port device team_slave_1 added
[  210.098785][ T4455] usb 6-1: Using ep0 maxpacket: 8
[  210.114247][ T4455] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  210.126236][ T4455] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.141255][ T4455] usb 6-1: Product: syz
[  210.145502][ T4455] usb 6-1: Manufacturer: syz
[  210.153707][ T4455] usb 6-1: SerialNumber: syz
[  210.176795][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.186179][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.198390][ T4455] usb 6-1: config 0 descriptor??
[  210.248853][ T4270] Bluetooth: hci2: command 0x0409 tx timeout
[  210.256318][ T4455] gspca_main: se401-2.14.0 probing 047d:5003
[  210.274935][ T7100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.298051][ T7100] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.305197][ T7100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.333893][ T7100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.344815][ T6041] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  210.491052][ T7100] device hsr_slave_0 entered promiscuous mode
[  210.518749][ T7100] device hsr_slave_1 entered promiscuous mode
[  210.540247][ T6041] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  210.558939][ T6041] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  210.567899][ T6041] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  210.619173][ T6041] usb 2-1: config 220 has no interface number 2
[  210.641056][ T6041] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  210.650156][ T4455] gspca_se401: Frame size: 0x0 1/16th janggu
[  210.664928][ T4455] gspca_se401: Frame size: 0x0 1/16th janggu
[  210.674545][ T4455] gspca_se401: Frame size: 0x0 1/16th janggu
[  210.684277][ T6041] usb 2-1: config 220 interface 0 has no altsetting 0
[  210.692843][ T4455] gspca_se401: Frame size: 0x0 1/16th janggu
[  210.698748][ T6041] usb 2-1: config 220 interface 76 has no altsetting 0
[  210.714607][ T4455] gspca_se401: Frame size: 0x0 1/16th janggu
[  210.720898][ T4455] gspca_se401: Frame size: 0x0 1/16th janggu
[  210.727271][ T6041] usb 2-1: config 220 interface 1 has no altsetting 0
[  210.745754][ T7100] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.755558][ T7100] Cannot create hsr debugfs directory
[  210.762894][ T6041] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  210.779956][ T6041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.792851][ T6041] usb 2-1: Product: syz
[  210.797080][ T6041] usb 2-1: Manufacturer: syz
[  210.818527][ T6041] usb 2-1: SerialNumber: syz
[  210.845915][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  210.860902][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  210.870373][ T4455] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input10
[  210.888460][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  210.901401][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  210.909233][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  210.916798][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  210.969832][ T4455] usb 6-1: USB disconnect, device number 4
[  211.096941][ T6041] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  211.113993][ T6041] usb 2-1: No valid video chain found.
[  211.127948][ T6041] usb 2-1: selecting invalid altsetting 0
[  211.172501][ T6041] usb 2-1: selecting invalid altsetting 0
[  211.180311][ T6041] usbtest: probe of 2-1:220.1 failed with error -22
[  211.199895][ T6041] usb 2-1: USB disconnect, device number 11
[  212.327756][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  212.612547][ T7176] loop5: detected capacity change from 0 to 64
[  212.633875][   T71] device hsr_slave_0 left promiscuous mode
[  212.643833][   T71] device hsr_slave_1 left promiscuous mode
[  212.667135][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  212.693362][   T71] batman_adv: batadv0: Removing interface: batadv_slave_0
[  212.711937][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  212.727513][   T71] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.743228][   T71] device bridge_slave_1 left promiscuous mode
[  212.757539][   T71] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.781208][   T71] device bridge_slave_0 left promiscuous mode
[  212.792292][   T71] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.875488][   T71] device veth1_macvtap left promiscuous mode
[  212.889927][   T71] device veth0_macvtap left promiscuous mode
[  212.903303][   T71] device veth1_vlan left promiscuous mode
[  212.924161][   T71] device veth0_vlan left promiscuous mode
[  212.967342][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[  213.524308][ T7184] loop1: detected capacity change from 0 to 32768
[  213.622541][ T7184] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  213.650853][ T7183] loop5: detected capacity change from 0 to 40427
[  213.691214][ T7183] F2FS-fs (loop5): Found nat_bits in checkpoint
[  213.792806][ T4267] ocfs2: Unmounting device (7,1) on (node local)
[  213.876349][ T7183] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  214.015888][ T5472] syz-executor: attempt to access beyond end of device
[  214.015888][ T5472] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  214.416469][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[  214.528812][   T71] team0 (unregistering): Port device team_slave_1 removed
[  214.618288][   T71] team0 (unregistering): Port device team_slave_0 removed
[  214.707655][   T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.785321][   T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.046416][ T4280] Bluetooth: hci3: command 0x041b tx timeout
[  215.392624][   T71] bond0 (unregistering): Released all slaves
[  215.682546][ T7100] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  215.777554][ T7100] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  215.825197][ T7100] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  215.885360][ T7100] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  215.981153][ T7143] chnl_net:caif_netlink_parms(): no params data found
[  216.505500][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[  216.599833][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state
[  216.642940][ T7143] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.707389][ T7143] device bridge_slave_0 entered promiscuous mode
[  216.799630][ T7143] bridge0: port 2(bridge_slave_1) entered blocking state
[  216.839101][ T7143] bridge0: port 2(bridge_slave_1) entered disabled state
[  216.907667][ T7143] device bridge_slave_1 entered promiscuous mode
[  216.961030][ T7100] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.125296][ T4280] Bluetooth: hci3: command 0x040f tx timeout
[  217.147666][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  217.166093][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  217.211041][ T7100] 8021q: adding VLAN 0 to HW filter on device team0
[  217.248287][ T7143] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.317207][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  217.369616][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  217.459982][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.467345][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  217.567319][ T7143] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.607273][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  217.657768][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  217.696846][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  217.734524][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.741823][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state
[  217.814491][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  217.852666][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  217.990571][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  218.049555][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  218.070064][ T7240] loop5: detected capacity change from 0 to 32768
[  218.078668][ T7240] XFS: ikeep mount option is deprecated.
[  218.118773][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  218.190630][ T7240] XFS (loop5): Mounting V5 Filesystem
[  218.224699][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  218.291634][ T7240] XFS (loop5): Ending clean mount
[  218.312034][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  218.366604][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  218.434084][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  218.495960][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  218.586797][ T7100] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  218.638133][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  218.687457][ T7143] team0: Port device team_slave_0 added
[  218.815118][ T5472] XFS (loop5): Unmounting Filesystem
[  218.828975][ T7143] team0: Port device team_slave_1 added
[  219.057568][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_0
[  219.096246][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.185670][ T7143] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  219.204232][ T4280] Bluetooth: hci3: command 0x0419 tx timeout
[  219.238221][ T7143] batman_adv: batadv0: Adding interface: batadv_slave_1
[  219.258911][ T7143] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  219.323191][ T7143] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  219.589506][   T71] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.808678][   T71] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.863586][ T7143] device hsr_slave_0 entered promiscuous mode
[  219.870204][ T6042] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  219.888608][ T7266] loop1: detected capacity change from 0 to 32768
[  219.899099][ T7143] device hsr_slave_1 entered promiscuous mode
[  219.906376][ T7143] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  219.955341][ T7143] Cannot create hsr debugfs directory
[  220.063812][ T6042] usb 6-1: Using ep0 maxpacket: 16
[  220.081485][ T6042] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.117925][   T71] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.120320][ T6042] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  220.152520][ T6042] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  220.162817][ T6042] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  220.173206][ T6042] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  220.191132][ T7284] netlink: 16 bytes leftover after parsing attributes in process `syz.4.917'.
[  220.214539][ T6042] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  220.243326][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  220.273175][ T6042] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  220.282177][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  220.302202][ T6042] usb 6-1: Manufacturer: syz
[  220.311606][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv0
[  220.332736][ T6042] usb 6-1: config 0 descriptor??
[  220.405966][   T71] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.944317][ T6042] rc_core: IR keymap rc-hauppauge not found
[  220.950756][ T6042] Registered IR keymap rc-empty
[  220.986131][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.053689][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.094909][ T6042] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  221.125449][ T6042] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input11
[  221.181769][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.223199][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.279958][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.313090][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.363169][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.426244][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.483464][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.513102][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.521635][ T7143] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  221.543034][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.574361][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.663102][ T6042] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  221.670812][ T7143] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  221.691611][ T7143] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  221.697815][ T6042] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  221.735558][ T6042] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  221.765430][ T6042] usb 6-1: USB disconnect, device number 5
[  221.879976][ T7143] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  222.214884][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  222.234119][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  222.403205][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  222.425595][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  222.474150][ T7100] device veth0_vlan entered promiscuous mode
[  222.538998][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  222.557121][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  222.600652][ T7100] device veth1_vlan entered promiscuous mode
[  222.698125][ T7143] 8021q: adding VLAN 0 to HW filter on device bond0
[  222.741645][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  222.753203][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  222.802885][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  222.833534][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  222.957708][ T7143] 8021q: adding VLAN 0 to HW filter on device team0
[  222.980423][ T7100] device veth0_macvtap entered promiscuous mode
[  222.990793][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  223.016047][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  223.034038][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  223.186681][ T7100] device veth1_macvtap entered promiscuous mode
[  223.195693][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  223.206211][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  223.216175][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.222846][ T4310] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  223.223782][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[  223.240876][   T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  223.311320][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.338310][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.349093][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.361836][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.376705][ T7369] loop5: detected capacity change from 0 to 256
[  223.384110][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.407662][ T7369] exfat: Deprecated parameter 'namecase'
[  223.414648][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.414964][ T4310] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  223.442325][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  223.466553][ T7369] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  223.481906][ T4310] usb 2-1: config 1 has no interface number 1
[  223.488085][ T4310] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  223.489447][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.548926][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_0
[  223.559684][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  223.584880][ T4310] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.595238][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  223.617816][ T4310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.636681][ T4292] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.643930][ T4292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  223.646136][ T4310] usb 2-1: Product: syz
[  223.666930][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  223.676961][ T4310] usb 2-1: Manufacturer: syz
[  223.693244][ T4310] usb 2-1: SerialNumber: syz
[  223.726566][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  223.791902][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  223.804558][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.829439][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.847932][ T7375] loop5: detected capacity change from 0 to 512
[  223.855988][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.879421][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.910675][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  223.930467][ T7360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  223.951647][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  223.968866][ T7360] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  223.989705][ T7375] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  223.991970][ T7100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  224.023243][ T7375] ext4 filesystem being mounted at /86/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.041195][ T4310] usb 2-1: found format II with max.bitrate = 3, frame size=7
[  224.051017][ T4310] usb 2-1: found format II with max.bitrate = 3, frame size=7
[  224.072124][ T4310] usb 2-1: failed to enable PITCH for EP 0x82
[  224.078799][ T4310] usb 2-1: 2:1: cannot set freq 9804193 to ep 0x82
[  224.097900][ T7100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  224.118858][ T7375] EXT4-fs (loop5): shut down requested (1)
[  224.179677][ T4310] usb 2-1: USB disconnect, device number 12
[  224.196341][ T7100] batman_adv: batadv0: Interface activated: batadv_slave_1
[  224.353707][ T5472] EXT4-fs (loop5): unmounting filesystem.
