last executing test programs:

1m4.836348122s ago: executing program 1 (id=55):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

58.325045323s ago: executing program 2 (id=96):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
setresgid(r3, 0x0, r3)
sendmmsg$unix(r1, &(0x7f0000003700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x40, 0x15}}], 0x1, 0x0)

58.113709125s ago: executing program 2 (id=99):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800810, &(0x7f0000000640)=ANY=[], 0x1, 0x669, &(0x7f0000001000)="$eJzs3c1vHGcdB/DvrDd2Ni3BTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTs7a6/XL10njb1pP59o9nmeeWae+T2/2Zl9saIN8IW1MJn6gxRZmHxlvd3e2pxtbm3O3u3Wk4wl2UjqSWpJiv+2Wq0Pk+tJsTNM0Vfu8/7y/GsffbL1cadVr5Zy+9pR+/WpttvoW73RXTeRZKQqH8Ge8W488njFTuTXk1ypSjh1Z5K09vjZ35/e6enROGjvsycSI/B4FZ3XzX3Gk3PVhd5+H9B95a2dbHSDGxtwu/53EAAAAPCkGeQz8Je3s5314vwJhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfCxu7v/9fVEutW59I0f39/9FqXar6cHnxeJs/eFxxAAAAAAAAAMAJenE721nP+W67VZR/83+pbFwsH5/KW1nNUlZyNetZzFrWspLpJOM9A42uL66trUwPsOfMgXvOfEqgY1XZ+GzmDQAAAAAAAACfM7/Kwu7f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBgUyUinSHG/Z/V4avUkZ5OMtldsJP/s1p9kD047AAAAADgBY8l21nO+224VuZjkufI7gLN5K/eyluWspZml3Cy/F+h86q9tbc42tzZn77aX/eN+/z/HCqMcMZ3vHg4+8uVyi0ZuZblcczU38kaauZlauWfb5Sqe7qh9cd1vx1R8rzJgZDersj3z96pyn3ePNdnDHPPLlPEyI2d2MjJVxdbOxjPdM3PwGTrm2ek/0nRqO8Fe7DvS6N7JPFTOz1Vlez6/Oyznp6I/EzM9z77njs558vW//OmnU1V9eKY0mJGqbJWPjf2ZmO3JxPODZOJ2896d27dWJ5+0TOwzVWbi0k57IT/KTzKZibyalSzn51nMWpYykR+WtcXq5Bc9l/whmbq+p/Xqp0UyWj1DOyfreDG9VO57Psv5cd7IzSzl5fLfTKbz7cxlLvM9Z/jS0We4vOprh1z1rS8dGPyVb1SVRpLfV+VwaOf1mZ689t5zx8u+3jW7WbowQJaOeW+sf7WqtI/x66ocDv2ZmO7JxLNHZ+IP5W1ltXnvzsrtxTcHO9yF96pK+zr6bTIxPDeS9vPlQvtkla29z45237MH9k2XfRd3+mr7+i7t9HWu1I1Dr9TR6j3c/pFmyr7nD+ybLfsu9/Qd9H4LgKF37pvnRhv/bvyj8UHjN43bjVfO/mDsO2MvjObMX898tz418rXaC8Wf80F+ufv5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHirb79zZ7HZXFrpq7RarXcP6RqwUq+O8JC7P0IlE/96qn3kA7q6P2d2gvF85enk5OY+rJX/tVqtak1xyDZ//NvQJKpVGYrUnVLl9O5JwMm4tnb3zWurb7/zreW7i68vvb50b35ubn5qfu7l2Wu3lptLU53H044SeBx2X/RPOxIAAAAAAAAAAABgUCfx3wlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAk21hMvUHKTI9dXWq3d7anG22l259d8t6klqS4hdJ8WFyPZ0l4z3DFYcd5/3l+dc++mTr492x6t3ta0ftN5iNaslEkpFOef+zGu9GVR6pOGoKxc4M2wm70k0cnLb/BwAA//+o5gZ+")
r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
write$UHID_INPUT(r0, &(0x7f0000001680)={0x8, {"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", 0x1000}}, 0x1006)
unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
close(r0)
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

57.768022615s ago: executing program 2 (id=102):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r1}, 0x10)
socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000b00)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x1, r3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0)

57.552304848s ago: executing program 2 (id=103):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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")
link(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000300)='./bus\x00')
mount(&(0x7f0000000340)=@loop={'/dev/loop', 0x0}, &(0x7f00000003c0)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
write$binfmt_elf64(r0, &(0x7f0000000140)=ANY=[], 0xfd14)
unlink(&(0x7f0000000100)='./file0/file0\x00')

57.264394235s ago: executing program 2 (id=107):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000000000005902"])
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x3c}], 0x1}}], 0x1, 0x0)

56.688036728s ago: executing program 2 (id=111):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x34}}, 0x0)

56.343683699s ago: executing program 32 (id=111):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r1)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r3=>0x0})
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x34, r2, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x3}]}, 0x34}}, 0x0)

48.013782595s ago: executing program 1 (id=55):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

38.080378176s ago: executing program 1 (id=55):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

25.471135472s ago: executing program 1 (id=55):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

12.412384695s ago: executing program 1 (id=55):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

3.952035069s ago: executing program 0 (id=454):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x45c)
r1 = dup(r0)
ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x5)
ioctl$UI_DEV_CREATE(r1, 0x5501)
write$UHID_INPUT(r1, &(0x7f0000001580)={0x8, {"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", 0x1000}}, 0x1006)

3.811929237s ago: executing program 3 (id=456):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x40, r1, 0x607, 0x0, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0x2}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x40}}, 0x0)

3.731532272s ago: executing program 0 (id=457):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r0 = syz_io_uring_setup(0x40f, &(0x7f0000000000), &(0x7f0000000080)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
syz_io_uring_setup(0x2bac, &(0x7f0000000340), &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000000))
syz_io_uring_submit(r3, r2, &(0x7f0000000100)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x26, 0x0, @fd_index=0x3})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x80000004, 0x0, 0x4)
io_uring_enter(r0, 0x1469, 0x0, 0x0, 0x0, 0x0)

3.681956215s ago: executing program 3 (id=458):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000300)={0x40, 0x18, 0x4, "d002bce1"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x33}}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000ac0)={0x40, 0x14, 0x4, "a350551c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000940)={0x1c, &(0x7f0000000780)={0x40, 0x7, 0x4, "933211ea"}, 0x0, 0x0, 0x0, 0x0, 0x0})

3.479688527s ago: executing program 0 (id=461):
sched_setscheduler(0x0, 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19)
madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x8)

3.236383241s ago: executing program 0 (id=462):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=m^ciceland,discard,discard,namecase=1,errors=remount-ro,discard,discard,dmask=00000000000000000000005,iocharset=maccyrillic,fmask=00000000000000000000005,\x00'], 0x5, 0x1520, &(0x7f0000000280)="$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")
r0 = syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902640002010000000904010001020d0000052406000105240000000d240f0100000000000000000006241a00000008241c00000008000905810300020000000904010000020d00000904010102020d0000090582020002000000090503"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x0, 0x0, 0xb, 0x0, 0x0, 0x4, 0x0, 0x80000044, 0x2, 0xe, 0x0, 0x4}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

2.968539967s ago: executing program 4 (id=463):
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x280})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000040)={{&(0x7f000091f000/0x2000)=nil, 0x2000}, 0x1})
madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x19)

2.770494318s ago: executing program 4 (id=464):
socket$nl_route(0x10, 0x3, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=0x0, @ANYRES16=r0], 0x0)

2.522195013s ago: executing program 5 (id=466):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x800000, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x1, 0x5504, &(0x7f000000c0c0)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r1 = open(&(0x7f00000001c0)='./file2\x00', 0x86442, 0x0)
dup3(r1, r0, 0x0)
io_setup(0x2, &(0x7f0000000400)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}])

1.838916893s ago: executing program 5 (id=467):
rseq(&(0x7f0000000040), 0x20, 0x0, 0x0)
io_setup(0x8, &(0x7f0000002740)=<r0=>0x0)
io_getevents(r0, 0x4, 0x13, &(0x7f0000000000), 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
io_submit(r0, 0x1, &(0x7f0000000480)=[&(0x7f0000000880)={0x0, 0x0, 0x0, 0x7, 0x8, r1, 0x0, 0x0, 0x6}])
io_destroy(r0)

1.468343715s ago: executing program 5 (id=468):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000180)={[{@force}, {@nodecompose}, {@uid}, {@gid={'gid', 0x3d, 0xee01}}, {@nobarrier}, {}, {@nls={'nls', 0x3d, 'default'}}, {@nobarrier}]}, 0x3, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000380)=""/55, 0x37)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4)
rename(&(0x7f0000001800)='./file0\x00', &(0x7f0000001080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1.383093229s ago: executing program 3 (id=469):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="04"], 0x10)
close(r0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000640))
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20)

1.36715097s ago: executing program 4 (id=470):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1, 0x4, 0x9, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x9e}, @printk={@ld}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000012c0)={{r0}, &(0x7f0000001240), &(0x7f0000001280)='%ps    \x00'}, 0x20)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

1.240428507s ago: executing program 4 (id=471):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./bus\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000005c0)={{0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, {0x2000, 0x5000, 0xc, 0x0, 0x7, 0x2, 0x0, 0x0, 0x3, 0x0, 0xfe, 0xfc}, {0x3000, 0x8000000, 0x0, 0x8, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, {0x10000, 0x1, 0xd, 0x0, 0x0, 0x4, 0x0, 0x3, 0x0, 0x3c, 0x0, 0x13}, {0x0, 0x3000, 0x0, 0x0, 0x0, 0x3, 0x2}, {0x0, 0x3000, 0xe, 0xfe, 0x0, 0x4}, {0xeeee8000, 0x0, 0x0, 0x0, 0x0, 0x8f, 0x0, 0xa, 0x26, 0x8}, {0x80a0000}, {0xdddd1000, 0x8}, 0xddf8ffdb, 0x0, 0x0, 0x2b, 0x0, 0x3800, 0x0, [0x0, 0x0, 0x1]})

1.237434538s ago: executing program 5 (id=472):
syz_open_dev$loop(&(0x7f0000000440), 0x81, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002)
write$sndseq(r0, 0x0, 0x0)
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

1.20562399s ago: executing program 3 (id=473):
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES32=0x0, @ANYRES64], 0x1, 0x1a1, &(0x7f0000000440)="$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")
setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0xcd, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000440)=ANY=[@ANYBLOB="043e110b"], 0x14)
r0 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)

1.055324058s ago: executing program 5 (id=474):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0x0, 0x3}]}, 0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

992.473572ms ago: executing program 0 (id=475):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000009e8685000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000cbd520850000002d00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000040007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

928.309676ms ago: executing program 4 (id=476):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='mm_lru_activate\x00', r0}, 0x10)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
close(r2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000850000000f00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

919.368816ms ago: executing program 3 (id=477):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

901.232258ms ago: executing program 1 (id=55):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x48e9, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0x11}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x6}]}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x19, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"])

681.69µs ago: executing program 0 (id=478):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000180)='=', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @private1}, 0x1c)
shutdown(r0, 0x1)
r1 = dup(r0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000180)=@assoc_value={<r2=>0x0}, &(0x7f00000001c0)=0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r2}, &(0x7f0000000300)=0x14)

368.13µs ago: executing program 5 (id=479):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r0, 0x0, 0xa, 0x2200c851, &(0x7f0000000480)={0xa, 0x2, 0x2, @loopback}, 0x1c)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
sendto$inet6(r0, &(0x7f0000000080)='D', 0x1, 0x1, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000400)="4cefd7283e", 0x5, 0x1, 0x0, 0x0)

151.57µs ago: executing program 3 (id=480):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000)
timer_create(0x0, &(0x7f0000533fa0), 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600a00, 0x200002, 0x3, &(0x7f0000a00000/0x600000)=nil)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0, 0x401d031, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=481):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xc00d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)

kernel console output (not intermixed with test programs):

