last executing test programs:

2m15.983274883s ago: executing program 2 (id=945):
syz_emit_ethernet(0x52, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c", @ANYRES32=0x41424344], 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r0 = add_key$user(&(0x7f0000000180), 0x0, &(0x7f0000000280)="d25a9850a9d77f733e1a00000000", 0xe, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r0}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0)
add_key$user(&(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = dup(r3)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2m15.612142316s ago: executing program 2 (id=948):
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='shortad,partition=00000000000000000005,noadinicb,uid=', @ANYRESDEC=0x0, @ANYBLOB='\x00\x00\x00\x00=', @ANYRESDEC=0x0, @ANYBLOB='\x00'/11], 0x1, 0x489, &(0x7f0000000580)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
chdir(&(0x7f0000000540)='./file0\x00')
creat(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7e1ce440945e0ba7)
renameat2(r0, &(0x7f0000000140)='./file0\x00', r0, &(0x7f0000001200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

2m15.254074849s ago: executing program 2 (id=950):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)
syz_usb_ep_write(r2, 0x81, 0x0, 0x0)

2m13.421074034s ago: executing program 2 (id=957):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc39, &(0x7f0000001040)="$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")
creat(&(0x7f0000000340)='./bus\x00', 0x11a)
mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x14113e, 0x0)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
creat(0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES32=0x0], 0x47, 0xc11, &(0x7f0000000d00)="$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")
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r1, &(0x7f0000000040)=""/61, 0x3d)

2m12.386475812s ago: executing program 2 (id=960):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10)
connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$kcm(0x29, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000001380)={<r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r3)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000100)=[{0x6, 0x3, 0x0, 0x7fff0000}]})
close_range(r4, 0xffffffffffffffff, 0x0)

2m11.646144612s ago: executing program 2 (id=967):
syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000000140)='./file0\x00', 0x3008cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x150c, &(0x7f0000000a40)="$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")
unlink(&(0x7f0000000180)='./file1\x00')

2m11.002474515s ago: executing program 32 (id=967):
syz_mount_image$exfat(&(0x7f0000000a00), &(0x7f0000000140)='./file0\x00', 0x3008cd0, &(0x7f0000000440)=ANY=[], 0x1, 0x150c, &(0x7f0000000a40)="$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")
unlink(&(0x7f0000000180)='./file1\x00')

1m50.003570727s ago: executing program 1 (id=891):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0)

1m30.176922052s ago: executing program 1 (id=891):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0)

1m8.36227286s ago: executing program 1 (id=891):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0)

43.478643697s ago: executing program 1 (id=891):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0)

26.545749438s ago: executing program 1 (id=891):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0)

13.50653578s ago: executing program 1 (id=891):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x40, r0, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x43}, @val={0x8, 0x3, r2}, @val={0xc, 0x99, {0x4, 0xd}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x8000000}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r0, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20000080)
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
syz_emit_ethernet(0x36, &(0x7f0000001940)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x3, 0xffffffff}}}}}, 0x0)

9.154341763s ago: executing program 5 (id=1536):
r0 = userfaultfd(0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x8})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
r1 = getpid()
process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0)
close(0x3)

8.358672396s ago: executing program 5 (id=1544):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006300fbff6500000000000000160000000000000038"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240))
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

7.913638907s ago: executing program 5 (id=1548):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x25c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x230, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x17}}, @TCA_U32_SEL={0x214, 0x5, {0x6, 0x7, 0x2, 0x3, 0x0, 0xf800, 0x8, 0xf, [{0x5, 0x40, 0x4, 0x8}, {0xe, 0x3, 0x4, 0xe5f}, {0xff, 0x9, 0x7, 0x5c2}, {0x3, 0x4}, {0x7, 0x0, 0xffffffff, 0x457}, {0x2c6bd106, 0x2, 0x63208, 0x9e}, {0x400, 0xe, 0x0, 0x4}, {0x0, 0x7, 0x80000000, 0x7f}, {0x4, 0xffffffff, 0xd, 0x3}, {0x100, 0x3, 0x4, 0x9}, {0x3, 0x0, 0x4, 0x6}, {0x7, 0x2, 0x1, 0x280000}, {0xb, 0x3, 0x6a, 0x3}, {0x3, 0xd, 0x7}, {0x2, 0x1000, 0x0, 0x1362}, {0x1000, 0x24d, 0xf4, 0x5b}, {0x26, 0x9, 0xbd8, 0x1800000}, {0x56, 0x0, 0xd, 0x8}, {0x7, 0x400, 0x1, 0x8001}, {0x0, 0x2, 0x8001, 0x8}, {0xfffff00e, 0x2, 0xe7, 0x5}, {0xffffff8c, 0x8, 0x101, 0x6}, {0x6, 0x9, 0xd38, 0x7}, {0x81, 0x2, 0x200, 0x8}, {0x0, 0xf5, 0x2, 0x5}, {0x5, 0x924, 0x0, 0x7fffffff}, {0x8, 0x10, 0x5, 0x9}, {0x80000001, 0x3f910461, 0xfffffffb, 0x5}, {0x1, 0x3, 0xc7a, 0x4bc}, {0xfffffbef, 0x6, 0xfe5c, 0x10000}, {0x7, 0xfffffff8, 0x7, 0x8}, {0x3043, 0x2f8, 0x3, 0x2c}]}}, @TCA_U32_LINK={0x8, 0x3, 0x100}]}}]}, 0x25c}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

7.630746635s ago: executing program 5 (id=1550):
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f0000000dc0), &(0x7f0000002380)='./file1\x00', 0x0, &(0x7f0000005080)={[{@nocompress}, {@session={'session', 0x3d, 0x13}}, {@map_normal}, {@check_strict}, {@check_strict}, {@hide}, {@session={'session', 0x3d, 0x54}}, {@cruft}, {@dmode={'dmode', 0x3d, 0x7}}, {@gid}, {@utf8}, {@map_off}], [{@uid_eq}], 0x2c}, 0x1, 0x9d7, &(0x7f0000001800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

7.393646074s ago: executing program 5 (id=1551):
socket(0x200000100000011, 0x803, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x3000046, &(0x7f0000000240)={[{@noquota}, {@data_err_abort}, {@jqfmt_vfsv1}, {@dioread_lock}, {@jqfmt_vfsold}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000000}}, {@nojournal_checksum}, {@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0xb}}, {@dioread_nolock}]}, 0x1, 0x55c, &(0x7f0000000600)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fadvise64(r0, 0x9, 0xfff, 0x1)

7.122142258s ago: executing program 5 (id=1554):
r0 = semget$private(0x0, 0x4000000009, 0x408)
unshare(0x2c060000)
semop(r0, &(0x7f0000000140)=[{0x4, 0x9, 0x1000}], 0x1)

6.84551347s ago: executing program 33 (id=1554):
r0 = semget$private(0x0, 0x4000000009, 0x408)
unshare(0x2c060000)
semop(r0, &(0x7f0000000140)=[{0x4, 0x9, 0x1000}], 0x1)

2.925769551s ago: executing program 0 (id=1580):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newtfilter={0x25c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfffa, 0x7}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_u32={{0x8}, {0x230, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xfff2}}, @TCA_U32_CLASSID={0x8, 0x1, {0x9, 0x17}}, @TCA_U32_SEL={0x214, 0x5, {0x6, 0x7, 0x2, 0x3, 0x0, 0xf800, 0x8, 0xf, [{0x5, 0x40, 0x4, 0x8}, {0xe, 0x3, 0x4, 0xe5f}, {0xff, 0x9, 0x7, 0x5c2}, {0x3, 0x4}, {0x7, 0x0, 0xffffffff, 0x457}, {0x2c6bd106, 0x2, 0x63208, 0x9e}, {0x400, 0xe, 0x0, 0x4}, {0x0, 0x7, 0x80000000, 0x7f}, {0x4, 0xffffffff, 0xd, 0x3}, {0x100, 0x3, 0x4, 0x9}, {0x3, 0x0, 0x4, 0x6}, {0x7, 0x2, 0x1, 0x280000}, {0xb, 0x3, 0x6a, 0x3}, {0x3, 0xd, 0x7}, {0x2, 0x1000, 0x0, 0x1362}, {0x1000, 0x24d, 0xf4, 0x5b}, {0x26, 0x9, 0xbd8, 0x1800000}, {0xfffffffe, 0x3, 0x2c80, 0xe}, {0x7, 0x400, 0x1, 0x8001}, {0x0, 0x2, 0x8001, 0x8}, {0xfffff00e, 0x2, 0xe7, 0x5}, {0xffffff8c, 0x8, 0x101, 0x6}, {0x6, 0x9, 0xd38, 0x7}, {0x81, 0x2, 0x200, 0x8}, {0x0, 0xf5, 0x2, 0x5}, {0x5, 0x924, 0x0, 0x7fffffff}, {0x8, 0x10, 0x5, 0x9}, {0x80000001, 0x3f910461, 0xfffffffb, 0x5}, {0x1, 0x3, 0xc7a, 0x4bc}, {0xfffffbef, 0x6, 0xfe5c, 0x10000}, {0x7, 0xfffffff8, 0x7, 0x8}, {0x3043, 0x2f8, 0x3, 0x2c}]}}, @TCA_U32_LINK={0x8, 0x3, 0x100}]}}]}, 0x25c}}, 0x24004000)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

2.925565733s ago: executing program 4 (id=1581):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)

2.911191885s ago: executing program 3 (id=1582):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x18)
r1 = socket$inet6(0xa, 0x3, 0x5)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x20)

2.717844858s ago: executing program 3 (id=1583):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f0000000300)={[{@errors_remount}, {@resuid}, {@inlinecrypt}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@bsdgroups}, {@user_xattr}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$eJzs3c9rHFUcAPDvTHaT/k4qClZRAx5aEPPLgj9QaMGjiKCevDQkaSnd/qCJYEOEFrEnjwXBiwiCF2+KF0FKT4p46UX6H0ilSBBaxUNkprPJttlNds1upnU/H5jkvXm7+95k+c6bHy/zAuhbo9mPNOJARFxMIoaL9UlEVPNUJeLI3dfdWV6a+Wt5aSaJlZW3/0jy19xeXpqJhvdkdhdv2xER168l8cjA+nrnLyyemq7V5s4X+fGF0+fG5y8sPn/y9PSJuRNzZ6ampl6eOjz54sRU17b1o6d+/uafy29+/Om+G1d+v/7dviSOxJ6irHE7umU0Rlf/Jo0qEfF6tysryUCxPWnDuqRSYoPoSNrwHT4ewzEQa1/ecFz7ttTGAQA9sZItAECfSfT/ANBn6tcBbi8vzdSXcq9IANvl1tHIb9RncX+nWO6WVOJI/ntHPg5g159JNN7WTepjB7Yo+4yv36t+ni3Ro/vwQHMXL+U3/pv0/0ke/yP5KJ718T8QUewftub+fYj4h+2zlfh/qwv1i38AAAAAAADonqtHI+KlZvf/0tXxP9Hk/t9QREx0of7N7/+lN7tQDdDEraMRrxbP9rl3/N/qE11GBorc3oh4LKrJ8ZO1uSz290XEoagOZfnJ5h+f7zLevTz5Q6v6G8f/ZUtWf30sYNGOm5Whe98zO70wvdXtBiJuXYp4otIs/pPV/j9pMf73WJt1fL/01dOtyjaPf6BXVr6IONi0/197cl2y8fP5xvPjgfH6UcF6i8de+7BV/W3F/9q/KQFdlPX/uzaO/5Gk8Xmd853X8cntic9alf3X4//B5J38qaKDxboPphcWzk9GDCZvrF/fvUeIwkOtHg/1eMni/9Czzc//Nzr+r0bEuTbr/PLH6q+tykbzSHX8D2XI4n+2o/6/88TfvzzZclfRXv9/OO/TDxVrXP+DjbUboGW3EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuimNiD2RpGOr6TQdG4vYHRGPxq60dnZ+4bnjZ98/M5uVRYxENT1+sjY3ERHDd/NJlp/M02v5qfvyL0TE/oi4MrQzz4/NnK3Nlr3xAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFDY3WL+/8xvQ2W3DgDomR1lNwAA2Hb6fwDoP/p/AOg/Hff/P+3tTUMAgG3j/B8A+o/+HwAAAAAAAAAAAAAAAAAAAAAAAAB6av8zV28kEXHxlZ35khksyqqltgzotbTsBgClGSi7AUBpKu28KElWzwmA/w/n+ECySXnrKUJcQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoH8cPNDu/P9tzRQKPETM3gf9y/z/0L8c1UP/Mv8/YP5/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADY3PyFxVPTtdrceYluJyoPRjMehMRQRDwAzZDoIFH2ngkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIfBvwEAAP//snoPXw==")
symlink(&(0x7f00000005c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', &(0x7f00000002c0)='.\x02\x00')

2.699375398s ago: executing program 0 (id=1584):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000140)=<r2=>0x0)
prlimit64(r2, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = add_key$keyring(&(0x7f0000000300), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000340)=@keyring={'key_or_keyring:', r6})
r7 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0x0)
keyctl$chown(0x4, r7, 0xee01, 0x0)
r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000000f195"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
listen(r0, 0x5)
ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0x1)
mount$9p_fd(0x0, &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])

1.719663289s ago: executing program 4 (id=1585):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsopen(0x0, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r3, 0x0, 0x40000)