[  224.375342][ T4459] udevd[4459]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  224.572221][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  224.593515][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  224.623163][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  224.643852][ T7100] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  224.684728][ T7100] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  224.706593][ T7100] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  224.733443][ T7100] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  224.776680][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  224.800705][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  224.886562][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  224.902594][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  224.942273][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  224.961976][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  225.016630][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  225.049825][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  225.083612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  225.113073][ T7143] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  225.143653][   T71] device hsr_slave_0 left promiscuous mode
[  225.173210][   T71] device hsr_slave_1 left promiscuous mode
[  225.186774][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  225.204130][   T71] batman_adv: batadv0: Removing interface: batadv_slave_0
[  225.223657][   T71] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.238265][   T71] batman_adv: batadv0: Removing interface: batadv_slave_1
[  225.256083][   T71] device bridge_slave_1 left promiscuous mode
[  225.266704][ T7405] loop5: detected capacity change from 0 to 2048
[  225.274239][   T71] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.328051][   T71] device bridge_slave_0 left promiscuous mode
[  225.347569][ T7406] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  225.368453][   T71] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.456715][   T71] device veth1_macvtap left promiscuous mode
[  225.462405][ T7405] NILFS error (device loop5): nilfs_check_page: bad entry in directory #12: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  225.472700][   T71] device veth0_macvtap left promiscuous mode
[  225.500075][   T71] device veth1_vlan left promiscuous mode
[  225.513320][   T71] device veth0_vlan left promiscuous mode
[  225.536809][ T7405] Remounting filesystem read-only
[  225.601356][ T5472] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  226.358861][ T7414] loop1: detected capacity change from 0 to 40427
[  226.418136][ T7414] F2FS-fs (loop1): Found nat_bits in checkpoint
[  226.540510][ T7414] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  226.664059][ T4267] syz-executor: attempt to access beyond end of device
[  226.664059][ T4267] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  227.065609][   T71] team0 (unregistering): Port device team_slave_1 removed
[  227.127887][   T71] team0 (unregistering): Port device team_slave_0 removed
[  227.186085][   T71] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  227.243946][   T71] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  227.714689][   T71] bond0 (unregistering): Released all slaves
[  227.842243][ T7402] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_1
[  227.853074][ T7402] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  227.864635][ T7402] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check.
[  228.055308][ T4366] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.097441][ T4366] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.137611][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  228.227909][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  228.298980][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  228.386301][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  229.087800][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  229.099903][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.135920][ T7143] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.805209][ T7445] mmap: syz.1.962 (7445) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  230.295594][ T7478] loop6: detected capacity change from 0 to 8192
[  230.360072][ T7478] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  230.388298][ T7478] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  230.397877][ T7478] REISERFS (device loop6): using ordered data mode
[  230.414326][ T7478] reiserfs: using flush barriers
[  230.429779][ T7478] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  230.449219][ T7478] REISERFS (device loop6): checking transaction log (loop6)
[  230.455419][ T7486] device syz_tun entered promiscuous mode
[  230.469125][ T7486] device syz_tun left promiscuous mode
[  230.727633][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  230.758651][ T7478] REISERFS (device loop6): Using tea hash to sort names
[  230.766583][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.775623][ T7478] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 4) not found (pos 2)
[  230.814519][ T7478] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  230.914567][ T7143] device veth0_vlan entered promiscuous mode
[  230.941672][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  230.979414][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  231.009115][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  231.029599][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  231.065274][ T7143] device veth1_vlan entered promiscuous mode
[  231.118362][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  231.206788][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.227671][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.292147][ T7143] device veth0_macvtap entered promiscuous mode
[  231.308771][ T7143] device veth1_macvtap entered promiscuous mode
[  231.401370][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.463643][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.497969][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.540152][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.567695][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.600969][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.622545][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.654066][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.673966][ T7143] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.763354][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  231.777261][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.802572][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  231.850339][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  231.903661][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.947772][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.994211][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.031043][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.065407][ T7143] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  232.099501][ T7143] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  232.138020][ T7143] batman_adv: batadv0: Interface activated: batadv_slave_1
[  232.170270][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  232.202564][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.278210][ T7143] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  232.307521][ T7143] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  232.357018][ T7143] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  232.397076][ T7143] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  232.434289][ T7527] loop5: detected capacity change from 0 to 512
[  232.515407][ T7527] EXT4-fs (loop5): Test dummy encryption mode enabled
[  232.553835][ T7527] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  232.655287][ T4352] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.687677][ T7527] EXT4-fs error (device loop5): ext4_find_inline_data_nolock:164: inode #17: comm syz.5.988: inline data xattr refers to an external xattr inode
[  232.749648][ T4352] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.769193][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  232.784763][ T7527] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.988: couldn't read orphan inode 17 (err -117)
[  232.832051][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.870971][ T7527] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  232.887182][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.948253][ T7527] EXT4-fs (loop5): shut down requested (1)
[  232.958957][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  232.987061][ T7527] EXT4-fs warning (device loop5): ext4_empty_dir:3156: inode #2: comm syz.5.988: directory missing '..'
[  233.174082][ T5472] EXT4-fs (loop5): unmounting filesystem.
[  233.283405][ T7543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.991'.
[  233.398486][ T7547] netlink: 56 bytes leftover after parsing attributes in process `syz.5.992'.
[  233.669740][ T7559] loop7: detected capacity change from 0 to 16
[  233.671287][ T7555] loop6: detected capacity change from 0 to 1024
[  233.905740][ T7559] erofs: (device loop7): mounted with root inode @ nid 36.
[  234.058152][ T7559] syz.7.997: attempt to access beyond end of device
[  234.058152][ T7559] loop7: rw=524288, sector=16, nr_sectors = 32 limit=16
[  234.187004][ T7559] syz.7.997: attempt to access beyond end of device
[  234.187004][ T7559] loop7: rw=524288, sector=8, nr_sectors = 32 limit=16
[  234.531811][ T7581] device team_slave_0 entered promiscuous mode
[  234.554906][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  236.500616][ T7644] loop1: detected capacity change from 0 to 256
[  236.581581][ T7608] loop7: detected capacity change from 0 to 32768
[  236.730716][ T7654] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1031'.
[  236.745606][ T7654] device gtp0 entered promiscuous mode
[  236.753677][ T7608] XFS (loop7): Mounting V5 Filesystem
[  236.878119][ T7608] XFS (loop7): Ending clean mount
[  236.902691][ T7608] XFS (loop7): Quotacheck needed: Please wait.
[  237.099244][ T7608] XFS (loop7): Quotacheck: Done.
[  237.211466][ T7668] loop5: detected capacity change from 0 to 512
[  237.240735][ T7667] loop6: detected capacity change from 0 to 1024
[  237.284019][ T7668] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a806e01c, mo2=0002]
[  237.294536][ T7667] EXT4-fs: Ignoring removed orlov option
[  237.363434][ T7668] System zones: 1-12
[  237.452989][ T7667] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  237.463936][ T7668] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1034: Directory hole found for htree index block 0
[  237.552375][ T7668] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -117
[  237.585207][ T7668] EXT4-fs error (device loop5): dx_probe:823: inode #2: comm syz.5.1034: Directory hole found for htree index block 0
[  237.600018][ T7680] EXT4-fs error (device loop6): ext4_lookup:1858: inode #15: comm syz.6.1035: unexpected EA_INODE flag
[  237.658437][ T7668] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  237.680546][ T7668] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  237.717199][ T7143] XFS (loop7): Unmounting Filesystem
[  237.821969][ T7668] EXT4-fs (loop5): shut down requested (1)
[  237.922553][ T7100] EXT4-fs (loop6): unmounting filesystem.
[  237.930856][ T5472] EXT4-fs (loop5): unmounting filesystem.
[  238.345050][ T7662] loop1: detected capacity change from 0 to 32768
[  238.437777][   T26] audit: type=1800 audit(1769824157.048:86): pid=7662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1032" name="file1" dev="loop1" ino=0 res=0 errno=0
[  239.374092][ T4325] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  239.565900][ T4325] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.601042][ T4325] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  239.663936][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.717588][ T4325] usb 2-1: config 0 descriptor??