fffff)
[   87.297345][ T4554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.346904][ T4708] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.101: corrupted inode contents
[   87.368343][ T4708] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.101: mark_inode_dirty error
[   87.373186][ T4716] loop2: detected capacity change from 0 to 1024
[   87.383489][ T4554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.389596][ T4716] EXT4-fs: Ignoring removed orlov option
[   87.402491][ T4716] EXT4-fs: Ignoring removed nomblk_io_submit option
[   87.415175][ T4708] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.101: corrupted inode contents
[   87.429807][ T4262] Bluetooth: hci2: command 0x040f tx timeout
[   87.439304][ T4716] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   87.447189][ T4554] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.465272][ T4708] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.101: mark_inode_dirty error
[   87.493542][ T4554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.595318][ T4267] EXT4-fs error (device loop2): ext4_map_blocks:634: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1)
[   87.595612][ T4554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.630754][ T4267] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5885: Corrupt filesystem
[   87.632325][ T4250] EXT4-fs (loop3): unmounting filesystem.
[   87.652864][ T4267] EXT4-fs error (device loop2): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error
[   87.766668][ T4267] EXT4-fs (loop2): unmounting filesystem.
[   87.767918][ T4730] loop3: detected capacity change from 0 to 64
[   87.785835][ T4554] device hsr_slave_0 entered promiscuous mode
[   87.835041][ T4554] device hsr_slave_1 entered promiscuous mode
[   87.846766][ T4554] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   87.865136][ T4554] Cannot create hsr debugfs directory
[   88.156340][ T4734] program syz.3.110 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   88.390567][ T4300] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.563978][ T4300] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.617873][ T4740] device vlan0 entered promiscuous mode
[   88.617965][ T4732] loop4: detected capacity change from 0 to 40427
[   88.645557][ T4739] device vlan0 left promiscuous mode
[   88.652928][ T4732] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   88.680557][ T4732] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   88.713684][ T4300] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.746717][ T4732] F2FS-fs (loop4): Found nat_bits in checkpoint
[   88.852234][ T4300] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   88.904883][ T4732] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   88.936027][ T4732] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   89.063531][ T4554] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   89.110483][ T4260] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   89.120426][ T4260] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   89.128277][ T4266] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   89.136529][ T4260] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   89.144311][ T4554] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   89.154856][ T4260] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   89.157201][   T27] audit: type=1800 audit(1740159772.786:3): pid=4732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.109" name="file1" dev="loop4" ino=11 res=0 errno=0
[   89.183356][ T4260] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   89.193157][ T4755] loop0: detected capacity change from 0 to 256
[   89.208846][ T4755] exfat: Unknown parameter 'LȽ¬râ#t'
[   89.224014][ T4554] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   89.295527][ T4554] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   89.362814][ T4758] loop3: detected capacity change from 0 to 256
[   89.380878][ T4758] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   89.509998][ T4262] Bluetooth: hci2: command 0x0419 tx timeout
[   89.608980][ T4764] loop2: detected capacity change from 0 to 7
[   89.618362][ T4764] Dev loop2: unable to read RDB block 7
[   89.645264][ T4764]  loop2: unable to read partition table
[   89.669618][ T4764] loop2: partition table beyond EOD, truncated
[   89.685367][ T4764] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[   89.721463][ T4554] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.852409][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   89.865898][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   89.938193][ T4554] 8021q: adding VLAN 0 to HW filter on device team0
[   89.968886][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   90.006943][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   90.035577][   T46] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.042819][   T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[   90.124710][ T4751] chnl_net:caif_netlink_parms(): no params data found
[   90.142891][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   90.161749][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   90.171842][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   90.191696][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.198820][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[   90.238105][ T4786] loop4: detected capacity change from 0 to 256
[   90.245925][ T4786] FAT-fs (loop4): Unrecognized mount option "shortnameGwi³mµ–@©n95" or missing value
[   90.294721][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   90.324135][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   90.343031][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   90.359623][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   90.375574][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   90.398016][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   90.411115][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   90.511005][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   90.540059][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   90.548372][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   90.573800][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   90.606228][ T4554] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   90.642710][ T4751] bridge0: port 1(bridge_slave_0) entered blocking state
[   90.660042][ T4751] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.668401][ T4751] device bridge_slave_0 entered promiscuous mode
[   90.676883][ T4781] loop3: detected capacity change from 0 to 40427
[   90.703462][ T4781] F2FS-fs (loop3): Insane cp_payload (553648128 >= 504)
[   90.721658][ T4781] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   90.758002][ T4781] F2FS-fs (loop3): inline encryption not supported
[   90.786566][ T4781] F2FS-fs (loop3): invalid crc value
[   90.798081][ T4751] bridge0: port 2(bridge_slave_1) entered blocking state
[   90.819816][ T4751] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.835335][ T4751] device bridge_slave_1 entered promiscuous mode
[   90.844676][ T4781] F2FS-fs (loop3): Found nat_bits in checkpoint
[   90.983103][ T4781] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   90.991017][ T4781] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   91.014752][ T4751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   91.041876][ T4751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   91.068758][ T4781] syz.3.126: attempt to access beyond end of device
[   91.068758][ T4781] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   91.169938][ T4751] team0: Port device team_slave_0 added
[   91.196973][ T4751] team0: Port device team_slave_1 added
[   91.214284][ T4799] loop7: detected capacity change from 0 to 16384
[   91.231972][ T4300] device hsr_slave_0 left promiscuous mode
[   91.246390][ T4300] device hsr_slave_1 left promiscuous mode
[   91.255546][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   91.270195][ T4262] Bluetooth: hci4: command 0x0409 tx timeout
[   91.286465][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0
[   91.296129][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   91.304079][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1
[   91.312100][ T4300] device bridge_slave_1 left promiscuous mode
[   91.318329][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.328188][ T4300] device bridge_slave_0 left promiscuous mode
[   91.334932][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.382364][ T4300] device veth1_macvtap left promiscuous mode
[   91.399846][ T4300] device veth0_macvtap left promiscuous mode
[   91.405976][ T4300] device veth1_vlan left promiscuous mode
[   91.423346][ T4300] device veth0_vlan left promiscuous mode
[   91.440749][ T4800] loop7: detected capacity change from 16384 to 0
[   92.292562][ T4802] loop3: detected capacity change from 0 to 40427
[   92.317093][ T4802] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   92.325395][ T4786] loop4: detected capacity change from 0 to 131072
[   92.332255][ T4802] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   92.428615][ T4802] F2FS-fs (loop3): Found nat_bits in checkpoint
[   92.456182][ T4786] F2FS-fs (loop4): Test dummy encryption mode enabled
[   92.466417][ T4786] F2FS-fs (loop4): invalid crc value
[   92.473050][ T4300] team0 (unregistering): Port device team_slave_1 removed
[   92.507261][ T4786] F2FS-fs (loop4): Found nat_bits in checkpoint
[   92.535149][ T4802] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   92.542387][ T4802] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   92.551795][ T4300] team0 (unregistering): Port device team_slave_0 removed
[   92.619638][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   92.650435][ T4786] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   92.699815][ T4786] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=1025, run fsck to fix.
[   92.709936][   T27] audit: type=1800 audit(1740159776.336:4): pid=4802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.128" name="file1" dev="loop3" ino=11 res=0 errno=0
[   92.737777][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.349984][ T4821] loop3: detected capacity change from 0 to 1024
[   93.352714][ T4262] Bluetooth: hci4: command 0x041b tx timeout
[   93.379977][ T4821] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[   93.459848][ T4819] loop0: detected capacity change from 0 to 40427
[   93.467968][ T4819] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[   93.483943][ T4821] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   93.485731][ T4819] F2FS-fs (loop0): invalid crc value
[   93.506868][ T4819] F2FS-fs (loop0): Found nat_bits in checkpoint
[   93.555822][ T4819] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   93.603901][ T4821] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[   93.604440][ T4819] syz.0.130: attempt to access beyond end of device
[   93.604440][ T4819] loop0: rw=2049, sector=45096, nr_sectors = 112 limit=40427
[   93.671160][ T4821] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   93.702754][ T4249] syz-executor: attempt to access beyond end of device
[   93.702754][ T4249] loop0: rw=2049, sector=45208, nr_sectors = 8 limit=40427
[   93.714148][ T4821] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   93.738557][ T4821] EXT4-fs (loop3): This should not happen!! Data will be lost
[   93.738557][ T4821] 
[   93.777603][ T4821] EXT4-fs (loop3): Total free blocks count 0
[   93.798722][ T4821] EXT4-fs (loop3): Free/Dirty block details
[   93.818580][ T4821] EXT4-fs (loop3): free_blocks=20480
[   93.839436][ T4821] EXT4-fs (loop3): dirty_blocks=80
[   93.865319][ T4821] EXT4-fs (loop3): Block reservation details
[   93.879532][ T4821] EXT4-fs (loop3): i_reserved_data_blocks=5
[   93.980811][ T4300] bond0 (unregistering): Released all slaves
[   94.013770][ T4650] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 64 with error 28
[   94.159952][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   94.167500][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   94.187213][ T4554] 8021q: adding VLAN 0 to HW filter on device batadv0
[   94.244773][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.269751][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.305428][ T4751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.346761][ T4751] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.379339][ T4751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.407722][ T4751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.426781][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   94.457601][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   94.508620][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   94.532480][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   94.551804][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   94.564239][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   94.590800][ T4554] device veth0_vlan entered promiscuous mode
[   94.643351][ T4751] device hsr_slave_0 entered promiscuous mode
[   94.650661][ T4751] device hsr_slave_1 entered promiscuous mode
[   94.657404][ T4751] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   94.667428][ T4751] Cannot create hsr debugfs directory
[   94.688078][ T4554] device veth1_vlan entered promiscuous mode
[   94.808380][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   94.819706][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   94.829499][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   94.838414][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   94.851977][ T4554] device veth0_macvtap entered promiscuous mode
[   94.884082][ T4554] device veth1_macvtap entered promiscuous mode
[   94.941610][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.953911][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.963957][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.975424][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   94.985386][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   94.995934][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.007415][ T4554] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.018402][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.029008][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.039271][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.049787][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.059596][ T4554] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   95.070390][ T4554] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   95.082388][ T4554] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.091250][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   95.099426][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   95.107738][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   95.116593][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   95.125769][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   95.135022][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   95.145258][ T4751] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   95.156551][ T4751] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   95.168250][ T4554] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.180518][ T4554] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.189264][ T4554] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.198313][ T4554] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.210971][ T4751] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   95.240549][ T4751] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   95.313053][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.325827][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.351519][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   95.385626][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.401910][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.419577][ T4751] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.427276][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   95.437160][ T4262] Bluetooth: hci4: command 0x040f tx timeout
[   95.448675][ T4751] 8021q: adding VLAN 0 to HW filter on device team0
[   95.475781][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   95.484430][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   95.495867][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   95.523718][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   95.546182][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.553336][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.561817][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   95.570848][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   95.579195][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.586322][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.634306][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   95.642945][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   95.652032][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   95.667551][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   95.678549][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   95.687555][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   95.700539][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   95.709351][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   95.725549][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   95.734462][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   95.746587][ T4751] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   95.758525][ T4751] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   95.772506][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   95.783264][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   95.904015][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   95.913848][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   95.932293][ T4751] 8021q: adding VLAN 0 to HW filter on device batadv0
[   96.119587][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   96.130737][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   96.151088][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   96.159558][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   96.168943][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   96.177054][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   96.187385][ T4751] device veth0_vlan entered promiscuous mode
[   96.199109][ T4751] device veth1_vlan entered promiscuous mode
[   96.218388][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   96.228277][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   96.236851][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   96.246134][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   96.259091][ T4751] device veth0_macvtap entered promiscuous mode
[   96.273973][ T4751] device veth1_macvtap entered promiscuous mode
[   96.290645][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.301695][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.311927][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.323128][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.334072][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.344643][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.354646][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   96.365161][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.376809][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_0