1.642103592s ago: executing program 0 (id=1586):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x756, &(0x7f00000002c0)="$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")
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000800)='./file0\x00', 0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0, @ANYRESOCT], 0x2, 0x699, &(0x7f0000000140)="$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")
r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
getgroups(0x2, &(0x7f0000001080)=[0xee01, <r1=>0xffffffffffffffff])
setgroups(0x40000000000002e6, &(0x7f0000000140)=[0x0])
keyctl$chown(0x4, r0, 0xee01, r1)
keyctl$setperm(0x5, r0, 0x30925)
keyctl$KEYCTL_MOVE(0x3, r0, 0x0, 0x0, 0x0)

1.641917946s ago: executing program 3 (id=1587):
setreuid(0xee01, 0x0)
setpriority(0x2, 0x0, 0x100)

1.574910209s ago: executing program 0 (id=1588):
writev(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
r1 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x4, 0xbfdffffc}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x9})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0xe9ba1000)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x217, @time={0x65757100, 0x8}, 0x0, {}, 0x67, 0x2})

658.707243ms ago: executing program 4 (id=1589):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x3, {{@in=@private, @in6=@remote, 0x0, 0xfffd, 0x0, 0x0, 0xa}, {0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x8000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, [@tmpl={0x44, 0x5, [{{@in6=@remote, 0xbffffffd, 0x3c}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0xc3}, 0x3501, 0x3, 0x0, 0x7, 0x7}]}]}, 0xfc}}, 0x4040000)

550.165959ms ago: executing program 3 (id=1590):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xbc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x4, 0x3, 0xffffffffffff8001, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x4}]}, 0xbc}}, 0x0)

549.942016ms ago: executing program 4 (id=1591):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000380)={[{@debug}, {@delalloc}, {@journal_ioprio}, {@test_dummy_encryption}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000220000001801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006300fbff6500000000000000160000000000000038"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)
close(r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000001240))
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"})

416.142987ms ago: executing program 0 (id=1592):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)={'c', ' *:* ', 'm\x00'}, 0x8)

399.372185ms ago: executing program 3 (id=1593):
syz_mount_image$ext4(&(0x7f00000006c0)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x442, &(0x7f0000000000)={[{@resuid}, {@noload}, {@jqfmt_vfsold}, {@noblock_validity}, {@grpid}]}, 0x3d, 0x540, &(0x7f0000000800)="$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")
unlink(&(0x7f0000000180)='./file1\x00')

228.913041ms ago: executing program 0 (id=1594):
r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="0d01000009000008250592d20700006a3b010902241700fa0074980904e4ff11070103000905010200ffe0"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
syz_usb_disconnect(0xffffffffffffffff)

147.177002ms ago: executing program 4 (id=1595):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x75, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x40, &(0x7f0000000080)={0x20, 0x3, 0x17, 0xffff}, 0x8, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0})

110.157619ms ago: executing program 3 (id=1596):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0xfe, 0x0, 0x0)
setresgid(0xee00, 0x0, 0x0)
lstat(&(0x7f0000002740)='./file0\x00', 0x0)

0s ago: executing program 4 (id=1597):
capset(&(0x7f0000000100)={0x20080522}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x45, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

kernel console output (not intermixed with test programs):

roduct: syz
[  238.070593][ T5964] usb 1-1: Manufacturer: syz
[  238.075342][ T5964] usb 1-1: SerialNumber: syz
[  238.085482][ T8688] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  238.163496][ T8703] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.171010][ T8703] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.365615][ T5836] Bluetooth: hci0: command tx timeout
[  238.495594][ T5964] usb 1-1: USB disconnect, device number 11
[  238.561951][ T8583] chnl_net:caif_netlink_parms(): no params data found
[  238.610180][ T1563] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  238.624427][ T6163] udevd[6163]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  238.822017][ T1563] usb 5-1: unable to get BOS descriptor or descriptor too short
[  238.836066][ T1563] usb 5-1: not running at top speed; connect to a high speed hub
[  238.874640][ T1563] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  238.896641][ T1563] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.935306][ T1563] usb 5-1: Product: syz
[  238.939508][ T1563] usb 5-1: Manufacturer: syz
[  238.975815][ T1563] usb 5-1: SerialNumber: syz
[  239.026080][ T8583] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.033940][ T8583] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.065872][ T8583] bridge_slave_0: entered allmulticast mode
[  239.073963][ T8583] bridge_slave_0: entered promiscuous mode
[  239.098360][ T8583] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.107348][ T8583] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.128172][ T8583] bridge_slave_1: entered allmulticast mode
[  239.139806][ T8583] bridge_slave_1: entered promiscuous mode
[  239.160452][   T12] IPVS: stop unused estimator thread 0...
[  239.220082][ T1563] cdc_ncm 5-1:1.0: bind() failure
[  239.240026][ T1563] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  239.248004][ T1563] cdc_ncm 5-1:1.1: bind() failure
[  239.276094][ T1563] usb 5-1: USB disconnect, device number 8
[  239.286649][ T8583] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.322262][ T8583] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.380036][ T8583] team0: Port device team_slave_0 added
[  239.389408][ T8583] team0: Port device team_slave_1 added
[  239.476522][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.483497][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.529427][ T8583] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.564294][ T8583] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.584328][ T8583] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.614399][ T8583] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.855830][ T8745] loop3: detected capacity change from 0 to 128
[  239.933348][ T8583] hsr_slave_0: entered promiscuous mode
[  239.966925][ T8583] hsr_slave_1: entered promiscuous mode
[  239.975629][ T8745] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  239.984156][ T8583] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  240.060675][ T8745] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.075991][ T8583] Cannot create hsr debugfs directory
[  240.087363][ T8748] netlink: 16 bytes leftover after parsing attributes in process `syz.2.936'.
[  240.445388][ T5836] Bluetooth: hci0: command tx timeout
[  240.495311][ T5915] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  240.675285][ T5915] usb 1-1: device descriptor read/64, error -71
[  240.849142][ T8765] netlink: 'syz.3.942': attribute type 1 has an invalid length.
[  240.967135][ T5915] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  241.061971][ T8765] 8021q: adding VLAN 0 to HW filter on device bond2
[  241.105330][ T5915] usb 1-1: device descriptor read/64, error -71
[  241.217292][ T5915] usb usb1-port1: attempt power cycle
[  241.578948][ T5915] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  241.610593][ T8790] loop2: detected capacity change from 0 to 128
[  241.627328][ T5915] usb 1-1: device descriptor read/8, error -71
[  241.651707][ T8790] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  241.683892][ T8790] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  241.895450][ T5915] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  241.933439][ T8583] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  241.945334][ T5915] usb 1-1: device descriptor read/8, error -71
[  241.979643][ T8583] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  242.031493][ T8583] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  242.076564][ T5915] usb usb1-port1: unable to enumerate USB device
[  242.114207][ T8583] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  242.235399][ T5914] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  242.324651][ T8583] 8021q: adding VLAN 0 to HW filter on device bond0
[  242.372182][ T8583] 8021q: adding VLAN 0 to HW filter on device team0
[  242.406979][ T5914] usb 3-1: Using ep0 maxpacket: 16
[  242.420527][  T757] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.427733][  T757] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.445532][ T5914] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  242.473712][ T5914] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  242.492584][  T757] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.499767][  T757] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.508291][ T5914] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  242.518349][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.880623][ T5914] usb 3-1: config 0 descriptor??
[  243.138914][ T5914] usbhid 3-1:0.0: can't add hid device: -71
[  243.179002][ T5914] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  243.224419][ T5914] usb 3-1: USB disconnect, device number 12
[  243.324682][ T8828] netlink: 16 bytes leftover after parsing attributes in process `syz.4.954'.
[  243.782568][ T8838] loop0: detected capacity change from 0 to 1024
[  243.857035][ T8838] EXT4-fs: Ignoring removed orlov option
[  243.872773][ T8842] loop2: detected capacity change from 0 to 2048
[  243.927196][ T8838] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  243.964591][ T8842] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  244.039765][ T8842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.103644][ T8838] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.127599][ T8583] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.239164][ T8850] netlink: 'syz.3.958': attribute type 1 has an invalid length.
[  244.411820][ T8850] 8021q: adding VLAN 0 to HW filter on device bond3
[  244.622328][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.782937][ T8583] veth0_vlan: entered promiscuous mode
[  244.795428][ T5837] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  244.811842][ T5837] UDF-fs: error (device loop2): udf_read_inode: (ino 1317) failed !bh
[  244.827554][ T8583] veth1_vlan: entered promiscuous mode
[  244.987568][ T8583] veth0_macvtap: entered promiscuous mode
[  245.064427][ T8583] veth1_macvtap: entered promiscuous mode
[  245.118621][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_0
[  245.151737][ T8583] batman_adv: batadv0: Interface activated: batadv_slave_1
[  245.350389][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  245.621031][   T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  245.667692][   T59] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  245.809813][   T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  245.948036][   T59] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  246.114035][   T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.350706][ T8890] loop3: detected capacity change from 0 to 256
[  246.477022][   T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.573727][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.598380][ T8890] FAT-fs (loop3): Directory bread(block 64) failed
[  246.615854][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  246.625359][ T8890] FAT-fs (loop3): Directory bread(block 65) failed
[  246.665947][ T8890] FAT-fs (loop3): Directory bread(block 66) failed
[  246.672508][ T8890] FAT-fs (loop3): Directory bread(block 67) failed
[  246.733070][ T8890] FAT-fs (loop3): Directory bread(block 68) failed
[  246.760633][ T8890] FAT-fs (loop3): Directory bread(block 69) failed
[  246.792581][ T8890] FAT-fs (loop3): Directory bread(block 70) failed
[  246.819928][ T8890] FAT-fs (loop3): Directory bread(block 71) failed
[  246.840931][   T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.850435][ T8890] FAT-fs (loop3): Directory bread(block 72) failed
[  246.892796][ T8890] FAT-fs (loop3): Directory bread(block 73) failed
[  246.924677][  T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  246.984598][  T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  247.060485][ T8906] loop4: detected capacity change from 0 to 4096
[  247.142929][ T8906] EXT4-fs (loop4): Test dummy encryption mode enabled
[  247.185968][ T8906] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  247.211748][ T8908] netlink: 16 bytes leftover after parsing attributes in process `syz.0.973'.
[  247.236605][ T8906] System zones: 0-5
[  247.291904][ T8906] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  247.517687][   T13] bridge_slave_1: left allmulticast mode
[  247.676219][   T13] bridge_slave_1: left promiscuous mode
[  247.682010][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.722055][ T8918] fscrypt: AES-256-XTS using implementation "xts-aes-aesni-avx"
[  247.820533][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  247.836483][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  247.844268][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  247.853763][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  247.861976][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  247.938324][   T13] bridge_slave_0: left allmulticast mode
[  247.954202][   T13] bridge_slave_0: left promiscuous mode
[  247.965087][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.361523][   T13] bond1 (unregistering): (slave gretap1): Releasing backup interface
[  248.435840][   T13] bond2 (unregistering): (slave gretap2): Releasing backup interface
[  248.735948][   T13] bond1 (unregistering): Released all slaves
[  248.999176][   T13] bond2 (unregistering): Released all slaves
[  249.309942][   T13] bond3 (unregistering): Released all slaves
[  249.365399][ T8918] warning: `syz.4.974' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  249.522401][   T13] tipc: Left network mode
[  249.534741][ T5828] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.885759][ T5846] Bluetooth: hci0: command tx timeout
[  250.333741][ T8982] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  250.375661][   T13] hsr_slave_0: left promiscuous mode
[  250.455508][   T13] hsr_slave_1: left promiscuous mode
[  250.461588][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.527119][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.560735][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.581848][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.664827][   T13] veth1_macvtap: left promiscuous mode
[  250.674366][   T13] veth0_macvtap: left promiscuous mode
[  250.705502][   T13] veth1_vlan: left promiscuous mode
[  250.710920][   T13] veth0_vlan: left promiscuous mode
	
	
	
	
	


	

					

				


			

				


	
	
	


	

	
		

	
	
	

		

		

	
	


		

		
	
	

	
[  252.132499][ T5964] usb 4-1: config 0 interface 29 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  252.182081][ T5964] usb 4-1: New USB device found, idVendor=050d, idProduct=2102, bcdDevice=70.d0
[  252.195269][ T5964] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.219274][ T5964] usb 4-1: Product: syz
[  252.224600][ T5964] usb 4-1: Manufacturer: syz
[  252.229725][ T5964] usb 4-1: SerialNumber: syz

syzkaller[  252.247146][ T5964] usb 4-1: config 0 descriptor??

