Warning: Permanently added '10.128.0.112' (ED25519) to the list of known hosts.
2024/04/09 05:47:42 fuzzer started
2024/04/09 05:47:42 dialing manager at 10.128.0.163:30008
[   41.377779][ T3503] cgroup: Unknown subsys name 'net'
[   41.502007][ T3503] cgroup: Unknown subsys name 'rlimit'
2024/04/09 05:47:43 syscalls: 3846
2024/04/09 05:47:43 code coverage: enabled
2024/04/09 05:47:43 comparison tracing: enabled
2024/04/09 05:47:43 extra coverage: enabled
2024/04/09 05:47:43 delay kcov mmap: mmap returned an invalid pointer
2024/04/09 05:47:43 setuid sandbox: enabled
2024/04/09 05:47:43 namespace sandbox: enabled
2024/04/09 05:47:43 Android sandbox: /sys/fs/selinux/policy does not exist
2024/04/09 05:47:43 fault injection: enabled
2024/04/09 05:47:43 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled
2024/04/09 05:47:43 net packet injection: enabled
2024/04/09 05:47:43 net device setup: enabled
2024/04/09 05:47:43 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist
2024/04/09 05:47:43 devlink PCI setup: PCI device 0000:00:10.0 is not available
2024/04/09 05:47:43 NIC VF setup: PCI device 0000:00:11.0 is not available
2024/04/09 05:47:43 USB emulation: enabled
2024/04/09 05:47:43 hci packet injection: enabled
2024/04/09 05:47:43 wifi device emulation: enabled
2024/04/09 05:47:43 802.15.4 emulation: enabled
2024/04/09 05:47:43 swap file: enabled
[   42.660261][ T3503] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
2024/04/09 05:47:44 starting 5 executor processes
[   43.681294][ T3519] chnl_net:caif_netlink_parms(): no params data found
[   43.722201][ T3526] chnl_net:caif_netlink_parms(): no params data found
[   43.766398][ T3518] chnl_net:caif_netlink_parms(): no params data found
[   43.803624][ T3522] chnl_net:caif_netlink_parms(): no params data found
[   43.830108][ T3519] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.838150][ T3519] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.846090][ T3519] device bridge_slave_0 entered promiscuous mode
[   43.856546][ T3514] chnl_net:caif_netlink_parms(): no params data found
[   43.895840][ T3519] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.903668][ T3519] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.912157][ T3519] device bridge_slave_1 entered promiscuous mode
[   43.966571][ T3526] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.973654][ T3526] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.982411][ T3526] device bridge_slave_0 entered promiscuous mode
[   44.000056][ T3519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.032908][ T3526] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.040418][ T3526] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.051327][ T3526] device bridge_slave_1 entered promiscuous mode
[   44.060359][ T3519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.116289][ T3522] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.123341][ T3522] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.132226][ T3522] device bridge_slave_0 entered promiscuous mode
[   44.145212][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.156750][ T3514] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.164674][ T3514] device bridge_slave_0 entered promiscuous mode
[   44.179970][ T3518] bridge0: port 1(bridge_slave_0) entered blocking state
[   44.188699][ T3518] bridge0: port 1(bridge_slave_0) entered disabled state
[   44.197315][ T3518] device bridge_slave_0 entered promiscuous mode
[   44.204913][ T3522] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.212194][ T3522] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.220788][ T3522] device bridge_slave_1 entered promiscuous mode
[   44.230242][ T3526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.239818][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.247342][ T3514] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.255381][ T3514] device bridge_slave_1 entered promiscuous mode
[   44.272277][ T3519] team0: Port device team_slave_0 added
[   44.278322][ T3518] bridge0: port 2(bridge_slave_1) entered blocking state
[   44.285349][ T3518] bridge0: port 2(bridge_slave_1) entered disabled state
[   44.293312][ T3518] device bridge_slave_1 entered promiscuous mode
[   44.310004][ T3526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.325010][ T3519] team0: Port device team_slave_1 added
[   44.348742][ T3514] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.376641][ T3522] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.395767][ T3518] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   44.414776][ T3514] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.427611][ T3522] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.438625][ T3526] team0: Port device team_slave_0 added
[   44.446387][ T3518] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   44.456480][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.463580][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.490293][ T3519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.511504][ T3526] team0: Port device team_slave_1 added
[   44.529035][ T3519] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.536279][ T3519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.562728][ T3519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.608208][ T3514] team0: Port device team_slave_0 added
[   44.621254][ T3522] team0: Port device team_slave_0 added
[   44.635230][ T3518] team0: Port device team_slave_0 added
[   44.651049][ T3514] team0: Port device team_slave_1 added
[   44.657413][ T3526] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.664495][ T3526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.691248][ T3526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.703939][ T3522] team0: Port device team_slave_1 added
[   44.710940][ T3518] team0: Port device team_slave_1 added
[   44.719314][ T3519] device hsr_slave_0 entered promiscuous mode
[   44.729225][ T3519] device hsr_slave_1 entered promiscuous mode
[   44.741357][ T3526] batman_adv: batadv0: Adding interface: batadv_slave_1
[   44.751833][ T3526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.778431][ T3526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   44.846479][ T3514] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.853753][ T3514] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.880854][ T3514] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.901099][ T3522] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.908106][ T3522] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.935224][ T3522] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.946862][ T3518] batman_adv: batadv0: Adding interface: batadv_slave_0
[   44.953980][ T3518] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   44.981061][ T3518] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   44.999186][ T3514] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.006162][ T3514] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.032833][ T3514] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.046823][ T3522] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.054009][ T3522] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.080209][ T3522] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.092498][ T3518] batman_adv: batadv0: Adding interface: batadv_slave_1
[   45.099891][ T3518] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   45.126483][ T3518] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   45.152678][ T3526] device hsr_slave_0 entered promiscuous mode
[   45.161955][ T3526] device hsr_slave_1 entered promiscuous mode
[   45.169623][ T3526] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.177558][ T3526] Cannot create hsr debugfs directory
[   45.244105][ T3514] device hsr_slave_0 entered promiscuous mode
[   45.251219][ T3514] device hsr_slave_1 entered promiscuous mode
[   45.260788][ T3514] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.268402][ T3514] Cannot create hsr debugfs directory
[   45.287242][ T3522] device hsr_slave_0 entered promiscuous mode
[   45.293824][ T3522] device hsr_slave_1 entered promiscuous mode
[   45.300633][ T3522] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.311351][ T3522] Cannot create hsr debugfs directory
[   45.317568][ T1066] Bluetooth: hci0: command 0x0409 tx timeout
[   45.359567][ T3518] device hsr_slave_0 entered promiscuous mode
[   45.366806][ T3518] device hsr_slave_1 entered promiscuous mode
[   45.373805][ T3518] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   45.381880][ T3518] Cannot create hsr debugfs directory
[   45.396090][ T1066] Bluetooth: hci2: command 0x0409 tx timeout
[   45.396285][   T21] Bluetooth: hci3: command 0x0409 tx timeout
[   45.407516][ T1066] Bluetooth: hci1: command 0x0409 tx timeout
[   45.477229][ T3246] Bluetooth: hci4: command 0x0409 tx timeout
[   45.623930][ T3519] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   45.642030][ T3519] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   45.651731][ T3519] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   45.677342][ T3519] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   45.719921][ T3522] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   45.742778][ T3522] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   45.765591][ T3522] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   45.783291][ T3522] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   45.805447][ T3526] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   45.824319][ T3526] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   45.833263][ T3526] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   45.843380][ T3526] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   45.918610][ T3519] 8021q: adding VLAN 0 to HW filter on device bond0
[   45.937313][ T3514] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   45.975349][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   45.984537][ T3521] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   45.993204][ T3514] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   46.029096][ T3514] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   46.041642][ T3519] 8021q: adding VLAN 0 to HW filter on device team0
[   46.051819][ T3514] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   46.065164][ T3518] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   46.083043][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   46.092618][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.101790][ T3557] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.109276][ T3557] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.120731][ T3518] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   46.133286][ T3518] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   46.156705][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   46.164731][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   46.174682][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.183411][ T3557] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.190689][ T3557] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.198858][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   46.208120][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   46.217115][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   46.226358][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   46.234877][ T3518] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   46.267045][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   46.274852][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   46.284441][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   46.293780][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   46.302952][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   46.324543][ T3522] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.344863][ T3526] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.360482][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   46.369257][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   46.390713][ T3519] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   46.434771][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   46.443500][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.462517][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   46.471426][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.485413][ T3522] 8021q: adding VLAN 0 to HW filter on device team0
[   46.508080][ T3526] 8021q: adding VLAN 0 to HW filter on device team0
[   46.538228][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   46.547710][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.557046][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.564300][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.573012][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   46.582686][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.592071][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.599358][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.607816][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   46.617324][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.625806][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.633348][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.641596][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   46.650517][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.659113][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.667407][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.678426][ T3514] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.694414][ T3518] 8021q: adding VLAN 0 to HW filter on device bond0
[   46.706716][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   46.714851][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   46.724054][ T3557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   46.750263][ T3518] 8021q: adding VLAN 0 to HW filter on device team0
[   46.764079][ T3514] 8021q: adding VLAN 0 to HW filter on device team0
[   46.773812][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   46.785733][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   46.794765][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   46.804747][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.812809][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   46.821354][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   46.840269][ T3519] 8021q: adding VLAN 0 to HW filter on device batadv0
[   46.863367][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   46.871350][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   46.879304][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   46.888599][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   46.898552][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   46.907792][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   46.917952][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   46.927277][ T3561] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.934800][ T3561] bridge0: port 1(bridge_slave_0) entered forwarding state
[   46.942964][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   46.951955][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   46.961367][ T3561] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.968746][ T3561] bridge0: port 2(bridge_slave_1) entered forwarding state