[   96.385865][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   96.399528][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   96.408463][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   96.424143][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.434761][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.445197][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.456623][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.466498][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.477765][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.487694][ T4751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   96.498797][ T4751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   96.513104][ T4751] batman_adv: batadv0: Interface activated: batadv_slave_1
[   96.523067][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   96.535487][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   96.545741][ T4751] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   96.555452][ T4751] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   96.564980][ T4751] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   96.573839][ T4751] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   96.620543][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.628658][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.654459][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   96.673963][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   96.684986][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   96.697147][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   97.115449][ T4400] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   97.166021][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.200789][   T22] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[   97.319797][ T4400] usb 4-1: Using ep0 maxpacket: 16
[   97.340273][ T4400] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   97.353359][ T4400] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00
[   97.379935][ T4400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.400564][ T4400] usb 4-1: config 0 descriptor??
[   97.414929][ T4400] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8
[   97.428183][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   97.450966][   T22] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   97.463257][ T4260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   97.463814][   T22] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   97.480184][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.491108][ T4260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   97.491393][   T22] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.506418][ T4260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   97.514471][ T4266] Bluetooth: hci4: command 0x0419 tx timeout
[   97.522142][ T4260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   97.522344][   T22] usb 6-1: config 0 descriptor??
[   97.537336][ T4260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   97.546004][ T4260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   97.625187][ T3607] bcm5974 4-1:0.0: could not read from device
[   97.641229][ T4400] usb 4-1: USB disconnect, device number 3
[   97.648238][ T3607] bcm5974 4-1:0.0: could not read from device
[   97.721189][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.794209][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   97.809108][ T4868] chnl_net:caif_netlink_parms(): no params data found
[   97.884936][ T4868] bridge0: port 1(bridge_slave_0) entered blocking state
[   97.893905][ T4868] bridge0: port 1(bridge_slave_0) entered disabled state
[   97.903849][ T4868] device bridge_slave_0 entered promiscuous mode
[   97.925479][ T4868] bridge0: port 2(bridge_slave_1) entered blocking state
[   97.932810][ T4868] bridge0: port 2(bridge_slave_1) entered disabled state
[   97.941720][ T4868] device bridge_slave_1 entered promiscuous mode
[   97.946796][   T22] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[   97.958831][   T22] cm6533_jd 0003:0D8C:0022.0002: unknown main item tag 0x0
[   97.976373][   T22] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:0D8C:0022.0002/input/input9
[   98.008561][ T4868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.031454][   T22] cm6533_jd 0003:0D8C:0022.0002: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[   98.032113][ T4868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.070833][ T4868] team0: Port device team_slave_0 added
[   98.108635][ T4868] team0: Port device team_slave_1 added
[   98.128429][ T4868] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.138178][ T4868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.166077][ T4868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.207457][ T4868] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.216697][ T4868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.254031][ T4868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.276043][   T14] usb 6-1: USB disconnect, device number 2
[   98.315183][ T4868] device hsr_slave_0 entered promiscuous mode
[   98.327271][ T4868] device hsr_slave_1 entered promiscuous mode
[   98.334401][ T4868] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   98.342305][ T4868] Cannot create hsr debugfs directory
[   98.886030][ T4881] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[   99.266529][ T4868] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   99.294052][ T4868] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   99.336351][   T11] device hsr_slave_0 left promiscuous mode
[   99.352678][   T11] device hsr_slave_1 left promiscuous mode
[   99.370559][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   99.384829][ T4889] user requested TSC rate below hardware speed
[   99.399813][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[   99.407757][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   99.427375][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[   99.448958][   T11] device bridge_slave_1 left promiscuous mode
[   99.469768][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[   99.491004][   T11] device bridge_slave_0 left promiscuous mode
[   99.497257][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[   99.548622][ T4894] loop4: detected capacity change from 0 to 512
[   99.571448][ T4894] EXT4-fs: Ignoring removed nomblk_io_submit option
[   99.578487][   T11] device veth1_macvtap left promiscuous mode
[   99.591018][ T4262] Bluetooth: hci2: command 0x0409 tx timeout
[   99.598487][   T11] device veth0_macvtap left promiscuous mode
[   99.606264][   T11] device veth1_vlan left promiscuous mode
[   99.616675][ T4894] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[   99.627251][   T11] device veth0_vlan left promiscuous mode
[   99.637975][ T4894] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[   99.677411][ T4876] loop5: detected capacity change from 0 to 40427
[   99.694546][ T4894] EXT4-fs (loop4): 1 truncate cleaned up
[   99.703840][ T4876] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   99.708455][ T4894] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   99.716300][ T4876] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   99.792955][ T4894] EXT4-fs error (device loop4): ext4_map_blocks:634: inode #2: block 4: comm syz.4.149: lblock 0 mapped to illegal pblock 4 (length 1)
[   99.858765][ T4876] F2FS-fs (loop5): Found nat_bits in checkpoint
[   99.864717][ T4894] EXT4-fs (loop4): Remounting filesystem read-only
[   99.978467][ T4261] EXT4-fs (loop4): unmounting filesystem.
[  100.020363][ T4876] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  100.028784][ T4876] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  100.173644][   T27] audit: type=1800 audit(1740159783.806:5): pid=4876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.142" name="file1" dev="loop5" ino=11 res=0 errno=0
[  100.640299][   T11] team0 (unregistering): Port device team_slave_1 removed
[  100.655013][ T4915] loop5: detected capacity change from 0 to 512
[  100.693233][ T4915] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  100.723151][ T4915] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  100.740946][   T11] team0 (unregistering): Port device team_slave_0 removed
[  100.767522][ T4915] EXT4-fs error (device loop5): ext4_orphan_get:1426: comm syz.5.159: bad orphan inode 131083
[  100.801781][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.811026][ T4915] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  100.890771][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.933695][ T4751] EXT4-fs (loop5): unmounting filesystem.
[  100.955683][ T4251] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  101.107500][ T4925] loop5: detected capacity change from 0 to 4096
[  101.141899][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  101.164502][ T4251] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.175693][ T4251] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  101.192746][ T4251] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.202828][ T4251] usb 1-1: config 0 descriptor??
[  101.316641][ T4923] loop4: detected capacity change from 0 to 32768
[  101.337925][ T4923] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.162 (4923)
[  101.372879][ T4923] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  101.389829][ T4923] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  101.398539][ T4923] BTRFS info (device loop4): enabling disk space caching
[  101.412805][ T4923] BTRFS info (device loop4): turning off barriers
[  101.419286][ T4923] BTRFS info (device loop4): doing ref verification
[  101.434432][ T4923] BTRFS info (device loop4): use no compression
[  101.443225][ T4923] BTRFS info (device loop4): force clearing of disk cache
[  101.450718][ T4923] BTRFS info (device loop4): setting nodatacow, compression disabled
[  101.467783][ T4923] BTRFS info (device loop4): turning on barriers
[  101.477509][ T4923] BTRFS info (device loop4): doing ref verification
[  101.484689][ T4923] BTRFS info (device loop4): disk space caching is enabled
[  101.634617][ T4251] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[  101.642969][ T4251] cm6533_jd 0003:0D8C:0022.0003: unknown main item tag 0x0
[  101.645933][ T4923] BTRFS info (device loop4): enabling ssd optimizations
[  101.652855][ T4251] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0D8C:0022.0003/input/input10
[  101.675911][ T4260] Bluetooth: hci2: command 0x041b tx timeout
[  101.683490][ T4923] BTRFS info (device loop4): rebuilding free space tree
[  101.706961][ T4251] cm6533_jd 0003:0D8C:0022.0003: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.0-1/input0
[  101.731372][ T4923] BTRFS info (device loop4): disabling free space tree
[  101.738322][ T4923] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  101.776484][ T4923] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  101.865533][   T27] audit: type=1800 audit(1740159785.496:6): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.162" name="bus" dev="loop4" ino=263 res=0 errno=0
[  101.872033][   T26] usb 1-1: USB disconnect, device number 4
[  101.967036][   T27] audit: type=1800 audit(1740159785.596:7): pid=4923 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.162" name="bus" dev="loop4" ino=263 res=0 errno=0
[  101.968053][   T11] bond0 (unregistering): Released all slaves
[  102.041304][ T4261] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.107701][ T4868] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  102.181252][ T4868] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  102.429276][ T4955] loop4: detected capacity change from 0 to 2048
[  102.435396][ T4868] 8021q: adding VLAN 0 to HW filter on device bond0
[  102.498889][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  102.519166][ T4955] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=18576, location=18576
[  102.532026][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  102.546434][ T4868] 8021q: adding VLAN 0 to HW filter on device team0
[  102.572632][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  102.600371][ T4955] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  102.600606][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  102.664256][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.671416][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  102.721556][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  102.763104][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  102.798116][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  102.809752][ T4295] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  102.824919][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.832062][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  102.851880][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  102.868732][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  102.909933][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  102.931857][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  102.956024][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  103.003773][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  103.012127][ T4295] usb 6-1: Using ep0 maxpacket: 32
[  103.024200][ T4295] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  103.047253][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  103.065776][ T4295] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  103.079369][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  103.088199][ T4295] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  103.100230][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  103.108205][ T4295] usb 6-1: Product: syz
[  103.114154][ T4295] usb 6-1: Manufacturer: syz
[  103.119411][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  103.128744][ T4295] usb 6-1: SerialNumber: syz
[  103.135324][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  103.145702][ T4295] usb 6-1: config 0 descriptor??
[  103.151475][ T4958] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  103.162306][ T4295] hub 6-1:0.0: bad descriptor, ignoring hub
[  103.164242][ T4868] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  103.168689][ T4295] hub: probe of 6-1:0.0 failed with error -5
[  103.485005][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  103.503080][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  103.518163][ T4868] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.540001][ T4295] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  103.548649][  T129] usb 6-1: USB disconnect, device number 3
[  103.554184][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  103.577359][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.597778][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  103.607818][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  103.623707][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.632339][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.649399][ T4868] device veth0_vlan entered promiscuous mode
[  103.672502][ T4868] device veth1_vlan entered promiscuous mode
[  103.728538][ T4868] device veth0_macvtap entered promiscuous mode
[  103.739543][ T4868] device veth1_macvtap entered promiscuous mode
[  103.749925][ T4295] usb 5-1: Using ep0 maxpacket: 32
[  103.755084][ T4260] Bluetooth: hci2: command 0x040f tx timeout
[  103.762739][ T4295] usb 5-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  103.777646][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  103.786022][ T4295] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.788345][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  103.803362][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  103.807994][ T4295] usb 5-1: config 0 descriptor??
[  103.812870][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  103.825332][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  103.834831][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  103.856902][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.869900][ T4295] gspca_main: sq930x-2.14.0 probing 041e:403c
[  103.876577][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.889903][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.903769][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.914994][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.926076][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.936059][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  103.946864][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  103.958900][ T4868] batman_adv: batadv0: Interface activated: batadv_slave_0
[  103.967929][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  103.978452][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  103.994124][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.005243][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.015946][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.027442][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.049731][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.060493][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.076090][ T4868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  104.089149][ T4868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.101001][ T4868] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.110621][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  104.125231][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  104.137779][ T4868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.169778][ T4868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.185639][ T4868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.204911][ T4868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.381082][   T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.406369][   T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.428839][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  104.457036][   T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.478064][   T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.502513][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  105.146701][ T4295] gspca_sq930x: reg_w 0105 bf00 failed -71
[  105.152910][ T4295] sq930x: probe of 5-1:0.0 failed with error -71
[  105.180525][ T4295] usb 5-1: USB disconnect, device number 4
[  105.506501][ T5009] loop3: detected capacity change from 0 to 32768
[  105.528873][ T5009] XFS (loop3): Mounting V5 Filesystem
[  105.557905][ T5009] XFS (loop3): Ending clean mount
[  105.572394][ T5009] XFS (loop3): Quotacheck needed: Please wait.
[  105.639004][ T5009] XFS (loop3): Quotacheck: Done.
[  105.779045][ T4250] XFS (loop3): Unmounting Filesystem
[  106.053469][ T5040] loop3: detected capacity change from 0 to 1024
[  106.088661][   T27] audit: type=1800 audit(1740159789.716:8): pid=5040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.196" name=A814F6F2377BCFC78E2E86368C138510A04CEDF7175AF8C2034FAE7413E3ACE8C71AB9A0AF1CA7042011A6ED028E205648535DABF3B2F85196AE18D36B839E3CD54AE4933AD529888FDAC7BB8A70C72BC0FC81BA06506F2D5BC7686E219BBE5283959CBEF9950E071CB6D9F341FC624A5110341F26CEBD71 dev="loop3" ino=25 res=0 errno=0
[  106.129136][    C0] vkms_vblank_simulate: vblank timer overrun
[  106.155177][ T5043] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  106.167435][ T5043] overlayfs: failed to set xattr on upper
[  106.178186][ T5043] overlayfs: ...falling back to index=off,metacopy=off.
[  106.187698][ T5043] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  106.196907][ T5043] overlayfs: maximum fs stacking depth exceeded
[  106.812265][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  106.870040][   T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  107.051447][   T14] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  107.074936][   T14] usb 6-1: config 0 interface 0 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  107.113885][ T4262] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  107.117789][   T14] usb 6-1: config 0 interface 0 has no altsetting 0