[  252.254042][ T9007] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
syzkaller login: [  252.270686][ T9007] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  252.714267][ T8921] chnl_net:caif_netlink_parms(): no params data found
[  253.163080][ T8921] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.178855][ T8921] bridge0: port 1(bridge_slave_0) entered disabled state
[  253.195490][ T8921] bridge_slave_0: entered allmulticast mode
[  253.209977][ T8921] bridge_slave_0: entered promiscuous mode
[  253.257437][ T8921] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.266141][ T8921] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.273368][ T8921] bridge_slave_1: entered allmulticast mode
[  253.289111][ T8921] bridge_slave_1: entered promiscuous mode
[  253.330396][ T5836] Bluetooth: hci4: command tx timeout
[  253.433874][ T8921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.512881][ T8921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.699563][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  253.744031][ T8921] team0: Port device team_slave_0 added
[  253.788352][ T8999] chnl_net:caif_netlink_parms(): no params data found
[  253.814789][ T8921] team0: Port device team_slave_1 added
[  253.866022][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.017656][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.056495][ T5836] Bluetooth: hci0: command tx timeout
[  254.082721][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_0
[  254.089819][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.116467][ T8921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  254.249917][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.274658][ T8921] batman_adv: batadv0: Adding interface: batadv_slave_1
[  254.289694][ T8921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  254.322044][ T8921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  254.469430][ T8999] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.477708][ T8999] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.485007][ T8999] bridge_slave_0: entered allmulticast mode
[  254.494950][ T8999] bridge_slave_0: entered promiscuous mode
[  254.531906][ T8999] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.539729][ T8999] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.547476][ T8999] bridge_slave_1: entered allmulticast mode
[  254.556133][ T8999] bridge_slave_1: entered promiscuous mode
[  254.582055][ T8921] hsr_slave_0: entered promiscuous mode
[  254.589133][ T8921] hsr_slave_1: entered promiscuous mode
[  254.600157][ T8921] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  254.608983][ T8921] Cannot create hsr debugfs directory
[  254.690105][ T8999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  254.707684][   T24] usb 4-1: USB disconnect, device number 14
[  254.873793][ T8999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  254.873855][ T9069] loop3: detected capacity change from 0 to 1024
[  255.379813][ T9078] binder: 9077:9078 ioctl c0306201 0 returned -14
[  255.389232][ T9078] binder: 9077:9078 ioctl c0306201 2000000007c0 returned -11
[  255.425482][ T5836] Bluetooth: hci4: command tx timeout
[  255.488846][ T8999] team0: Port device team_slave_0 added
[  255.806128][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.846010][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  256.099942][   T13] bridge_slave_1: left allmulticast mode
[  256.116894][   T13] bridge_slave_1: left promiscuous mode
[  256.125534][ T5836] Bluetooth: hci0: command tx timeout
[  256.143415][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  256.168432][   T13] bridge_slave_0: left allmulticast mode
[  256.174098][   T13] bridge_slave_0: left promiscuous mode
[  256.199013][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  256.630172][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  256.641228][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  256.651231][   T13] bond0 (unregistering): Released all slaves
[  256.655440][ T5934] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  256.674336][ T8999] team0: Port device team_slave_1 added
[  256.835791][ T5934] usb 1-1: Using ep0 maxpacket: 8
[  256.842859][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_0
[  256.850168][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.861945][ T5934] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  256.878113][ T8999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  256.893400][ T5934] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  256.900223][ T8999] batman_adv: batadv0: Adding interface: batadv_slave_1
[  256.917557][ T5934] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  256.918171][ T8999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.931068][ T5934] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  256.954828][ T8999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  256.978538][ T5934] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  257.022876][ T5934] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  257.053457][ T5934] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.302988][ T5934] usb 1-1: usb_control_msg returned -32
[  257.322135][ T5934] usbtmc 1-1:16.0: can't read capabilities
[  257.484225][ T8999] hsr_slave_0: entered promiscuous mode
[  257.500701][ T5836] Bluetooth: hci4: command tx timeout
[  257.501412][ T8999] hsr_slave_1: entered promiscuous mode
[  257.532565][ T8999] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  257.555297][ T8999] Cannot create hsr debugfs directory
[  257.601220][   T13] hsr_slave_0: left promiscuous mode
[  257.622758][   T13] hsr_slave_1: left promiscuous mode
[  257.633585][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  257.659397][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  257.679689][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  257.705491][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  257.743482][   T13] veth1_macvtap: left promiscuous mode
[  257.763832][   T13] veth0_macvtap: left promiscuous mode
[  257.780125][   T13] veth1_vlan: left promiscuous mode
[  257.785601][   T13] veth0_vlan: left promiscuous mode
[  258.455294][   T13] team0 (unregistering): Port device team_slave_1 removed
[  258.492991][   T13] team0 (unregistering): Port device team_slave_0 removed
[  259.058302][ T9120] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1013'.
[  259.102904][ T8921] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  259.170337][ T8921] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  259.264622][ T8921] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  259.318768][ T8921] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  259.462107][ T5934] usb 1-1: USB disconnect, device number 16
[  259.571337][ T5836] Bluetooth: hci4: command tx timeout
[  259.655347][ T5964] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  259.860910][ T8921] 8021q: adding VLAN 0 to HW filter on device bond0
[  259.962727][ T5964] usb 4-1: unable to get BOS descriptor or descriptor too short
[  259.984980][ T8921] 8021q: adding VLAN 0 to HW filter on device team0
[  260.001394][ T5964] usb 4-1: unable to read config index 0 descriptor/start: -71
[  260.030141][ T5964] usb 4-1: can't read configurations, error -71
[  260.075025][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state
[  260.082236][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  260.179824][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  260.187020][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  260.438783][ T8999] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  260.536923][ T8999] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  260.586612][ T8999] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  260.839523][ T8999] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  261.044863][ T8921] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.001143][ T5915] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  262.134858][ T8999] 8021q: adding VLAN 0 to HW filter on device bond0
[  262.175421][ T5915] usb 1-1: Using ep0 maxpacket: 8
[  262.194968][ T5915] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  262.214081][ T5915] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  262.221493][ T8921] 8021q: adding VLAN 0 to HW filter on device batadv0
[  262.235180][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  262.267449][ T5915] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  262.284058][ T8999] 8021q: adding VLAN 0 to HW filter on device team0
[  262.287675][ T5915] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  262.324955][ T5915] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  262.337029][ T5915] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  262.371953][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.379150][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  262.447276][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.454450][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[  262.583641][ T5915] usb 1-1: usb_control_msg returned -32
[  262.599751][ T5915] usbtmc 1-1:16.0: can't read capabilities
[  262.965182][ T9207] loop3: detected capacity change from 0 to 8192
[  263.309615][ T8921] veth0_vlan: entered promiscuous mode
[  263.402096][ T8921] veth1_vlan: entered promiscuous mode
[  263.528891][ T8921] veth0_macvtap: entered promiscuous mode
[  263.578525][ T8921] veth1_macvtap: entered promiscuous mode
[  263.601510][ T8999] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.670174][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.690544][ T8921] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.760417][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.792071][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.813937][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.907803][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.006147][ T8999] veth0_vlan: entered promiscuous mode
[  264.075439][ T8999] veth1_vlan: entered promiscuous mode
[  264.223699][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.252337][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.308179][ T8999] veth0_macvtap: entered promiscuous mode
[  264.355167][ T8999] veth1_macvtap: entered promiscuous mode
[  264.372525][ T4468] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  264.412981][ T4468] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  264.433505][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_0
[  264.470451][ T8999] batman_adv: batadv0: Interface activated: batadv_slave_1
[  264.535509][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  264.544268][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  264.576394][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  264.635991][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  264.745455][ T5945] usb 1-1: USB disconnect, device number 17
[  265.122097][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.151764][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  265.727218][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  265.791800][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  266.063858][ T9270] loop3: detected capacity change from 0 to 2048
[  266.282883][ T9270] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.1040: bad orphan inode 8192
[  266.302691][ T9270] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.632521][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.676500][ T9287] loop5: detected capacity change from 0 to 256
[  266.699505][ T9287] vfat: Bad value for 'fmask'
[  267.165021][ T9295] loop5: detected capacity change from 0 to 1024
[  267.166145][ T1563] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  267.244320][ T9295] hfsplus: invalid secondary volume header
[  267.280888][ T9295] hfsplus: unable to find HFS+ superblock
[  267.425346][ T1563] usb 5-1: Using ep0 maxpacket: 8
[  267.449881][ T1563] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  267.493268][ T1563] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  267.555447][ T1563] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  267.584698][ T1563] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  267.615043][ T1343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.633399][ T1563] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  267.682860][ T1563] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  267.715426][ T1563] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.955115][ T1343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  267.994296][ T1563] usb 5-1: usb_control_msg returned -32
[  268.019493][ T1563] usbtmc 5-1:16.0: can't read capabilities
[  268.263064][ T1343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.538931][ T1343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  268.941386][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  268.942623][ T1343] bridge_slave_1: left allmulticast mode
[  268.965573][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  268.974145][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  268.982718][ T1343] bridge_slave_1: left promiscuous mode
[  268.995383][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  269.006673][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.016560][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  269.060139][ T1343] bridge_slave_0: left allmulticast mode
[  269.072488][ T1343] bridge_slave_0: left promiscuous mode
[  269.099964][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.166005][    T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  269.327101][    T9] usb 4-1: Using ep0 maxpacket: 8
[  269.359178][    T9] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  269.415163][    T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  269.491097][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  269.523271][    T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  269.555130][    T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  269.596111][    T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  269.615293][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  269.900091][    T9] usb 4-1: usb_control_msg returned -71
[  269.906866][ T5915] usb 5-1: USB disconnect, device number 9
[  269.920767][    T9] usbtmc 4-1:16.0: can't read capabilities
[  269.975363][    T9] usb 4-1: USB disconnect, device number 17
[  270.308877][ T9353] netlink: 'syz.4.1057': attribute type 9 has an invalid length.
[  271.087810][ T5836] Bluetooth: hci4: command tx timeout
[  271.413087][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  271.432657][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  271.451494][ T1343] bond0 (unregistering): Released all slaves
[  271.830739][ T9379] loop5: detected capacity change from 0 to 4096
[  272.028027][ T9379] EXT4-fs (loop5): Test dummy encryption mode enabled
[  272.073050][ T9379] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  272.111463][ T9379] System zones: 0-5
[  272.223326][ T9379] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.444898][ T9331] chnl_net:caif_netlink_parms(): no params data found
[  272.545681][ T5945] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  272.607712][ T1343] hsr_slave_0: left promiscuous mode
[  272.627479][ T1343] hsr_slave_1: left promiscuous mode
[  272.637349][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.655841][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0
[  272.725722][ T5945] usb 1-1: Using ep0 maxpacket: 8
[  272.743169][ T5945] usb 1-1: config index 0 descriptor too short (expected 301, got 45)
[  272.754902][ T5945] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  272.775426][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  272.783019][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_1
[  272.810202][ T5945] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  272.820990][ T5945] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  272.837316][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.850709][ T5945] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  272.854892][ T1343] veth1_macvtap: left promiscuous mode
[  272.907773][ T1343] veth0_macvtap: left promiscuous mode
[  272.909346][ T5945] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  272.930933][ T1343] veth1_vlan: left promiscuous mode
[  272.951268][ T1343] veth0_vlan: left promiscuous mode
[  272.966926][ T5945] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.166627][ T5836] Bluetooth: hci4: command tx timeout
[  273.210803][ T5945] usb 1-1: usb_control_msg returned -32
[  273.225353][ T5945] usbtmc 1-1:16.0: can't read capabilities
[  273.813562][ T1343] team0 (unregistering): Port device team_slave_1 removed
[  273.858653][ T1343] team0 (unregistering): Port device team_slave_0 removed
[  274.699214][ T9432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1077'.
[  275.256407][ T5836] Bluetooth: hci4: command tx timeout
[  275.393584][ T5915] usb 1-1: USB disconnect, device number 18
[  275.406484][ T9331] bridge0: port 1(bridge_slave_0) entered blocking state
[  275.413678][ T9331] bridge0: port 1(bridge_slave_0) entered disabled state