[   46.977439][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   46.986656][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   47.004986][ T3522] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.017412][ T3522] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.075607][ T3526] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.091490][ T3526] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.107226][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   47.116936][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   47.125229][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   47.134448][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   47.143059][ T3558] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.150154][ T3558] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.158619][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   47.168800][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.177511][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   47.186101][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   47.194609][ T3558] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.201682][ T3558] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.210008][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   47.218361][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.226923][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   47.235481][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   47.244771][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   47.253596][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   47.262355][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   47.271249][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   47.280078][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   47.289452][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   47.298396][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   47.307189][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   47.315722][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   47.324324][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   47.333682][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.342278][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   47.351028][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.359887][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   47.398315][   T13] Bluetooth: hci0: command 0x041b tx timeout
[   47.400704][ T3518] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   47.417781][ T3518] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   47.431920][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   47.440932][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   47.449767][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   47.458433][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   47.466682][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   47.474528][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   47.476368][   T13] Bluetooth: hci3: command 0x041b tx timeout
[   47.483806][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.494631][   T13] Bluetooth: hci1: command 0x041b tx timeout
[   47.498315][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   47.503456][   T13] Bluetooth: hci2: command 0x041b tx timeout
[   47.513443][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   47.527282][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   47.539513][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   47.549935][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   47.556198][   T13] Bluetooth: hci4: command 0x041b tx timeout
[   47.564219][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.572497][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   47.581190][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.589625][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   47.598322][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   47.606699][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   47.615237][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   47.632292][ T3519] device veth0_vlan entered promiscuous mode
[   47.649029][ T3514] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   47.662852][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   47.672555][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   47.696968][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   47.707175][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   47.718201][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   47.727231][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   47.738936][ T3519] device veth1_vlan entered promiscuous mode
[   47.767976][ T3526] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.801537][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   47.812810][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   47.842296][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   47.851795][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   47.894985][ T3522] 8021q: adding VLAN 0 to HW filter on device batadv0
[   47.928675][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   47.942489][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   47.951450][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   47.969574][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   47.989101][ T3514] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.012221][ T3526] device veth0_vlan entered promiscuous mode
[   48.020643][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.034843][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.044616][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   48.053787][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.063973][ T3519] device veth0_macvtap entered promiscuous mode
[   48.076584][ T3519] device veth1_macvtap entered promiscuous mode
[   48.091357][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   48.102389][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   48.111294][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.122583][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.131380][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   48.139272][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   48.154854][ T3526] device veth1_vlan entered promiscuous mode
[   48.186862][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   48.194899][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   48.204874][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   48.213689][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.230963][ T3526] device veth0_macvtap entered promiscuous mode
[   48.245773][ T3518] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.261972][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.271345][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.280173][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   48.289162][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.299065][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   48.308821][ T3526] device veth1_macvtap entered promiscuous mode
[   48.320088][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.332604][ T3522] device veth0_vlan entered promiscuous mode
[   48.355442][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   48.363926][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   48.373755][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   48.384239][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   48.392831][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.402038][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   48.411106][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   48.420941][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.429378][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.444429][ T3522] device veth1_vlan entered promiscuous mode
[   48.462400][ T3514] device veth0_vlan entered promiscuous mode
[   48.471641][ T3519] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.481243][ T3526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   48.492451][ T3526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.504768][ T3526] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.514267][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   48.523486][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   48.532192][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.540802][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   48.550167][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.559686][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   48.568796][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   48.578642][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.586542][ T3561] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.599392][ T3514] device veth1_vlan entered promiscuous mode
[   48.617274][ T3526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   48.628554][ T3526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   48.643098][ T3526] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.654653][ T3526] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.664287][ T3526] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.675317][ T3526] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.684737][ T3526] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.697385][ T3518] device veth0_vlan entered promiscuous mode
[   48.704064][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   48.712867][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   48.721211][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   48.729792][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   48.738634][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   48.747965][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   48.758699][ T3519] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.772760][ T3519] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.783364][ T3519] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.792685][ T3519] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.828726][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   48.837648][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   48.846531][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   48.854316][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.864050][ T3558] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.874694][ T3522] device veth0_macvtap entered promiscuous mode
[   48.900767][ T3514] device veth0_macvtap entered promiscuous mode
[   48.917877][ T3518] device veth1_vlan entered promiscuous mode
[   48.928704][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   48.938264][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   48.947940][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   48.957991][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   48.984841][ T3522] device veth1_macvtap entered promiscuous mode
[   49.013994][ T3514] device veth1_macvtap entered promiscuous mode
[   49.045695][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.057018][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.067721][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.079990][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.091310][ T3522] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.133767][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.139637][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.147224][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.159144][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.162694][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.180895][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.191085][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.201819][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.212848][ T3514] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.220818][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.229275][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.239023][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.248155][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   49.255862][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   49.264636][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   49.279065][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.290422][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.300903][ T3522] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.311851][ T3522] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.323713][ T3522] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.347023][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.356723][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.366943][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.378762][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.390420][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.401774][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.411849][ T3514] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.422672][ T3514] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.433876][ T3514] batman_adv: batadv0: Interface activated: batadv_slave_1
[   49.448771][ T3522] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.457872][ T3522] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.467962][ T3522] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.477734][ T3556] Bluetooth: hci0: command 0x040f tx timeout
[   49.484336][ T3522] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.503831][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   49.512954][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   49.521817][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   49.531459][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   49.542712][ T3514] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   49.552299][ T3514] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   49.561929][ T3557] Bluetooth: hci2: command 0x040f tx timeout
[   49.568926][ T3557] Bluetooth: hci1: command 0x040f tx timeout
[   49.575142][ T3514] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   49.583933][ T3557] Bluetooth: hci3: command 0x040f tx timeout
[   49.590121][ T3514] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   49.616421][ T3576] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.624627][ T3576] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.635005][ T3518] device veth0_macvtap entered promiscuous mode
[   49.636751][ T3557] Bluetooth: hci4: command 0x040f tx timeout
[   49.677001][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   49.684982][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   49.717648][ T3518] device veth1_macvtap entered promiscuous mode
[   49.720477][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.724855][ T3576] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   49.732580][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.776153][ T3576] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   49.780725][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   49.801718][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   49.810512][ T3566] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   49.836354][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.850125][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.860019][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.871020][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.883569][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.894528][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.904819][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   49.915849][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
05:47:51 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