[  107.130493][ T4262] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  107.138579][ T4262] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  107.142477][   T14] usb 6-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  107.157556][ T4262] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  107.165353][ T4262] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  107.172855][ T4262] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  107.181702][   T14] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.221955][   T14] usb 6-1: config 0 descriptor??
[  107.525814][ T5075] chnl_net:caif_netlink_parms(): no params data found
[  107.634579][   T14] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0
[  107.649800][   T14] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0
[  107.668379][   T14] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0
[  107.697999][   T14] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0
[  107.724410][   T14] logitech-hidpp-device 0003:046D:C262.0004: unknown main item tag 0x0
[  107.758914][   T14] logitech-hidpp-device 0003:046D:C262.0004: hidraw0: USB HID v0.00 Device [HID 046d:c262] on usb-dummy_hcd.5-1/input0
[  107.845002][  T129] usb 6-1: USB disconnect, device number 4
[  109.042066][ T5112] loop5: detected capacity change from 0 to 32768
[  109.058978][ T5112] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.226 (5112)
[  109.085157][ T5112] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  109.105596][ T5112] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  109.139607][ T5112] BTRFS info (device loop5): max_inline at 0
[  109.145986][ T5112] BTRFS info (device loop5): enabling disk space caching
[  109.154759][ T5112] BTRFS info (device loop5): turning off barriers
[  109.161546][ T5112] BTRFS info (device loop5): turning on flush-on-commit
[  109.168744][ T5112] BTRFS info (device loop5): doing ref verification
[  109.175590][ T5112] BTRFS info (device loop5): force clearing of disk cache
[  109.183804][ T5112] BTRFS info (device loop5): enabling ssd optimizations
[  109.192171][ T5112] BTRFS info (device loop5): max_inline at 4096
[  109.198615][ T5112] BTRFS info (device loop5): disk space caching is enabled
[  109.263603][ T5112] BTRFS info (device loop5): rebuilding free space tree
[  109.281971][ T4260] Bluetooth: hci2: command 0x0409 tx timeout
[  109.299265][ T5112] BTRFS info (device loop5): disabling free space tree
[  109.317266][ T5112] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  109.327490][ T5112] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  110.976912][ T5075] bridge0: port 1(bridge_slave_0) entered blocking state
[  111.000670][ T5075] bridge0: port 1(bridge_slave_0) entered disabled state
[  111.008789][ T5075] device bridge_slave_0 entered promiscuous mode
[  111.062971][ T5075] bridge0: port 2(bridge_slave_1) entered blocking state
[  111.080320][ T5075] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.108869][ T4751] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  111.110945][ T5075] device bridge_slave_1 entered promiscuous mode
[  111.350518][ T4260] Bluetooth: hci2: command 0x041b tx timeout
[  111.423375][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.449818][ T4402] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  111.479221][ T5075] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  111.506257][ T5075] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  111.577616][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  111.628144][ T5075] team0: Port device team_slave_0 added
[  111.637276][ T5075] team0: Port device team_slave_1 added
[  111.670121][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  111.694082][ T4402] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  111.712616][ T4402] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  111.730312][ T4402] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  111.739565][ T4402] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.758464][ T5158] loop3: detected capacity change from 0 to 32768
[  111.759299][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_0
[  111.781050][ T5158] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.236 (5158)
[  111.794882][ T4402] usb 1-1: config 0 descriptor??
[  111.805555][ T5158] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.805865][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  111.816090][ T5158] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  111.851183][ T5158] BTRFS info (device loop3): using free space tree
[  111.879626][ T5158] BTRFS info (device loop3): enabling ssd optimizations
[  111.898357][   T27] audit: type=1800 audit(1740159795.526:9): pid=5158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.236" name="file1" dev="loop3" ino=260 res=0 errno=0
[  111.950122][ T5075] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  112.022758][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  112.040125][ T5075] batman_adv: batadv0: Adding interface: batadv_slave_1
[  112.061332][ T5075] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  112.088227][ T5150] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  112.102794][ T5075] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  112.276440][ T4402] plantronics 0003:047F:FFFF.0005: No inputs registered, leaving
[  112.289176][ T5075] device hsr_slave_0 entered promiscuous mode
[  112.300233][ T4402] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  112.313188][ T5152] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  112.324569][ T5150] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  112.336769][ T5150] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  112.351493][ T5150] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.367311][ T5150] usb 5-1: config 0 descriptor??
[  112.378075][ T5075] device hsr_slave_1 entered promiscuous mode
[  112.380625][ T5150] pwc: Askey VC010 type 2 USB webcam detected.
[  112.399970][ T5075] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  112.408712][ T5075] Cannot create hsr debugfs directory
[  112.417372][ T5158] syz.3.236 (5158) used greatest stack depth: 19128 bytes left
[  112.471193][ T4250] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  112.523741][ T5152] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  112.534410][ T5152] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  112.546209][ T5152] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 56
[  112.559026][ T5152] usb 6-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  112.575444][ T5152] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  112.592366][ T5152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.604491][ T5152] usb 6-1: Product: syz
[  112.608761][ T5152] usb 6-1: Manufacturer: syz
[  112.619700][ T5152] usb 6-1: SerialNumber: syz
[  112.804930][ T5150] pwc: recv_control_msg error -32 req 02 val 2b00
[  112.835593][ T5150] pwc: recv_control_msg error -32 req 02 val 2700
[  112.846543][ T5150] pwc: recv_control_msg error -32 req 02 val 2c00
[  112.857644][ T5182] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  113.067412][ T5150] pwc: recv_control_msg error -71 req 04 val 1300
[  113.080156][ T5150] pwc: recv_control_msg error -71 req 04 val 1400
[  113.097269][ T5150] pwc: recv_control_msg error -71 req 02 val 2000
[  113.115256][ T5150] pwc: recv_control_msg error -71 req 02 val 2100
[  113.128304][ T5189] usb 1-1: USB disconnect, device number 5
[  113.130469][ T5150] pwc: recv_control_msg error -71 req 04 val 1500
[  113.143265][ T5150] pwc: recv_control_msg error -71 req 02 val 2500
[  113.150910][ T5150] pwc: recv_control_msg error -71 req 02 val 2400
[  113.158184][ T5150] pwc: recv_control_msg error -71 req 02 val 2600
[  113.162048][ T5198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.241'.
[  113.170686][ T5150] pwc: recv_control_msg error -71 req 02 val 2900
[  113.184809][ T5150] pwc: recv_control_msg error -71 req 02 val 2800
[  113.194526][ T5150] pwc: recv_control_msg error -71 req 04 val 1100
[  113.209017][ T5150] pwc: recv_control_msg error -71 req 04 val 1200
[  113.228200][ T5150] pwc: Registered as video103.
[  113.234716][ T5150] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input11
[  113.257040][ T5150] usb 5-1: USB disconnect, device number 5
[  113.393324][ T5075] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  113.406678][ T5075] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  113.430563][ T4260] Bluetooth: hci2: command 0x040f tx timeout
[  113.447766][ T5203] input: syz0 as /devices/virtual/input/input12
[  113.455951][ T5075] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  113.467772][ T5182] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  113.477996][ T5075] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  113.686734][ T5152] cdc_ncm 6-1:1.0: bind() failure
[  113.713165][ T5152] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found
[  113.721102][ T5152] cdc_ncm 6-1:1.1: bind() failure
[  113.745749][ T5207] loop4: detected capacity change from 0 to 2048
[  113.892003][ T5189] usb 6-1: USB disconnect, device number 5
[  113.917798][ T5212] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.959335][   T11] device hsr_slave_0 left promiscuous mode
[  113.974964][   T11] device hsr_slave_1 left promiscuous mode
[  113.988962][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  113.998305][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.019211][ T5212] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  114.037066][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.048484][ T5212] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  114.053738][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  114.071349][ T5212] Remounting filesystem read-only
[  114.087222][   T11] device bridge_slave_1 left promiscuous mode
[  114.096001][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  114.105598][   T11] device bridge_slave_0 left promiscuous mode
[  114.112218][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  114.121089][ T4294] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  114.152714][ T4261] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  114.163960][   T11] device veth1_macvtap left promiscuous mode
[  114.176979][   T11] device veth0_macvtap left promiscuous mode
[  114.184196][   T11] device veth1_vlan left promiscuous mode
[  114.196698][   T11] device veth0_vlan left promiscuous mode
[  114.242735][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.250'.
[  114.309853][ T4294] usb 4-1: Using ep0 maxpacket: 8
[  114.324882][ T4294] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  114.339915][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.352509][ T4294] usb 4-1: config 0 descriptor??
[  114.498393][ T5223] loop5: detected capacity change from 0 to 1024
[  114.505859][ T5223] EXT4-fs: Ignoring removed nobh option
[  114.512553][ T5223] EXT4-fs: Ignoring removed bh option
[  114.518906][ T5223] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  114.573695][ T5223] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  114.689866][ T4751] EXT4-fs (loop5): unmounting filesystem.
[  114.923067][   T11] team0 (unregistering): Port device team_slave_1 removed
[  114.972493][   T11] team0 (unregistering): Port device team_slave_0 removed
[  115.020404][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  115.068171][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  115.513332][ T4260] Bluetooth: hci2: command 0x0419 tx timeout
[  115.579958][ T4294] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  115.599777][ T4294] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  115.617888][ T4294] asix: probe of 4-1:0.0 failed with error -71
[  115.627362][ T4294] usb 4-1: USB disconnect, device number 4
[  115.796062][   T11] bond0 (unregistering): Released all slaves
[  115.892164][ T5075] 8021q: adding VLAN 0 to HW filter on device bond0
[  115.918486][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  115.932317][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  115.954151][ T5075] 8021q: adding VLAN 0 to HW filter on device team0
[  115.975117][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  115.988247][ T5238] loop4: detected capacity change from 0 to 40427
[  115.995386][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  116.034682][ T4650] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.041857][ T4650] bridge0: port 1(bridge_slave_0) entered forwarding state
[  116.051658][ T5240] loop5: detected capacity change from 0 to 256
[  116.058340][ T5238] F2FS-fs (loop4): Fix alignment : done, start(4096) end(16896) block(12288)
[  116.095258][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  116.113150][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  116.116513][ T5240] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  116.122470][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  116.152714][ T5238] F2FS-fs (loop4): Found nat_bits in checkpoint
[  116.163955][ T4650] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.171143][ T4650] bridge0: port 2(bridge_slave_1) entered forwarding state
[  116.199607][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  116.224310][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  116.243415][ T5248] loop3: detected capacity change from 0 to 1024
[  116.256085][ T5240] exFAT-fs (loop5): hint_cluster is invalid (17)
[  116.278749][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  116.304872][ T5238] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  116.312725][   T27] audit: type=1800 audit(1740159799.946:10): pid=5240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.258" name="file1" dev="loop5" ino=1048605 res=0 errno=0
[  116.324025][ T5240] exFAT-fs (loop5): error, broken FAT chain.
[  116.333518][    C1] vkms_vblank_simulate: vblank timer overrun
[  116.348643][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  116.381882][ T5240] exFAT-fs (loop5): Filesystem has been set read-only
[  116.406444][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  116.416062][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  116.420525][ T5240] exFAT-fs (loop5): error, failed to bmap (inode : ffff888056bb0e60 iblock : 8, err : -5)
[  116.435070][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  116.459208][ T4261] syz-executor: attempt to access beyond end of device
[  116.459208][ T4261] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  116.479032][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  116.488555][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  116.526038][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  116.562623][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  116.582247][ T5075] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  116.886119][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  116.900807][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  116.914191][ T5075] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.952101][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  116.963219][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  116.991458][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  117.000565][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  117.010811][ T5075] device veth0_vlan entered promiscuous mode
[  117.020778][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  117.028906][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  117.041032][ T5075] device veth1_vlan entered promiscuous mode
[  117.061984][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  117.072450][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  117.081673][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  117.094159][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  117.105303][ T5075] device veth0_macvtap entered promiscuous mode
[  117.118968][ T5075] device veth1_macvtap entered promiscuous mode
[  117.134685][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.145517][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.155619][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.167037][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.176921][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.188318][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.202080][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  117.214442][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.227090][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.238076][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  117.247215][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  117.255654][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  117.265186][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  117.278145][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.293071][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.303380][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.314065][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.323955][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.334563][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.344435][ T5075] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  117.355364][ T5075] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  117.366522][ T5075] batman_adv: batadv0: Interface activated: batadv_slave_1
[  117.375640][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.386129][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.399313][ T5075] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.408509][ T5075] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.417993][ T5075] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.427876][ T5075] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  117.508600][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.537679][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.540546][ T4650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  117.561245][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  117.566906][ T4650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  117.614912][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  117.890640][ T5277] netlink: 'syz.4.270': attribute type 12 has an invalid length.
[  117.898583][ T5277] netlink: 'syz.4.270': attribute type 29 has an invalid length.
[  117.908022][ T5277] netlink: 148 bytes leftover after parsing attributes in process `syz.4.270'.
[  117.930148][ T5277] netlink: 'syz.4.270': attribute type 1 has an invalid length.
[  117.937839][ T5277] netlink: 47 bytes leftover after parsing attributes in process `syz.4.270'.
[  118.295887][ T5284] loop0: detected capacity change from 0 to 40427
[  118.306192][ T5284] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x3ffff
[  118.318034][ T5284] F2FS-fs (loop0): invalid crc value
[  118.329743][ T5284] F2FS-fs (loop0): Found nat_bits in checkpoint
[  118.376647][ T5284] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.431703][ T4249] syz-executor: attempt to access beyond end of device
[  118.431703][ T4249] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  118.459791][ T5152] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  118.461747][ T5299] device batadv_slave_1 entered promiscuous mode
[  118.486847][ T5298] device batadv_slave_1 left promiscuous mode
[  118.681878][ T5152] usb 5-1: config 0 has an invalid interface number: 132 but max is 0
[  118.693810][ T5152] usb 5-1: config 0 has no interface number 0
[  118.705043][ T5152] usb 5-1: New USB device found, idVendor=0499, idProduct=5000, bcdDevice=39.6c
[  118.717622][ T5152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.726945][ T5152] usb 5-1: Product: syz
[  118.731665][ T5152] usb 5-1: Manufacturer: syz
[  118.738390][ T5152] usb 5-1: SerialNumber: syz
[  118.745264][ T5152] usb 5-1: config 0 descriptor??