[  275.442804][ T9331] bridge_slave_0: entered allmulticast mode
[  275.626482][ T9331] bridge_slave_0: entered promiscuous mode
[  276.207127][ T9331] bridge0: port 2(bridge_slave_1) entered blocking state
[  276.211213][ T9331] bridge0: port 2(bridge_slave_1) entered disabled state
[  276.262967][ T9448] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  276.269479][ T9448] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  276.280770][ T9331] bridge_slave_1: entered allmulticast mode
[  276.300409][ T9331] bridge_slave_1: entered promiscuous mode
[  276.314894][ T9448] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  276.320981][ T9448] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  276.336926][ T9448] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  276.342888][ T9448] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  276.410458][ T9448] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  276.416857][ T9448] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  276.489015][ T9448] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  276.494959][ T9448] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  276.599978][ T9331] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  276.902453][ T9331] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  277.725351][ T5915] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  277.741401][ T9331] team0: Port device team_slave_0 added
[  277.771637][ T9331] team0: Port device team_slave_1 added
[  277.885590][ T5915] usb 4-1: Using ep0 maxpacket: 8
[  277.903167][ T5915] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  277.930718][ T5915] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  277.954864][ T5915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  277.982108][ T5915] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  278.013400][ T5915] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.060589][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_0
[  278.142084][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.231801][ T9495] loop0: detected capacity change from 0 to 512
[  278.281598][ T9495] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  278.413019][ T9495] EXT4-fs (loop0): 1 truncate cleaned up
[  278.427927][ T9495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.544528][ T5915] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  278.567558][ T9331] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  278.577299][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.707503][ T9331] batman_adv: batadv0: Adding interface: batadv_slave_1
[  278.714532][ T9331] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  278.722574][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.770059][ T9331] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  278.848384][ T5915] usb 4-1: usb_control_msg returned -32
[  278.854002][ T5915] usbtmc 4-1:16.0: can't read capabilities
[  279.053282][ T9500] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.070125][ T9500] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  279.105791][ T1563] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  279.201092][ T9507] netlink: 'syz.5.1099': attribute type 9 has an invalid length.
[  279.215790][ T9507] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1099'.
[  279.227780][ T1329] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.248484][ T1329] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.270064][ T1563] usb 1-1: Using ep0 maxpacket: 32
[  279.272604][ T1329] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.286349][ T1563] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32
[  279.287569][ T1329] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  279.321000][ T1563] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  279.339553][ T1563] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  279.351752][ T1563] usb 1-1: Product: syz
[  279.362416][ T1563] usb 1-1: Manufacturer: syz
[  279.373791][ T1563] usb 1-1: SerialNumber: syz
[  279.384144][ T1563] usb 1-1: config 0 descriptor??
[  279.393916][ T9503] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  279.418910][ T1563] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  279.473135][ T9331] hsr_slave_0: entered promiscuous mode
[  279.491460][ T9331] hsr_slave_1: entered promiscuous mode
[  279.509623][ T9331] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  279.524655][ T9331] Cannot create hsr debugfs directory
[  279.765460][ T5945] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  279.772934][ T5914] usb 1-1: USB disconnect, device number 19
[  279.929373][ T5945] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  279.953665][ T5945] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  279.984328][ T5945] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  280.005357][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.230355][ T5914] usb 4-1: USB disconnect, device number 18
[  280.248403][ T5945] usb 6-1: usb_control_msg returned -32
[  280.264303][ T5945] usbtmc 6-1:16.0: can't read capabilities
[  280.551994][ T9550] loop0: detected capacity change from 0 to 256
[  280.666940][ T9550] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  280.803300][ T9331] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  280.824050][ T9331] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  280.860094][ T9331] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  280.905187][ T9331] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  280.928040][ T9553] loop3: detected capacity change from 0 to 256
[  281.135739][   T30] audit: type=1800 audit(1750586838.798:10): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1110" name="bus" dev="loop0" ino=1048614 res=0 errno=0
[  281.583069][   T30] audit: type=1804 audit(1750586838.818:11): pid=9561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.1110" name="/newroot/240/file2/bus" dev="loop0" ino=1048614 res=1 errno=0
[  281.727986][ T9564] netlink: 'syz.3.1112': attribute type 10 has an invalid length.
[  281.970614][ T9569] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  281.995278][ T9569] qnx6: wrong signature (magic) in superblock #1.
[  282.001866][ T9569] qnx6: unable to read the first superblock
[  282.384403][ T9331] 8021q: adding VLAN 0 to HW filter on device bond0
[  282.506054][ T9331] 8021q: adding VLAN 0 to HW filter on device team0
[  282.549231][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state
[  282.556435][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  282.571910][    T9] usb 6-1: USB disconnect, device number 2
[  282.658938][ T4468] bridge0: port 2(bridge_slave_1) entered blocking state
[  282.666385][ T4468] bridge0: port 2(bridge_slave_1) entered forwarding state
[  283.145351][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  283.318855][    T9] usb 5-1: Using ep0 maxpacket: 8
[  283.353720][    T9] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  283.384857][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  283.445020][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  283.462477][ T9620] loop0: detected capacity change from 0 to 1024
[  283.480363][ T9331] 8021q: adding VLAN 0 to HW filter on device batadv0
[  283.488890][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  283.513500][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  283.692259][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  284.364943][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.401484][ T9331] veth0_vlan: entered promiscuous mode
[  284.522103][ T9331] veth1_vlan: entered promiscuous mode
[  284.530643][ T9627] netlink: 'syz.0.1126': attribute type 10 has an invalid length.
[  284.573895][ T9627] bridge0: port 2(bridge_slave_1) entered blocking state
[  284.581176][ T9627] bridge0: port 2(bridge_slave_1) entered listening state
[  284.588494][ T9627] bridge0: port 1(bridge_slave_0) entered blocking state
[  284.595820][ T9627] bridge0: port 1(bridge_slave_0) entered listening state
[  284.615126][    T9] usb 5-1: usb_control_msg returned -32
[  284.621045][    T9] usbtmc 5-1:16.0: can't read capabilities
[  284.641151][ T9627] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  284.813984][ T9627] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  284.830539][ T9627] qnx6: wrong signature (magic) in superblock #1.
[  284.837287][ T5945] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  284.840577][ T9627] qnx6: unable to read the first superblock
[  284.997745][ T9331] veth0_macvtap: entered promiscuous mode
[  285.020291][ T9331] veth1_macvtap: entered promiscuous mode
[  285.183746][ T5945] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  285.242403][ T5945] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  285.289797][ T5945] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  285.310237][ T5945] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.362631][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_0
[  285.414939][ T9331] batman_adv: batadv0: Interface activated: batadv_slave_1
[  285.507920][ T4468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  285.533448][ T5945] usb 6-1: usb_control_msg returned -32
[  285.548863][ T1343] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  285.560545][ T5945] usbtmc 6-1:16.0: can't read capabilities
[  285.623206][ T1343] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  285.644043][ T1343] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  285.858755][ T1343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  285.878176][ T1343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  285.959791][ T5915] usb 5-1: USB disconnect, device number 10
[  286.002421][ T9167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  286.024308][ T9167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  286.040208][ T9654] loop0: detected capacity change from 0 to 164
[  286.601040][ T9654] Unsupported NM flag settings (8)
[  286.878715][ T9667] loop3: detected capacity change from 0 to 512
[  286.979618][ T9667] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.027772][ T9667] ext4 filesystem being mounted at /256/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  287.069318][ T4468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.083060][ T9667] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1137: corrupted inode contents
[  287.138210][ T9667] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1137: mark_inode_dirty error
[  287.173828][ T9667] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1137: corrupted inode contents
[  287.209112][ T9675] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1137: corrupted inode contents
[  287.235857][ T4468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.269878][ T9675] EXT4-fs error (device loop3): ext4_dirty_inode:6459: inode #2: comm syz.3.1137: mark_inode_dirty error
[  287.330531][ T9675] EXT4-fs error (device loop3): ext4_do_update_inode:5568: inode #2: comm syz.3.1137: corrupted inode contents
[  287.434127][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.454934][ T4468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.550836][ T4468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.639907][ T5945] usb 6-1: USB disconnect, device number 3
[  287.889538][ T4468] bridge_slave_1: left allmulticast mode
[  287.895909][ T4468] bridge_slave_1: left promiscuous mode
[  287.936757][ T4468] bridge0: port 2(bridge_slave_1) entered disabled state
[  287.948150][ T9691] loop3: detected capacity change from 0 to 1024
[  288.019178][ T9691] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  288.025140][ T9692] loop0: detected capacity change from 0 to 2048
[  288.041266][ T4468] bridge_slave_0: left allmulticast mode
[  288.055635][ T9691] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  288.066000][ T4468] bridge_slave_0: left promiscuous mode
[  288.066231][ T4468] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.128570][ T9693] loop5: detected capacity change from 0 to 4096
[  288.149864][ T9693] EXT4-fs (loop5): Test dummy encryption mode enabled
[  288.164308][ T9692] EXT4-fs (loop0): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  288.192047][ T9691] EXT4-fs error (device loop3): ext4_get_journal_inode:5796: inode #32: comm syz.3.1140: iget: special inode unallocated
[  288.200093][ T9693] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  288.251972][ T9693] System zones: 0-5
[  288.259331][ T9692] EXT4-fs error (device loop0): ext4_lookup:1787: inode #16: comm syz.0.1138: iget: bad i_size value: 8796093031208
[  288.270646][ T9693] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  288.274684][ T9691] EXT4-fs (loop3): Remounting filesystem read-only
[  288.395353][ T9691] EXT4-fs (loop3): no journal found
[  288.559412][ T9691] EXT4-fs (loop3): can't get journal size
[  288.572942][ T9691] EXT4-fs (loop3): filesystem is read-only
[  288.599469][ T9691] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  288.669916][ T5829] EXT4-fs (loop0): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  288.919464][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.006730][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.047698][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  289.069541][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  289.078420][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  289.096701][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  289.126303][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  289.418596][ T5964] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  289.494543][ T4468] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.509945][ T4468] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.519815][ T4468] bond0 (unregistering): Released all slaves
[  289.537629][ T9704] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1141'.
[  289.575348][ T5964] usb 6-1: Using ep0 maxpacket: 8
[  289.598408][ T5964] usb 6-1: config index 0 descriptor too short (expected 301, got 45)
[  289.642274][ T5964] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  289.654215][ T5964] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  289.665024][ T5964] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  289.691531][ T5964] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  289.752881][ T5964] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  289.780722][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  290.013005][ T5964] usb 6-1: usb_control_msg returned -32
[  290.030990][ T5964] usbtmc 6-1:16.0: can't read capabilities
[  290.430135][ T4468] hsr_slave_0: left promiscuous mode
[  290.458150][ T4468] hsr_slave_1: left promiscuous mode
[  290.484375][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.505524][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.536920][ T4468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.564881][ T4468] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.603566][ T9752] loop0: detected capacity change from 0 to 16
[  290.640442][ T9752] erofs (device loop0): mounted with root inode @ nid 36.
[  290.671693][ T4468] veth1_macvtap: left promiscuous mode
[  290.697788][ T4468] veth0_macvtap: left promiscuous mode
[  290.715837][ T4468] veth1_vlan: left promiscuous mode
[  290.721774][ T4468] veth0_vlan: left promiscuous mode
[  290.898993][ T9757] loop0: detected capacity change from 0 to 4096
[  290.927594][ T9757] EXT4-fs (loop0): Test dummy encryption mode enabled
[  290.959048][ T9757] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  291.000650][ T9757] System zones: 0-5
[  291.042705][ T9757] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.205423][ T5836] Bluetooth: hci4: command tx timeout
[  291.850759][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.874794][ T9773] loop3: detected capacity change from 0 to 2048
[  292.028237][ T9775] loop0: detected capacity change from 0 to 128
[  292.069784][ T9775] EXT4-fs: Ignoring removed nomblk_io_submit option
[  292.132563][ T9775] EXT4-fs: Ignoring removed nomblk_io_submit option
[  292.153008][ T9775] EXT4-fs (loop0): Test dummy encryption mode enabled
[  292.194383][ T5964] usb 6-1: USB disconnect, device number 4
[  292.225081][ T9775] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  292.260709][ T9775] ext4 filesystem being mounted at /258/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  292.322378][ T9775] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni"
[  292.802690][ T4468] team0 (unregistering): Port device team_slave_1 removed
[  293.019362][ T9786] netlink: 'syz.4.1161': attribute type 1 has an invalid length.
[  293.097443][ T9775] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  293.107500][ T4468] team0 (unregistering): Port device team_slave_0 removed
[  293.208975][ T9794] loop3: detected capacity change from 0 to 1024
[  293.252081][ T5836] Bluetooth: hci4: command tx timeout
[  293.315813][ T9794] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  293.492329][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.009382][ T9789] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1159'.
[  294.187477][ T9714] chnl_net:caif_netlink_parms(): no params data found
[  295.325796][ T5836] Bluetooth: hci4: command tx timeout