[  239.745981][ T4325] pwc: Askey VC010 type 2 USB webcam detected.
[  240.143140][ T4325] pwc: recv_control_msg error -32 req 02 val 2b00
[  240.356115][ T4325] pwc: recv_control_msg error -71 req 02 val 2c00
[  240.373949][ T4325] pwc: recv_control_msg error -71 req 04 val 1000
[  240.396598][ T4325] pwc: recv_control_msg error -71 req 04 val 1300
[  240.413154][ T4325] pwc: recv_control_msg error -71 req 04 val 1400
[  240.471576][ T4325] pwc: recv_control_msg error -71 req 02 val 2000
[  240.500523][ T4325] pwc: recv_control_msg error -71 req 02 val 2100
[  240.530694][ T4325] pwc: recv_control_msg error -71 req 04 val 1500
[  240.575284][ T7754] tmpfs: Bad value for 'gid'
[  240.590712][ T4325] pwc: recv_control_msg error -71 req 02 val 2500
[  240.603811][ T4325] pwc: recv_control_msg error -71 req 02 val 2400
[  240.618519][ T4325] pwc: recv_control_msg error -71 req 02 val 2600
[  240.628813][ T4325] pwc: recv_control_msg error -71 req 02 val 2900
[  240.640929][ T4325] pwc: recv_control_msg error -71 req 02 val 2800
[  240.650702][ T4325] pwc: recv_control_msg error -71 req 04 val 1100
[  240.669786][ T4325] pwc: recv_control_msg error -71 req 04 val 1200
[  240.706347][ T4325] pwc: Registered as video103.
[  240.712215][ T7759] No such timeout policy "syz1"
[  240.743426][ T4325] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  240.844028][ T4325] usb 2-1: USB disconnect, device number 13
[  241.713663][ T7778] loop1: detected capacity change from 0 to 4096
[  241.774414][ T7780] loop7: detected capacity change from 0 to 4096
[  241.811684][ T7780] ntfs3: loop7: Different NTFS' sector size (4096) and media sector size (512)
[  241.898824][ T7755] loop6: detected capacity change from 0 to 40427
[  242.024685][ T7755] F2FS-fs (loop6): Found nat_bits in checkpoint
[  242.100905][ T4267] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22.
[  242.153911][ T4267] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  242.293583][ T7755] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  242.450871][ T7800] netlink: 844 bytes leftover after parsing attributes in process `syz.1.1077'.
[  242.666316][ T7100] syz-executor: attempt to access beyond end of device
[  242.666316][ T7100] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  242.802868][ T7808] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1082'.
[  243.053903][ T7813] loop7: detected capacity change from 0 to 8
[  243.675903][ T7830] [U] ©„
[  243.718025][ T7829] [U] ©
[  246.800252][ T4325] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  247.000320][ T4325] usb 2-1: Using ep0 maxpacket: 16
[  247.007473][ T4325] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.030472][ T7912] overlayfs: failed to clone upperpath
[  247.063582][ T4325] usb 2-1: config 0 interface 0 has no altsetting 0
[  247.081271][ T4325] usb 2-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  247.113807][ T4325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.161236][ T7920] device sit0 entered promiscuous mode
[  247.195750][ T4325] usb 2-1: config 0 descriptor??
[  247.230485][ T7924] loop5: detected capacity change from 0 to 256
[  247.237593][ T7920] netlink: 'syz.7.1117': attribute type 1 has an invalid length.
[  247.266989][ T7920] netlink: 1 bytes leftover after parsing attributes in process `syz.7.1117'.
[  247.328758][ T7924] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  247.677861][ T4325] cougar 0003:060B:500A.0007: usage count exceeds max: fixing up report descriptor
[  247.709486][ T4325] cougar 0003:060B:500A.0007: unexpected long global item
[  247.762399][ T4325] cougar 0003:060B:500A.0007: parse failed
[  247.768322][ T4325] cougar: probe of 0003:060B:500A.0007 failed with error -22
[  247.847734][ T4390] usb 2-1: USB disconnect, device number 14
[  248.284274][ T4489] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  248.353048][ T7957] dvmrp1: tun_chr_ioctl cmd 1074812118
[  248.471566][ T4489] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  248.500206][ T4489] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.540859][ T4489] usb 7-1: config 0 descriptor??
[  248.706110][ T7968] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  248.714633][ T7968] IPv6: NLM_F_CREATE should be set when creating new route
[  248.722098][ T7968] IPv6: NLM_F_CREATE should be set when creating new route
[  248.729464][ T7968] IPv6: NLM_F_CREATE should be set when creating new route
[  248.754800][ T4489] [drm] vendor descriptor length:6 data:06 5f 00 00 00 00 00 00 00 00 00
[  248.773819][ T4489] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  248.915520][ T7970] loop1: detected capacity change from 0 to 1024
[  248.970283][ T4489] [drm] Initialized udl 0.0.1 20120220 for 7-1:0.0 on minor 2
[  249.006414][ T4489] [drm] Initialized udl on minor 2
[  249.110787][ T7970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  249.122258][ T7970] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.206514][   T26] audit: type=1804 audit(1769824167.814:87): pid=7981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1135" name="/newroot/264/file1/file1" dev="loop1" ino=15 res=1 errno=0
[  249.262538][ T7981] EXT4-fs error (device loop1): ext4_free_blocks:6221: comm syz.1.1135: Freeing blocks not in datazone - block = 0, count = 16
[  249.366392][ T4489] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  249.385097][ T4489] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  249.412371][ T4489] usb 7-1: USB disconnect, device number 2
[  249.445000][ T4390] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  249.456994][ T4390] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffed
[  249.495227][ T4390] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  249.543821][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  249.738415][ T7993] loop1: detected capacity change from 0 to 1024
[  249.962486][ T7996] loop5: detected capacity change from 0 to 128
[  249.981053][ T4292] hfsplus: b-tree write err: -5, ino 4
[  250.066358][ T7996] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  250.178678][ T7996] ext4 filesystem being mounted at /146/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  250.220116][ T8007] loop6: detected capacity change from 0 to 4096
[  250.248155][ T8007] ntfs3: loop6: Different NTFS' sector size (1024) and media sector size (512)
[  250.485565][   T26] audit: type=1800 audit(1769824169.094:88): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1147" name="file1" dev="loop6" ino=30 res=0 errno=0
[  250.540303][ T5472] EXT4-fs (loop5): unmounting filesystem.
[  251.811087][ T8014] loop1: detected capacity change from 0 to 32768
[  252.000190][ T8030] loop5: detected capacity change from 0 to 40427
[  252.016660][ T8030] F2FS-fs (loop5): invalid crc value
[  252.024522][ T8014] XFS (loop1): Mounting V5 Filesystem
[  252.100138][ T8030] F2FS-fs (loop5): Found nat_bits in checkpoint
[  252.196994][ T8014] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  252.268254][ T8030] F2FS-fs (loop5): Start checkpoint disabled!
[  252.324402][ T8014] XFS (loop1): Starting recovery (logdev: internal)
[  252.338772][ T8030] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  252.429302][ T8014] XFS (loop1): Ending recovery (logdev: internal)
[  252.501702][ T8014] XFS (loop1): Quotacheck needed: Please wait.
[  252.596112][ T8030] syz.5.1156: attempt to access beyond end of device
[  252.596112][ T8030] loop5: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  252.647021][ T8014] XFS (loop1): Quotacheck: Done.
[  252.653010][ T8030] syz.5.1156: attempt to access beyond end of device
[  252.653010][ T8030] loop5: rw=2049, sector=53272, nr_sectors = 16 limit=40427
[  252.669046][ T8030] syz.5.1156: attempt to access beyond end of device
[  252.669046][ T8030] loop5: rw=2049, sector=53296, nr_sectors = 24 limit=40427
[  252.722165][ T8030] syz.5.1156: attempt to access beyond end of device
[  252.722165][ T8030] loop5: rw=2049, sector=53344, nr_sectors = 8 limit=40427
[  252.800187][ T8071] syz.5.1156: attempt to access beyond end of device
[  252.800187][ T8071] loop5: rw=2049, sector=53368, nr_sectors = 16 limit=40427
[  252.999454][ T4267] XFS (loop1): Unmounting Filesystem
[  253.025098][ T8030] syz.5.1156: attempt to access beyond end of device
[  253.025098][ T8030] loop5: rw=2049, sector=53384, nr_sectors = 8 limit=40427
[  253.100162][ T8030] syz.5.1156: attempt to access beyond end of device
[  253.100162][ T8030] loop5: rw=2049, sector=53408, nr_sectors = 32 limit=40427
[  253.158701][ T8030] syz.5.1156: attempt to access beyond end of device
[  253.158701][ T8030] loop5: rw=2049, sector=53464, nr_sectors = 16 limit=40427
[  253.268438][ T8030] syz.5.1156: attempt to access beyond end of device
[  253.268438][ T8030] loop5: rw=2049, sector=53488, nr_sectors = 8 limit=40427
[  253.376811][ T8030] syz.5.1156: attempt to access beyond end of device
[  253.376811][ T8030] loop5: rw=2049, sector=53520, nr_sectors = 8 limit=40427
[  253.405047][ T8077] loop6: detected capacity change from 0 to 8192
[  253.449498][ T8077] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  253.467770][ T8077] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  253.500465][ T8077] REISERFS (device loop6): using ordered data mode
[  253.546841][ T8077] reiserfs: using flush barriers
[  253.596458][ T8077] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  253.622139][ T8063] loop7: detected capacity change from 0 to 32768
[  253.728857][ T8077] REISERFS (device loop6): checking transaction log (loop6)
[  253.824439][ T8063] XFS (loop7): Mounting V5 Filesystem
[  253.963457][ T8063] XFS (loop7): Ending clean mount
[  254.081540][ T8077] REISERFS (device loop6): Using tea hash to sort names
[  254.127798][ T8077] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  254.321105][ T7143] XFS (loop7): Unmounting Filesystem
[  255.127434][ T8116] 9pnet_fd: Insufficient options for proto=fd
[  255.317911][ T8122] loop7: detected capacity change from 0 to 1024
[  255.502079][ T8100] loop1: detected capacity change from 0 to 32768
[  255.546171][ T8100] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.1171 (8100)
[  255.587156][    T9] hfsplus: b-tree write err: -5, ino 4
[  255.661344][ T8123] loop6: detected capacity change from 0 to 8192
[  255.676501][ T8100] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  255.736313][ T8123] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  255.752947][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  255.753078][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  255.796009][ T8123] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  255.805592][ T8100] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  255.818389][ T8100] BTRFS info (device loop1): using free space tree
[  255.886559][ T8123] REISERFS (device loop6): using ordered data mode
[  255.893337][ T8123] reiserfs: using flush barriers
[  256.021139][ T8123] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  256.066192][ T8123] REISERFS (device loop6): checking transaction log (loop6)
[  256.121784][ T8123] REISERFS (device loop6): Using r5 hash to sort names
[  256.169779][ T8100] BTRFS info (device loop1): enabling ssd optimizations
[  256.206416][ T8123] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  256.252865][ T8157] loop7: detected capacity change from 0 to 256
[  256.327012][ T8123] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  256.339972][ T8157] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  256.453951][ T8161] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1186'.