[  119.158046][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  119.166891][    C1] raw-gadget.0 gadget.4: ignoring, device is not running
[  119.186176][ T5152] snd-usb-audio: probe of 5-1:0.132 failed with error -2
[  119.211116][ T5152] usb 5-1: USB disconnect, device number 6
[  119.348158][ T5312] loop3: detected capacity change from 0 to 256
[  119.420800][ T4300] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  120.049863][   T27] audit: type=1326 audit(1740159803.676:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5316 comm="syz.4.287" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4c4b78d0a9 code=0x0
[  120.397511][ T4260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  120.408851][ T4260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  120.418439][ T4260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  120.435121][ T4260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  120.442817][ T4260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  120.450525][ T4260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  120.466308][ T5329] loop3: detected capacity change from 0 to 512
[  120.545706][ T5329] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  120.568879][ T5329] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  120.597883][   T27] audit: type=1800 audit(1740159804.226:12): pid=5329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.290" name="bus" dev="loop3" ino=18 res=0 errno=0
[  120.708663][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  120.731625][ T5326] chnl_net:caif_netlink_parms(): no params data found
[  120.819631][ T5339] loop3: detected capacity change from 0 to 512
[  120.833940][ T5339] EXT4-fs: Ignoring removed oldalloc option
[  120.871555][ T5326] bridge0: port 1(bridge_slave_0) entered blocking state
[  120.871897][ T5339] EXT4-fs (loop3): 1 truncate cleaned up
[  120.879783][ T5326] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.910915][ T5326] device bridge_slave_0 entered promiscuous mode
[  120.920169][ T5326] bridge0: port 2(bridge_slave_1) entered blocking state
[  120.927373][ T5326] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.935713][ T5326] device bridge_slave_1 entered promiscuous mode
[  120.958988][ T5339] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  120.973473][ T5326] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  121.005653][ T5326] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  121.076743][ T5326] team0: Port device team_slave_0 added
[  121.087607][ T5326] team0: Port device team_slave_1 added
[  121.098372][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  121.128945][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_0
[  121.145862][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.171801][    C1] vkms_vblank_simulate: vblank timer overrun
[  121.185216][ T5326] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  121.222350][ T4300] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.244391][ T5326] batman_adv: batadv0: Adding interface: batadv_slave_1
[  121.254004][ T5326] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  121.310163][ T5326] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  121.378210][ T4300] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.457366][ T5326] device hsr_slave_0 entered promiscuous mode
[  121.481671][ T5326] device hsr_slave_1 entered promiscuous mode
[  121.497709][ T5326] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  121.515706][ T5326] Cannot create hsr debugfs directory
[  121.550826][ T4300] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  121.855134][ T5370] loop5: detected capacity change from 0 to 1024
[  122.274558][ T5384] input: syz0 as /devices/virtual/input/input13
[  122.304691][ T5385] loop5: detected capacity change from 0 to 512
[  122.337903][ T5385] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #11: comm syz.5.310: invalid indirect mapped block 256 (level 2)
[  122.363506][ T5385] EXT4-fs (loop5): Remounting filesystem read-only
[  122.371255][ T5385] EXT4-fs (loop5): 2 truncates cleaned up
[  122.377135][ T5385] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  122.527580][ T4751] EXT4-fs (loop5): unmounting filesystem.
[  122.550595][ T4262] Bluetooth: hci2: command 0x0409 tx timeout
[  122.880108][ T5404] device batadv_slave_1 entered promiscuous mode
[  122.923227][ T5403] device batadv_slave_1 left promiscuous mode
[  122.951846][ T5406] loop0: detected capacity change from 0 to 256
[  122.970125][ T5406] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  122.994567][ T5326] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  123.013640][ T5406] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  123.026313][ T5326] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  123.065020][ T5406] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  123.446451][ T5326] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  123.473252][ T5326] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  123.607780][ T5412] loop4: detected capacity change from 0 to 40427
[  123.623520][ T5412] F2FS-fs (loop4): Wrong SIT boundary, start(1536) end(50334208) blocks(1024)
[  123.642979][ T5412] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  123.686937][ T5412] F2FS-fs (loop4): invalid crc value
[  123.704677][ T5412] F2FS-fs (loop4): Found nat_bits in checkpoint
[  123.733499][ T4300] device hsr_slave_0 left promiscuous mode
[  123.740166][ T4300] device hsr_slave_1 left promiscuous mode
[  123.749021][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.757706][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_0
[  123.766157][ T4300] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.773783][ T4300] batman_adv: batadv0: Removing interface: batadv_slave_1
[  123.784061][ T4300] device bridge_slave_1 left promiscuous mode
[  123.793036][ T5412] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  123.800408][ T4300] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.807804][ T5412] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  123.821054][ T4300] device bridge_slave_0 left promiscuous mode
[  123.827444][ T4300] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.874419][ T4300] device veth1_macvtap left promiscuous mode
[  123.881001][ T4300] device veth0_macvtap left promiscuous mode
[  123.887257][ T4300] device veth1_vlan left promiscuous mode
[  123.887489][ T5412] syz.4.323: attempt to access beyond end of device
[  123.887489][ T5412] loop4: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  123.895722][ T4300] device veth0_vlan left promiscuous mode
[  123.922728][ T5412] syz.4.323: attempt to access beyond end of device
[  123.922728][ T5412] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  123.992541][ T4261] syz-executor: attempt to access beyond end of device
[  123.992541][ T4261] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  124.142964][ T5432] loop5: detected capacity change from 0 to 512
[  124.206920][ T5432] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  124.216096][ T5432] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  124.629801][ T4262] Bluetooth: hci2: command 0x041b tx timeout
[  124.877670][   T27] audit: type=1326 audit(1740159808.506:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  124.937942][ T5432] EXT4-fs (loop5): unmounting filesystem.
[  124.965233][   T27] audit: type=1326 audit(1740159808.516:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.029902][   T27] audit: type=1326 audit(1740159808.516:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.105055][ T5459] loop5: detected capacity change from 0 to 64
[  125.127560][   T27] audit: type=1326 audit(1740159808.516:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.170200][   T27] audit: type=1326 audit(1740159808.516:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.229601][   T27] audit: type=1326 audit(1740159808.516:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.284034][   T27] audit: type=1326 audit(1740159808.516:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.352668][ T4300] team0 (unregistering): Port device team_slave_1 removed
[  125.383350][   T27] audit: type=1326 audit(1740159808.516:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.448061][   T27] audit: type=1326 audit(1740159808.566:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.489854][   T27] audit: type=1326 audit(1740159808.586:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.525858][ T4300] team0 (unregistering): Port device team_slave_0 removed
[  125.571976][   T27] audit: type=1326 audit(1740159808.586:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.648521][   T27] audit: type=1326 audit(1740159808.586:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=221 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.672624][ T5473] loop5: detected capacity change from 0 to 1024
[  125.680848][ T4300] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.718407][ T5473] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.725718][   T27] audit: type=1326 audit(1740159808.586:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5453 comm="syz.3.337" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cb758d0a9 code=0x7ffc0000
[  125.750448][ T4294] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  125.797257][ T5476] 9pnet: p9_errstr2errno: server reported unknown error �@00000000000000000000006
[  125.816079][ T4300] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  125.957765][ T4294] usb 4-1: Using ep0 maxpacket: 8
[  125.965018][ T4294] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  125.979736][ T4294] usb 4-1: config 179 has no interface number 0
[  125.993816][ T4294] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  126.023803][ T4294] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  126.044195][ T4294] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  126.057825][ T4294] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  126.083504][ T4294] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  126.107043][ T4294] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  126.125255][ T4294] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.155552][ T5466] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  126.398402][ T5189] input: Generic X-Box pad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input14
[  126.612256][ T5466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  126.640406][ T5466] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  126.648653][ T5479] loop4: detected capacity change from 0 to 40427
[  126.656139][ T5484] sctp: [Deprecated]: syz.0.349 (pid 5484) Use of int in max_burst socket option deprecated.
[  126.656139][ T5484] Use struct sctp_assoc_value instead
[  126.686955][ T5479] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  126.700171][ T5479] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  126.710815][ T4262] Bluetooth: hci2: command 0x040f tx timeout
[  126.774852][ T5479] F2FS-fs (loop4): invalid crc value
[  126.845453][ T5479] F2FS-fs (loop4): Found nat_bits in checkpoint
[  126.859317][ T5188] usb 4-1: USB disconnect, device number 5
[  126.859373][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  126.859421][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  126.911207][ T5188] xpad 4-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  126.987924][ T5479] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  126.998362][ T5479] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  127.541129][ T4300] bond0 (unregistering): Released all slaves
[  127.626596][ T5496] loop5: detected capacity change from 0 to 40427
[  127.637475][ T5496] F2FS-fs (loop5): Invalid log blocks per segment (4278190089)
[  127.652425][ T5496] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  127.669165][ T5496] F2FS-fs (loop5): invalid crc value
[  127.714745][ T5496] F2FS-fs (loop5): Found nat_bits in checkpoint
[  127.764109][ T5326] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.812223][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  127.848753][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  127.855552][ T5496] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  127.867192][ T5326] 8021q: adding VLAN 0 to HW filter on device team0
[  127.878506][ T5496] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  127.901190][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  127.922145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  127.960782][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.968145][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.987039][ T4751] syz-executor: attempt to access beyond end of device
[  127.987039][ T4751] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  128.001805][ T5190] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  128.020339][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  128.099988][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  128.124366][ T5513] loop0: detected capacity change from 0 to 512
[  128.132325][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  128.137067][ T5503] loop4: detected capacity change from 0 to 32768
[  128.160352][   T46] bridge0: port 2(bridge_slave_1) entered blocking state
[  128.167522][   T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[  128.176271][ T5513] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  128.187003][ T5503] XFS (loop4): Mounting V5 Filesystem
[  128.194607][ T5513] EXT4-fs (loop0): warning: checktime reached, running e2fsck is recommended
[  128.202698][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  128.204159][ T5190] usb 4-1: Using ep0 maxpacket: 32
[  128.227477][ T5513] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  128.247854][ T5513] System zones: 0-2, 18-18, 34-34
[  128.287133][ T5513] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1086: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  128.315207][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  128.327460][ T5513] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.359: bg 0: block 121: padding at end of block bitmap is not set
[  128.353036][ T5503] XFS (loop4): Ending clean mount
[  128.353549][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  128.378088][ T5503] XFS (loop4): Quotacheck needed: Please wait.
[  128.379333][ T5513] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem
[  128.407146][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  128.413194][ T5513] EXT4-fs (loop0): 1 truncate cleaned up
[  128.429798][ T5513] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  128.438405][ T5503] XFS (loop4): Quotacheck: Done.
[  128.473507][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  128.500790][ T4261] XFS (loop4): Unmounting Filesystem
[  128.511027][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  128.530549][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  128.549361][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  128.581773][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  128.618011][ T5326] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  128.661595][ T5326] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  128.700006][ T5525] loop5: detected capacity change from 0 to 1024
[  128.721189][ T5525] EXT4-fs: Ignoring removed nomblk_io_submit option
[  128.728239][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  128.744810][ T5525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  128.771163][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  128.789920][ T4262] Bluetooth: hci2: command 0x0419 tx timeout
[  128.818946][ T5190] usb 4-1: unable to get BOS descriptor or descriptor too short
[  128.838933][ T5190] usb 4-1: unable to read config index 0 descriptor/start: -71
[  128.859554][ T5525] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  128.878528][ T5190] usb 4-1: can't read configurations, error -71
[  128.970243][ T4751] EXT4-fs (loop5): unmounting filesystem.
[  129.026189][ T4249] EXT4-fs (loop0): unmounting filesystem.
[  129.160941][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  129.175237][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  129.213231][ T5326] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.254329][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  129.282147][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  129.324480][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  129.336838][ T5541] loop0: detected capacity change from 0 to 256
[  129.352756][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  129.365123][ T5326] device veth0_vlan entered promiscuous mode
[  129.375072][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  129.385090][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  129.418343][ T5326] device veth1_vlan entered promiscuous mode
[  129.522590][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  129.548927][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  129.587818][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  129.617382][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  129.626012][ T5550] loop0: detected capacity change from 0 to 1024
[  129.639052][ T5550] EXT4-fs (loop0): Test dummy encryption mode enabled
[  129.647518][ T5326] device veth0_macvtap entered promiscuous mode
[  129.658077][ T5550] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  129.700373][ T5326] device veth1_macvtap entered promiscuous mode
[  129.727923][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  129.730103][ T5553] Bluetooth: hci0: too big key_count value 32017
[  129.750813][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  129.786682][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.813350][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.839758][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.850955][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.867258][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.884150][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.898572][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  129.911377][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  129.941317][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.948954][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  129.993455][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  130.013676][ T4249] EXT4-fs (loop0): unmounting filesystem.
[  130.037088][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.058823][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.079418][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.115942][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.148098][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.213580][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.240863][ T5326] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  130.266551][ T5326] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  130.294348][ T5326] batman_adv: batadv0: Interface activated: batadv_slave_1
[  130.305991][ T5559] loop3: detected capacity change from 0 to 8192
[  130.328659][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  130.337493][ T5559] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  130.345883][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  130.351356][ T5559] REISERFS (device loop3): found reiserfs format "3.5" with non-standard journal
[  130.369493][ T5559] REISERFS (device loop3): using ordered data mode
[  130.377926][ T5326] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  130.387152][ T5559] reiserfs: using flush barriers
[  130.390933][ T5326] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  130.402684][ T5326] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  130.412071][ T5559] REISERFS (device loop3): journal params: device loop3, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  130.437684][ T5326] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.453378][ T5559] REISERFS (device loop3): checking transaction log (loop3)