[  295.412347][   T30] audit: type=1326 audit(1750586853.088:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9821 comm="syz.5.1169" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358c38e929 code=0x0
[  295.447573][ T9714] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.465862][ T9714] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.488279][ T9714] bridge_slave_0: entered allmulticast mode
[  295.525449][ T5915] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  295.537240][ T9714] bridge_slave_0: entered promiscuous mode
[  295.570308][ T9714] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.574221][ T9839] loop0: detected capacity change from 0 to 2048
[  295.591631][ T9714] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.622498][ T9714] bridge_slave_1: entered allmulticast mode
[  295.641686][ T9839] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  295.667706][ T9714] bridge_slave_1: entered promiscuous mode
[  295.725641][ T5915] usb 5-1: Using ep0 maxpacket: 8
[  295.733127][ T5915] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  295.767646][ T5915] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  295.800433][ T5915] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  295.831924][ T9846] loop3: detected capacity change from 0 to 128
[  295.855254][ T5915] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  295.879959][ T9846] EXT4-fs: Ignoring removed nomblk_io_submit option
[  295.908930][ T5915] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  295.951588][ T9846] EXT4-fs: Ignoring removed nomblk_io_submit option
[  296.003690][ T5915] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  296.025732][ T9846] EXT4-fs (loop3): Test dummy encryption mode enabled
[  296.054654][ T9714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  296.069043][ T9846] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  296.095477][ T5915] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.104855][ T9714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  296.134936][ T9846] ext4 filesystem being mounted at /268/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  296.303295][ T9714] team0: Port device team_slave_0 added
[  296.337207][ T9714] team0: Port device team_slave_1 added
[  296.395767][ T5915] usb 5-1: usb_control_msg returned -32
[  296.403021][ T5915] usbtmc 5-1:16.0: can't read capabilities
[  296.439749][ T9846] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  296.643706][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_0
[  296.670740][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.699521][ T9861] loop0: detected capacity change from 0 to 128
[  296.713764][ T9714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  296.742786][ T9861] EXT4-fs (loop0): Test dummy encryption mode enabled
[  296.760987][ T9861] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  296.814098][ T9861] ext4 filesystem being mounted at /263/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  296.817936][ T9714] batman_adv: batadv0: Adding interface: batadv_slave_1
[  296.850510][ T9714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  296.881458][ T9714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  296.933061][ T5829] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  296.965560][ T9714] hsr_slave_0: entered promiscuous mode
[  296.973597][ T9714] hsr_slave_1: entered promiscuous mode
[  297.042598][ T9714] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  297.087461][ T9714] Cannot create hsr debugfs directory
[  297.096021][ T9868] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1179'.
[  297.163753][ T9874] loop0: detected capacity change from 0 to 1024
[  297.185143][ T9874] EXT4-fs: Ignoring removed oldalloc option
[  297.216616][ T9874] EXT4-fs: Ignoring removed nomblk_io_submit option
[  297.247533][ T9874] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  297.306423][ T9874] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  297.405350][ T5836] Bluetooth: hci4: command tx timeout
[  297.502224][ T5829] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.001775][ T5914] usb 5-1: USB disconnect, device number 11
[  298.281553][ T9897] loop3: detected capacity change from 0 to 128
[  298.314299][ T9897] EXT4-fs: Ignoring removed nomblk_io_submit option
[  298.331465][ T9897] EXT4-fs: Ignoring removed nomblk_io_submit option
[  298.371936][ T9897] EXT4-fs (loop3): Test dummy encryption mode enabled
[  298.492497][ T9897] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  298.607301][ T9897] ext4 filesystem being mounted at /271/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  298.905030][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1190'.
[  299.400562][   T30] audit: type=1326 audit(1750586857.128:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9906 comm="syz.0.1188" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f359bd8e929 code=0x0
[  299.424180][ T9897] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  299.805035][ T9714] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  299.805400][    C0] bridge0: port 1(bridge_slave_0) entered learning state
[  299.815880][ T9927] netlink: 'syz.5.1191': attribute type 10 has an invalid length.
[  299.819046][    C0] bridge0: port 2(bridge_slave_1) entered learning state
[  299.865186][ T9929] loop3: detected capacity change from 0 to 128
[  299.891878][ T9929] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  299.901942][ T9927] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.909643][ T9927] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.998653][ T9927] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.006105][ T9927] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.014116][ T9927] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.021610][ T9927] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.094367][ T9927] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  300.103863][ T9714] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  300.110805][ T9927] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000).
[  300.111224][ T9927] qnx6: wrong signature (magic) in superblock #1.
[  300.128180][ T9927] qnx6: unable to read the first superblock
[  300.514847][ T9714] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  300.546377][ T9473] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  300.620368][ T9714] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  301.616894][ T9954] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1196'.
[  302.057801][ T9714] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.304745][ T9714] 8021q: adding VLAN 0 to HW filter on device team0
[  302.650069][ T9976] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1202'.
[  303.380820][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[  303.388046][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[  303.607476][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[  303.614585][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[  303.798163][ T9982] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1204'.
[  303.860019][ T9982] openvswitch: netlink: Flow key attr not present in new flow.
[  304.389407][ T9714] 8021q: adding VLAN 0 to HW filter on device batadv0
[  304.517502][T10003] loop3: detected capacity change from 0 to 8192
[  304.538444][ T9714] veth0_vlan: entered promiscuous mode
[  304.546223][T10003] vfat: Unknown parameter './file0'
[  304.623952][ T9714] veth1_vlan: entered promiscuous mode
[  304.945810][ T9714] veth0_macvtap: entered promiscuous mode
[  305.695969][ T9714] veth1_macvtap: entered promiscuous mode
[  305.951400][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.019031][ T9714] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.255167][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.723806][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.812405][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.858527][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  307.021137][T10035] loop0: detected capacity change from 0 to 128
[  307.035677][T10035] EXT4-fs: Ignoring removed nomblk_io_submit option
[  307.042711][T10035] EXT4-fs: Ignoring removed nomblk_io_submit option
[  307.059647][T10035] EXT4-fs (loop0): Test dummy encryption mode enabled
[  307.067239][ T4468] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.084732][ T4468] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.155106][T10035] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  307.179260][  T757] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.329707][T10043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1214'.
[  307.345440][  T757] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.367982][T10035] ext4 filesystem being mounted at /273/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  307.632422][T10035] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  307.768622][T10056] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1217'.
[  307.835420][T10056] openvswitch: netlink: Flow key attr not present in new flow.
[  308.690921][T10067] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1220'.
[  308.835366][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  309.055395][    T9] usb 4-1: Using ep0 maxpacket: 32
[  309.088121][  T757] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.106182][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  309.127120][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  309.152308][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  309.190481][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  309.207763][    T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  309.217487][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  309.238847][    T9] usb 4-1: Product: syz
[  309.243066][    T9] usb 4-1: Manufacturer: syz
[  309.260394][    T9] usb 4-1: SerialNumber: syz
[  309.269598][    T9] usb 4-1: config 0 descriptor??
[  309.337432][  T757] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.528994][  T757] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  309.783686][T10085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'.
[  309.823340][T10085] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1223'.
[  309.847815][  T757] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  310.378550][T10100] netlink: 188 bytes leftover after parsing attributes in process `syz.0.1229'.
[  310.426797][  T757] bridge_slave_1: left allmulticast mode
[  310.432551][  T757] bridge_slave_1: left promiscuous mode
[  310.465669][T10100] openvswitch: netlink: Flow actions attr not present in new flow.
[  310.476886][  T757] bridge0: port 2(bridge_slave_1) entered disabled state
[  310.544907][  T757] bridge_slave_0: left allmulticast mode
[  310.583320][  T757] bridge_slave_0: left promiscuous mode
[  310.604595][  T757] bridge0: port 1(bridge_slave_0) entered disabled state
[  310.976922][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  310.986868][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  311.000244][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  311.460608][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  311.470533][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  311.723021][ T5915] usb 4-1: USB disconnect, device number 19
[  311.961747][T10130] loop3: detected capacity change from 0 to 512
[  312.096653][T10130] EXT4-fs: Ignoring removed nobh option
[  312.175307][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  312.198506][T10130] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  312.637413][    T9] usb 6-1: unable to get BOS descriptor or descriptor too short
[  312.687769][    T9] usb 6-1: config 127 has an invalid interface number: 31 but max is 0
[  312.704206][T10130] EXT4-fs (loop3): 1 truncate cleaned up
[  312.748855][    T9] usb 6-1: config 127 has no interface number 0
[  312.757238][    T9] usb 6-1: config 127 interface 31 altsetting 5 endpoint 0x2 has invalid maxpacket 1024, setting to 64
[  312.780808][T10130] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.114952][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.185311][    T9] usb 6-1: config 127 interface 31 has no altsetting 0
[  313.205241][    T9] usb 6-1: language id specifier not provided by device, defaulting to English
[  313.239504][    T9] usb 6-1: New USB device found, idVendor=07cf, idProduct=2003, bcdDevice=26.af
[  313.281793][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.502863][    T9] usb 6-1: Product: syz
[  313.531774][    T9] usb 6-1: Manufacturer: ꒰♁Ꚉ褌ꭎ揓侒졑⬽䩄⣇
[  313.564588][    T9] usb 6-1: SerialNumber: syz
[  313.565590][ T5846] Bluetooth: hci4: command tx timeout
[  313.949473][    T9] usb 6-1: bad CDC descriptors
[  314.074551][    T9] usb 6-1: USB disconnect, device number 5
[  314.206648][  T757] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  314.274810][  T757] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  314.321710][  T757] bond0 (unregistering): Released all slaves
[  314.399481][T10158] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1242'.
[  314.496719][T10158] openvswitch: netlink: Flow actions attr not present in new flow.
[  315.165818][    C0] bridge0: port 2(bridge_slave_1) entered forwarding state
[  315.173114][    C0] bridge0: topology change detected, propagating
[  315.179805][    C0] bridge0: port 1(bridge_slave_0) entered forwarding state
[  315.187063][    C0] bridge0: topology change detected, propagating
[  315.536983][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1248'.
[  315.632969][  T757] hsr_slave_0: left promiscuous mode
[  315.647674][ T5846] Bluetooth: hci4: command tx timeout
[  315.661083][  T757] hsr_slave_1: left promiscuous mode
[  315.682952][  T757] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  315.715332][  T757] batman_adv: batadv0: Removing interface: batadv_slave_0
[  315.744342][  T757] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  315.768886][  T757] batman_adv: batadv0: Removing interface: batadv_slave_1
[  315.852175][  T757] veth1_macvtap: left promiscuous mode
[  315.871952][  T757] veth0_macvtap: left promiscuous mode
[  315.895581][  T757] veth1_vlan: left promiscuous mode
[  315.901008][  T757] veth0_vlan: left promiscuous mode
[  317.150404][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  317.163046][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  317.219879][  T757] team0 (unregistering): Port device team_slave_1 removed
[  317.267738][  T757] team0 (unregistering): Port device team_slave_0 removed
[  317.728686][ T5846] Bluetooth: hci4: command tx timeout
[  317.990653][T10213] netlink: 188 bytes leftover after parsing attributes in process `syz.4.1256'.
[  317.994673][T10114] chnl_net:caif_netlink_parms(): no params data found
[  318.007033][T10213] openvswitch: netlink: Flow actions attr not present in new flow.
[  318.355338][T10114] bridge0: port 1(bridge_slave_0) entered blocking state
[  318.454865][T10114] bridge0: port 1(bridge_slave_0) entered disabled state
[  318.462920][T10114] bridge_slave_0: entered allmulticast mode
[  318.472055][T10114] bridge_slave_0: entered promiscuous mode
[  318.487865][T10114] bridge0: port 2(bridge_slave_1) entered blocking state
[  318.508482][T10114] bridge0: port 2(bridge_slave_1) entered disabled state
[  318.524654][T10114] bridge_slave_1: entered allmulticast mode
[  318.547904][T10114] bridge_slave_1: entered promiscuous mode
[  318.877039][T10114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  319.550957][T10114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  319.805367][ T5846] Bluetooth: hci4: command tx timeout
[  320.048463][T10114] team0: Port device team_slave_0 added
[  320.078183][T10114] team0: Port device team_slave_1 added
[  320.279183][T10114] batman_adv: batadv0: Adding interface: batadv_slave_0
[  320.299227][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  320.695770][T10114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  320.941908][T10114] batman_adv: batadv0: Adding interface: batadv_slave_1
[  320.970357][T10114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  321.053523][T10262] openvswitch: netlink: Flow actions attr not present in new flow.
[  321.141711][T10114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  322.294962][T10114] hsr_slave_0: entered promiscuous mode
[  322.320036][T10114] hsr_slave_1: entered promiscuous mode
[  322.349118][T10114] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  322.384434][T10114] Cannot create hsr debugfs directory
[  323.062510][T10288] loop5: detected capacity change from 0 to 1024
[  323.845523][T10307] raw_sendmsg: syz.5.1276 forgot to set AF_INET. Fix it!
[  324.654859][T10309] openvswitch: netlink: Flow actions attr not present in new flow.
[  324.670856][T10314] loop5: detected capacity change from 0 to 1024
[  324.755946][T10314] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  324.865497][T10314] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  324.888979][T10314] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1279: Failed to acquire dquot type 0