[  256.491120][ T4267] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.510482][ T8161] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1186'.
[  257.068497][ T8170] loop7: detected capacity change from 0 to 1024
[  257.189638][ T8170] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  257.249015][ T8170] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.366438][ T8170] EXT4-fs error (device loop7): ext4_free_blocks:6221: comm syz.7.1188: Freeing blocks not in datazone - block = 0, count = 16
[  257.450182][ T8170] EXT4-fs (loop7): Remounting filesystem read-only
[  257.632724][ T7143] EXT4-fs (loop7): unmounting filesystem.
[  258.173483][ T8199] netlink: 'syz.7.1196': attribute type 1 has an invalid length.
[  258.219770][ T8199] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1196'.
[  258.629117][ T8183] loop5: detected capacity change from 0 to 32768
[  258.693355][ T8183] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  259.169816][ T4456] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  259.355042][ T8229] 9pnet_fd: Insufficient options for proto=fd
[  259.363014][ T8231] netlink: 126588 bytes leftover after parsing attributes in process `syz.6.1210'.
[  259.414711][ T8234] netlink: 1034 bytes leftover after parsing attributes in process `syz.6.1210'.
[  260.220723][ T8260] device veth0_macvtap left promiscuous mode
[  260.939361][ T8249] loop6: detected capacity change from 0 to 40427
[  260.980943][ T8249] F2FS-fs (loop6): build fault injection attr: rate: 14, type: 0x3ffff
[  260.999059][ T8249] F2FS-fs (loop6): build fault injection attr: rate: 0, type: 0xe4
[  261.033372][ T8249] F2FS-fs (loop6): invalid crc value
[  261.097223][ T8249] F2FS-fs (loop6): Found nat_bits in checkpoint
[  261.262790][ T8249] F2FS-fs (loop6) : inject page alloc in f2fs_grab_cache_page of f2fs_ra_meta_pages+0x432/0xa20
[  261.398036][ T8249] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  261.622256][ T8249] F2FS-fs (loop6) : inject alloc nid in f2fs_alloc_nid of f2fs_get_dnode_of_data+0x6eb/0x1b10
[  261.727410][ T8249] F2FS-fs (loop6) : inject no more block in inc_valid_block_count of f2fs_reserve_new_blocks+0x123/0xbd0
[  262.081039][ T8289] loop1: detected capacity change from 0 to 32768
[  262.247557][ T8289] XFS (loop1): Mounting V5 Filesystem
[  262.476692][ T8289] XFS (loop1): Ending clean mount
[  262.762642][ T4267] XFS (loop1): Unmounting Filesystem
[  263.621884][ T8356] loop7: detected capacity change from 0 to 4096
[  263.670435][ T8356] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 1024)
[  263.725281][ T8356] NILFS (loop7): broken superblock, retrying with spare superblock (blocksize = 4096)
[  263.803548][ T8368] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  263.992159][ T6215] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  264.197474][ T6215] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  264.219036][ T6215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.246363][ T6215] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.271651][ T6215] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  264.313549][ T6215] usb 2-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  264.354433][ T6215] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.389883][ T6215] usb 2-1: config 0 descriptor??
[  264.648474][ T8395] loop6: detected capacity change from 0 to 1024
[  264.754692][ T8395] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  264.781571][ T8395] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  264.805222][ T8395] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  264.824379][ T6215] elecom 0003:056E:00FB.0008: report_id 22043 is invalid
[  264.841218][ T6215] elecom 0003:056E:00FB.0008: item 0 2 1 8 parsing failed
[  264.849036][ T6215] elecom: probe of 0003:056E:00FB.0008 failed with error -22
[  264.987619][ T7100] EXT4-fs (loop6): unmounting filesystem.
[  265.174994][ T8412] loop7: detected capacity change from 0 to 256
[  265.818107][ T4390] usb 2-1: USB disconnect, device number 15
[  266.298701][ T8422] loop6: detected capacity change from 0 to 32768
[  266.375801][ T8448] loop7: detected capacity change from 0 to 256
[  266.457837][ T8422] XFS (loop6): Mounting V5 Filesystem
[  266.468252][ T8448] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  266.537980][ T8448] exFAT-fs (loop7): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  266.571300][ T8422] XFS (loop6): Ending clean mount
[  266.617769][ T8422] XFS (loop6): Quotacheck needed: Please wait.
[  266.746278][ T8448] exFAT-fs (loop7): error, invalid access to FAT free cluster (entry 0x00000006)
[  266.798110][ T8422] XFS (loop6): Quotacheck: Done.
[  266.810060][ T8448] exFAT-fs (loop7): Filesystem has been set read-only
[  267.205989][ T7100] XFS (loop6): Unmounting Filesystem
[  267.702288][ T8482] loop1: detected capacity change from 0 to 64
[  267.951816][ T8484] loop7: detected capacity change from 0 to 2048
[  268.017581][ T8484] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  268.486969][ T8504] netlink: 277 bytes leftover after parsing attributes in process `syz.6.1297'.
[  268.727248][ T8510] loop1: detected capacity change from 0 to 64
[  268.794608][ T8510] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  268.974267][ T8519] team0: Device gtp0 is of different type
[  269.324268][ T8530] loop7: detected capacity change from 0 to 1024
[  269.446440][ T8530] EXT4-fs (loop7): mounted filesystem without journal. Quota mode: none.
[  269.701044][ T7143] EXT4-fs (loop7): unmounting filesystem.
[  269.773521][   T26] audit: type=1326 audit(1769824188.384:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8544 comm="syz.4.1311" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa150b9aeb9 code=0x0
[  269.833319][ T8547] loop1: detected capacity change from 0 to 512
[  269.878771][ T8547] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  269.944554][ T8517] loop6: detected capacity change from 0 to 32768
[  269.954055][ T8547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  270.007782][ T8547] ext4 filesystem being mounted at /292/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.055918][ T8517] I/O error, dev loop14, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  270.066635][ T8517] lbmIODone: I/O error in JFS log
[  270.072867][ T8517] *** Log Format Error ! ***
[  270.079033][ T8517] lmLogInit: exit(-22)
[  270.083649][ T8517] lmLogOpen: exit(-22)
[  270.118399][ T8517] jfs_dirty_inode called on read-only volume
[  270.160114][ T8517] Is remount racy?
[  270.234319][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  270.508522][ T8567] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1317'.
[  270.859066][ T8582] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  270.859066][ T8582] The task syz.5.1319 (8582) triggered the difference, watch for misbehavior.
[  271.062569][ T6041] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  271.276808][ T6041] usb 2-1: New USB device found, idVendor=0572, idProduct=cb01, bcdDevice=26.65
[  271.308160][ T6041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.316252][ T6041] usb 2-1: Product: syz
[  271.323298][ T8589] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1326'.
[  271.373348][ T6041] usb 2-1: Manufacturer: syz
[  271.385958][ T6041] usb 2-1: SerialNumber: syz
[  271.428936][ T6041] usb 2-1: config 0 descriptor??
[  271.642936][ T6041] usb 2-1: ignoring: probably an ADSL modem
[  271.773425][ T8597] loop6: detected capacity change from 0 to 2048
[  271.835094][ T8597] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  271.900940][ T8603] loop7: detected capacity change from 0 to 256
[  272.052342][ T6041] cxacru 2-1:0.0: usbatm_usb_probe: bind failed: -19!
[  272.259897][ T6041] usb 2-1: USB disconnect, device number 16
[  272.723918][ T8620] loop6: detected capacity change from 0 to 512
[  272.781066][ T8620] EXT4-fs (loop6): orphan cleanup on readonly fs
[  272.856087][ T8620] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.1335: bad orphan inode 13
[  272.881158][ T8620] ext4_test_bit(bit=12, block=18) = 1
[  272.893532][ T8620] is_bad_inode(inode)=0
[  272.897919][ T8620] NEXT_ORPHAN(inode)=2130706432
[  272.902819][ T8620] max_ino=32
[  272.906096][ T8620] i_nlink=1
[  272.910288][ T8620] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  272.953609][ T8620] EXT4-fs (loop6): warning: mounting fs with errors, running e2fsck is recommended
[  273.072162][ T8620] EXT4-fs (loop6): re-mounted. Quota mode: writeback.