[   49.930848][ T3518] batman_adv: batadv0: Interface activated: batadv_slave_0
[   49.953749][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   49.974998][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   49.993112][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.011601][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.032011][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
05:47:51 executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)

[   50.060504][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.074324][ T3518] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   50.096055][ T3518] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   50.113391][ T3518] batman_adv: batadv0: Interface activated: batadv_slave_1
[   50.122972][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   50.156740][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   50.165632][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   50.175135][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
05:47:51 executing program 2:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000010000200000000000030000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
vmsplice(r1, 0x0, 0x0, 0x0)

[   50.214634][ T3518] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   50.260838][ T3518] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
05:47:51 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@migrate={0xa0, 0x21, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x50, 0x11, [{@in6=@loopback, @in=@broadcast, @in, @in6=@local}]}]}, 0xa0}}, 0x0)

[   50.314902][ T3518] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   50.316979][ T3598] loop0: detected capacity change from 0 to 1024
[   50.329782][ T3518] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
05:47:51 executing program 2:
r0 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001680)={'vxcan1\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000400)={0x1d, r1, 0x3}, 0x18)
sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0)
sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)
sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x14}, 0x14}}, 0x0)

[   50.419127][ T3598] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option
[   50.423417][  T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.459429][  T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.509468][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.541537][ T3603] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.558332][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.575651][ T3603] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.577372][ T3598] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   50.593191][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
05:47:51 executing program 0:
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040))
delete_module(0x0, 0x0)

[   50.647985][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.662431][ T3590] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   50.685789][  T406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.703529][  T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.704876][  T406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   50.733528][  T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
05:47:51 executing program 4:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0x5451, 0x0)

[   50.749885][ T3556] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
05:47:51 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)={0x34, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x1}]}, 0x34}}, 0x0)

[   50.808338][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   50.864583][  T406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   50.885574][  T406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
05:47:52 executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0, <r1=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001100007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r3}, 0x10)
write$cgroup_type(r2, &(0x7f0000000000), 0x9)

05:47:52 executing program 0:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f00000001c0)=@framed, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
syz_usb_control_io(r0, &(0x7f0000000940)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x0, 0x0, "c106d96f", "9ab81be8"}}, 0x0}, 0x0)

[   50.916079][ T3555] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
05:47:52 executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0)
write$cgroup_int(r1, &(0x7f0000000200), 0x12)
r3 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r3, 0x10d, 0xc5, 0x0, &(0x7f0000000080))

05:47:52 executing program 3:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40)
r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0)
setsockopt$llc_int(r2, 0x10c, 0x7, &(0x7f00000000c0)=0x3c00, 0x4)

05:47:52 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

05:47:52 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000002400007b8af8ff00000000bfa200000000000007020000dfffffffb703000008000000b704000000000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f0000000100), 0x1001)
ioctl$SIOCSIFHWADDR(r2, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})

05:47:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)

05:47:52 executing program 1:
syz_mount_image$hfs(&(0x7f0000000100), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB='uid=', @ANYRESHEX, @ANYBLOB="2c73657373696f6e3d3078303030303030303030303030303030332c6469725f756d61736b3d30303030303030303030303030303030343030303030302c73657373696f6e3d3078303030303030323030303030303030372c66696c655f756d61736b3d30303030303030303030303030303030303030303036332c747970653d1eb8a5fd2c6469725f756d61736b3d30303030303030303030303030303030303030303031302c6769643d", @ANYRESHEX, @ANYBLOB=',subj_role=net/fiy_trie\x00,fowner=', @ANYRESDEC, @ANYBLOB=',permit_directio,\x00'], 0xfd, 0x2f3, &(0x7f0000000740)="$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")

05:47:52 executing program 4:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000044850000000e0000003f0000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000000)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000002000)='logon\x00', &(0x7f0000001000), &(0x7f0000001000)="2e989cc9f58ec796be4720e6160291a2fb7c6445e84b8e9e349ead029fe38d5810bf992b5d51f406a51cc339021268aed6f767582af42dbc8ea1110e4353fcf30b20f1f27ed3b44bef6444f8ca6a808e34ded636ef55e151c11b4ef7a5384f4a0ceb885759dfeeca5aaa540de461d2130755897533032f5639c4ba79988a49d63084f2cbed0a84e5e733146f15192fdabd0e3a", 0x93, r1)

[   51.218564][ T3627] loop3: detected capacity change from 0 to 1024
05:47:52 executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x5ac, 0x219, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x7, {[@local=@item_012={0x1, 0x2, 0xa, "83"}, @local=@item_4={0x3, 0x2, 0x0, "8cbf3f75"}]}}, 0x0}, 0x0)

[   51.301829][ T3627] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   51.309308][ T3629] loop1: detected capacity change from 0 to 64
[   51.356265][ T3566] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   51.371665][ T3627] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
05:47:52 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242)
write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50)

[   51.410288][ T3629] hfs: invalid uid -1
[   51.426997][ T3629] hfs: unable to parse mount options
05:47:52 executing program 4:
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00'}, 0x45c)
ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x0)

05:47:52 executing program 1:
r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, 0x0, &(0x7f0000000140)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1404}}, 0x0, 0x0, 0x0}, 0x0)

05:47:52 executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x577}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='ext4_da_reserve_space\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000180), 0x40010)

[   51.563909][ T3555] Bluetooth: hci0: command 0x0419 tx timeout
05:47:52 executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r0}, &(0x7f0000000080), &(0x7f0000000200)=r1}, 0x20)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r4 = dup(r3)
write$FUSE_BMAP(r4, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r4, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
lchown(&(0x7f0000000100)='./file0\x00', 0xffffffffffffffff, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)