[  324.997869][T10314] EXT4-fs error (device loop5): mb_free_blocks:1948: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  325.135484][T10314] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.1279: corrupted inode contents
[  325.217319][T10314] EXT4-fs error (device loop5): ext4_dirty_inode:6459: inode #13: comm syz.5.1279: mark_inode_dirty error
[  325.382124][T10314] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.1279: corrupted inode contents
[  325.598724][T10314] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #13: comm syz.5.1279: mark_inode_dirty error
[  325.984202][T10314] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.1279: corrupted inode contents
[  326.040852][T10314] EXT4-fs error (device loop5) in ext4_orphan_del:305: Corrupt filesystem
[  326.153962][T10314] EXT4-fs error (device loop5): ext4_do_update_inode:5568: inode #13: comm syz.5.1279: corrupted inode contents
[  326.178596][T10314] EXT4-fs error (device loop5): ext4_truncate:4597: inode #13: comm syz.5.1279: mark_inode_dirty error
[  326.207840][T10314] EXT4-fs error (device loop5) in ext4_process_orphan:347: Corrupt filesystem
[  326.234408][T10314] EXT4-fs (loop5): 1 truncate cleaned up
[  326.247206][T10314] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  326.274777][T10342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1287'.
[  326.287717][T10314] Quota error (device loop5): do_check_range: Getting block 64 out of range 1-5
[  326.302206][T10314] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  326.333020][T10314] EXT4-fs error (device loop5): ext4_acquire_dquot:6933: comm syz.5.1279: Failed to acquire dquot type 0
[  326.433940][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.450003][T10349] loop3: detected capacity change from 0 to 1024
[  326.756651][T10114] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  327.153459][T10114] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  327.353493][T10114] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  327.487014][T10114] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  327.539169][T10361] netlink: 'syz.4.1293': attribute type 1 has an invalid length.
[  327.708548][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'.
[  327.712849][T10361] 8021q: adding VLAN 0 to HW filter on device bond0
[  327.754380][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1293'.
[  328.060785][T10386] loop3: detected capacity change from 0 to 4096
[  328.111198][T10386] EXT4-fs (loop3): Test dummy encryption mode enabled
[  328.184622][T10386] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  328.208756][T10386] System zones: 0-5
[  328.339041][T10386] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.369973][T10114] 8021q: adding VLAN 0 to HW filter on device bond0
[  329.364899][T10114] 8021q: adding VLAN 0 to HW filter on device team0
[  329.382004][ T1329] bridge0: port 1(bridge_slave_0) entered blocking state
[  329.389218][ T1329] bridge0: port 1(bridge_slave_0) entered forwarding state
[  329.485032][   T59] bridge0: port 2(bridge_slave_1) entered blocking state
[  329.492241][   T59] bridge0: port 2(bridge_slave_1) entered forwarding state
[  329.773407][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.791362][T10114] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  329.857322][T10114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  330.874768][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1308'.
[  331.064025][T10114] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.226511][T10114] veth0_vlan: entered promiscuous mode
[  331.268854][T10114] veth1_vlan: entered promiscuous mode
[  331.376443][T10442] loop3: detected capacity change from 0 to 1024
[  331.386081][T10442] EXT4-fs: Ignoring removed mblk_io_submit option
[  331.392541][T10442] EXT4-fs: Ignoring removed mblk_io_submit option
[  331.428070][T10442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.828761][T10442] ext4 filesystem being mounted at /298/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  331.994017][T10443] loop5: detected capacity change from 0 to 4096
[  332.005699][T10443] EXT4-fs (loop5): Test dummy encryption mode enabled
[  332.031437][T10114] veth0_macvtap: entered promiscuous mode
[  332.094658][T10114] veth1_macvtap: entered promiscuous mode
[  332.116199][T10443] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  332.143059][T10114] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.155049][T10114] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.168179][ T9473] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  332.172686][T10443] System zones: 0-5
[  332.202051][ T9473] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  332.227047][T10443] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.236028][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.259950][ T9473] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  332.467238][ T9473] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  332.837465][T10461] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1318'.
[  332.865125][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  332.896349][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  332.900921][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.070197][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  333.104948][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  333.656068][T10471] loop5: detected capacity change from 0 to 512
[  333.796130][T10471] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  333.851736][ T1343] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.119254][ T1343] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.382042][ T1343] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.511851][ T1343] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  334.680169][ T1343] bridge_slave_1: left allmulticast mode
[  334.686943][ T1343] bridge_slave_1: left promiscuous mode
[  334.692720][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state
[  334.703776][ T1343] bridge_slave_0: left allmulticast mode
[  334.709944][ T1343] bridge_slave_0: left promiscuous mode
[  334.715930][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state
[  335.404681][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  335.445520][   T24] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  335.490350][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  335.570521][ T1343] bond0 (unregistering): Released all slaves
[  336.305181][   T24] usb 4-1: device descriptor read/64, error -71
[  336.415742][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  336.428266][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  336.436542][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  336.445846][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  336.454320][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  336.555316][   T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  336.810368][   T24] usb 4-1: device descriptor read/64, error -71
[  336.928508][   T24] usb usb4-port1: attempt power cycle
[  336.939747][ T1343] hsr_slave_0: left promiscuous mode
[  337.136307][ T1343] hsr_slave_1: left promiscuous mode
[  337.154249][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  337.225737][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0
[  337.241760][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  337.251177][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_1
[  337.341603][ T1343] veth1_macvtap: left promiscuous mode
[  337.431528][   T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  337.436164][ T1343] veth0_macvtap: left promiscuous mode
[  337.459747][ T1343] veth1_vlan: left promiscuous mode
[  337.468121][   T24] usb 4-1: device descriptor read/8, error -71
[  337.469620][ T1343] veth0_vlan: left promiscuous mode
[  337.705374][   T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  337.748665][   T24] usb 4-1: device descriptor read/8, error -71
[  337.875816][   T24] usb usb4-port1: unable to enumerate USB device
[  338.343821][T10558] loop3: detected capacity change from 0 to 128
[  338.354933][T10558] EXT4-fs: Ignoring removed nomblk_io_submit option
[  338.375926][T10558] EXT4-fs: Ignoring removed nomblk_io_submit option
[  338.383521][T10558] EXT4-fs (loop3): Test dummy encryption mode enabled
[  338.430717][T10558] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  338.449698][T10558] ext4 filesystem being mounted at /301/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  338.501500][T10558] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  338.537658][ T5836] Bluetooth: hci4: command tx timeout
[  338.928279][ T1343] team0 (unregistering): Port device team_slave_1 removed
[  339.000905][ T1343] team0 (unregistering): Port device team_slave_0 removed
[  339.127841][T10569] loop3: detected capacity change from 0 to 1024
[  339.152137][T10569] EXT4-fs: Ignoring removed orlov option
[  339.193216][T10569] EXT4-fs: Ignoring removed nomblk_io_submit option
[  339.223097][T10569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.353207][T10574] loop5: detected capacity change from 0 to 2048
[  339.409803][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.443968][T10574] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  339.489747][T10574] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  339.580211][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.758502][T10580] loop5: detected capacity change from 0 to 4096
[  339.775466][   T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  339.799169][T10580] EXT4-fs (loop5): Test dummy encryption mode enabled
[  339.824232][T10580] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  339.838092][T10580] System zones: 0-5
[  339.845029][T10580] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  339.955302][   T24] usb 4-1: Using ep0 maxpacket: 8
[  339.966801][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  340.033822][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.107032][   T24] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00
[  340.149771][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.209884][   T24] usb 4-1: config 0 descriptor??
[  340.605620][ T5836] Bluetooth: hci4: command tx timeout
[  340.699877][   T24] hid-multitouch 0003:0EEF:72C4.0007: hidraw0: USB HID v0.03 Device [HID 0eef:72c4] on usb-dummy_hcd.3-1/input0
[  340.753270][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.771424][T10519] chnl_net:caif_netlink_parms(): no params data found
[  341.288939][T10519] bridge0: port 1(bridge_slave_0) entered blocking state
[  341.300723][T10519] bridge0: port 1(bridge_slave_0) entered disabled state
[  341.309981][T10519] bridge_slave_0: entered allmulticast mode
[  341.322229][T10519] bridge_slave_0: entered promiscuous mode
[  341.332632][T10607] loop5: detected capacity change from 0 to 128
[  341.335164][T10519] bridge0: port 2(bridge_slave_1) entered blocking state
[  341.361325][T10607] EXT4-fs: Ignoring removed nomblk_io_submit option
[  341.387469][T10519] bridge0: port 2(bridge_slave_1) entered disabled state
[  341.400334][T10519] bridge_slave_1: entered allmulticast mode
[  341.424170][T10519] bridge_slave_1: entered promiscuous mode
[  341.432753][T10607] EXT4-fs: Ignoring removed nomblk_io_submit option
[  341.509786][T10607] EXT4-fs (loop5): Test dummy encryption mode enabled
[  341.534833][T10519] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  341.556373][T10519] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  341.616192][T10607] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  341.646407][T10607] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  341.709826][T10519] team0: Port device team_slave_0 added
[  341.719848][T10519] team0: Port device team_slave_1 added
[  341.744649][T10607] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  341.856628][T10519] batman_adv: batadv0: Adding interface: batadv_slave_0
[  341.989159][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.019494][T10519] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  342.052934][T10519] batman_adv: batadv0: Adding interface: batadv_slave_1
[  342.060988][T10519] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  342.133103][T10519] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  342.415021][T10519] hsr_slave_0: entered promiscuous mode
[  342.439155][T10519] hsr_slave_1: entered promiscuous mode
[  342.450905][T10519] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  342.460117][T10519] Cannot create hsr debugfs directory
[  343.175689][ T5836] Bluetooth: hci4: command tx timeout
[  343.215023][ T5915] usb 4-1: USB disconnect, device number 24
[  343.374153][T10637] loop3: detected capacity change from 0 to 512
[  343.446249][T10637] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  343.496698][T10637] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.1358: bad orphan inode 15
[  343.608948][T10637] ext4_test_bit(bit=14, block=4) = 1
[  343.614389][T10637] is_bad_inode(inode)=0
[  343.625119][T10641] loop5: detected capacity change from 0 to 4096
[  343.660090][T10637] NEXT_ORPHAN(inode)=0
[  343.664432][T10637] max_ino=32
[  343.664628][T10641] EXT4-fs (loop5): Test dummy encryption mode enabled
[  343.705284][T10637] i_nlink=1
[  343.709436][T10641] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  343.725821][T10641] System zones: 0-5
[  343.737102][T10637] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.763294][T10641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  343.880746][T10637] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #2: block 4: comm syz.3.1358: lblock 0 mapped to illegal pblock 4 (length 1)
[  344.178358][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  344.463430][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.222078][T10519] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  345.243960][T10519] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  345.254908][ T5836] Bluetooth: hci4: command tx timeout
[  345.313925][T10519] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  345.382260][T10519] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  345.404714][T10698] loop3: detected capacity change from 0 to 4096
[  345.431895][T10698] EXT4-fs (loop3): Test dummy encryption mode enabled
[  345.466782][T10698] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  345.475023][T10698] System zones: 0-5
[  345.497087][T10698] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.564035][T10519] 8021q: adding VLAN 0 to HW filter on device bond0
[  346.543396][T10519] 8021q: adding VLAN 0 to HW filter on device team0
[  346.572532][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.579737][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.219243][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  347.296760][ T1343] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.303983][ T1343] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.564669][T10519] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  347.580973][T10519] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  348.268808][T10519] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.424275][T10760] fuse: Bad value for 'user_id'
[  348.450693][T10760] fuse: Bad value for 'user_id'
[  348.492214][T10519] veth0_vlan: entered promiscuous mode
[  348.512590][T10519] veth1_vlan: entered promiscuous mode
[  348.577689][T10519] veth0_macvtap: entered promiscuous mode
[  348.600033][T10519] veth1_macvtap: entered promiscuous mode
[  348.778749][T10519] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.890118][T10519] batman_adv: batadv0: Interface activated: batadv_slave_1
[  349.022364][   T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.078212][   T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.113652][   T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.150051][T10782] loop5: detected capacity change from 0 to 128
[  349.205597][   T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.291882][T10784] loop3: detected capacity change from 0 to 1024
[  349.372825][T10784] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  349.593235][T10796] loop5: detected capacity change from 0 to 128
[  349.631499][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.679187][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.714054][T10796] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  349.745708][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.754240][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.765182][T10796] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  349.894488][T10796] syz.5.1396 (pid 10796) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  349.905652][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.103367][T10803] fscrypt: Adiantum using implementation "adiantum(xchacha12-x86_64,aes-aesni,nhpoly1305-avx2)"
[  350.246962][ T8921] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  350.264015][T10814] fuse: Bad value for 'user_id'
[  350.292315][T10814] fuse: Bad value for 'user_id'
[  350.558408][T10818] loop5: detected capacity change from 0 to 4096
[  350.618406][T10818] EXT4-fs (loop5): Test dummy encryption mode enabled
[  350.638872][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  350.696769][T10818] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  350.705005][T10818] System zones: 0-5