[  273.128435][ T8620] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.1335: bg 0: block 248: padding at end of block bitmap is not set
[  273.177408][ T4280] Bluetooth: hci5: command 0x0406 tx timeout
[  273.198088][ T8620] Quota error (device loop6): write_blk: dquota write failed
[  273.206508][ T8620] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  273.242112][ T8620] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.1335: Failed to acquire dquot type 1
[  273.466756][ T8643] input: syz1 as /devices/virtual/input/input13
[  273.491790][ T7100] EXT4-fs (loop6): unmounting filesystem.
[  273.969924][ T8656] loop6: detected capacity change from 0 to 8
[  274.042593][ T4456] udevd[4456]: incorrect cramfs checksum on /dev/loop6
[  274.054819][ T8656] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  274.195305][ T4456] udevd[4456]: incorrect cramfs checksum on /dev/loop6
[  275.021862][ T8673] input: syz0 as /devices/virtual/input/input14
[  275.180609][ T6041] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  275.386216][ T6041] usb 2-1: Using ep0 maxpacket: 32
[  275.402801][ T6041] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  275.436022][ T6041] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  275.471315][ T6041] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.507717][ T6041] usb 2-1: Product: syz
[  275.517116][ T6041] usb 2-1: Manufacturer: syz
[  275.526846][ T6041] usb 2-1: SerialNumber: syz
[  275.547246][ T6041] usb 2-1: config 0 descriptor??
[  275.553058][ T8670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  275.600190][ T6041] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input15
[  275.877072][ T6036] usb 2-1: USB disconnect, device number 17
[  275.883140][    C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  276.900789][ T8721] loop1: detected capacity change from 0 to 1024
[  277.070705][ T8721] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  277.334289][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  277.781089][ T8749] device bridge0 entered promiscuous mode
[  277.804027][ T8749] device macvlan2 entered promiscuous mode
[  278.913163][ T8792] netlink: 'syz.7.1391': attribute type 1 has an invalid length.
[  278.934362][ T8792] netlink: 'syz.7.1391': attribute type 2 has an invalid length.
[  279.192258][ T8806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.199872][ T8806] IPv6: NLM_F_CREATE should be set when creating new route
[  279.207265][ T8806] IPv6: NLM_F_CREATE should be set when creating new route
[  279.214612][ T8806] IPv6: NLM_F_CREATE should be set when creating new route
[  279.274774][ T8806] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  279.284030][ T6032] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  279.475792][ T6032] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  279.507933][ T6032] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  279.539329][ T6032] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.573056][ T8818] device batadv_slave_0 entered promiscuous mode
[  279.581610][ T6032] usb 2-1: config 0 descriptor??
[  279.652706][ T8818] batman_adv: batadv0: Adding interface: macvtap1
[  279.704791][ T8818] batman_adv: batadv0: The MTU of interface macvtap1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  279.792625][ T8818] batman_adv: batadv0: Interface activated: macvtap1
[  279.813953][ T4280] Bluetooth: hci3: command 0x0405 tx timeout
[  280.006104][ T8827] loop6: detected capacity change from 0 to 128
[  280.014932][ T6032] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[  280.076329][ T8827] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002]
[  280.079461][ T8831] netlink: 16342 bytes leftover after parsing attributes in process `syz.4.1406'.
[  280.104251][ T8827] System zones: 1-3, 19-19, 35-36
[  280.113130][ T8827] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  280.169898][ T6032] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.0009/input/input16
[  280.191243][ T8827] ext4 filesystem being mounted at /89/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  280.512913][ T6032] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[  280.554961][ T6032] usb 2-1: USB disconnect, device number 18
[  280.603112][ T7100] EXT4-fs (loop6): unmounting filesystem.
[  280.889793][ T8844] fido_id[8844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory
[  281.073312][ T6041] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  281.275199][ T6041] usb 7-1: Using ep0 maxpacket: 32
[  281.282507][ T6041] usb 7-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  281.312349][ T6041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.360985][ T6041] usb 7-1: config 0 descriptor??
[  281.522911][ T6215] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  281.577932][ T4350] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  281.578833][ T6041] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  281.613702][ T6041] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  281.646909][ T6041] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  281.661821][ T6041] usb 7-1: media controller created
[  281.689301][ T6041] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  281.742574][ T6215] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  281.762820][ T6215] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  281.782123][ T6215] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  281.791446][ T4350] usb 8-1: Using ep0 maxpacket: 16
[  281.798785][ T8848] az6027: more than 2 i2c messages at a time is not handled yet. TODO.
[  281.807746][ T6215] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  281.824572][ T4350] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  281.859538][ T4350] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  281.869482][ T6041] az6027: usb out operation failed. (-71)
[  281.871384][ T6215] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  281.877637][ T6041] az6027: usb out operation failed. (-71)
[  281.903908][ T4350] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.912089][ T4350] usb 8-1: Product: syz
[  281.912926][ T6041] stb0899_attach: Driver disabled by Kconfig
[  281.924222][ T6215] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  281.926333][ T6041] az6027: no front-end attached
[  281.926333][ T6041] 
[  281.940046][ T4350] usb 8-1: Manufacturer: syz
[  281.950557][ T6215] usb 2-1: Product: syz
[  281.959812][ T6215] usb 2-1: Manufacturer: syz
[  281.964614][ T6041] az6027: usb out operation failed. (-71)
[  281.964632][ T6041] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  281.987704][ T4350] usb 8-1: SerialNumber: syz
[  281.988115][ T6041] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input17
[  282.011563][ T4350] usb 8-1: config 0 descriptor??
[  282.025094][ T4350] hub 8-1:0.0: bad descriptor, ignoring hub
[  282.042395][ T6041] dvb-usb: schedule remote query interval to 400 msecs.
[  282.053624][ T4350] hub: probe of 8-1:0.0 failed with error -5
[  282.065463][ T6215] cdc_wdm 2-1:1.0: skipping garbage
[  282.071455][ T6215] cdc_wdm 2-1:1.0: skipping garbage
[  282.076897][ T6041] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  282.092948][ T6041] usb 7-1: USB disconnect, device number 3
[  282.151445][ T6215] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  282.163529][ T6215] cdc_wdm 2-1:1.0: Unknown control protocol
[  282.294676][ T6041] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  282.307600][ T6215] usb 8-1: USB disconnect, device number 2
[  282.330530][ T6032] usb 2-1: USB disconnect, device number 19
[  283.568896][ T8927] 8021q: adding VLAN 0 to HW filter on device bond1
[  284.073807][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1450'.
[  284.173548][ T8954] loop6: detected capacity change from 0 to 512
[  284.227156][ T8954] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  284.240981][ T8954] ext4 filesystem being mounted at /94/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  284.281541][ T6041] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  284.327537][ T7100] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  284.360524][ T7100] EXT4-fs error (device loop6): ext4_ext_check_inode:520: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  284.486530][ T6041] usb 8-1: Using ep0 maxpacket: 8
[  284.493997][ T6041] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  284.539161][ T6041] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  284.559555][ T6041] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  284.586960][ T6041] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  284.614785][ T6041] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  284.638638][ T6041] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.796953][ T7100] EXT4-fs (loop6): unmounting filesystem.
[  284.894119][ T6041] usb 8-1: GET_CAPABILITIES returned 0
[  284.899824][ T6041] usbtmc 8-1:16.0: can't read capabilities
[  285.103811][   T11] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.231705][ T6041] usb 8-1: USB disconnect, device number 3
[  285.299650][   T11] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.423294][   T11] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.546766][   T11] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.567019][ T8981] netlink: 'syz.4.1462': attribute type 1 has an invalid length.
[  285.606066][ T8981] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1462'.
[  285.830104][ T8986] loop1: detected capacity change from 0 to 1024
[  285.914779][ T8986] EXT4-fs: Ignoring removed orlov option
[  285.978786][ T8986] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  286.173262][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  286.472318][ T4270] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  286.484858][ T4270] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  286.505261][ T4270] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  286.514642][ T9005] loop7: detected capacity change from 0 to 1024
[  286.524647][ T4270] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  286.554792][ T4270] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  286.565531][ T4270] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  286.606566][ T9005] hfsplus: xattr exists yet
[  286.641078][ T4350] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  286.743628][ T4352] hfsplus: b-tree write err: -5, ino 8
[  286.862525][ T4350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  286.894225][ T9013] loop7: detected capacity change from 0 to 256
[  286.918299][ T4350] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  286.951697][ T4350] usb 2-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  287.000158][ T4350] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.034095][    C0] operation not supported error, dev loop7, sector 32 op 0x9:(WRITE_ZEROES) flags 0x8000800 phys_seg 0 prio class 2
[  287.050744][ T4350] usb 2-1: config 0 descriptor??
[  287.245167][ T7143] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  287.274795][ T7143] FAT-fs (loop7): Filesystem has been set read-only
[  287.345281][ T7143] FAT-fs (loop7): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  287.882636][ T4350] hid-led: probe of 0003:27B8:01ED.000A failed with error -71
[  287.908478][ T4350] usb 2-1: USB disconnect, device number 20
[  287.923703][ T9003] chnl_net:caif_netlink_parms(): no params data found
[  288.590622][ T9003] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.597990][ T9003] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.609509][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[  288.670679][ T9003] device bridge_slave_0 entered promiscuous mode
[  288.729110][ T9054] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1484'.