[  130.507007][ T5559] REISERFS (device loop3): Using r5 hash to sort names
[  130.539470][ T5559] REISERFS (device loop3): using 3.5.x disk format
[  130.569965][ T5559] REISERFS (device loop3): Created .reiserfs_priv - reserved for xattr storage.
[  130.589772][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.598086][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.626556][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  130.656667][ T4650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.674640][ T4650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.698095][ T5559] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3717, free_space(entry_count) 2
[  130.723963][   T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  130.738531][ T5559] REISERFS error (device loop3): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  130.751208][ T5559] REISERFS (device loop3): Remounting filesystem read-only
[  131.295582][ T5582] loop4: detected capacity change from 0 to 32768
[  131.322058][ T5582] XFS (loop4): Mounting V5 Filesystem
[  131.339809][ T5147] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  131.375679][ T5582] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  131.421222][ T5582] XFS (loop4): Starting recovery (logdev: internal)
[  131.457032][ T5582] XFS (loop4): Ending recovery (logdev: internal)
[  131.532510][ T5147] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  131.548916][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  131.576512][ T5147] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  131.596323][ T5147] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  131.630847][ T5147] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  131.640436][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.652000][ T5147] usb 1-1: config 0 descriptor??
[  131.659557][ T5586] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  131.694575][ T4261] XFS (loop4): Unmounting Filesystem
[  131.860784][ T5604] loop5: detected capacity change from 0 to 128
[  131.986156][ T5608] binfmt_misc: register: failed to install interpreter file ./file0
[  132.084079][ T5147] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd
[  132.093904][ T5147] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving
[  132.105933][ T5147] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  132.157793][ T5614] loop5: detected capacity change from 0 to 2048
[  132.174687][ T5614] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  132.183290][ T5614] UDF-fs: Scanning with blocksize 512 failed
[  132.196707][ T5614] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.263419][ T5614] syz.5.390: attempt to access beyond end of device
[  132.263419][ T5614] loop5: rw=0, sector=2052, nr_sectors = 2 limit=2048
[  132.278661][ T5614] Buffer I/O error on dev loop5, logical block 1026, async page read
[  132.322630][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.322630][   T46] loop5: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  132.336329][   T46] Buffer I/O error on dev loop5, logical block 1024, lost async page write
[  132.345615][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.345615][   T46] loop5: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  132.359474][   T46] Buffer I/O error on dev loop5, logical block 1024, lost async page write
[  132.368925][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.368925][   T46] loop5: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  132.382644][   T46] Buffer I/O error on dev loop5, logical block 1024, lost async page write
[  132.391371][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.391371][   T46] loop5: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  132.392451][ T5147] usb 1-1: USB disconnect, device number 6
[  132.405000][   T46] Buffer I/O error on dev loop5, logical block 1024, lost async page write
[  132.405122][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.405122][   T46] loop5: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  132.442788][   T46] Buffer I/O error on dev loop5, logical block 1025, lost async page write
[  132.453953][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.453953][   T46] loop5: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  132.467829][   T46] Buffer I/O error on dev loop5, logical block 1025, lost async page write
[  132.477395][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.477395][   T46] loop5: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  132.491076][   T46] Buffer I/O error on dev loop5, logical block 1025, lost async page write
[  132.512456][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.512456][   T46] loop5: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  132.531459][   T41] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.542446][   T46] Buffer I/O error on dev loop5, logical block 1025, lost async page write
[  132.555656][   T46] kworker/u4:3: attempt to access beyond end of device
[  132.555656][   T46] loop5: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  132.572930][   T46] Buffer I/O error on dev loop5, logical block 1026, lost async page write
[  133.112806][ T1274] ieee802154 phy0 wpan0: encryption failed: -22
[  133.119204][ T1274] ieee802154 phy1 wpan1: encryption failed: -22
[  133.361216][   T41] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.477935][   T41] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.519580][ T5626] loop0: detected capacity change from 0 to 1024
[  133.545590][   T41] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  133.664534][ T5626] hfsplus: xattr searching failed
[  133.691877][ T4260] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  133.705227][ T4260] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  133.716900][ T4260] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  133.728430][ T4260] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  133.739944][ T4260] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  133.747422][ T4260] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  134.303206][ T5629] chnl_net:caif_netlink_parms(): no params data found
[  134.511489][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.518776][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.543951][ T5629] device bridge_slave_0 entered promiscuous mode
[  134.603023][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.616027][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.661106][ T5629] device bridge_slave_1 entered promiscuous mode
[  134.737617][ T5652] loop3: detected capacity change from 0 to 40427
[  134.745971][ T5652] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x3ffff
[  134.765576][ T5652] F2FS-fs (loop3): invalid crc value
[  134.804113][ T5652] F2FS-fs (loop3): Found nat_bits in checkpoint
[  134.808310][ T5669] Invalid ELF header magic: != ELF
[  134.839218][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.861264][ T5665] loop5: detected capacity change from 0 to 8192
[  134.867765][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.924853][ T5652] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  134.986132][ T5629] team0: Port device team_slave_0 added
[  134.999836][ T5629] team0: Port device team_slave_1 added
[  135.111253][ T5672] loop0: detected capacity change from 0 to 8192
[  135.133183][ T5672] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  135.156565][ T5672] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  135.209432][ T5672] REISERFS (device loop0): using ordered data mode
[  135.248867][ T5672] reiserfs: using flush barriers
[  135.273381][ T5672] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  135.324085][ T5672] REISERFS (device loop0): checking transaction log (loop0)
[  135.373706][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0
[  135.386545][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.439735][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  135.491510][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1
[  135.498549][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  135.515715][ T5672] REISERFS (device loop0): Using tea hash to sort names
[  135.538686][ T5672] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  135.624924][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  135.829936][ T4260] Bluetooth: hci2: command 0x0409 tx timeout
[  135.894060][   T41] device hsr_slave_0 left promiscuous mode
[  135.914185][   T41] device hsr_slave_1 left promiscuous mode
[  135.939329][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.958151][   T41] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.987693][   T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.007735][   T41] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.042566][   T41] device bridge_slave_1 left promiscuous mode
[  136.063273][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[  136.088985][   T41] device bridge_slave_0 left promiscuous mode
[  136.108756][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[  136.197974][   T41] device veth1_macvtap left promiscuous mode
[  136.211081][   T41] device veth0_macvtap left promiscuous mode
[  136.217417][   T41] device veth1_vlan left promiscuous mode
[  136.228888][   T41] device veth0_vlan left promiscuous mode
[  136.292805][ T5684] loop4: detected capacity change from 0 to 40427
[  136.315492][ T5684] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x3ffff
[  136.334824][ T5684] F2FS-fs (loop4): invalid crc value
[  136.355715][ T5684] F2FS-fs (loop4): Found nat_bits in checkpoint
[  136.448744][ T5684] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  136.686365][ T5712] loop5: detected capacity change from 0 to 256
[  136.695083][ T5712] FAT-fs (loop5): bogus number of FAT sectors
[  136.707145][ T5712] FAT-fs (loop5): Can't find a valid FAT filesystem
[  136.809859][ T4330] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  136.999744][ T4330] usb 4-1: Using ep0 maxpacket: 8
[  137.010205][ T4330] usb 4-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  137.026409][ T4330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.047792][ T4330] usb 4-1: Product: syz
[  137.053094][ T4330] usb 4-1: Manufacturer: syz
[  137.061844][ T4330] usb 4-1: SerialNumber: syz
[  137.086277][ T4330] usb 4-1: config 0 descriptor??
[  137.099179][ T4330] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  137.269087][   T41] team0 (unregistering): Port device team_slave_1 removed
[  137.326762][   T41] team0 (unregistering): Port device team_slave_0 removed
[  137.388475][   T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  137.484124][   T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  137.585843][ T5729] netlink: 20 bytes leftover after parsing attributes in process `syz.4.430'.
[  137.909893][ T4260] Bluetooth: hci2: command 0x041b tx timeout
[  138.325283][ T4330] gspca_sonixj: reg_w1 err -71
[  138.380997][   T41] bond0 (unregistering): Released all slaves
[  138.389859][ T4330] sonixj: probe of 4-1:0.0 failed with error -71
[  138.408940][ T4330] usb 4-1: USB disconnect, device number 8
[  138.493859][ T5692] netlink: 40 bytes leftover after parsing attributes in process `syz.0.415'.
[  138.507672][ T5718] bridge0: port 3(vlan2) entered blocking state
[  138.523404][ T5718] bridge0: port 3(vlan2) entered disabled state
[  138.550067][ T5629] device hsr_slave_0 entered promiscuous mode
[  138.557582][ T5629] device hsr_slave_1 entered promiscuous mode
[  138.564745][ T5629] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  138.573303][ T5629] Cannot create hsr debugfs directory
[  138.866960][ T5147] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  138.930019][ T5743] loop4: detected capacity change from 0 to 2048
[  138.961351][ T5743] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  138.971442][ T5743] EXT4-fs (loop4): unmounting filesystem.
[  139.063497][ T5147] usb 1-1: Using ep0 maxpacket: 8
[  139.084966][ T5147] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  139.118611][ T5147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  139.135781][ T5147] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  139.148462][ T5147] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  139.158955][ T5147] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  139.172290][ T5152] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  139.180161][ T5147] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  139.190900][ T5147] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.362900][ T5629] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  139.374320][ T5629] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  139.384165][ T5152] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  139.395562][ T5152] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  139.405506][ T5152] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  139.419806][ T5147] usb 1-1: GET_CAPABILITIES returned 0
[  139.425336][ T5147] usbtmc 1-1:16.0: can't read capabilities
[  139.432726][ T5152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.447089][ T5629] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  139.455520][ T5741] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  139.475494][ T5629] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  139.538211][ T5765] loop3: detected capacity change from 0 to 128
[  139.551164][ T5765] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  139.574041][ T5765] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  139.579887][ T4330] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  139.587099][ T5765] ext2 filesystem being mounted at /119/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.597114][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0
[  139.621216][ T5629] 8021q: adding VLAN 0 to HW filter on device team0
[  139.630836][ T5190] usb 1-1: USB disconnect, device number 7
[  139.645167][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  139.660385][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  139.669961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  139.679321][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  139.688519][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.695733][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  139.702967][ T5188] usb 6-1: USB disconnect, device number 6
[  139.704570][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  139.719006][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  139.728089][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.735277][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  139.744876][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  139.754105][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  139.763032][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  139.773517][ T4330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.774044][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  139.792148][ T4330] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  139.804307][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  139.815284][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  139.815719][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.825095][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  139.839453][ T4330] usb 5-1: config 0 descriptor??
[  139.857260][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  139.860458][ T4250] EXT4-fs (loop3): unmounting filesystem.
[  139.866501][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  139.886164][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  139.895382][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  139.904309][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  139.916933][ T5629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  139.989790][ T4260] Bluetooth: hci2: command 0x040f tx timeout
[  140.056883][ T4330] usbhid 5-1:0.0: can't add hid device: -71
[  140.064088][ T4330] usbhid: probe of 5-1:0.0 failed with error -71
[  140.076385][ T4330] usb 5-1: USB disconnect, device number 7
[  140.094516][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  140.102316][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  140.117912][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0
[  140.135203][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  140.144716][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  140.188795][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  140.198503][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  140.210085][ T5629] device veth0_vlan entered promiscuous mode
[  140.219175][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  140.227909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  140.241289][ T5629] device veth1_vlan entered promiscuous mode
[  140.267174][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  140.275987][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  140.285971][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  140.310866][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  140.323997][ T5629] device veth0_macvtap entered promiscuous mode
[  140.342084][ T5629] device veth1_macvtap entered promiscuous mode
[  140.364115][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.374722][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.385655][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.396452][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.407695][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.423906][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.434221][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  140.450922][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.471226][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0
[  140.486802][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.495672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  140.510752][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.519592][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.545634][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.561893][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.573064][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.587927][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.598395][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.614516][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.625727][ T5629] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.644646][ T4330] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  140.660128][ T5629] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.671810][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.690106][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.702270][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.721823][ T5629] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.738083][ T5629] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.747864][ T5629] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.761303][ T5629] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.840019][ T4330] usb 5-1: Using ep0 maxpacket: 32
[  140.859108][ T4330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  140.886950][ T4330] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice= 0.40
[  140.898107][ T4330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.907626][ T4300] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.921584][ T4300] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.935201][ T4330] usb 5-1: config 0 descriptor??