[  350.734902][T10818] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.989558][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.197816][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.247976][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.404143][   T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  351.586336][   T12] bridge_slave_1: left allmulticast mode
[  351.591994][   T12] bridge_slave_1: left promiscuous mode
[  351.599693][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  351.608768][   T12] bridge_slave_0: left allmulticast mode
[  351.614414][   T12] bridge_slave_0: left promiscuous mode
[  351.620697][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  352.169239][T10856] fuse: Bad value for 'user_id'
[  352.182114][T10856] fuse: Bad value for 'user_id'
[  352.186764][T10858] netlink: 'syz.3.1414': attribute type 1 has an invalid length.
[  352.308273][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  352.319858][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  352.331059][   T12] bond0 (unregistering): Released all slaves
[  352.373997][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  352.387862][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  352.393384][T10858] 8021q: adding VLAN 0 to HW filter on device bond4
[  352.403048][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  352.417471][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  352.428379][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  352.839669][T10877] loop5: detected capacity change from 0 to 256
[  352.876812][T10877] exfat: Bad value for 'gid'
[  352.892251][T10877] exfat: Bad value for 'gid'
[  353.075690][ T5901] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  353.130461][T10888] fuse: Bad value for 'fd'
[  353.183250][T10891] syz_tun: entered allmulticast mode
[  353.206275][T10890] syz_tun: left allmulticast mode
[  353.245566][ T5901] usb 4-1: Using ep0 maxpacket: 32
[  353.252821][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  353.268489][ T5901] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  353.279476][ T5901] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  353.289309][   T12] hsr_slave_0: left promiscuous mode
[  353.295724][ T5901] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.316261][ T5901] usb 4-1: config 0 descriptor??
[  353.331525][ T5901] hub 4-1:0.0: USB hub found
[  353.336586][   T12] hsr_slave_1: left promiscuous mode
[  353.342689][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  353.360517][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  353.381368][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  353.381487][T10897] netlink: 'syz.5.1429': attribute type 1 has an invalid length.
[  353.401051][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  353.424926][   T12] veth1_macvtap: left promiscuous mode
[  353.430730][   T12] veth0_macvtap: left promiscuous mode
[  353.437014][   T12] veth1_vlan: left promiscuous mode
[  353.442370][   T12] veth0_vlan: left promiscuous mode
[  353.530251][ T5901] hub 4-1:0.0: 1 port detected
[  354.078317][   T12] team0 (unregistering): Port device team_slave_1 removed
[  354.135010][ T5901] hub 4-1:0.0: activate --> -90
[  354.148730][   T12] team0 (unregistering): Port device team_slave_0 removed
[  354.449937][ T5846] Bluetooth: hci4: command tx timeout
[  354.536955][ T5915] usb 4-1: USB disconnect, device number 25
[  354.537054][ T5901] usb 4-1-port1: config error
[  354.752763][T10897] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  354.779212][T10915] sit0: entered allmulticast mode
[  354.963777][T10927] fuse: Bad value for 'fd'
[  355.117768][T10863] chnl_net:caif_netlink_parms(): no params data found
[  355.582740][T10863] bridge0: port 1(bridge_slave_0) entered blocking state
[  355.614302][T10863] bridge0: port 1(bridge_slave_0) entered disabled state
[  355.644486][T10863] bridge_slave_0: entered allmulticast mode
[  355.669342][T10863] bridge_slave_0: entered promiscuous mode
[  355.722823][T10963] netlink: 'syz.5.1448': attribute type 1 has an invalid length.
[  355.741970][T10863] bridge0: port 2(bridge_slave_1) entered blocking state
[  355.781180][T10863] bridge0: port 2(bridge_slave_1) entered disabled state
[  355.804751][T10863] bridge_slave_1: entered allmulticast mode
[  355.833620][T10863] bridge_slave_1: entered promiscuous mode
[  355.959728][T10972] fuse: Bad value for 'fd'
[  356.458660][T10963] 8021q: adding VLAN 0 to HW filter on device bond1
[  356.551880][ T5846] Bluetooth: hci4: command tx timeout
[  356.651461][T10985] loop3: detected capacity change from 0 to 512
[  356.652730][T10863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  356.680018][T10985] EXT4-fs: inline encryption not supported
[  356.708067][T10863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  356.735938][T10984] netlink: 'syz.4.1454': attribute type 29 has an invalid length.
[  356.770604][T10985] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  356.788211][T10984] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1454'.
[  356.817363][T10985] ext4 filesystem being mounted at /323/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  356.930249][T10863] team0: Port device team_slave_0 added
[  356.976939][T10863] team0: Port device team_slave_1 added
[  357.034607][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.099724][T10997] kvm: emulating exchange as write
[  357.156504][T10863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  357.191440][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.227197][T10863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  357.340877][T10863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  357.362774][T10863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  357.480951][T10863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  357.589168][T11023] fuse: Bad value for 'fd'
[  357.624455][T10863] hsr_slave_0: entered promiscuous mode
[  357.660632][T10863] hsr_slave_1: entered promiscuous mode
[  357.679723][T10863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  357.700570][T10863] Cannot create hsr debugfs directory
[  357.754813][T11030] 9pnet_fd: Insufficient options for proto=fd
[  357.760294][T11031] netlink: 'syz.4.1465': attribute type 1 has an invalid length.
[  357.853675][T11031] 8021q: adding VLAN 0 to HW filter on device bond4
[  358.482175][T11062] fuse: Bad value for 'fd'
[  358.605418][ T5846] Bluetooth: hci4: command tx timeout
[  358.613018][T11069] IPv6: addrconf: prefix option has invalid lifetime
[  358.913047][T11083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  358.920653][T11083] IPv6: NLM_F_CREATE should be set when creating new route
[  358.928007][T11083] IPv6: NLM_F_CREATE should be set when creating new route
[  358.939937][T11084] netlink: 'syz.5.1480': attribute type 1 has an invalid length.
[  359.025984][T11084] 8021q: adding VLAN 0 to HW filter on device bond2
[  359.049028][T10863] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  359.209234][T10863] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  359.280244][T10863] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  359.314435][T10863] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  359.410355][T11101] loop5: detected capacity change from 0 to 512
[  359.417932][T11101] EXT4-fs: Ignoring removed i_version option
[  359.476216][T11101] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  359.522701][T11101] ext4 filesystem being mounted at /93/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  359.549515][   T30] audit: type=1326 audit(1750586917.278:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11102 comm="syz.3.1486" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcf7f78e929 code=0x0
[  359.690033][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.846401][T11128] loop5: detected capacity change from 0 to 128
[  359.898759][T11128] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  359.971574][T11128] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.002651][T10863] 8021q: adding VLAN 0 to HW filter on device bond0
[  360.087848][T10863] 8021q: adding VLAN 0 to HW filter on device team0
[  360.158616][ T1343] bridge0: port 1(bridge_slave_0) entered blocking state
[  360.165839][ T1343] bridge0: port 1(bridge_slave_0) entered forwarding state
[  360.251053][T10418] bridge0: port 2(bridge_slave_1) entered blocking state
[  360.258276][T10418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  360.393861][T11145] netlink: 'syz.0.1496': attribute type 1 has an invalid length.
[  360.489783][T11145] 8021q: adding VLAN 0 to HW filter on device bond2
[  360.685566][ T5846] Bluetooth: hci4: command tx timeout
[  360.874605][T11168] loop5: detected capacity change from 0 to 128
[  360.916362][T11168] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  360.941425][T10863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  360.970244][T11168] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  361.010705][T11168] ext2 filesystem being mounted at /97/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  361.060484][T10863] veth0_vlan: entered promiscuous mode
[  361.092594][T10863] veth1_vlan: entered promiscuous mode
[  361.122474][ T8921] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  361.187867][T10863] veth0_macvtap: entered promiscuous mode
[  361.212464][T10863] veth1_macvtap: entered promiscuous mode
[  361.268833][T10863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  361.360599][T10863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  361.409187][T11176] loop5: detected capacity change from 0 to 4096
[  361.448005][T11181] netlink: 292 bytes leftover after parsing attributes in process `syz.0.1503'.
[  361.508275][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  361.542487][T11176] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  361.563607][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  361.604404][T11176] fs-verity: sha256 using implementation "sha256-x86_64"
[  361.661320][T11176] fs-verity (loop5, inode 16): fs-verity keyring is empty, rejecting signed file!
[  361.720598][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  361.784370][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  362.415090][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.550208][T10418] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.580228][T10418] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.762630][T10418] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  362.801220][T10418] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  362.849596][T11209] loop3: detected capacity change from 0 to 4096
[  362.866247][T11209] EXT4-fs (loop3): Test dummy encryption mode enabled
[  362.880963][T11209] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  362.889634][T11209] System zones: 0-5
[  362.898848][T11209] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.052853][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.098655][ T5901] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  363.265466][ T5901] usb 6-1: Using ep0 maxpacket: 32
[  363.275119][ T5901] usb 6-1: config 0 has an invalid interface number: 67 but max is 0
[  363.284056][ T5901] usb 6-1: config 0 has no interface number 0
[  363.291517][ T5901] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  363.312748][ T5901] usb 6-1: config 0 interface 67 altsetting 0 endpoint 0x2 has invalid maxpacket 16640, setting to 1024
[  363.329708][ T5901] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  363.341204][ T5901] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.351538][ T5901] usb 6-1: Product: syz
[  363.357205][ T5901] usb 6-1: Manufacturer: syz
[  363.364670][ T5901] usb 6-1: SerialNumber: syz
[  363.373609][ T5901] usb 6-1: config 0 descriptor??
[  363.390569][ T5901] smsc95xx v2.0.0
[  363.394247][ T5901] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  363.406934][ T5901] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -22
[  363.865159][    T9] usb 6-1: USB disconnect, device number 6
[  364.014723][   T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.407900][   T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.455667][   T24] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  364.519130][   T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.582229][   T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  364.639155][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  364.650341][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  364.671335][   T24] usb 4-1: New USB device found, idVendor=056a, idProduct=00d0, bcdDevice= 0.00
[  364.685604][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  364.709549][   T24] usb 4-1: config 0 descriptor??
[  364.738088][   T36] bridge_slave_1: left allmulticast mode
[  364.743787][   T36] bridge_slave_1: left promiscuous mode
[  364.751091][   T36] bridge0: port 2(bridge_slave_1) entered disabled state
[  364.761779][   T36] bridge_slave_0: left allmulticast mode
[  364.769526][   T36] bridge_slave_0: left promiscuous mode
[  364.775382][   T36] bridge0: port 1(bridge_slave_0) entered disabled state
[  365.141481][   T24] wacom 0003:056A:00D0.0008: unknown main item tag 0x0
[  365.150235][   T24] wacom 0003:056A:00D0.0008: unknown main item tag 0x0
[  365.157350][   T24] wacom 0003:056A:00D0.0008: unknown main item tag 0x0
[  365.164661][   T24] wacom 0003:056A:00D0.0008: unknown main item tag 0x0
[  365.176813][   T24] wacom 0003:056A:00D0.0008: unknown main item tag 0x0
[  365.176825][   T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  365.201731][   T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  365.212845][   T36] bond0 (unregistering): Released all slaves
[  365.353287][ T5964] usb 4-1: USB disconnect, device number 26
[  365.402487][T11230] loop5: detected capacity change from 0 to 512
[  365.439807][T11230] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #17: comm syz.5.1519: iget: bogus i_mode (0)
[  365.456683][T11230] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1519: couldn't read orphan inode 17 (err -117)
[  365.475727][T11230] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  365.541729][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.654049][   T36] hsr_slave_0: left promiscuous mode
[  365.688068][   T36] hsr_slave_1: left promiscuous mode
[  365.706225][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  365.713669][   T36] batman_adv: batadv0: Removing interface: batadv_slave_0
[  365.722333][   T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  365.730044][   T36] batman_adv: batadv0: Removing interface: batadv_slave_1
[  365.752570][   T36] veth1_macvtap: left promiscuous mode
[  365.775375][   T36] veth0_macvtap: left promiscuous mode
[  365.781510][   T36] veth1_vlan: left promiscuous mode
[  365.795375][   T36] veth0_vlan: left promiscuous mode
[  365.848330][ T5836] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  365.857491][ T5836] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  365.867774][ T5836] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  365.876587][ T5836] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  365.884814][ T5836] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  365.901214][T11241] netlink: 44378 bytes leftover after parsing attributes in process `syz.5.1521'.
[  366.286515][   T24] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  366.401784][   T36] team0 (unregistering): Port device team_slave_1 removed
[  366.445894][   T36] team0 (unregistering): Port device team_slave_0 removed
[  366.481494][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  366.494759][   T24] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  366.509427][   T24] usb 4-1: config 16 has 1 interface, different from the descriptor's value: 2
[  366.522303][   T24] usb 4-1: string descriptor 0 read error: -22
[  366.529220][   T24] usb 4-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00
[  366.543720][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.576029][   T24] usb-storage 4-1:16.0: USB Mass Storage device detected
[  366.644752][   T24] usb-storage 4-1:16.0: This device (04e6,000a,0200 S 02 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.16.0-rc2-next-20250620-syzkaller)
[  366.644752][   T24]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  366.793081][   T24] usb 4-1: USB disconnect, device number 27
[  367.297379][T11262] loop5: detected capacity change from 0 to 512
[  367.470208][T11262] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  367.551813][T11262] EXT4-fs error (device loop5): ext4_orphan_get:1393: inode #15: comm syz.5.1529: casefold flag without casefold feature
[  367.562766][T11239] chnl_net:caif_netlink_parms(): no params data found
[  367.590263][T11262] EXT4-fs error (device loop5): ext4_orphan_get:1398: comm syz.5.1529: couldn't read orphan inode 15 (err -117)
[  367.656327][T11262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  367.721715][T11272] binder: BINDER_SET_CONTEXT_MGR already set
[  367.732097][T11272] binder: 11271:11272 ioctl 4018620d 200000000040 returned -16