[  288.762468][ T9054] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-tlb(5)
[  288.825212][ T9003] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.833840][ T9003] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.887895][ T9003] device bridge_slave_1 entered promiscuous mode
[  288.930906][   T11] device hsr_slave_0 left promiscuous mode
[  288.965440][   T11] device hsr_slave_1 left promiscuous mode
[  288.973089][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.028673][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.043449][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.059153][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.077968][   T11] device bridge_slave_1 left promiscuous mode
[  289.117065][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.162302][   T11] device bridge_slave_0 left promiscuous mode
[  289.175369][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.256727][   T11] device bridge0 left promiscuous mode
[  289.272527][   T11] device veth1_macvtap left promiscuous mode
[  289.285433][   T11] device veth0_macvtap left promiscuous mode
[  289.298529][   T11] device veth1_vlan left promiscuous mode
[  289.311540][   T11] device veth0_vlan left promiscuous mode
[  289.471455][ T4270] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  289.483424][ T4270] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  289.492884][ T4270] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  289.502967][ T4270] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  289.510793][ T4270] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  289.518310][ T4270] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  289.597869][ T9063] loop1: detected capacity change from 0 to 32768
[  289.632952][ T9063] XFS (loop1): Mounting V5 Filesystem
[  289.687175][ T9063] XFS (loop1): Ending clean mount
[  289.904741][ T4267] XFS (loop1): Unmounting Filesystem
[  290.695958][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[  290.743738][   T11] team0 (unregistering): Port device team_slave_1 removed
[  290.811930][   T11] team0 (unregistering): Port device team_slave_0 removed
[  290.879541][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  290.955230][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  291.481693][   T11] bond0 (unregistering): Released all slaves
[  291.569732][ T4280] Bluetooth: hci3: command 0x0409 tx timeout
[  291.624266][ T9067] sch_tbf: burst 0 is lower than device veth0_to_bridge mtu (1514) !
[  291.697378][ T9003] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  291.734323][ T9003] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  292.028723][ T9003] team0: Port device team_slave_0 added
[  292.065777][ T9003] team0: Port device team_slave_1 added
[  292.212291][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_0
[  292.237087][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.338714][ T9003] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  292.402847][ T9003] batman_adv: batadv0: Adding interface: batadv_slave_1
[  292.425942][ T9003] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  292.469339][ T9003] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  292.601653][ T9003] device hsr_slave_0 entered promiscuous mode
[  292.628546][ T9003] device hsr_slave_1 entered promiscuous mode
[  292.667585][ T9003] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  292.681117][ T9003] Cannot create hsr debugfs directory
[  292.767276][ T4280] Bluetooth: hci2: command 0x040f tx timeout
[  292.916532][ T9068] chnl_net:caif_netlink_parms(): no params data found
[  293.372301][   T11] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.443624][ T9068] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.455343][ T9068] bridge0: port 1(bridge_slave_0) entered disabled state
[  293.464645][ T9068] device bridge_slave_0 entered promiscuous mode
[  293.484097][ T9003] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  293.538154][ T9068] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.545418][ T9068] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.565662][ T9068] device bridge_slave_1 entered promiscuous mode
[  293.636531][   T11] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.647109][ T4280] Bluetooth: hci3: command 0x041b tx timeout
[  293.667698][ T9003] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  293.697288][ T9003] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  293.709566][ T9003] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  293.769990][   T11] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  293.809009][ T9068] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  293.888896][ T9068] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  293.963007][   T11] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  294.114453][ T9068] team0: Port device team_slave_0 added
[  294.174144][ T9068] team0: Port device team_slave_1 added
[  294.382266][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_0
[  294.399722][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.467609][ T9068] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  294.493340][ T9003] 8021q: adding VLAN 0 to HW filter on device bond0
[  294.532529][ T9068] batman_adv: batadv0: Adding interface: batadv_slave_1
[  294.541154][ T9068] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  294.615424][ T9068] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  294.685244][ T9003] 8021q: adding VLAN 0 to HW filter on device team0
[  294.779985][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  294.794856][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  294.846490][ T4280] Bluetooth: hci2: command 0x0419 tx timeout
[  294.977075][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  295.012366][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  295.048358][ T4366] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.055528][ T4366] bridge0: port 1(bridge_slave_0) entered forwarding state
[  295.106658][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  295.115584][ T4270] Bluetooth: hci1: Invalid handle: 0xff00 > 0x0eff
[  295.162649][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  295.189141][ T4366] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.196486][ T4366] bridge0: port 2(bridge_slave_1) entered forwarding state
[  295.277305][ T9177] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1519'.
[  295.277486][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  295.300523][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  295.328673][ T9068] device hsr_slave_0 entered promiscuous mode
[  295.359545][ T9068] device hsr_slave_1 entered promiscuous mode
[  295.371502][ T9068] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  295.390537][ T9068] Cannot create hsr debugfs directory
[  295.462497][ T9185] loop1: detected capacity change from 0 to 512
[  295.474552][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  295.555069][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  295.566330][ T9185] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  295.615947][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  295.676635][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  295.726227][ T4270] Bluetooth: hci3: command 0x040f tx timeout
[  295.746308][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  295.763348][ T9003] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  295.781069][ T9003] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  295.894398][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  296.001969][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  296.014971][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  296.072370][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  296.090161][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  296.104696][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  296.199931][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  297.081410][ T9217] 8021q: adding VLAN 0 to HW filter on device bond1
[  297.355758][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  297.384064][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  297.429541][ T9003] 8021q: adding VLAN 0 to HW filter on device batadv0
[  297.509216][   T11] device hsr_slave_0 left promiscuous mode
[  297.539587][   T11] device hsr_slave_1 left promiscuous mode
[  297.594284][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  297.613635][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  297.639948][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  297.670695][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  297.688831][   T11] device bridge_slave_1 left promiscuous mode
[  297.715067][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  297.744423][   T11] device bridge_slave_0 left promiscuous mode
[  297.764976][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  297.811555][ T4270] Bluetooth: hci3: command 0x0419 tx timeout
[  297.892604][   T11] device veth1_macvtap left promiscuous mode
[  297.917727][   T11] device veth0_macvtap left promiscuous mode
[  297.946666][   T11] device veth1_vlan left promiscuous mode
[  297.952590][   T11] device veth0_vlan left promiscuous mode
[  298.438269][   T11] bond1 (unregistering): Released all slaves
[  299.152493][   T11] team0 (unregistering): Port device team_slave_1 removed
[  299.219432][   T11] team0 (unregistering): Port device team_slave_0 removed
[  299.290024][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  299.365772][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  299.887021][   T11] bond0 (unregistering): Released all slaves
[  300.015828][ T9068] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  300.061069][ T9068] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  300.103920][ T9068] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  300.135132][ T9068] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  300.576117][ T9068] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.643496][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  300.669679][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  300.715982][ T9068] 8021q: adding VLAN 0 to HW filter on device team0
[  300.748440][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  300.779604][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  300.809556][   T71] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.816788][   T71] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.874667][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  300.923058][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  300.932805][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  301.009110][   T71] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.016356][   T71] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.112651][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1546'.
[  301.159208][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  301.194305][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  301.277528][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  301.306369][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  301.329966][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  301.360489][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  301.403867][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  301.423594][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  301.482533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  301.495256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  301.524054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  301.548475][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  301.573740][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  301.582367][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  301.654354][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  301.674191][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  301.703287][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  301.744509][ T9068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  301.755707][ T9003] device veth0_vlan entered promiscuous mode
[  301.800131][ T9003] device veth1_vlan entered promiscuous mode
[  301.917676][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  301.960794][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  301.993900][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  302.029407][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  302.055290][ T9003] device veth0_macvtap entered promiscuous mode
[  302.073586][ T9003] device veth1_macvtap entered promiscuous mode
[  302.134604][ T9320] netlink: 244 bytes leftover after parsing attributes in process `syz.4.1558'.
[  302.163033][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  302.206941][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  302.264879][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.312669][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.334236][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.369821][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.390665][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  302.421839][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.438114][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_0
[  302.474596][ T9325] tipc: Started in network mode
[  302.479553][ T9325] tipc: Node identity ff, cluster identity 4711
[  302.494464][ T9325] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  302.526636][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  302.540583][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  302.580698][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.612403][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.641398][ T9003] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  302.708458][ T9003] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  302.741572][ T9003] batman_adv: batadv0: Interface activated: batadv_slave_1
[  302.785145][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  302.803204][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  302.829413][ T9003] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.859593][ T9003] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.907569][ T9003] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.916718][ T9003] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.145290][ T9345] tipc: New replicast peer: 172.20.20.42
[  303.158545][ T9345] tipc: Enabled bearer <udp:syz2>, priority 10
[  303.166138][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  303.176822][   T71] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  303.201262][ T9068] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.241347][ T4292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.277871][ T4292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.311296][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  303.332001][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  303.385288][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  303.424567][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  303.661512][ T9361] Bluetooth: MGMT ver 1.22
[  304.266132][ T6041] tipc: Node number set to 4278190080
[  304.701078][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  304.722905][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  304.815059][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  304.834197][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  304.868482][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  304.914656][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  304.956568][ T9068] device veth0_vlan entered promiscuous mode
[  305.006237][ T9068] device veth1_vlan entered promiscuous mode
[  305.142986][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  305.154495][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  305.178414][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  305.219586][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  305.245040][ T9068] device veth0_macvtap entered promiscuous mode
[  305.273290][ T9399] team0: Device gtp0 is of different type
[  305.387398][ T9068] device veth1_macvtap entered promiscuous mode
[  305.496963][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.570913][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.609468][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.649615][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.680834][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.719190][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.791099][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.834247][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.893653][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.946384][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  305.979561][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  306.008389][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  306.037157][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  306.072017][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.091854][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.111868][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.146333][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.173281][ T9068] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.190029][ T9068] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.229484][ T9068] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.257802][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  306.285161][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  306.329064][ T9068] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.370630][ T9068] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.379416][ T9068] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.437016][ T9068] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.807054][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.828355][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.928376][ T7427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  306.984499][ T4292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.028842][ T4292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.118839][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  307.191526][ T9453] loop1: detected capacity change from 0 to 512
[  307.487894][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1596'.