[   51.637031][ T3555] Bluetooth: hci3: command 0x0419 tx timeout
[   51.649790][ T3555] Bluetooth: hci1: command 0x0419 tx timeout
[   51.666003][ T3558] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   51.670132][ T3555] Bluetooth: hci2: command 0x0419 tx timeout
[   51.675783][ T3566] usb 1-1: Using ep0 maxpacket: 32
05:47:52 executing program 4:
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)={[{@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@nostrict}, {@lastblock={'lastblock', 0x3d, 0x22}}, {@gid_forget}, {@unhide}, {@lastblock={'lastblock', 0x3d, 0x4}}, {@undelete}, {@unhide}, {@unhide}]}, 0x1, 0xc43, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwqThoHm7ZIZcZy9S+mYhXuqqbZBpBlIhRzC8CVSKkLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBAhQIWMzsW3FJkbYskhIlfz429Z2deW/mvZn1jCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOL3Xrl46nTaZsOhh9AYAOCBuDz21VNntnv+AwCPrSs7/f8/AAAAAAAAAAAAAABwUKQo4slIMXd5LU1Unzvql9p9t26PD49sX+1IqmoeqsqXP/XTZ86e+9ILQ+e7eak98wH199pn4rWxKxcbL8/enJufWliYmmyMz7SvzU5O3fMedlt/q8HqBDRuvn5r8vr1hcaZ589u2nx74P3+J44PXBh69uQz3bLjwyMjYxtF6r3la/fdkI6dRngcjiJORornvvfT1IqIInZ/LuoP9tpvdaTqxGDVifHhkaoj0+3WzGK5cbR7IoqIRk+lZvccbX8totb3QPuws2bEUtn8ssGDZffG5lrzravTU43R1vxie7E9OzOaOq0t+9OIIs6niOWIWO2/e3d9UUQtUnzn2Fq6mt/6UZ2HL1YDg3duR7GPfbwHZTsbfRHLxSNwzQ6w/iji1Ujxs3dOxLV8n6nuNV+IeLXMH0S8VeZLEan8YpyLeG+b7xGPploU8efl9b+wliar+0H3vnLpa42vzFyf7Snbva98xOfDXXeKh/R8OLIlH4wDfm+qRxGt6o6/lu7/NzsAAAAAAAAAAAAAAAAA7LUjUcSnI8Ur//ZH1bjiqMalH7sw9PsDv9w7ZvzpD9lPWfb5iFgq7m1M7uE8MHA0jab0kMcSf5zVo4g/zuP/vvWwGwMAAAAAAAAAAAAAAAAAAPCxVsRPIsWL755Iy9E7p3h75kbjSuvqdGdW2O7cv90509fX19cbqZPNnBM5l3Iu51zJuZozilw/ZzPnRM6lnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA46SIIn4RKb79jbUUKSKaERPRyZX+h906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKDUn4r4fqRo/EHzzrpaRKTq344T5S/nonm4zE9Gc6jMl6J5MWerylrzWw+h/exOXyrix5Giv/72nQuer39f59Odr0G89c2NT5+pdfJQd+PA+/1PHD92YWjkc0/vtJy2a8DgpfbMrduN8eGRkbGe1bV89E/2rBvIxy32putExMIbb77emp6emr//hfIrsIvqj9BCqn1cemqhWojagWjGw+n7JvWHdYNiX5XP//cixW+/++/dB37n+V+PX+p8uvOEj5//ycbz/8WtO7rH539ta738/C+f6ds9/5/sWfdi/t1IXy2ivnhzru94RH3hjTdPtm+2bkzdmJo5d+rUl4eGvnz2VN/hiPr19vRUz9KenC4AAAAAAAAAAAAAAACABycV8buRovXjtdSIiNvVeK2BC0PPnnzmUByqxlttGrf92tiVi42XZ2/OzU8tLExNNsZn2tdmJ6fu9XD1arjX+PDIvnTmQx3Z5/Yfqb88O/fGfPvGHy5uu/1o/eLVhcX51rXtN8eRKCKavWsGqwaPD49UjZ5ut2aqqqPbDqb/6PpSEf8RKa6da6TP53V5/P/WEf6bxv8vbd3RHo7//9zRjfF/n+gpWh4zpSJ+Hil+6y+ejs9X7Twad52zXO5vIsXg+c/mcnG4LNdtQ+e9Ap2RgWXZ/4kU//CLzWW74yGf3Ch7+iOd3EdAef2PRYrv/9l349fzus3vf9j++h/duqN9ev/DUz3rjm56X8Guu06+/icjxUtPvh2/Ua35vw98/0f33RsnOoU33s+xT9f/V3vWDeTj/uZedR4AAAAAAAAAAOAR1peK+NtI8cORWnohr7uXv/83uXVH+/T3vz7Vs25yb+Yr+tCFXZ9UAAAAADgg+lIRP4kUNxbfvjOGevP4757xn7+zMf5zOG3ZWv05369U7w3Yyz//6zWQjzux+24DAAAAAAAAAAAAAAAAAADAgZJSES/k+dQnqvH8kzvOp74SKV75r+dyuXS8LNedB36g+rV+eXbm5MXp6dl6LLauTk81xuZa16bKuk9FirW//myuW1Tzq3fnm+/M8b4xF/t8pBj5u27Zzlzs3bnJn9ooe7os+4lI8Z9/v7lsnpo6zx1dlT1Tlv2rSPH1f9q+7PGNsmfLst+NFD/6eqNb9mhZtvt+1E9tlH3+2myxD1cFAAAAAAAAAAAAAAAAAACAj5u+VMSfRor/vrl8Zyx/nv+/r+dj5a1v9sz3v8Xtap7/gWr+/52W72f+/+q9Aks7HRUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB5PKYp4M1LMXV5LK/3l5476pfbMrdvjwyPbVzuSqpqHqvLlT/30mbPnvvTC0PlufnD9vfbpeG3sysXGy7M35+anFhamJhvjM+1rs5NT97yH3dbfarA6AY2br9+avH59oXHm+bObNt8eeL//ieMDF4aePflMt+z48MjIWE+ZWt99H/0uaYf1h6OIv4wUz33vp+mH/RFF7P5cfMh3Z78dqToxWHVifHik6sh0uzWzWG4c7Z6IIqLRU6nZPUcP4FrsSjNiqWx+2eDBsntjc6351tXpqcZoa36xvdienRlNndaW/WlEEedTxHJErPbfvbu+KOL1SPGdY2vpn/sjDnXPwxcvj3311Jmd21HsYx/vQdnORl/EcvEIXLMDrD+K+MdI8bN3TsS/9EfUovMTX4h4tcwfRLwVneudyi/GuYj3tvke8WiqRRH/W17/C2vpnf7yftC9r1z6WuMrM9dne8p27yuP/PPhQTrg96Z6FPGj6o6/lv7Vf9cAAAAAAAAAAAAAAAAAB0gRvxYpXnz3RKrGB98ZU9yeudG40ro63RnW1x371x0zvb6+vt5InWzmnMi5lHM550rO1ZxR5Po5m2XW19cn8uelnMs5V3Ku5oxDuX7OZs6JnEs5l3Ou5FzNGbVcP2cz50TOpZzLOVdyruaMAzJ2DwAAAAAAAAAAAAAAAAAAeLwU1T8pvv2NtbTe35lfeiI6uWI+0Mfe/wcAAP//dsP5HA==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000080), 0x12)

[   51.717184][ T3555] Bluetooth: hci4: command 0x0419 tx timeout
05:47:52 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)

[   51.806241][ T3648] loop4: detected capacity change from 0 to 2048
[   51.816485][ T3566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   51.853558][ T3566] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   51.865045][ T3566] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   51.880942][ T3566] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   51.890871][ T3648] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   51.893771][ T3566] usb 1-1: config 0 descriptor??
05:47:53 executing program 4:
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000000100)=[{&(0x7f0000000240)=""/190, 0xbe}], 0x1)
ioctl$FS_IOC_GETFLAGS(r0, 0x5437, 0x0)

[   51.959684][ T3566] hub 1-1:0.0: USB hub found
[   51.965982][ T3556] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   51.967905][ T3558] usb 3-1: Using ep0 maxpacket: 32
[   52.019326][ T3650] loop3: detected capacity change from 0 to 1024
[   52.061177][ T3650] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   52.094342][ T3650] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   52.146708][ T3558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
05:47:53 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000001000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0)

05:47:53 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

[   52.169204][ T3558] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   52.179652][ T3566] hub 1-1:0.0: 7 ports detected
[   52.216169][ T3566] hub 1-1:0.0: insufficient power available to use all downstream ports
[   52.238083][ T3558] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice= 0.00
[   52.247839][ T3558] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   52.259597][ T3558] usb 3-1: config 0 descriptor??
05:47:53 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242)
write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50)

[   52.356516][ T3556] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
05:47:53 executing program 3:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0)
ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0)

[   52.401757][ T3566] hub 1-1:0.0: hub_hub_status failed (err = -71)
[   52.410934][ T3566] hub 1-1:0.0: config failed, can't get hub status (err -71)
05:47:53 executing program 3:
r0 = socket$inet6_sctp(0x1c, 0x5, 0x84)
listen(r0, 0x1f)

[   52.449356][   T26] audit: type=1800 audit(1712641673.522:2): pid=3664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1963 res=0 errno=0
[   52.470872][ T3556] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   52.481114][ T3556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   52.506989][ T3556] usb 2-1: SerialNumber: syz
05:47:53 executing program 3:
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xe, &(0x7f0000000080), &(0x7f00000000c0)=0x8)

[   52.536158][ T3566] usbhid 1-1:0.0: can't add hid device: -71
[   52.544529][ T3566] usbhid: probe of 1-1:0.0 failed with error -71
[   52.566352][ T3521] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   52.577834][ T3566] usb 1-1: USB disconnect, device number 2
05:47:53 executing program 3:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noblock_validity}, {}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)

[   52.664461][ T3671] loop3: detected capacity change from 0 to 1024
[   52.698419][ T3671] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   52.719916][ T3671] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[   52.758043][ T3558] apple 0003:05AC:0219.0001: unbalanced delimiter at end of report description
05:47:53 executing program 3:
mount$9p_tcp(0x0, 0x0, 0x0, 0x30000, 0x0)

[   52.773460][ T3558] apple 0003:05AC:0219.0001: parse failed
[   52.783110][ T3558] apple: probe of 0003:05AC:0219.0001 failed with error -22
05:47:53 executing program 0:
socket(0x1c, 0x20000001, 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10)

05:47:54 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242)
write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50)

05:47:54 executing program 0:
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffffb}]})
accept4$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)

[   52.960303][ T3566] usb 3-1: USB disconnect, device number 2
[   52.991679][ T3521] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
05:47:54 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x2}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001400)={{r2}, &(0x7f0000001380), &(0x7f00000013c0)='%-010d \x00'}, 0x20)