[  140.951963][ T4330] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  140.974840][ T4650] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  140.983107][ T4330] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  141.020684][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.025490][ T5793] input: syz1 as /devices/virtual/input/input16
[  141.048164][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.073426][ T4300] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.356095][ T5190] usb 5-1: USB disconnect, device number 8
[  141.370423][ T5190] ldusb 5-1:0.0: LD USB Device #0 now disconnected
[  141.549834][ T5188] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  141.588177][ T5811] loop0: detected capacity change from 0 to 256
[  141.596462][ T5811] exfat: Deprecated parameter 'namecase'
[  141.607299][ T5811] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  141.739926][ T5188] usb 4-1: Using ep0 maxpacket: 32
[  141.753626][ T5188] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  141.762676][ T5188] usb 4-1: config 0 has no interface number 0
[  141.768933][ T5188] usb 4-1: config 0 interface 184 has no altsetting 0
[  141.777826][ T5188] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  141.787521][ T5188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.795684][ T5188] usb 4-1: Product: syz
[  141.800265][ T5188] usb 4-1: Manufacturer: syz
[  141.804857][ T5188] usb 4-1: SerialNumber: syz
[  141.811680][ T5188] usb 4-1: config 0 descriptor??
[  141.819165][ T5188] smsc75xx v1.0.0
[  141.909930][ T5147] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.101752][ T5147] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  142.114519][ T5147] usb 1-1: config 1 has no interface number 0
[  142.126207][ T5147] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  142.142868][ T5147] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  142.152167][ T5147] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 37010, setting to 1024
[  142.163291][ T5147] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  142.177282][ T5147] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  142.186455][ T5147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.194497][ T5147] usb 1-1: Product: syz
[  142.198672][ T5147] usb 1-1: Manufacturer: syz
[  142.204193][ T5147] usb 1-1: SerialNumber: syz
[  142.231975][ T5818] loop5: detected capacity change from 0 to 4096
[  142.412791][ T5811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  142.435777][ T5188] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  142.449968][ T5152] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  142.459759][ T5188] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  142.645615][ T5152] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  142.656176][ T5152] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  142.668669][ T5152] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  142.678852][ T5152] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.687156][ T5152] usb 5-1: Product: syz
[  142.692336][ T5152] usb 5-1: Manufacturer: syz
[  142.696979][ T5152] usb 5-1: SerialNumber: syz
[  142.756832][ T5820] loop5: detected capacity change from 0 to 40427
[  142.764734][ T5820] F2FS-fs (loop5): Small segment_count (9 < 1 * 24)
[  142.771515][ T5820] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  142.784307][ T5820] F2FS-fs (loop5): Found nat_bits in checkpoint
[  142.831124][ T5820] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  142.838335][ T5820] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  142.858502][   T27] kauditd_printk_skb: 1 callbacks suppressed
[  142.858518][   T27] audit: type=1800 audit(1740159826.486:27): pid=5820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.466" name="file2" dev="loop5" ino=14 res=0 errno=0
[  142.886065][ T5188] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  142.900257][ T5188] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  142.910519][ T5188] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  142.920553][ T5188] smsc75xx: probe of 4-1:0.184 failed with error -71
[  142.926488][ T5152] usb 5-1: 0:2 : does not exist
[  142.930142][ T5188] usb 4-1: USB disconnect, device number 9
[  142.941363][ T5152] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[  142.960245][ T5152] usb 5-1: USB disconnect, device number 9
[  143.011165][ T4751] bio_check_eod: 3 callbacks suppressed
[  143.011181][ T4751] syz-executor: attempt to access beyond end of device
[  143.011181][ T4751] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  143.034315][ T5811] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  143.045184][ T5147] cdc_ncm 1-1:1.1: bind() failure
[  143.254326][ T5152] usb 1-1: USB disconnect, device number 8
[  143.360284][ T5827] loop5: detected capacity change from 0 to 1024
[  143.454925][ T5827] hfsplus: trying to free free bnode 0(1)
[  143.627304][ T4650] hfsplus: b-tree write err: -5, ino 4
[  143.666153][ T5833] loop4: detected capacity change from 0 to 128
[  143.719543][ T5837] loop3: detected capacity change from 0 to 8
[  143.756320][ T5837] SQUASHFS error: lzo decompression failed, data probably corrupt
[  143.770472][ T5837] SQUASHFS error: Failed to read block 0x91: -5
[  143.776772][ T5837] SQUASHFS error: Unable to read metadata cache entry [8f]
[  143.794968][ T5837] SQUASHFS error: Unable to read inode 0x11f
[  144.169538][ T4650] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  144.928607][ T5854] 
[  144.930992][ T5854] =====================================================
[  144.937929][ T5854] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[  144.945399][ T5854] 6.1.129-syzkaller #0 Not tainted
[  144.950513][ T5854] -----------------------------------------------------
[  144.957488][ T5854] syz.5.479/5854 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[  144.965048][ T5854] ffffffff8d00a058 (tasklist_lock){.+.+}-{2:2}, at: send_sigurg+0xea/0x3b0
[  144.973705][ T5854] 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  144.973705][ T5854] and this task is already holding:
[  144.982583][ T5854] ffff88807e023a30 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x3b0
[  144.991800][ T5854] which would create a new lock dependency:
[  144.997750][ T5854]  (&f->f_owner.lock){....}-{2:2} -> (tasklist_lock){.+.+}-{2:2}
[  145.005522][ T5854] 
[  145.005522][ T5854] but this new dependency connects a HARDIRQ-irq-safe lock:
[  145.015079][ T5854]  (&dev->event_lock#2){-.-.}-{2:2}
[  145.015121][ T5854] 
[  145.015121][ T5854] ... which became HARDIRQ-irq-safe at:
[  145.028053][ T5854]   lock_acquire+0x1f8/0x5a0
[  145.032676][ T5854]   _raw_spin_lock_irqsave+0xd1/0x120
[  145.038059][ T5854]   input_event+0x8d/0xd0
[  145.042410][ T5854]   psmouse_report_standard_packet+0x50/0x200
[  145.048538][ T5854]   psmouse_process_byte+0x45b/0x640
[  145.053828][ T5854]   psmouse_handle_byte+0x46/0x4b0
[  145.058928][ T5854]   psmouse_interrupt+0x697/0x10a0
[  145.064026][ T5854]   serio_interrupt+0x88/0x130
[  145.068780][ T5854]   i8042_interrupt+0x357/0x750
[  145.073622][ T5854]   __handle_irq_event_percpu+0x2a8/0xb20
[  145.079354][ T5854]   handle_irq_event+0x85/0x1e0
[  145.084199][ T5854]   handle_edge_irq+0x245/0xbf0
[  145.089043][ T5854]   __common_interrupt+0xd7/0x1f0
[  145.094064][ T5854]   common_interrupt+0xae/0xd0
[  145.098818][ T5854]   asm_common_interrupt+0x22/0x40
[  145.103935][ T5854]   _raw_spin_unlock_irqrestore+0xd4/0x130
[  145.109729][ T5854]   i8042_aux_write+0x112/0x190
[  145.114576][ T5854]   ps2_do_sendbyte+0x20a/0x720
[  145.119421][ T5854]   ps2_sendbyte+0x5c/0x120
[  145.123916][ T5854]   cypress_send_ext_cmd+0x21d/0x900
[  145.129190][ T5854]   cypress_detect+0x8f/0x220
[  145.133862][ T5854]   psmouse_extensions+0x68e/0xe30
[  145.138975][ T5854]   psmouse_switch_protocol+0xdf/0x650
[  145.144430][ T5854]   psmouse_connect+0x903/0x14c0
[  145.149352][ T5854]   serio_driver_probe+0x74/0x90
[  145.154279][ T5854]   really_probe+0x2ab/0xcb0
[  145.158855][ T5854]   __driver_probe_device+0x1a2/0x3d0
[  145.164214][ T5854]   driver_probe_device+0x50/0x420
[  145.169401][ T5854]   __driver_attach+0x458/0x6f0
[  145.174235][ T5854]   bus_for_each_dev+0x17c/0x1f0
[  145.179251][ T5854]   serio_handle_event+0x56a/0x8f0
[  145.184790][ T5854]   process_one_work+0x917/0x1260
[  145.190170][ T5854]   worker_thread+0xa47/0x1200
[  145.195099][ T5854]   kthread+0x28d/0x320
[  145.199255][ T5854]   ret_from_fork+0x1f/0x30
[  145.203753][ T5854] 
[  145.203753][ T5854] to a HARDIRQ-irq-unsafe lock:
[  145.210843][ T5854]  (tasklist_lock){.+.+}-{2:2}
[  145.210867][ T5854] 
[  145.210867][ T5854] ... which became HARDIRQ-irq-unsafe at:
[  145.223474][ T5854] ...
[  145.223481][ T5854]   lock_acquire+0x1f8/0x5a0
[  145.230632][ T5854]   _raw_read_lock+0x32/0x40
[  145.235210][ T5854]   do_wait+0x2c6/0xb80
[  145.239362][ T5854]   kernel_wait+0xe5/0x230
[  145.243775][ T5854]   call_usermodehelper_exec_work+0xb5/0x220
[  145.249748][ T5854]   process_one_work+0x917/0x1260
[  145.254759][ T5854]   worker_thread+0xa47/0x1200
[  145.259508][ T5854]   kthread+0x28d/0x320
[  145.263653][ T5854]   ret_from_fork+0x1f/0x30
[  145.268147][ T5854] 
[  145.268147][ T5854] other info that might help us debug this:
[  145.268147][ T5854] 
[  145.278372][ T5854] Chain exists of:
[  145.278372][ T5854]   &dev->event_lock#2 --> &f->f_owner.lock --> tasklist_lock
[  145.278372][ T5854] 
[  145.291582][ T5854]  Possible interrupt unsafe locking scenario:
[  145.291582][ T5854] 
[  145.299888][ T5854]        CPU0                    CPU1
[  145.305323][ T5854]        ----                    ----
[  145.310670][ T5854]   lock(tasklist_lock);
[  145.314914][ T5854]                                local_irq_disable();
[  145.321661][ T5854]                                lock(&dev->event_lock#2);
[  145.328861][ T5854]                                lock(&f->f_owner.lock);
[  145.335884][ T5854]   <Interrupt>
[  145.339324][ T5854]     lock(&dev->event_lock#2);
[  145.344189][ T5854] 
[  145.344189][ T5854]  *** DEADLOCK ***
[  145.344189][ T5854] 
[  145.352318][ T5854] 2 locks held by syz.5.479/5854:
[  145.357324][ T5854]  #0: ffff8880315cf3f0 (sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sendmsg+0x1e/0x40
[  145.366553][ T5854]  #1: ffff88807e023a30 (&f->f_owner.lock){....}-{2:2}, at: send_sigurg+0x25/0x3b0
[  145.375854][ T5854] 
[  145.375854][ T5854] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[  145.386241][ T5854]    -> (&dev->event_lock#2){-.-.}-{2:2} {
[  145.392054][ T5854]       IN-HARDIRQ-W at:
[  145.396278][ T5854]                           lock_acquire+0x1f8/0x5a0
[  145.402948][ T5854]                           _raw_spin_lock_irqsave+0xd1/0x120
[  145.410400][ T5854]                           input_event+0x8d/0xd0
[  145.416815][ T5854]                           psmouse_report_standard_packet+0x50/0x200
[  145.424959][ T5854]                           psmouse_process_byte+0x45b/0x640
[  145.432322][ T5854]                           psmouse_handle_byte+0x46/0x4b0
[  145.439503][ T5854]                           psmouse_interrupt+0x697/0x10a0
[  145.446772][ T5854]                           serio_interrupt+0x88/0x130
[  145.453614][ T5854]                           i8042_interrupt+0x357/0x750
[  145.460544][ T5854]                           __handle_irq_event_percpu+0x2a8/0xb20
[  145.468339][ T5854]                           handle_irq_event+0x85/0x1e0
[  145.475268][ T5854]                           handle_edge_irq+0x245/0xbf0
[  145.482282][ T5854]                           __common_interrupt+0xd7/0x1f0
[  145.489428][ T5854]                           common_interrupt+0xae/0xd0
[  145.496261][ T5854]                           asm_common_interrupt+0x22/0x40
[  145.503446][ T5854]                           _raw_spin_unlock_irqrestore+0xd4/0x130
[  145.511322][ T5854]                           i8042_aux_write+0x112/0x190
[  145.518256][ T5854]                           ps2_do_sendbyte+0x20a/0x720
[  145.525178][ T5854]                           ps2_sendbyte+0x5c/0x120
[  145.531758][ T5854]                           cypress_send_ext_cmd+0x21d/0x900
[  145.539133][ T5854]                           cypress_detect+0x8f/0x220
[  145.545882][ T5854]                           psmouse_extensions+0x68e/0xe30
[  145.553067][ T5854]                           psmouse_switch_protocol+0xdf/0x650
[  145.560690][ T5854]                           psmouse_connect+0x903/0x14c0
[  145.567699][ T5854]                           serio_driver_probe+0x74/0x90
[  145.574709][ T5854]                           really_probe+0x2ab/0xcb0
[  145.581376][ T5854]                           __driver_probe_device+0x1a2/0x3d0
[  145.588814][ T5854]                           driver_probe_device+0x50/0x420
[  145.595994][ T5854]                           __driver_attach+0x458/0x6f0
[  145.602912][ T5854]                           bus_for_each_dev+0x17c/0x1f0
[  145.609923][ T5854]                           serio_handle_event+0x56a/0x8f0
[  145.617109][ T5854]                           process_one_work+0x917/0x1260
[  145.624210][ T5854]                           worker_thread+0xa47/0x1200
[  145.631056][ T5854]                           kthread+0x28d/0x320
[  145.637283][ T5854]                           ret_from_fork+0x1f/0x30
[  145.643865][ T5854]       IN-SOFTIRQ-W at:
[  145.648096][ T5854]                           lock_acquire+0x1f8/0x5a0
[  145.654762][ T5854]                           _raw_spin_lock_irqsave+0xd1/0x120
[  145.662203][ T5854]                           input_event+0x8d/0xd0
[  145.668700][ T5854]                           xpad360_process_packet+0x20a/0xb10
[  145.676234][ T5854]                           xpad_irq_in+0x1481/0x2520
[  145.682984][ T5854]                           __usb_hcd_giveback_urb+0x371/0x530
[  145.690515][ T5854]                           dummy_timer+0x8dc/0x32b0
[  145.697181][ T5854]                           __hrtimer_run_queues+0x5e5/0xe50
[  145.704541][ T5854]                           hrtimer_run_softirq+0x196/0x2c0
[  145.711816][ T5854]                           handle_softirqs+0x2ee/0xa40
[  145.718737][ T5854]                           __irq_exit_rcu+0x157/0x240
[  145.725570][ T5854]                           irq_exit_rcu+0x5/0x20
[  145.731982][ T5854]                           sysvec_apic_timer_interrupt+0xa0/0xc0
[  145.739774][ T5854]                           asm_sysvec_apic_timer_interrupt+0x16/0x20
[  145.747925][ T5854]                           unwind_next_frame+0x1a46/0x2220
[  145.755196][ T5854]                           arch_stack_walk+0x10d/0x140
[  145.762119][ T5854]                           stack_trace_save+0x113/0x1c0
[  145.769138][ T5854]                           kasan_set_track+0x4b/0x70
[  145.775884][ T5854]                           kasan_save_free_info+0x27/0x40
[  145.783069][ T5854]                           ____kasan_slab_free+0xd6/0x120
[  145.790271][ T5854]                           __kmem_cache_free+0x25c/0x3c0
[  145.797433][ T5854]                           raw_ioctl+0x2325/0x3e50
[  145.804018][ T5854]                           __se_sys_ioctl+0xf1/0x160
[  145.810768][ T5854]                           do_syscall_64+0x3b/0xb0
[  145.817349][ T5854]                           entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  145.825412][ T5854]       INITIAL USE at:
[  145.829554][ T5854]                          lock_acquire+0x1f8/0x5a0
[  145.836186][ T5854]                          _raw_spin_lock_irqsave+0xd1/0x120
[  145.843606][ T5854]                          input_inject_event+0xc1/0x330
[  145.850649][ T5854]                          led_trigger_event+0x130/0x210
[  145.857695][ T5854]                          kbd_led_trigger_activate+0xb9/0x100
[  145.865247][ T5854]                          led_trigger_set+0x55a/0x970
[  145.872182][ T5854]                          led_trigger_set_default+0x1c2/0x200
[  145.879720][ T5854]                          led_classdev_register_ext+0x5ee/0x800
[  145.887429][ T5854]                          input_leds_connect+0x48f/0x630
[  145.894546][ T5854]                          input_register_device+0xd65/0x1250
[  145.901994][ T5854]                          atkbd_connect+0x79d/0x9e0
[  145.908657][ T5854]                          serio_driver_probe+0x74/0x90
[  145.915613][ T5854]                          really_probe+0x2ab/0xcb0
[  145.922227][ T5854]                          __driver_probe_device+0x1a2/0x3d0
[  145.929597][ T5854]                          driver_probe_device+0x50/0x420
[  145.936698][ T5854]                          __driver_attach+0x458/0x6f0
[  145.943535][ T5854]                          bus_for_each_dev+0x17c/0x1f0
[  145.950464][ T5854]                          serio_handle_event+0x56a/0x8f0
[  145.957650][ T5854]                          process_one_work+0x917/0x1260
[  145.964662][ T5854]                          worker_thread+0xa47/0x1200
[  145.971414][ T5854]                          kthread+0x28d/0x320
[  145.977562][ T5854]                          ret_from_fork+0x1f/0x30
[  145.984072][ T5854]     }
[  145.986823][ T5854]     ... key      at: [<ffffffff9777f8e0>] input_allocate_device.__key.5+0x0/0x20
[  145.996104][ T5854]   -> (&client->buffer_lock){....}-{2:2} {
[  146.002177][ T5854]      INITIAL USE at:
[  146.006243][ T5854]                        lock_acquire+0x1f8/0x5a0
[  146.012652][ T5854]                        _raw_spin_lock+0x2a/0x40
[  146.019053][ T5854]                        evdev_pass_values+0xee/0xad0
[  146.025805][ T5854]                        evdev_events+0x1be/0x2f0
[  146.032205][ T5854]                        input_pass_values+0x8e0/0x12a0
[  146.039132][ T5854]                        input_event_dispose+0x366/0x650
[  146.046144][ T5854]                        input_handle_event+0x97d/0xb00
[  146.053071][ T5854]                        input_inject_event+0x224/0x330
[  146.059995][ T5854]                        evdev_write+0x668/0x7c0
[  146.066670][ T5854]                        vfs_write+0x2d9/0xbc0
[  146.072810][ T5854]                        ksys_write+0x19c/0x2c0
[  146.079039][ T5854]                        do_syscall_64+0x3b/0xb0
[  146.085368][ T5854]                        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.093159][ T5854]    }
[  146.095815][ T5854]    ... key      at: [<ffffffff9777fba0>] evdev_open.__key.30+0x0/0x20
[  146.104139][ T5854]    ... acquired at:
[  146.108097][ T5854]    lock_acquire+0x1f8/0x5a0
[  146.112767][ T5854]    _raw_spin_lock+0x2a/0x40
[  146.117427][ T5854]    evdev_pass_values+0xee/0xad0
[  146.122442][ T5854]    evdev_events+0x1be/0x2f0
[  146.127106][ T5854]    input_pass_values+0x8e0/0x12a0
[  146.132287][ T5854]    input_event_dispose+0x366/0x650
[  146.137565][ T5854]    input_handle_event+0x97d/0xb00
[  146.142754][ T5854]    input_inject_event+0x224/0x330
[  146.147943][ T5854]    evdev_write+0x668/0x7c0
[  146.152519][ T5854]    vfs_write+0x2d9/0xbc0
[  146.156919][ T5854]    ksys_write+0x19c/0x2c0
[  146.161410][ T5854]    do_syscall_64+0x3b/0xb0
[  146.165993][ T5854]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.172052][ T5854] 
[  146.174361][ T5854]  -> (&new->fa_lock){....}-{2:2} {
[  146.179563][ T5854]     INITIAL USE at:
[  146.183528][ T5854]                      lock_acquire+0x1f8/0x5a0
[  146.189763][ T5854]                      _raw_write_lock_irq+0xcf/0x110
[  146.196510][ T5854]                      fasync_remove_entry+0xfb/0x1d0
[  146.203259][ T5854]                      sock_fasync+0x86/0xf0
[  146.209226][ T5854]                      __fput+0x75e/0x8d0
[  146.214938][ T5854]                      task_work_run+0x246/0x300
[  146.221255][ T5854]                      exit_to_user_mode_loop+0xde/0x100
[  146.228263][ T5854]                      exit_to_user_mode_prepare+0xb1/0x140
[  146.235536][ T5854]                      syscall_exit_to_user_mode+0x60/0x270
[  146.242817][ T5854]                      do_syscall_64+0x47/0xb0