[  307.577026][ T9464] device bridge_slave_1 left promiscuous mode
[  307.616744][ T9464] bridge0: port 2(bridge_slave_1) entered disabled state
[  307.686858][ T9464] device bridge_slave_0 left promiscuous mode
[  307.755117][ T9464] bridge0: port 1(bridge_slave_0) entered disabled state
[  308.149657][ T4453] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  308.339475][ T4453] usb 10-1: Using ep0 maxpacket: 16
[  308.347729][ T4453] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  308.360630][ T9494] loop8: detected capacity change from 0 to 256
[  308.380315][ T9494] exfat: Deprecated parameter 'utf8'
[  308.385813][ T9494] exfat: Deprecated parameter 'namecase'
[  308.409760][ T4453] usb 10-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.433666][ T9494] exfat: Deprecated parameter 'utf8'
[  308.450371][ T4453] usb 10-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[  308.494281][ T4453] usb 10-1: config 0 interface 0 has no altsetting 0
[  308.511646][ T4453] usb 10-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  308.531855][ T4453] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.546182][ T9494] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  308.586744][ T4453] usb 10-1: config 0 descriptor??
[  308.679473][ T9494] exFAT-fs (loop8): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5)
[  308.730156][ T9501] exFAT-fs (loop8): error, found bogus dentry(9) beyond unused empty group(8) (start_clu : 5, cur_clu : 5)
[  308.761195][   T26] audit: type=1326 audit(1769824227.403:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9502 comm="syz.5.1609" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f799f99aeb9 code=0x0
[  309.005167][ T4453] hid (null): report_id 3702638396 is invalid
[  309.243421][ T6215] usb 10-1: USB disconnect, device number 2
[  310.100274][ T4310] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  310.293722][ T4310] usb 9-1: Using ep0 maxpacket: 16
[  310.301330][ T4310] usb 9-1: config 0 has no interfaces?
[  310.329411][ T4310] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  310.354176][ T4310] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  310.393565][ T4310] usb 9-1: Manufacturer: syz
[  310.436263][ T4310] usb 9-1: config 0 descriptor??
[  310.794806][ T4310] usb 9-1: USB disconnect, device number 2
[  310.910614][ T9580] device macvlan0 entered promiscuous mode
[  310.957781][ T9580] device macvlan1 entered promiscuous mode
[  310.979645][ T9580] device hsr1 entered promiscuous mode
[  311.013773][   T26] audit: type=1326 audit(1769824229.654:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.016095][ T7427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  311.091314][   T26] audit: type=1326 audit(1769824229.684:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.178071][   T26] audit: type=1326 audit(1769824229.684:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.294717][   T26] audit: type=1326 audit(1769824229.694:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.416327][   T26] audit: type=1326 audit(1769824229.694:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.530513][   T26] audit: type=1326 audit(1769824229.694:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.606957][ T9599] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1644'.
[  311.658003][   T26] audit: type=1326 audit(1769824229.704:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.697656][ T9599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1644'.
[  311.791607][   T26] audit: type=1326 audit(1769824229.704:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.897906][   T26] audit: type=1326 audit(1769824229.704:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9582 comm="syz.9.1637" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f64dc19aeb9 code=0x7ffc0000
[  311.958260][ T9612] syz.8.1647 uses obsolete (PF_INET,SOCK_PACKET)
[  312.881492][ T9641] loop8: detected capacity change from 0 to 1024
[  313.106636][ T9618] loop9: detected capacity change from 0 to 32768
[  313.201967][   T41] hfsplus: b-tree write err: -5, ino 4
[  313.217141][ T9618] (syz.9.1649,9618,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  313.304001][ T9618] (syz.9.1649,9618,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  313.334501][ T9650] loop1: detected capacity change from 0 to 128
[  313.462241][ T9618] JBD2: Ignoring recovery information on journal
[  313.553120][ T9650] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  313.575052][ T9650] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  313.609138][ T9618] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  314.001746][ T4366] 
[  314.004167][ T4366] ======================================================
[  314.011398][ T4366] WARNING: possible circular locking dependency detected
[  314.018463][ T4366] syzkaller #0 Not tainted
[  314.022891][ T4366] ------------------------------------------------------
[  314.029925][ T4366] kworker/u4:8/4366 is trying to acquire lock:
[  314.036180][ T4366] ffff888078c66990 (jbd2_handle){++++}-{0:0}, at: wait_transaction_locked+0x1a6/0x270
[  314.045889][ T4366] 
[  314.045889][ T4366] but task is already holding lock:
[  314.053361][ T4366] ffff888056f88ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  314.063766][ T4366] 
[  314.063766][ T4366] which lock already depends on the new lock.
[  314.063766][ T4366] 
[  314.074282][ T4366] 
[  314.074282][ T4366] the existing dependency chain (in reverse order) is:
[  314.083325][ T4366] 
[  314.083325][ T4366] -> #5 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  314.091956][ T4366]        down_read+0x42/0x2d0
[  314.096664][ T4366]        ocfs2_start_trans+0x3a4/0x6f0
[  314.102145][ T4366]        ocfs2_modify_bh+0xe0/0x4c0
[  314.107813][ T4366]        ocfs2_local_read_info+0x13c8/0x1750
[  314.113828][ T4366]        dquot_load_quota_sb+0x756/0xac0
[  314.119490][ T4366]        dquot_load_quota_inode+0x2d8/0x5d0
[  314.125410][ T4366]        ocfs2_enable_quotas+0x1c5/0x490
[  314.131094][ T4366]        ocfs2_fill_super+0x43b5/0x5090
[  314.136742][ T4366]        mount_bdev+0x287/0x3c0
[  314.141635][ T4366]        legacy_get_tree+0xe6/0x180
[  314.146855][ T4366]        vfs_get_tree+0x88/0x270
[  314.151815][ T4366]        do_new_mount+0x24a/0xa40
[  314.156864][ T4366]        __se_sys_mount+0x2e3/0x3d0
[  314.162078][ T4366]        do_syscall_64+0x4c/0xa0
[  314.167046][ T4366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.173481][ T4366] 
[  314.173481][ T4366] -> #4 (sb_internal#5){.+.+}-{0:0}:
[  314.180985][ T4366]        ocfs2_start_trans+0x2a5/0x6f0
[  314.186643][ T4366]        ocfs2_acquire_dquot+0x681/0xb20
[  314.192391][ T4366]        dqget+0x778/0xeb0
[  314.196837][ T4366]        __dquot_initialize+0x3c3/0xcd0
[  314.202403][ T4366]        ocfs2_get_init_inode+0x144/0x1b0
[  314.208173][ T4366]        ocfs2_mknod+0x8c8/0x25b0
[  314.213227][ T4366]        ocfs2_mkdir+0x1b6/0x4b0
[  314.218197][ T4366]        vfs_mkdir+0x387/0x570
[  314.222984][ T4366]        do_mkdirat+0x1d8/0x440
[  314.227861][ T4366]        __x64_sys_mkdirat+0x85/0x90
[  314.233183][ T4366]        do_syscall_64+0x4c/0xa0
[  314.238250][ T4366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.244688][ T4366] 
[  314.244688][ T4366] -> #3 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  314.253668][ T4366]        down_write+0x36/0x60
[  314.258467][ T4366]        ocfs2_create_local_dquot+0x1a5/0x18e0
[  314.264658][ T4366]        ocfs2_acquire_dquot+0x7c6/0xb20
[  314.270329][ T4366]        dqget+0x778/0xeb0
[  314.274764][ T4366]        __dquot_initialize+0x3c3/0xcd0
[  314.280333][ T4366]        ocfs2_get_init_inode+0x144/0x1b0
[  314.286080][ T4366]        ocfs2_mknod+0x8c8/0x25b0
[  314.291134][ T4366]        ocfs2_mkdir+0x1b6/0x4b0
[  314.296095][ T4366]        vfs_mkdir+0x387/0x570
[  314.300897][ T4366]        do_mkdirat+0x1d8/0x440
[  314.306030][ T4366]        __x64_sys_mkdirat+0x85/0x90
[  314.311330][ T4366]        do_syscall_64+0x4c/0xa0
[  314.316290][ T4366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.322816][ T4366] 
[  314.322816][ T4366] -> #2 (&dquot->dq_lock){+.+.}-{3:3}:
[  314.330487][ T4366]        __mutex_lock+0x12d/0xaf0