05:47:54 executing program 3:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9e7)
listen(r0, 0x0)
epoll_create1(0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x10000)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778)

[   53.015047][ T3521] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
05:47:54 executing program 0:
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0)

05:47:54 executing program 3:
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @empty, @val, {@ipv4}}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0xffff, 0x1000, &(0x7f0000000000)=0x7, 0x4)
bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs={0x1f95d27d48731892, 0x7}, 0x1c)
connect$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1}, 0x8)

[   53.116506][ T3521] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   53.126182][ T3521] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   53.134397][ T3521] usb 5-1: SerialNumber: syz
05:47:54 executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402609333340000000000109022400010000000009040000010301000009210000000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000012c0)={0x2c, &(0x7f0000001040)={0x0, 0x0, 0x2, {0x2}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

05:47:54 executing program 0:
sendto$unix(0xffffffffffffffff, &(0x7f00000000c0)="b1", 0x1, 0x0, 0x0, 0x0)
open$dir(0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_emit_ethernet(0x66, &(0x7f00000000c0)={@broadcast, @random="2cbf38174634", @val, {@ipv6}}, 0x0)

[   53.202335][ T3689] binder: 3687:3689 ioctl 942e 0 returned -22
[   53.221599][ T3556] cdc_ether: probe of 2-1:1.0 failed with error -22
05:47:54 executing program 0:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r2 = dup3(r0, r1, 0x0)
write$P9_RFLUSH(r2, 0x0, 0x0)

05:47:54 executing program 0:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000004100), 0x109242)
write$FUSE_INIT(r1, &(0x7f0000002100)={0x50}, 0x50)

05:47:54 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000029c0), 0x0, 0x0)
sendmsg$nl_route_sched_retired(r0, 0x0, 0x0)

05:47:54 executing program 0:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9e7)
listen(r0, 0x0)
epoll_create1(0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x10000)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778)

05:47:54 executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCL_BLANKSCREEN(r0, 0x560d, 0x0)

05:47:54 executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000092, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@errors_remount}]}, 0x1, 0x4ee, &(0x7f00000000c0)="$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")
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)

[   53.423109][ T3557] usb 2-1: USB disconnect, device number 2
[   53.450757][ T3521] usb 5-1: 0:2 : does not exist
05:47:54 executing program 0:
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, 0x0)
setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0)
openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.controllers\x00', 0x0, 0x0)
setsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0)
ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x5, 0x5})
mq_open(&(0x7f0000003e40)=':\xd1=FL\f\xc3\x9e(\xb3\x9b', 0x40, 0x44, &(0x7f0000000040)={0x5, 0x11, 0x6, 0x2005})

[   53.516064][ T3566] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   53.539439][ T3521] usb 5-1: USB disconnect, device number 2
05:47:54 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0)
r4 = getpid()
write$cgroup_pid(r3, &(0x7f0000000380)=r4, 0x12)

05:47:54 executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000fcffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="180800000006", @ANYBLOB="0000000000b70214001400000700000000000000008500000083000000bf090041"], 0x0}, 0x90)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"})

[   53.566353][ T3706] loop2: detected capacity change from 0 to 512
[   53.691316][ T3706] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   53.708985][ T3706] EXT4-fs (loop2): orphan cleanup on readonly fs
[   53.723431][ T3706] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz-executor.2: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[   53.752163][ T3706] EXT4-fs (loop2): Remounting filesystem read-only
[   53.759280][ T3706] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117
[   53.770053][ T3706] EXT4-fs warning (device loop2): ext4_enable_quotas:6411: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   53.786435][ T3706] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   53.793321][ T3706] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000001000,errors=remount-ro,. Quota mode: writeback.
[   53.823908][ T3706] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz-executor.2: 'file0' linked to parent dir
05:47:55 executing program 1:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1c916, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,noblock_validity,discard,grpquota,noinit_itable,resgid=', @ANYRESHEX=0xee01, @ANYBLOB=',jqfmt=vfsold,noauto_da_alloc,resgid=', @ANYRESDEC=r0, @ANYBLOB="3200ff97274c68d17b7c16f8461797323c26897387cd742fcba87ce2acbcd1e4fb5706fa2c", @ANYRES64], 0x1b, 0x4da, &(0x7f0000000a40)="$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")
symlink(&(0x7f0000000280)='.\x02\x00', &(0x7f00000002c0)='.\x02\x00')

05:47:55 executing program 0:
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0)

05:47:55 executing program 2:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9e7)
listen(r0, 0x0)
epoll_create1(0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x10000)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778)

05:47:55 executing program 4:
pipe(&(0x7f0000000380)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$inet_int(r0, 0x0, 0x0, 0x0, 0x0)

[   53.946160][ T3566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   53.981169][ T3566] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
05:47:55 executing program 2:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)

05:47:55 executing program 4:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)

[   54.021301][ T3720] loop1: detected capacity change from 0 to 512
[   54.028302][ T3566] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   54.047275][ T3566] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   54.069008][ T3566] usb 4-1: config 0 descriptor??
05:47:55 executing program 2:
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, 0x0, 0x0)

[   54.092677][ T3720] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   54.115128][ T3720] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
05:47:55 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

05:47:55 executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000092, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@errors_remount}]}, 0x1, 0x4ee, &(0x7f00000000c0)="$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")
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)

[   54.166598][ T3720] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended
[   54.246993][ T3720] [EXT4 FS bs=4096, gc=1, bpg=3008, ipg=32, mo=4015e018, mo2=0000]
[   54.271373][ T3735] loop2: detected capacity change from 0 to 512
05:47:55 executing program 1:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002480)={<r0=>0xffffffffffffffff})
ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, 0x0)

[   54.296180][ T3720] EXT4-fs (loop1): 1 truncate cleaned up
[   54.301949][ T3720] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobarrier,noblock_validity,discard,grpquota,noinit_itable,resgid=0x000000000000ee01,jqfmt=vfsold,noauto_da_alloc,resgid=000000000000000000032,errors=continue. Quota mode: writeback.
05:47:55 executing program 1:
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x7)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0x9e7)
listen(r0, 0x0)
epoll_create1(0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000140)=0x10000)
write$char_usb(r1, &(0x7f0000000040)="e2", 0x2778)

[   54.426088][ T3735] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   54.435190][ T3735] EXT4-fs (loop2): orphan cleanup on readonly fs
[   54.459462][ T3735] EXT4-fs error (device loop2): ext4_find_extent:929: inode #4: comm syz-executor.2: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[   54.496572][ T3735] EXT4-fs (loop2): Remounting filesystem read-only
[   54.503395][ T3735] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=-117
[   54.513954][ T3735] EXT4-fs warning (device loop2): ext4_enable_quotas:6411: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   54.530425][ T3558] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   54.538809][ T3735] EXT4-fs (loop2): Cannot turn on quotas: error -22
05:47:55 executing program 1:
r0 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000001840), 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x5450, 0x0)

[   54.546946][ T3735] EXT4-fs (loop2): mounted filesystem without journal. Opts: max_batch_time=0x0000000000001000,errors=remount-ro,. Quota mode: writeback.
[   54.578696][ T3566] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[   54.600373][ T3566] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.0002/input/input6
05:47:55 executing program 2:
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000680)={'gre0\x00', 0x0})
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f00000002c0)=ANY=[]})

05:47:55 executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)

[   54.645299][ T3735] EXT4-fs error (device loop2): ext4_lookup:1852: inode #2: comm syz-executor.2: 'file0' linked to parent dir
[   54.735160][ T3566] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
05:47:55 executing program 2:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff})
fallocate(r0, 0x0, 0x0, 0x7ffffffb)
utime(&(0x7f00000003c0)='./bus\x00', 0x0)
setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)

05:47:55 executing program 0:
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000006d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000a40)='tlb_flush\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0)

05:47:55 executing program 1:
socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f0000000700)={&(0x7f0000000380)=@name, 0x10, 0x0}, 0x0)

05:47:56 executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@func]}, {0x0, [0x0, 0x0, 0x0, 0x0]}}, 0x0, 0x2a}, 0x20)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