[  146.248963][ T5854]                      entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.256583][ T5854]     INITIAL READ USE at:
[  146.260988][ T5854]                           lock_acquire+0x1f8/0x5a0
[  146.267655][ T5854]                           _raw_read_lock_irqsave+0xd9/0x120
[  146.275104][ T5854]                           kill_fasync+0x196/0x4d0
[  146.281685][ T5854]                           evdev_pass_values+0x586/0xad0
[  146.288784][ T5854]                           evdev_events+0x1be/0x2f0
[  146.295447][ T5854]                           input_pass_values+0x8e0/0x12a0
[  146.302630][ T5854]                           input_event_dispose+0x366/0x650
[  146.309903][ T5854]                           input_handle_event+0x97d/0xb00
[  146.317089][ T5854]                           input_inject_event+0x224/0x330
[  146.324277][ T5854]                           evdev_write+0x668/0x7c0
[  146.330854][ T5854]                           vfs_write+0x2d9/0xbc0
[  146.337264][ T5854]                           ksys_write+0x19c/0x2c0
[  146.343753][ T5854]                           do_syscall_64+0x3b/0xb0
[  146.350423][ T5854]                           entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.358475][ T5854]   }
[  146.361045][ T5854]   ... key      at: [<ffffffff97487920>] fasync_insert_entry.__key+0x0/0x20
[  146.369796][ T5854]   ... acquired at:
[  146.373677][ T5854]    lock_acquire+0x1f8/0x5a0
[  146.378347][ T5854]    _raw_read_lock_irqsave+0xd9/0x120
[  146.383794][ T5854]    kill_fasync+0x196/0x4d0
[  146.388373][ T5854]    evdev_pass_values+0x586/0xad0
[  146.393473][ T5854]    evdev_events+0x1be/0x2f0
[  146.398140][ T5854]    input_pass_values+0x8e0/0x12a0
[  146.403330][ T5854]    input_event_dispose+0x366/0x650
[  146.408611][ T5854]    input_handle_event+0x97d/0xb00
[  146.413816][ T5854]    input_inject_event+0x224/0x330
[  146.419027][ T5854]    evdev_write+0x668/0x7c0
[  146.423625][ T5854]    vfs_write+0x2d9/0xbc0
[  146.428041][ T5854]    ksys_write+0x19c/0x2c0
[  146.432534][ T5854]    do_syscall_64+0x3b/0xb0
[  146.437118][ T5854]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.443172][ T5854] 
[  146.445478][ T5854] -> (&f->f_owner.lock){....}-{2:2} {
[  146.450856][ T5854]    INITIAL USE at:
[  146.454769][ T5854]                    lock_acquire+0x1f8/0x5a0
[  146.460829][ T5854]                    _raw_write_lock_irq+0xcf/0x110
[  146.467405][ T5854]                    __f_setown+0x38/0x350
[  146.473197][ T5854]                    generic_setlease+0xf3f/0x1440
[  146.479690][ T5854]                    fcntl_setlease+0x341/0x3f0
[  146.485928][ T5854]                    do_fcntl+0x10a/0x1500
[  146.491727][ T5854]                    __se_sys_fcntl+0xd5/0x1b0
[  146.497876][ T5854]                    do_syscall_64+0x3b/0xb0
[  146.503847][ T5854]                    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.511385][ T5854]    INITIAL READ USE at:
[  146.515698][ T5854]                         lock_acquire+0x1f8/0x5a0
[  146.522193][ T5854]                         _raw_read_lock_irqsave+0xd9/0x120
[  146.529463][ T5854]                         send_sigio+0x2f/0x360
[  146.535704][ T5854]                         kill_fasync+0x232/0x4d0
[  146.542129][ T5854]                         evdev_pass_values+0x586/0xad0
[  146.549056][ T5854]                         evdev_events+0x1be/0x2f0
[  146.555561][ T5854]                         input_pass_values+0x8e0/0x12a0
[  146.562569][ T5854]                         input_event_dispose+0x366/0x650
[  146.569670][ T5854]                         input_handle_event+0x97d/0xb00
[  146.576684][ T5854]                         input_inject_event+0x224/0x330
[  146.583699][ T5854]                         evdev_write+0x668/0x7c0
[  146.590105][ T5854]                         vfs_write+0x2d9/0xbc0
[  146.596332][ T5854]                         ksys_write+0x19c/0x2c0
[  146.602652][ T5854]                         do_syscall_64+0x3b/0xb0
[  146.609060][ T5854]                         entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.616944][ T5854]  }
[  146.619440][ T5854]  ... key      at: [<ffffffff97486ca0>] __alloc_file.__key+0x0/0x10
[  146.627511][ T5854]  ... acquired at:
[  146.631311][ T5854]    lock_acquire+0x1f8/0x5a0
[  146.635994][ T5854]    _raw_read_lock_irqsave+0xd9/0x120
[  146.641457][ T5854]    send_sigio+0x2f/0x360
[  146.645861][ T5854]    kill_fasync+0x232/0x4d0
[  146.650437][ T5854]    evdev_pass_values+0x586/0xad0
[  146.655547][ T5854]    evdev_events+0x1be/0x2f0
[  146.660212][ T5854]    input_pass_values+0x8e0/0x12a0
[  146.665401][ T5854]    input_event_dispose+0x366/0x650
[  146.670785][ T5854]    input_handle_event+0x97d/0xb00
[  146.675977][ T5854]    input_inject_event+0x224/0x330
[  146.681165][ T5854]    evdev_write+0x668/0x7c0
[  146.685773][ T5854]    vfs_write+0x2d9/0xbc0
[  146.690205][ T5854]    ksys_write+0x19c/0x2c0
[  146.694703][ T5854]    do_syscall_64+0x3b/0xb0
[  146.699290][ T5854]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  146.705347][ T5854] 
[  146.707657][ T5854] 
[  146.707657][ T5854] the dependencies between the lock to be acquired
[  146.707665][ T5854]  and HARDIRQ-irq-unsafe lock:
[  146.721208][ T5854] -> (tasklist_lock){.+.+}-{2:2} {
[  146.726355][ T5854]    HARDIRQ-ON-R at:
[  146.730335][ T5854]                     lock_acquire+0x1f8/0x5a0
[  146.736509][ T5854]                     _raw_read_lock+0x32/0x40
[  146.742673][ T5854]                     do_wait+0x2c6/0xb80
[  146.748392][ T5854]                     kernel_wait+0xe5/0x230
[  146.754386][ T5854]                     call_usermodehelper_exec_work+0xb5/0x220
[  146.761929][ T5854]                     process_one_work+0x917/0x1260
[  146.768509][ T5854]                     worker_thread+0xa47/0x1200
[  146.774831][ T5854]                     kthread+0x28d/0x320
[  146.780543][ T5854]                     ret_from_fork+0x1f/0x30
[  146.786689][ T5854]    SOFTIRQ-ON-R at:
[  146.790656][ T5854]                     lock_acquire+0x1f8/0x5a0
[  146.796811][ T5854]                     _raw_read_lock+0x32/0x40
[  146.802953][ T5854]                     do_wait+0x2c6/0xb80
[  146.808696][ T5854]                     kernel_wait+0xe5/0x230
[  146.814695][ T5854]                     call_usermodehelper_exec_work+0xb5/0x220
[  146.822246][ T5854]                     process_one_work+0x917/0x1260
[  146.828840][ T5854]                     worker_thread+0xa47/0x1200
[  146.835182][ T5854]                     kthread+0x28d/0x320
[  146.841168][ T5854]                     ret_from_fork+0x1f/0x30
[  146.847256][ T5854]    INITIAL USE at:
[  146.851142][ T5854]                    lock_acquire+0x1f8/0x5a0
[  146.857201][ T5854]                    _raw_write_lock_irq+0xcf/0x110
[  146.863783][ T5854]                    copy_process+0x24f6/0x40a0
[  146.870012][ T5854]                    kernel_clone+0x222/0x920
[  146.876067][ T5854]                    user_mode_thread+0x140/0x1b0
[  146.882473][ T5854]                    rest_init+0x23/0x300
[  146.888180][ T5854]                    start_kernel+0x0/0x53f
[  146.894069][ T5854]                    start_kernel+0x496/0x53f
[  146.900125][ T5854]                    secondary_startup_64_no_verify+0xcf/0xdb
[  146.907572][ T5854]    INITIAL READ USE at:
[  146.911896][ T5854]                         lock_acquire+0x1f8/0x5a0
[  146.918392][ T5854]                         _raw_read_lock+0x32/0x40
[  146.924880][ T5854]                         do_wait+0x2c6/0xb80
[  146.930937][ T5854]                         kernel_wait+0xe5/0x230
[  146.937288][ T5854]                         call_usermodehelper_exec_work+0xb5/0x220
[  146.945174][ T5854]                         process_one_work+0x917/0x1260
[  146.952104][ T5854]                         worker_thread+0xa47/0x1200
[  146.958768][ T5854]                         kthread+0x28d/0x320
[  146.964823][ T5854]                         ret_from_fork+0x1f/0x30
[  146.971233][ T5854]  }
[  146.973717][ T5854]  ... key      at: [<ffffffff8d00a058>] tasklist_lock+0x18/0x40
[  146.981441][ T5854]  ... acquired at:
[  146.985229][ T5854]    lock_acquire+0x1f8/0x5a0
[  146.989900][ T5854]    _raw_read_lock+0x32/0x40
[  146.994561][ T5854]    send_sigurg+0xea/0x3b0
[  146.999048][ T5854]    sk_send_sigurg+0x6a/0xb0
[  147.003718][ T5854]    tcp_check_urg+0x207/0x740
[  147.008467][ T5854]    tcp_urg+0x154/0x440
[  147.012712][ T5854]    tcp_rcv_established+0xe67/0x1f10
[  147.018074][ T5854]    tcp_v6_do_rcv+0x573/0x12b0
[  147.022917][ T5854]    __release_sock+0x198/0x4b0
[  147.027762][ T5854]    release_sock+0x5d/0x1c0
[  147.032337][ T5854]    tcp_sendmsg+0x36/0x40
[  147.036744][ T5854]    __sys_sendto+0x480/0x600
[  147.041407][ T5854]    __x64_sys_sendto+0xda/0xf0
[  147.046258][ T5854]    do_syscall_64+0x3b/0xb0
[  147.050841][ T5854]    entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.056895][ T5854] 
[  147.059205][ T5854] 
[  147.059205][ T5854] stack backtrace:
[  147.065087][ T5854] CPU: 1 PID: 5854 Comm: syz.5.479 Not tainted 6.1.129-syzkaller #0
[  147.073054][ T5854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  147.083114][ T5854] Call Trace:
[  147.086396][ T5854]  <TASK>
[  147.089318][ T5854]  dump_stack_lvl+0x1e3/0x2cb
[  147.093992][ T5854]  ? nf_tcp_handle_invalid+0x647/0x647
[  147.099456][ T5854]  ? panic+0x764/0x764
[  147.103518][ T5854]  ? print_shortest_lock_dependencies+0xee/0x150
[  147.109841][ T5854]  validate_chain+0x4d16/0x5950
[  147.114703][ T5854]  ? reacquire_held_locks+0x660/0x660
[  147.120062][ T5854]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  147.126043][ T5854]  ? __lock_acquire+0x125b/0x1f80
[  147.131070][ T5854]  ? mark_lock+0x9a/0x340
[  147.135476][ T5854]  __lock_acquire+0x125b/0x1f80
[  147.140332][ T5854]  lock_acquire+0x1f8/0x5a0
[  147.144826][ T5854]  ? send_sigurg+0xea/0x3b0
[  147.149331][ T5854]  ? read_lock_is_recursive+0x10/0x10
[  147.154696][ T5854]  ? _raw_read_lock_irqsave+0xac/0x120
[  147.160148][ T5854]  ? do_raw_read_lock+0x38/0x80
[  147.164990][ T5854]  ? _raw_read_lock_irqsave+0xe5/0x120
[  147.170445][ T5854]  ? _raw_read_lock+0x40/0x40
[  147.175112][ T5854]  _raw_read_lock+0x32/0x40
[  147.179603][ T5854]  ? send_sigurg+0xea/0x3b0
[  147.184096][ T5854]  send_sigurg+0xea/0x3b0
[  147.188413][ T5854]  sk_send_sigurg+0x6a/0xb0
[  147.192914][ T5854]  tcp_check_urg+0x207/0x740
[  147.197509][ T5854]  tcp_urg+0x154/0x440
[  147.201566][ T5854]  ? tcp_validate_incoming+0x2bc0/0x2bc0
[  147.207192][ T5854]  ? ktime_get+0x242/0x270
[  147.211603][ T5854]  ? inet6_sk_rx_dst_set+0x1e9/0x2a0
[  147.216882][ T5854]  tcp_rcv_established+0xe67/0x1f10
[  147.222116][ T5854]  ? print_irqtrace_events+0x210/0x210
[  147.227572][ T5854]  ? tcp_check_space+0xab0/0xab0
[  147.232499][ T5854]  tcp_v6_do_rcv+0x573/0x12b0
[  147.237175][ T5854]  ? __bpf_trace_softirq+0x10/0x10
[  147.242284][ T5854]  __release_sock+0x198/0x4b0
[  147.246956][ T5854]  release_sock+0x5d/0x1c0
[  147.251362][ T5854]  tcp_sendmsg+0x36/0x40
[  147.255595][ T5854]  ? inet6_compat_ioctl+0x560/0x560
[  147.260788][ T5854]  __sys_sendto+0x480/0x600
[  147.265279][ T5854]  ? __ia32_sys_getpeername+0x80/0x80
[  147.270644][ T5854]  ? __sys_bind+0x287/0x2e0
[  147.275147][ T5854]  ? print_irqtrace_events+0x210/0x210
[  147.280608][ T5854]  __x64_sys_sendto+0xda/0xf0
[  147.285296][ T5854]  do_syscall_64+0x3b/0xb0
[  147.289718][ T5854]  ? clear_bhb_loop+0x45/0xa0
[  147.294386][ T5854]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  147.300274][ T5854] RIP: 0033:0x7fd7e6b8d0a9
[  147.304696][ T5854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  147.324293][ T5854] RSP: 002b:00007fd7e7a88038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  147.332716][ T5854] RAX: ffffffffffffffda RBX: 00007fd7e6da5fa0 RCX: 00007fd7e6b8d0a9
[  147.340764][ T5854] RDX: 0000000000000001 RSI: 0000400000000080 RDI: 0000000000000003
[  147.348724][ T5854] RBP: 00007fd7e6c0e2a0 R08: 0000000000000000 R09: 0000000000000000
[  147.356684][ T5854] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  147.364642][ T5854] R13: 0000000000000000 R14: 00007fd7e6da5fa0 R15: 00007ffe178875b8
[  147.372621][ T5854]  </TASK>
[  148.343460][ T4650] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.383805][ T4650] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  148.423868][ T4650] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.062823][ T4650] device hsr_slave_0 left promiscuous mode
[  149.069197][ T4650] device hsr_slave_1 left promiscuous mode
[  149.076063][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  149.083588][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  149.091211][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  149.098617][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  149.106374][ T4650] device bridge_slave_1 left promiscuous mode
[  149.112592][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.120892][ T4650] device bridge_slave_0 left promiscuous mode
[  149.127058][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.136398][ T4650] device veth1_macvtap left promiscuous mode
[  149.142449][ T4650] device veth0_macvtap left promiscuous mode
[  149.148459][ T4650] device veth1_vlan left promiscuous mode
[  149.154285][ T4650] device veth0_vlan left promiscuous mode
[  149.254117][ T4650] team0 (unregistering): Port device team_slave_1 removed
[  149.278425][ T4650] team0 (unregistering): Port device team_slave_0 removed
[  149.303733][ T4650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  149.330389][ T4650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  149.395565][ T4650] bond0 (unregistering): Released all slaves
[  149.816378][ T4650] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.854832][ T4650] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.912558][ T4650] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.952868][ T4650] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.004506][ T4650] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.062602][ T4650] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.102720][ T4650] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.164463][ T4650] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.234802][ T4650] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.292928][ T4650] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.342216][ T4650] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.382993][ T4650] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.445119][ T4650] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.502862][ T4650] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.564208][ T4650] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.603118][ T4650] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.831933][ T4650] device hsr_slave_0 left promiscuous mode
[  151.838133][ T4650] device hsr_slave_1 left promiscuous mode
[  151.844575][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.852053][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.859550][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.867599][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.875152][ T4650] device bridge_slave_1 left promiscuous mode
[  151.881319][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.889122][ T4650] device bridge_slave_0 left promiscuous mode
[  151.895461][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.905294][ T4650] device hsr_slave_0 left promiscuous mode
[  151.911529][ T4650] device hsr_slave_1 left promiscuous mode
[  151.917674][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.925167][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  151.932872][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  151.940314][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  151.947763][ T4650] device bridge_slave_1 left promiscuous mode
[  151.954265][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state
[  151.962134][ T4650] device bridge_slave_0 left promiscuous mode
[  151.968256][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state
[  151.977930][ T4650] device hsr_slave_0 left promiscuous mode
[  151.984472][ T4650] device hsr_slave_1 left promiscuous mode
[  151.990686][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  151.998063][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.005580][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.013097][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.021194][ T4650] device bridge_slave_1 left promiscuous mode
[  152.027347][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.035311][ T4650] device bridge_slave_0 left promiscuous mode
[  152.041746][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.051389][ T4650] device hsr_slave_0 left promiscuous mode
[  152.057457][ T4650] device hsr_slave_1 left promiscuous mode
[  152.063817][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  152.071261][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_0
[  152.078682][ T4650] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  152.086215][ T4650] batman_adv: batadv0: Removing interface: batadv_slave_1
[  152.093820][ T4650] device bridge_slave_1 left promiscuous mode
[  152.100115][ T4650] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.107996][ T4650] device bridge_slave_0 left promiscuous mode
[  152.114300][ T4650] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.125275][ T4650] device veth1_macvtap left promiscuous mode
[  152.131341][ T4650] device veth0_macvtap left promiscuous mode
[  152.137473][ T4650] device veth1_vlan left promiscuous mode
[  152.143297][ T4650] device veth0_vlan left promiscuous mode
[  152.149570][ T4650] device veth1_macvtap left promiscuous mode
[  152.155687][ T4650] device veth0_macvtap left promiscuous mode
[  152.161870][ T4650] device veth1_vlan left promiscuous mode
[  152.167647][ T4650] device veth0_vlan left promiscuous mode
[  152.174145][ T4650] device veth1_macvtap left promiscuous mode
[  152.180202][ T4650] device veth0_macvtap left promiscuous mode
[  152.186483][ T4650] device veth1_vlan left promiscuous mode
[  152.192552][ T4650] device veth0_vlan left promiscuous mode
[  152.198802][ T4650] device veth1_macvtap left promiscuous mode
[  152.205183][ T4650] device veth0_macvtap left promiscuous mode
[  152.211333][ T4650] device veth1_vlan left promiscuous mode
[  152.217063][ T4650] device veth0_vlan left promiscuous mode
[  152.446950][ T4650] team0 (unregistering): Port device team_slave_1 removed
[  152.471348][ T4650] team0 (unregistering): Port device team_slave_0 removed
[  152.481794][ T4650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.507192][ T4650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.548712][ T4650] bond0 (unregistering): Released all slaves
[  152.657859][ T4650] team0 (unregistering): Port device team_slave_1 removed
[  152.682418][ T4650] team0 (unregistering): Port device team_slave_0 removed
[  152.707291][ T4650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.735712][ T4650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.777098][ T4650] bond0 (unregistering): Released all slaves
[  152.890339][ T4650] team0 (unregistering): Port device team_slave_1 removed
[  152.914554][ T4650] team0 (unregistering): Port device team_slave_0 removed
[  152.940033][ T4650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.966170][ T4650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.006414][ T4650] bond0 (unregistering): Released all slaves
[  153.120064][ T4650] team0 (unregistering): Port device team_slave_1 removed
[  153.144776][ T4650] team0 (unregistering): Port device team_slave_0 removed
[  153.169301][ T4650] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.197071][ T4650] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.239416][ T4650] bond0 (unregistering): Released all slaves