[  314.335542][ T4366]        dquot_commit+0x5a/0x410
[  314.340499][ T4366]        ext4_write_dquot+0x1f0/0x360
[  314.345904][ T4366]        mark_all_dquot_dirty+0xf9/0x400
[  314.351555][ T4366]        __dquot_alloc_space+0x5fc/0xe60
[  314.357229][ T4366]        ext4_mb_new_blocks+0xf8d/0x4760
[  314.362885][ T4366]        ext4_ext_map_blocks+0x195b/0x6810
[  314.368719][ T4366]        ext4_map_blocks+0x9de/0x1b70
[  314.374120][ T4366]        ext4_getblk+0x1cc/0x6f0
[  314.379099][ T4366]        ext4_bread+0x26/0x170
[  314.383978][ T4366]        ext4_append+0x2be/0x560
[  314.389042][ T4366]        ext4_init_new_dir+0x2b8/0x570
[  314.394563][ T4366]        ext4_mkdir+0x4fb/0xce0
[  314.399448][ T4366]        vfs_mkdir+0x387/0x570
[  314.404230][ T4366]        do_mkdirat+0x1d8/0x440
[  314.409105][ T4366]        __x64_sys_mkdirat+0x85/0x90
[  314.414410][ T4366]        do_syscall_64+0x4c/0xa0
[  314.419383][ T4366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.425825][ T4366] 
[  314.425825][ T4366] -> #1 (&ei->i_data_sem){++++}-{3:3}:
[  314.433495][ T4366]        down_write+0x36/0x60
[  314.438197][ T4366]        ext4_truncate+0x999/0x1240
[  314.443424][ T4366]        ext4_setattr+0x10cb/0x19f0
[  314.448657][ T4366]        notify_change+0xc74/0xf40
[  314.453798][ T4366]        do_truncate+0x1ac/0x240
[  314.458763][ T4366]        do_sys_ftruncate+0x312/0x3c0
[  314.464157][ T4366]        do_syscall_64+0x4c/0xa0
[  314.469119][ T4366]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  314.475569][ T4366] 
[  314.475569][ T4366] -> #0 (jbd2_handle){++++}-{0:0}:
[  314.482891][ T4366]        __lock_acquire+0x2d07/0x7d10
[  314.488292][ T4366]        lock_acquire+0x1bb/0x4a0
[  314.493342][ T4366]        wait_transaction_locked+0x1bf/0x270
[  314.499347][ T4366]        start_this_handle+0x7ec/0x2230
[  314.504916][ T4366]        jbd2__journal_start+0x2b7/0x5a0
[  314.510677][ T4366]        jbd2_journal_start+0x26/0x30
[  314.516095][ T4366]        ocfs2_start_trans+0x3b0/0x6f0
[  314.521617][ T4366]        ocfs2_release_dquot+0x47c/0xc70
[  314.527396][ T4366]        quota_release_workfn+0x35e/0x610
[  314.533171][ T4366]        process_one_work+0x8a2/0x1160
[  314.538780][ T4366]        worker_thread+0xaa2/0x1270
[  314.544021][ T4366]        kthread+0x29d/0x330
[  314.548661][ T4366]        ret_from_fork+0x1f/0x30
[  314.553625][ T4366] 
[  314.553625][ T4366] other info that might help us debug this:
[  314.553625][ T4366] 
[  314.564010][ T4366] Chain exists of:
[  314.564010][ T4366]   jbd2_handle --> sb_internal#5 --> &journal->j_trans_barrier
[  314.564010][ T4366] 
[  314.577427][ T4366]  Possible unsafe locking scenario:
[  314.577427][ T4366] 
[  314.584916][ T4366]        CPU0                    CPU1
[  314.590305][ T4366]        ----                    ----
[  314.595695][ T4366]   lock(&journal->j_trans_barrier);
[  314.601006][ T4366]                                lock(sb_internal#5);
[  314.607793][ T4366]                                lock(&journal->j_trans_barrier);
[  314.615722][ T4366]   lock(jbd2_handle);
[  314.619846][ T4366] 
[  314.619846][ T4366]  *** DEADLOCK ***
[  314.619846][ T4366] 
[  314.628011][ T4366] 7 locks held by kworker/u4:8/4366:
[  314.633315][ T4366]  #0: ffff888017479138 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  314.644406][ T4366]  #1: ffffc9000460fd00 ((quota_release_work).work){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160
[  314.655143][ T4366]  #2: ffff8880504782a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_release_dquot+0x260/0xc70
[  314.665187][ T4366]  #3: ffff888071273488 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#4){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1d7/0x290
[  314.678203][ T4366]  #4: ffff888071273120 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1fe/0x290
[  314.689552][ T4366]  #5: ffff888046214650 (sb_internal#5){.+.+}-{0:0}, at: ocfs2_release_dquot+0x47c/0xc70
[  314.699423][ T4366]  #6: ffff888056f88ce8 (&journal->j_trans_barrier){.+.+}-{3:3}, at: ocfs2_start_trans+0x3a4/0x6f0
[  314.710327][ T4366] 
[  314.710327][ T4366] stack backtrace:
[  314.716422][ T4366] CPU: 0 PID: 4366 Comm: kworker/u4:8 Not tainted syzkaller #0
[  314.724010][ T4366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  314.734088][ T4366] Workqueue: events_unbound quota_release_workfn
[  314.740459][ T4366] Call Trace:
[  314.743766][ T4366]  <TASK>
[  314.746718][ T4366]  dump_stack_lvl+0x188/0x24e
[  314.751514][ T4366]  ? load_image+0x400/0x400
[  314.756127][ T4366]  ? show_regs_print_info+0x12/0x12
[  314.761373][ T4366]  ? print_circular_bug+0x12b/0x1a0
[  314.766602][ T4366]  check_noncircular+0x296/0x330
[  314.771574][ T4366]  ? add_chain_block+0x940/0x940
[  314.776538][ T4366]  ? lockdep_lock+0xf1/0x1f0
[  314.781166][ T4366]  ? _find_first_zero_bit+0xcf/0x100
[  314.786472][ T4366]  __lock_acquire+0x2d07/0x7d10
[  314.791360][ T4366]  ? verify_lock_unused+0x140/0x140
[  314.796591][ T4366]  ? mark_lock+0x94/0x320
[  314.801079][ T4366]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  314.807096][ T4366]  lock_acquire+0x1bb/0x4a0
[  314.811636][ T4366]  ? wait_transaction_locked+0x1a6/0x270
[  314.817380][ T4366]  ? __lock_acquire+0x7d10/0x7d10
[  314.822438][ T4366]  ? ret_from_fork+0x1f/0x30
[  314.827068][ T4366]  ? read_lock_is_recursive+0x10/0x10
[  314.832479][ T4366]  ? prepare_to_wait_exclusive+0x7e/0x220
[  314.838328][ T4366]  ? wait_transaction_locked+0x1a6/0x270
[  314.843982][ T4366]  wait_transaction_locked+0x1bf/0x270
[  314.849584][ T4366]  ? wait_transaction_locked+0x1a6/0x270
[  314.855245][ T4366]  ? jbd2_journal_begin_ordered_truncate+0x150/0x150
[  314.861946][ T4366]  ? stack_trace_save+0xa6/0xf0
[  314.866828][ T4366]  ? wake_bit_function+0x200/0x200
[  314.872059][ T4366]  ? __lock_acquire+0x13cf/0x7d10
[  314.877119][ T4366]  start_this_handle+0x7ec/0x2230
[  314.882192][ T4366]  ? slab_post_alloc_hook+0x4b/0x480
[  314.887499][ T4366]  ? kmem_cache_alloc+0x123/0x2f0
[  314.892548][ T4366]  ? jbd2__journal_start+0x13c/0x5a0
[  314.897875][ T4366]  ? jbd2__journal_start+0x5a0/0x5a0
[  314.903200][ T4366]  ? __kasan_slab_alloc+0x6b/0x80
[  314.908705][ T4366]  ? slab_post_alloc_hook+0x67/0x480
[  314.914269][ T4366]  ? slab_pre_alloc_hook+0x59/0x310
[  314.919494][ T4366]  ? rcu_is_watching+0x11/0xa0
[  314.924297][ T4366]  ? kmem_cache_alloc+0x151/0x2f0
[  314.929520][ T4366]  ? jbd2__journal_start+0x13c/0x5a0
[  314.934857][ T4366]  jbd2__journal_start+0x2b7/0x5a0
[  314.940002][ T4366]  jbd2_journal_start+0x26/0x30
[  314.944906][ T4366]  ocfs2_start_trans+0x3b0/0x6f0
[  314.949873][ T4366]  ? down_write+0x42/0x60
[  314.954238][ T4366]  ? ocfs2_recovery_exit+0x50/0x50
[  314.959386][ T4366]  ocfs2_release_dquot+0x47c/0xc70
[  314.964649][ T4366]  ? ocfs2_acquire_dquot+0xb20/0xb20
[  314.970045][ T4366]  ? __lock_acquire+0x7d10/0x7d10
[  314.975097][ T4366]  ? do_raw_spin_lock+0x128/0x2f0
[  314.980318][ T4366]  ? __rwlock_init+0x140/0x140
[  314.985105][ T4366]  ? do_raw_spin_unlock+0x11d/0x230
[  314.990346][ T4366]  quota_release_workfn+0x35e/0x610
[  314.995667][ T4366]  ? dquot_quota_disable+0x380/0x380
[  315.000976][ T4366]  ? _raw_spin_unlock_irq+0x1f/0x40
[  315.006207][ T4366]  ? process_one_work+0x7b0/0x1160
[  315.011351][ T4366]  process_one_work+0x8a2/0x1160
[  315.016320][ T4366]  ? worker_detach_from_pool+0x240/0x240
[  315.022070][ T4366]  ? _raw_spin_lock_irq+0xb7/0xf0
[  315.027132][ T4366]  ? _raw_spin_lock_irqsave+0x100/0x100
[  315.032796][ T4366]  ? kthread_data+0x4b/0xc0
[  315.037343][ T4366]  worker_thread+0xaa2/0x1270
[  315.042225][ T4366]  ? __kthread_parkme+0x162/0x1c0
[  315.047285][ T4366]  kthread+0x29d/0x330
[  315.051485][ T4366]  ? worker_clr_flags+0x1a0/0x1a0
[  315.056534][ T4366]  ? kthread_blkcg+0xd0/0xd0
[  315.061247][ T4366]  ret_from_fork+0x1f/0x30
[  315.065732][ T4366]  </TASK>
[  315.184457][ T9068] ocfs2: Unmounting device (7,9) on (node local)
[  315.205073][ T4267] EXT4-fs (loop1): unmounting filesystem.
[  317.157371][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  317.163755][ T1274] ieee802154 phy1 wpan1: encryption failed: -22