[   54.883180][   T26] audit: type=1800 audit(1712641675.952:3): pid=3751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1956 res=0 errno=0
[   54.966670][ T3558] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   54.989056][ T3558] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
05:47:56 executing program 2:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000200), 0x404041, 0x0)
write$P9_RAUTH(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet(0x2, 0x0, 0x0)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x22, &(0x7f00000022c0)=""/4152, &(0x7f0000000440)=0x1038)
r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$GIO_SCRNMAP(r2, 0x5421, &(0x7f0000000000)=""/230)
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$binfmt_aout(0xffffffffffffffff, 0x0, 0x0)
r3 = mq_open(&(0x7f0000000040)='io.pressure\x00', 0x40, 0x0, 0x0)
fcntl$F_SET_RW_HINT(r3, 0x3, 0x0)
getsockname(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80)
getsockname$netlink(r4, 0x0, &(0x7f0000000140))
renameat(0xffffffffffffffff, &(0x7f0000000000)='mnt/encrypted_dir/file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='mnt/encrypted_dir\x00')

05:47:56 executing program 1:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000092, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@errors_remount}]}, 0x1, 0x4ee, &(0x7f00000000c0)="$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")
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)

[   55.026829][ T3757] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   55.086531][ T3558] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   55.100846][ T3558] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   55.127971][ T3763] loop1: detected capacity change from 0 to 512
[   55.134971][ T3558] usb 5-1: SerialNumber: syz
05:47:56 executing program 2:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = dup3(r0, r1, 0x0)
creat(0x0, 0x0)
fsetxattr(r2, &(0x7f0000000540)=@random={'system.', 'veth0_macvtap\x00'}, 0x0, 0x0, 0x0)

[   55.213321][ T3763] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   55.227195][ T3763] EXT4-fs (loop1): orphan cleanup on readonly fs
[   55.270948][ T3763] EXT4-fs error (device loop1): ext4_find_extent:929: inode #4: comm syz-executor.1: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[   55.305180][ T3763] EXT4-fs (loop1): Remounting filesystem read-only
[   55.326334][ T3763] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=-117
[   55.337008][ T3763] EXT4-fs warning (device loop1): ext4_enable_quotas:6411: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   55.352546][ T3763] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   55.360088][ T3763] EXT4-fs (loop1): mounted filesystem without journal. Opts: max_batch_time=0x0000000000001000,errors=remount-ro,. Quota mode: writeback.
[   55.398494][ T3763] EXT4-fs error (device loop1): ext4_lookup:1852: inode #2: comm syz-executor.1: 'file0' linked to parent dir
[   55.454908][ T3558] usb 5-1: 0:2 : does not exist
[   55.534685][ T3558] usb 5-1: USB disconnect, device number 3
[   55.561882][ T3506] udevd[3506]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   55.806765][ T3566] usb 4-1: reset high-speed USB device number 2 using dummy_hcd
05:47:57 executing program 3:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff})
fallocate(r0, 0x0, 0x0, 0x7ffffffb)
utime(&(0x7f00000003c0)='./bus\x00', 0x0)
setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)

05:47:57 executing program 0:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
write$P9_RLINK(r2, &(0x7f0000000400)={0x7}, 0x7)
lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

05:47:57 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)

05:47:57 executing program 1:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil)
pipe2$9p(&(0x7f0000000280), 0x0)
write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
semctl$GETVAL(r0, 0x0, 0xc, 0x0)

05:47:57 executing program 4:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff})
fallocate(r0, 0x0, 0x0, 0x7ffffffb)
utime(&(0x7f00000003c0)='./bus\x00', 0x0)
setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)

05:47:57 executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000ef7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='block_bio_remap\x00', r3}, 0x10)
write$cgroup_type(r2, &(0x7f0000000000), 0x9)

[   56.348707][   T26] audit: type=1800 audit(1712641677.422:4): pid=3777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1954 res=0 errno=0
05:47:57 executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r0}, 0x10)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

[   56.432298][   T26] audit: type=1800 audit(1712641677.502:5): pid=3781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1949 res=0 errno=0
05:47:57 executing program 2:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', 0x0, 0xfe44, 0x0)
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000001000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000030000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02002302230102090500000010000020d3"])

05:47:57 executing program 0:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x3000092, &(0x7f0000000000)={[{@max_batch_time={'max_batch_time', 0x3d, 0x1000}}, {@errors_remount}]}, 0x1, 0x4ee, &(0x7f00000000c0)="$eJzs3VFrHFsdAPD/TLK9aW+um+v14d4LXq+2khbtbtLYNvjQVhB9Kqj1PcZkE0I22ZDdtE0okuIHEERU8MknXwQ/gCD9CCIU9F1UFNFWH3xQV3Z2Nrab3TbtTXbb5PeD6ZwzM2f+/zOQ2T0705kATqwPI+JGRIxExIWIKObL03yaa1V229s9fnRvoTUl0Wze+lsSSb6ss69P5/M3201iLCK+8dWIbyf749a3d1bnq9XKZl4vN9Y2yvXtnYsra/PLleXK+szM9JXZq7OXZ6cO3pm0/6qJiLj25T/98Hs/+8q1X33+zu/n/nL+O620xvP1T/bjMLW7XsiORcdoRGweRbAhGc16CADA6+CdiPh4RHwm+/5fjJHs2xwAAABwnDSvj8e/k4gmAAAAcGyl2T2wSVrKb58djzQtldr38H4izqTVWr3xuaXa1vpie/1EFNKllWplKr9XeCIKSas+nd9j26lf6qrPRMTbEfGD4umsXlqoVReH/eMHAAAAnBBvdo3//1lsj/+7bAwlOQAAAODwTAw7AQAAAODIGf8DAADA8XeA8X+PV3gBAAAAr4mv3bzZmpqd918v3t7eWq3dvrhYqa+W1rYWSgu1zY3Scq22nD2zb+15+6vWahtfiPWtu+VGpd4o17d35tZqW+uNuZWnXoENAAAADNDbn3rwuyQidr94Opta3ht2UsBApC+y8R+PLg9g8EZeos2pI8gDGLzRYScADE1h2AkAQ/e8/9/zsX4rfn34uQAAAEdj8r391/+Lw04KGIgXuv4PABwLrv/DyVV4qTsAgeOk7/X9XN+Hd+y7/n+9z4bN5gsnBQAAHKrxbErSUn4tcDzStFSKeCt7LUAhWVqpVqby8cFvi4U3WvXprGXinQAAAAAAAAAAAAAAAAAAAAAAAAAAcEDNZhJNAAAA4FiLSP+cZE/zj5gsnhvv/n3gVPKvYjaPiDs/ufWju/ONxuZ0a/nf95Y3fpwvvzSMXzAAAACAbp1xemccDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACH6fGjewudaZBx//qliJjoFX80xrL5WBQi4sw/khh9ol0SESOHEH/3fkS82yt+0korJvIsesU/PfD4yV679BBiw0n3oHX+udHr7y+ND7N577//0Xz6qPqf/9K9899In/PPWweM8f7DX5Sjq+1e/PsR74/2Pv904idZi/3xz3bFSfrE/9Y3d3b65db8acRkz8+f5Kn9lhtrG+X69s7FlbX55cpyZX1mZvrK7NXZy7NT5aWVaiX/t2eM73/yl//tF7/V/zN94k/s9b/38T/Xb6dd/vPw7qN32sVCr/jnz/b+/H23T/w0/+z7bLucHajJfHmy2y4/6YOf/+aDZ/V/sU//x57T//MH7P+Fr3/3DwfcFAAYgPr2zup8tVrZVOhReCM/SkOJfr0T/FU5GkdROBWvRBoK+wpDPCkBAABH4v9f+oedCQAAAAAAAAAAAAAAAAAAAJxcg3icWHfM3eF0FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgmf4XAAD//wj8zW4=")
mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)

05:47:57 executing program 4:
openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50}, 0x50)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

05:47:57 executing program 2:
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0xf224045ae6732b79)

[   56.679335][   T25] usb 4-1: USB disconnect, device number 2
05:47:57 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001800010f000000000000000006"], 0x14}}, 0x0)

[   56.794895][ T3790] loop0: detected capacity change from 0 to 512
[   56.831798][ T3576] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:47:57 executing program 2:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff})
fallocate(r0, 0x0, 0x0, 0x7ffffffb)
utime(&(0x7f00000003c0)='./bus\x00', 0x0)
setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)

[   56.907838][ T3790] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   56.939521][ T3790] EXT4-fs (loop0): orphan cleanup on readonly fs
[   56.956670][ T3790] EXT4-fs error (device loop0): ext4_find_extent:929: inode #4: comm syz-executor.0: pblk 2 bad header/extent: invalid magic - magic 3fff, entries 12, max 508(0), depth 0(0)
[   56.974469][   T26] audit: type=1800 audit(1712641678.032:6): pid=3798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1959 res=0 errno=0
[   56.998120][ T3576] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   57.012873][ T3555] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[   57.034010][ T3790] EXT4-fs (loop0): Remounting filesystem read-only
[   57.044352][ T3790] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=-117
05:47:58 executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
chdir(&(0x7f0000000080)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000900850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kfree\x00', r4}, 0x10)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)

[   57.092165][ T3790] EXT4-fs warning (device loop0): ext4_enable_quotas:6411: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   57.114018][ T3790] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   57.133997][ T3790] EXT4-fs (loop0): mounted filesystem without journal. Opts: max_batch_time=0x0000000000001000,errors=remount-ro,. Quota mode: writeback.
[   57.178508][ T3576] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:47:58 executing program 2:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400110800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000080)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
write$P9_RLINK(r2, &(0x7f0000000400)={0x7}, 0x7)
lchown(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

[   57.214157][ T3790] EXT4-fs error (device loop0): ext4_lookup:1852: inode #2: comm syz-executor.0: 'file0' linked to parent dir
05:47:58 executing program 0:
r0 = open(&(0x7f0000000080)='./bus\x00', 0x105042, 0x0)
setrlimit(0x1, &(0x7f0000000100)={0xffffffff, 0xffffffffffffffff})
fallocate(r0, 0x0, 0x0, 0x7ffffffb)
utime(&(0x7f00000003c0)='./bus\x00', 0x0)
setxattr$incfs_metadata(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240), 0x0, 0x0, 0x0)

[   57.299154][ T3576] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
05:47:58 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_EEE_GET(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)={0x2c, r1, 0x419, 0x0, 0x0, {0x2}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}}, 0x0)

[   57.397262][ T3555] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
05:47:58 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRESHEX, @ANYBLOB="90799f2e43470f10f1"], 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

[   57.455206][ T3555] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[   57.486986][   T26] audit: type=1800 audit(1712641678.562:7): pid=3806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1951 res=0 errno=0
[   57.596185][ T3555] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   57.617413][ T3555] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   57.644006][ T3555] usb 5-1: SerialNumber: syz
[   57.745727][ T3519] ------------[ cut here ]------------
[   57.751629][ T3519] WARNING: CPU: 0 PID: 3519 at kernel/softirq.c:363 __local_bh_enable_ip+0x1b3/0x1f0
[   57.761985][ T3519] Modules linked in:
[   57.765876][ T3519] CPU: 0 PID: 3519 Comm: syz-executor.0 Not tainted 5.15.153-syzkaller #0
[   57.774630][ T3519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   57.784764][ T3519] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0
[   57.790738][ T3519] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 c4 c8 e3 8d 80 e1 07 80 c1 03 38 c1
[   57.811027][ T3519] RSP: 0018:ffffc90002dd75e0 EFLAGS: 00010046
[   57.817268][ T3519] RAX: 0000000000000000 RBX: 1ffff920005baec0 RCX: 0000000000000000
[   57.825496][ T3519] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff884eb75b
[   57.834168][ T3519] RBP: ffffc90002dd7698 R08: dffffc0000000000 R09: ffffed1003cbd136
[   57.843712][ T3519] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   57.851996][ T3519] R13: ffff88801e73ed80 R14: ffffc90002dd7620 R15: 0000000000000201
[   57.860274][ T3519] FS:  0000555556598480(0000) GS:ffff8880b9a00000(0000) knlGS:0000000000000000
[   57.869518][ T3519] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   57.876360][ T3519] CR2: 0000001b2f325000 CR3: 0000000063a59000 CR4: 00000000003526f0
[   57.885075][ T3519] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[   57.893220][ T3519] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[   57.901520][ T3519] Call Trace:
[   57.904832][ T3519]  <TASK>
[   57.907842][ T3519]  ? __warn+0x15b/0x300
[   57.912381][ T3519]  ? __local_bh_enable_ip+0x1b3/0x1f0
[   57.918094][ T3519]  ? report_bug+0x1b7/0x2e0
[   57.922614][ T3519]  ? handle_bug+0x3d/0x70
[   57.927072][ T3519]  ? exc_invalid_op+0x16/0x40
[   57.932111][ T3519]  ? asm_exc_invalid_op+0x16/0x20
[   57.937143][ T3519]  ? sock_map_delete_elem+0xcb/0x130
[   57.942516][ T3519]  ? __local_bh_enable_ip+0x1b3/0x1f0
[   57.947965][ T3519]  ? sock_map_delete_elem+0xcb/0x130
[   57.953494][ T3519]  ? _local_bh_enable+0xa0/0xa0
[   57.958420][ T3519]  ? do_raw_spin_unlock+0x137/0x8b0
[   57.963968][ T3519]  ? sock_map_delete_elem+0x97/0x130
[   57.969355][ T3519]  sock_map_delete_elem+0xcb/0x130
[   57.974626][ T3519]  bpf_prog_2c29ac5cdc6b1842+0x3a/0xef4
[   57.980544][ T3519]  bpf_trace_run3+0x1d1/0x380
[   57.985320][ T3519]  ? bpf_trace_run2+0x340/0x340
[   57.990355][ T3519]  ? release_task+0x1204/0x1750
[   57.995311][ T3519]  ? release_task+0x1204/0x1750
[   58.000153][ T3519]  __bpf_trace_kmem_cache_free+0x99/0xc0
[   58.006301][ T3519]  ? release_task+0x1204/0x1750
[   58.011151][ T3519]  kmem_cache_free+0x1ce/0x1f0
[   58.015920][ T3519]  ? release_task+0x1204/0x1750
[   58.020783][ T3519]  release_task+0x1204/0x1750
[   58.025461][ T3519]  ? wait_consider_task+0x1994/0x2e50
[   58.030824][ T3519]  ? delayed_put_task_struct+0x260/0x260
[   58.036451][ T3519]  ? do_raw_spin_unlock+0x137/0x8b0
[   58.041731][ T3519]  ? _raw_spin_unlock_irq+0x1f/0x40
[   58.047044][ T3519]  ? lockdep_hardirqs_on+0x94/0x130
[   58.052401][ T3519]  wait_consider_task+0x1994/0x2e50
[   58.057802][ T3519]  ? do_wait+0x30c/0xaf0
[   58.062126][ T3519]  ? child_wait_callback+0x210/0x210
[   58.067393][ T3519]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   58.073360][ T3519]  ? _raw_spin_unlock+0x40/0x40
[   58.078399][ T3519]  ? add_wait_queue+0xc1/0x170
[   58.083341][ T3519]  do_wait+0x30c/0xaf0
[   58.087430][ T3519]  kernel_wait4+0x29e/0x3e0
[   58.092184][ T3519]  ? __ia32_sys_waitid+0xc0/0xc0
[   58.097223][ T3519]  ? kernel_waitid+0x520/0x520
[   58.102155][ T3519]  __x64_sys_wait4+0x130/0x1e0
[   58.107980][ T3519]  ? kernel_wait+0x230/0x230
[   58.112648][ T3519]  ? rcu_is_watching+0x11/0xa0
[   58.117410][ T3519]  ? vtime_user_exit+0x2d1/0x400
[   58.122533][ T3519]  ? syscall_enter_from_user_mode+0x2e/0x230
[   58.128667][ T3519]  ? lockdep_hardirqs_on+0x94/0x130
[   58.133936][ T3519]  ? syscall_enter_from_user_mode+0x2e/0x230
[   58.139903][ T3519]  do_syscall_64+0x3d/0xb0
[   58.144545][ T3519]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   58.150770][ T3519] RIP: 0033:0x7f511d376897
[   58.155345][ T3519] Code: 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 25 a4 02 00 8b 44
[   58.175547][ T3519] RSP: 002b:00007ffe40362940 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[   58.184033][ T3519] RAX: ffffffffffffffda RBX: 0000000000000031 RCX: 00007f511d376897
[   58.192247][ T3519] RDX: 0000000040000001 RSI: 00007ffe403629cc RDI: 00000000ffffffff
[   58.200298][ T3519] RBP: 00007ffe403629cc R08: 0000000000000000 R09: 0000000000000010
[   58.208338][ T3519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[   58.216288][ T3519] R13: 000000000000e13e R14: 000000000000e05f R15: 0000000000000005
[   58.224252][ T3519]  </TASK>
[   58.227259][ T3519] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   58.234606][ T3519] CPU: 0 PID: 3519 Comm: syz-executor.0 Not tainted 5.15.153-syzkaller #0
[   58.243128][ T3519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024
[   58.253357][ T3519] Call Trace:
[   58.256799][ T3519]  <TASK>
[   58.259714][ T3519]  dump_stack_lvl+0x1e3/0x2cb
[   58.264498][ T3519]  ? io_uring_drop_tctx_refs+0x19d/0x19d
[   58.270209][ T3519]  ? panic+0x84d/0x84d
[   58.274349][ T3519]  ? panic+0x84d/0x84d
[   58.278399][ T3519]  ? __local_bh_enable_ip+0x180/0x1f0
[   58.283850][ T3519]  ? __local_bh_enable_ip+0x180/0x1f0
[   58.289293][ T3519]  panic+0x318/0x84d
[   58.293348][ T3519]  ? __warn+0x16a/0x300
[   58.297609][ T3519]  ? fb_is_primary_device+0xcc/0xcc
[   58.303065][ T3519]  ? __local_bh_enable_ip+0x1b3/0x1f0
[   58.308765][ T3519]  __warn+0x2b2/0x300
[   58.312749][ T3519]  ? __local_bh_enable_ip+0x1b3/0x1f0
[   58.318276][ T3519]  report_bug+0x1b7/0x2e0
[   58.322599][ T3519]  handle_bug+0x3d/0x70
[   58.326745][ T3519]  exc_invalid_op+0x16/0x40
[   58.331325][ T3519]  asm_exc_invalid_op+0x16/0x20
[   58.336250][ T3519] RIP: 0010:__local_bh_enable_ip+0x1b3/0x1f0
[   58.342212][ T3519] Code: 04 25 28 00 00 00 48 3b 44 24 60 75 4a 48 8d 65 d8 5b 41 5c 41 5d 41 5e 41 5f 5d c3 0f 0b e9 d0 fe ff ff e8 3f 00 00 00 eb a2 <0f> 0b e9 02 ff ff ff 48 c7 c1 c4 c8 e3 8d 80 e1 07 80 c1 03 38 c1
[   58.362144][ T3519] RSP: 0018:ffffc90002dd75e0 EFLAGS: 00010046
[   58.368192][ T3519] RAX: 0000000000000000 RBX: 1ffff920005baec0 RCX: 0000000000000000
[   58.376331][ T3519] RDX: 0000000000000000 RSI: 0000000000000201 RDI: ffffffff884eb75b
[   58.384282][ T3519] RBP: ffffc90002dd7698 R08: dffffc0000000000 R09: ffffed1003cbd136
[   58.392237][ T3519] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[   58.400361][ T3519] R13: ffff88801e73ed80 R14: ffffc90002dd7620 R15: 0000000000000201
[   58.408331][ T3519]  ? sock_map_delete_elem+0xcb/0x130
[   58.413697][ T3519]  ? sock_map_delete_elem+0xcb/0x130
[   58.418962][ T3519]  ? _local_bh_enable+0xa0/0xa0
[   58.423795][ T3519]  ? do_raw_spin_unlock+0x137/0x8b0
[   58.428981][ T3519]  ? sock_map_delete_elem+0x97/0x130
[   58.434861][ T3519]  sock_map_delete_elem+0xcb/0x130
[   58.440221][ T3519]  bpf_prog_2c29ac5cdc6b1842+0x3a/0xef4
[   58.446027][ T3519]  bpf_trace_run3+0x1d1/0x380
[   58.450765][ T3519]  ? bpf_trace_run2+0x340/0x340
[   58.455598][ T3519]  ? release_task+0x1204/0x1750
[   58.460451][ T3519]  ? release_task+0x1204/0x1750
[   58.465285][ T3519]  __bpf_trace_kmem_cache_free+0x99/0xc0
[   58.470899][ T3519]  ? release_task+0x1204/0x1750
[   58.475761][ T3519]  kmem_cache_free+0x1ce/0x1f0
[   58.480506][ T3519]  ? release_task+0x1204/0x1750
[   58.485438][ T3519]  release_task+0x1204/0x1750
[   58.490199][ T3519]  ? wait_consider_task+0x1994/0x2e50
[   58.495552][ T3519]  ? delayed_put_task_struct+0x260/0x260
[   58.501257][ T3519]  ? do_raw_spin_unlock+0x137/0x8b0
[   58.506440][ T3519]  ? _raw_spin_unlock_irq+0x1f/0x40
[   58.511623][ T3519]  ? lockdep_hardirqs_on+0x94/0x130
[   58.517066][ T3519]  wait_consider_task+0x1994/0x2e50
[   58.522266][ T3519]  ? do_wait+0x30c/0xaf0
[   58.526598][ T3519]  ? child_wait_callback+0x210/0x210
[   58.531904][ T3519]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[   58.537884][ T3519]  ? _raw_spin_unlock+0x40/0x40
[   58.542812][ T3519]  ? add_wait_queue+0xc1/0x170
[   58.547561][ T3519]  do_wait+0x30c/0xaf0
[   58.551626][ T3519]  kernel_wait4+0x29e/0x3e0
[   58.556113][ T3519]  ? __ia32_sys_waitid+0xc0/0xc0
[   58.561134][ T3519]  ? kernel_waitid+0x520/0x520
[   58.565888][ T3519]  __x64_sys_wait4+0x130/0x1e0
[   58.570640][ T3519]  ? kernel_wait+0x230/0x230
[   58.575215][ T3519]  ? rcu_is_watching+0x11/0xa0
[   58.579975][ T3519]  ? vtime_user_exit+0x2d1/0x400
[   58.584897][ T3519]  ? syscall_enter_from_user_mode+0x2e/0x230
[   58.590860][ T3519]  ? lockdep_hardirqs_on+0x94/0x130
[   58.596063][ T3519]  ? syscall_enter_from_user_mode+0x2e/0x230
[   58.602036][ T3519]  do_syscall_64+0x3d/0xb0
[   58.606440][ T3519]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   58.612923][ T3519] RIP: 0033:0x7f511d376897
[   58.617410][ T3519] Code: 89 7c 24 10 48 89 4c 24 18 e8 d5 a3 02 00 4c 8b 54 24 18 8b 54 24 14 41 89 c0 48 8b 74 24 08 8b 7c 24 10 b8 3d 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 89 44 24 10 e8 25 a4 02 00 8b 44
[   58.637278][ T3519] RSP: 002b:00007ffe40362940 EFLAGS: 00000293 ORIG_RAX: 000000000000003d
[   58.645765][ T3519] RAX: ffffffffffffffda RBX: 0000000000000031 RCX: 00007f511d376897
[   58.653720][ T3519] RDX: 0000000040000001 RSI: 00007ffe403629cc RDI: 00000000ffffffff
[   58.661853][ T3519] RBP: 00007ffe403629cc R08: 0000000000000000 R09: 0000000000000010
[   58.669805][ T3519] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000032
[   58.677843][ T3519] R13: 000000000000e13e R14: 000000000000e05f R15: 0000000000000005
[   58.685896][ T3519]  </TASK>
[   58.688966][ T3519] Kernel Offset: disabled
[   58.693415][ T3519] Rebooting in 86400 seconds..