[  367.781022][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.897424][T11239] bridge0: port 1(bridge_slave_0) entered blocking state
[  367.904681][T11239] bridge0: port 1(bridge_slave_0) entered disabled state
[  367.923794][T11239] bridge_slave_0: entered allmulticast mode
[  367.947076][T11239] bridge_slave_0: entered promiscuous mode
[  367.969778][T11281] loop3: detected capacity change from 0 to 512
[  367.973093][ T5836] Bluetooth: hci4: command tx timeout
[  367.987607][T11239] bridge0: port 2(bridge_slave_1) entered blocking state
[  367.995028][T11239] bridge0: port 2(bridge_slave_1) entered disabled state
[  368.002600][T11239] bridge_slave_1: entered allmulticast mode
[  368.011153][T11239] bridge_slave_1: entered promiscuous mode
[  368.019008][T11281] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  368.102786][T11281] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  368.185408][T11281] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  368.224034][T11239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  368.254978][T11239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  368.371173][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.434923][T11239] team0: Port device team_slave_0 added
[  368.478746][T11295] loop3: detected capacity change from 0 to 128
[  368.483912][T11239] team0: Port device team_slave_1 added
[  368.513823][T11295] EXT4-fs (loop3): Test dummy encryption mode enabled
[  368.548210][T11295] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  368.597385][T11295] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  368.719064][T11239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  368.755254][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  368.842082][ T5832] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  368.859695][T11239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  368.872391][T11309] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1542'.
[  368.920888][T11308] loop5: detected capacity change from 0 to 4096
[  368.932833][T11239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  368.961702][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  369.018287][T11308] EXT4-fs (loop5): Test dummy encryption mode enabled
[  369.043186][T11308] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  369.054861][T11308] System zones: 0-5
[  369.062646][T11308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.069489][T11239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  369.227750][ T8921] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.241358][T11239] hsr_slave_0: entered promiscuous mode
[  369.255090][T11239] hsr_slave_1: entered promiscuous mode
[  369.263232][T11239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  369.276982][T11239] Cannot create hsr debugfs directory
[  369.553071][T11327] loop5: detected capacity change from 0 to 1764
[  370.046251][ T5836] Bluetooth: hci4: command tx timeout
[  370.097890][ T1343] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.261055][ T1343] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.388449][ T1343] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.434955][T11239] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  370.459106][T11239] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  370.522686][ T1343] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.558070][T11239] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  370.571972][T11239] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  370.755513][T11354] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1561'.
[  370.764500][T11354] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  370.786131][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.807380][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.819208][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.829651][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.842941][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.880896][ T1343] bridge_slave_1: left allmulticast mode
[  370.910525][ T1343] bridge_slave_1: left promiscuous mode
[  370.922192][ T1343] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.955823][ T1343] bridge_slave_0: left allmulticast mode
[  370.975417][ T1343] bridge_slave_0: left promiscuous mode
[  370.981224][ T1343] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.301360][ T1343] bond0 (unregistering): (slave bridge0): Releasing backup interface
[  371.422966][ T1343] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.433644][ T1343] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.444326][ T1343] bond0 (unregistering): Released all slaves
[  371.555057][ T1343] bond1 (unregistering): Released all slaves
[  371.712156][ T1343] bond2 (unregistering): Released all slaves
[  371.983958][T11239] 8021q: adding VLAN 0 to HW filter on device bond0
[  372.063529][ T1343] hsr_slave_0: left promiscuous mode
[  372.090400][ T1343] hsr_slave_1: left promiscuous mode
[  372.100043][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.109482][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.126453][ T5846] Bluetooth: hci4: command tx timeout
[  372.133435][ T1343] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.143462][ T1343] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.173206][ T1343] veth1_macvtap: left promiscuous mode
[  372.179167][ T1343] veth0_macvtap: left promiscuous mode
[  372.184833][ T1343] veth1_vlan: left promiscuous mode
[  372.190557][ T1343] veth0_vlan: left promiscuous mode
[  372.947108][ T5846] Bluetooth: hci0: command tx timeout
[  373.225037][T11398] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  373.378979][T11403] loop3: detected capacity change from 0 to 4096
[  373.390629][T11403] EXT4-fs (loop3): Test dummy encryption mode enabled
[  373.431682][T11403] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  373.444282][T11403] System zones: 0-5
[  373.468585][T11403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  373.652816][ T1343] team0 (unregistering): Port device team_slave_1 removed
[  373.698066][ T1343] team0 (unregistering): Port device team_slave_0 removed
[  374.144762][T11239] 8021q: adding VLAN 0 to HW filter on device team0
[  374.205677][ T5846] Bluetooth: hci4: command tx timeout
[  374.207050][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.218234][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[  374.246846][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.436810][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.444001][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[  374.471103][T11416] loop3: detected capacity change from 0 to 2048
[  374.507077][T11416] EXT4-fs: inline encryption not supported
[  374.700626][T11355] chnl_net:caif_netlink_parms(): no params data found
[  374.753687][T11416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  374.886902][ T5934] kernel write not supported for file bpf-prog (pid: 5934 comm: kworker/0:6)
[  375.045690][ T5846] Bluetooth: hci0: command tx timeout
[  375.451467][ T5832] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.446925][T11355] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.454099][T11355] bridge0: port 1(bridge_slave_0) entered disabled state
[  376.515525][T11355] bridge_slave_0: entered allmulticast mode
[  376.530039][T11355] bridge_slave_0: entered promiscuous mode
[  376.556988][T11355] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.571721][T11355] bridge0: port 2(bridge_slave_1) entered disabled state
[  376.586885][T11355] bridge_slave_1: entered allmulticast mode
[  376.604885][T11355] bridge_slave_1: entered promiscuous mode
[  376.806025][T11453] loop3: detected capacity change from 0 to 512
[  376.829257][T11453] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  376.838496][T11355] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  376.857620][T11453] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[  376.894391][T11355] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  376.985097][T11239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.085381][ T5846] Bluetooth: hci0: command tx timeout
[  377.102273][T11355] team0: Port device team_slave_0 added
[  377.116342][T11355] team0: Port device team_slave_1 added
[  377.147787][T11462] ------------[ cut here ]------------
[  377.153347][T11462] WARNING: kernel/bpf/verifier.c:19944 at do_check+0xa99c/0xdba0, CPU#0: syz.4.1597/11462
[  377.163352][T11462] Modules linked in:
[  377.167460][T11462] CPU: 0 UID: 0 PID: 11462 Comm: syz.4.1597 Not tainted 6.16.0-rc2-next-20250620-syzkaller #0 PREEMPT(full) 
[  377.179148][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  377.189479][T11462] RIP: 0010:do_check+0xa99c/0xdba0
[  377.194617][T11462] Code: fc ff df 0f b6 04 08 84 c0 0f 85 91 2a 00 00 c7 03 00 00 00 00 49 bd 00 00 00 00 00 fc ff df e9 9d e9 ff ff e8 a5 8a e9 ff 90 <0f> 0b 90 e9 fe cf ff ff e8 97 8a e9 ff 48 b8 00 00 00 00 00 fc ff
[  377.214321][T11462] RSP: 0018:ffffc90003046ec0 EFLAGS: 00010283
[  377.220746][T11462] RAX: ffffffff81d6ce3b RBX: 000000000000000a RCX: 0000000000080000
[  377.228831][T11462] RDX: ffffc90005512000 RSI: 000000000000142b RDI: 000000000000142c
[  377.236917][T11462] RBP: ffffc900030472d0 R08: 0000000000000000 R09: ffffffffffffffff
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  377.244909][T11462] R10: 0000000000000000 R11: ffffffffffffffff R12: 0000000000000008
[  377.253128][T11462] R13: dffffc0000000000 R14: ffffc90003df1000 R15: ffffc90003df13a9
[  377.261154][T11462] FS:  00007fd96b7636c0(0000) GS:ffff888125c26000(0000) knlGS:0000000000000000
[  377.270395][T11462] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  377.277156][T11462] CR2: 00002000000017c0 CR3: 0000000053f96000 CR4: 00000000003526f0
[  377.285147][T11462] DR0: 0000040000000000 DR1: 000000000000000c DR2: 0000000000000006
[  377.293940][T11462] DR3: 0000000000000006 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  377.302007][T11462] Call Trace:
[  377.305388][T11462]  <TASK>
[  377.308323][T11462]  ? unwind_get_return_address+0x4d/0x90
[  377.313972][T11462]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  377.320218][T11462]  ? bpf_prog_load+0x1318/0x1930
[  377.325169][T11462]  ? __x64_sys_bpf+0x7c/0x90
[  377.329933][T11462]  ? do_syscall_64+0xfa/0x3b0
[  377.334647][T11462]  ? __pfx_do_check+0x10/0x10
[  377.339399][T11462]  ? __asan_memset+0x22/0x50
[  377.344021][T11462]  do_check_common+0x18c9/0x2400
[  377.349036][T11462]  bpf_check+0x110e2/0x1a240
[  377.353810][T11462]  ? __lock_acquire+0xab9/0xd20
[  377.358750][T11462]  ? is_bpf_text_address+0x292/0x2b0
[  377.364068][T11462]  ? is_bpf_text_address+0x26/0x2b0
[  377.369428][T11462]  ? __kernel_text_address+0xd/0x40
[  377.374640][T11462]  ? unwind_get_return_address+0x4d/0x90
[  377.380391][T11462]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  377.386664][T11462]  ? __pfx_bpf_check+0x10/0x10
[  377.391454][T11462]  ? __lock_acquire+0xab9/0xd20
[  377.396378][T11462]  ? __pfx___mutex_trylock_common+0x10/0x10
[  377.402300][T11462]  ? css_rstat_updated+0x24f/0x4e0
[  377.407935][T11462]  ? __lock_acquire+0xab9/0xd20
[  377.412814][T11462]  ? ktime_get_with_offset+0x8c/0x2a0
[  377.418316][T11462]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  377.424568][T11462]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.429806][T11462]  ? ktime_get_with_offset+0x8c/0x2a0
[  377.435243][T11462]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  377.441493][T11462]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  377.448182][T11462]  ? bpf_obj_name_cpy+0x194/0x1e0
[  377.453402][T11462]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  377.458653][T11462]  ? security_bpf_prog_load+0x7f/0x310
[  377.464124][T11462]  bpf_prog_load+0x1318/0x1930
[  377.468905][T11462]  ? __pfx_bpf_prog_load+0x10/0x10
[  377.474009][T11462]  ? bpf_lsm_bpf+0x9/0x20
[  377.478411][T11462]  ? security_bpf+0x7e/0x300
[  377.483015][T11462]  __sys_bpf+0x5f1/0x860
[  377.487564][T11462]  ? __pfx___sys_bpf+0x10/0x10
[  377.492362][T11462]  ? rcu_is_watching+0x15/0xb0
[  377.497179][T11462]  __x64_sys_bpf+0x7c/0x90
[  377.501609][T11462]  do_syscall_64+0xfa/0x3b0
[  377.506161][T11462]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.511365][T11462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.517465][T11462]  ? clear_bhb_loop+0x60/0xb0
[  377.522152][T11462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.528073][T11462] RIP: 0033:0x7fd96a98e929
[  377.532502][T11462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  377.552169][T11462] RSP: 002b:00007fd96b763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  377.560768][T11462] RAX: ffffffffffffffda RBX: 00007fd96abb5fa0 RCX: 00007fd96a98e929
[  377.568898][T11462] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  377.576932][T11462] RBP: 00007fd96aa10b39 R08: 0000000000000000 R09: 0000000000000000
[  377.584920][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  377.592961][T11462] R13: 0000000000000000 R14: 00007fd96abb5fa0 R15: 00007ffdf70548c8
[  377.601008][T11462]  </TASK>
[  377.604054][T11462] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  377.611330][T11462] CPU: 0 UID: 0 PID: 11462 Comm: syz.4.1597 Not tainted 6.16.0-rc2-next-20250620-syzkaller #0 PREEMPT(full) 
[  377.622858][T11462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  377.632902][T11462] Call Trace:
[  377.636169][T11462]  <TASK>
[  377.639085][T11462]  dump_stack_lvl+0x99/0x250
[  377.643669][T11462]  ? __asan_memcpy+0x40/0x70
[  377.648246][T11462]  ? __pfx_dump_stack_lvl+0x10/0x10
[  377.653435][T11462]  ? __pfx__printk+0x10/0x10
[  377.658024][T11462]  panic+0x2db/0x790
[  377.661921][T11462]  ? __pfx_panic+0x10/0x10
[  377.666344][T11462]  __warn+0x334/0x4c0
[  377.670315][T11462]  ? do_check+0xa99c/0xdba0
[  377.674807][T11462]  ? do_check+0xa99c/0xdba0
[  377.679301][T11462]  report_bug+0x2be/0x4f0
[  377.683624][T11462]  ? do_check+0xa99c/0xdba0
[  377.688118][T11462]  ? do_check+0xa99c/0xdba0
[  377.692604][T11462]  ? do_check+0xa99e/0xdba0
[  377.697095][T11462]  handle_bug+0x84/0x160
[  377.701323][T11462]  exc_invalid_op+0x1a/0x50
[  377.705812][T11462]  asm_exc_invalid_op+0x1a/0x20
[  377.710651][T11462] RIP: 0010:do_check+0xa99c/0xdba0
[  377.715747][T11462] Code: fc ff df 0f b6 04 08 84 c0 0f 85 91 2a 00 00 c7 03 00 00 00 00 49 bd 00 00 00 00 00 fc ff df e9 9d e9 ff ff e8 a5 8a e9 ff 90 <0f> 0b 90 e9 fe cf ff ff e8 97 8a e9 ff 48 b8 00 00 00 00 00 fc ff
[  377.735341][T11462] RSP: 0018:ffffc90003046ec0 EFLAGS: 00010283
[  377.741398][T11462] RAX: ffffffff81d6ce3b RBX: 000000000000000a RCX: 0000000000080000
[  377.749355][T11462] RDX: ffffc90005512000 RSI: 000000000000142b RDI: 000000000000142c
[  377.757313][T11462] RBP: ffffc900030472d0 R08: 0000000000000000 R09: ffffffffffffffff
[  377.765270][T11462] R10: 0000000000000000 R11: ffffffffffffffff R12: 0000000000000008
[  377.773231][T11462] R13: dffffc0000000000 R14: ffffc90003df1000 R15: ffffc90003df13a9
[  377.781196][T11462]  ? do_check+0xa99b/0xdba0
[  377.785694][T11462]  ? unwind_get_return_address+0x4d/0x90
[  377.791316][T11462]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  377.797481][T11462]  ? bpf_prog_load+0x1318/0x1930
[  377.802404][T11462]  ? __x64_sys_bpf+0x7c/0x90
[  377.806974][T11462]  ? do_syscall_64+0xfa/0x3b0
[  377.811653][T11462]  ? __pfx_do_check+0x10/0x10
[  377.816326][T11462]  ? __asan_memset+0x22/0x50
[  377.820914][T11462]  do_check_common+0x18c9/0x2400
[  377.825861][T11462]  bpf_check+0x110e2/0x1a240
[  377.830459][T11462]  ? __lock_acquire+0xab9/0xd20
[  377.835318][T11462]  ? is_bpf_text_address+0x292/0x2b0
[  377.840590][T11462]  ? is_bpf_text_address+0x26/0x2b0
[  377.845782][T11462]  ? __kernel_text_address+0xd/0x40
[  377.851000][T11462]  ? unwind_get_return_address+0x4d/0x90
[  377.856625][T11462]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  377.862864][T11462]  ? __pfx_bpf_check+0x10/0x10
[  377.867643][T11462]  ? __lock_acquire+0xab9/0xd20
[  377.872584][T11462]  ? __pfx___mutex_trylock_common+0x10/0x10
[  377.878467][T11462]  ? css_rstat_updated+0x24f/0x4e0
[  377.883580][T11462]  ? __lock_acquire+0xab9/0xd20
[  377.888431][T11462]  ? ktime_get_with_offset+0x8c/0x2a0
[  377.893796][T11462]  ? seqcount_lockdep_reader_access+0x123/0x1c0
[  377.900030][T11462]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.905219][T11462]  ? ktime_get_with_offset+0x8c/0x2a0
[  377.910577][T11462]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[  377.916801][T11462]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  377.923389][T11462]  ? bpf_obj_name_cpy+0x194/0x1e0
[  377.928402][T11462]  ? bpf_lsm_bpf_prog_load+0x9/0x20
[  377.933588][T11462]  ? security_bpf_prog_load+0x7f/0x310
[  377.939042][T11462]  bpf_prog_load+0x1318/0x1930
[  377.943803][T11462]  ? __pfx_bpf_prog_load+0x10/0x10
[  377.948921][T11462]  ? bpf_lsm_bpf+0x9/0x20
[  377.953246][T11462]  ? security_bpf+0x7e/0x300
[  377.957831][T11462]  __sys_bpf+0x5f1/0x860
[  377.962061][T11462]  ? __pfx___sys_bpf+0x10/0x10
[  377.966833][T11462]  ? rcu_is_watching+0x15/0xb0
[  377.971596][T11462]  __x64_sys_bpf+0x7c/0x90
[  377.976001][T11462]  do_syscall_64+0xfa/0x3b0
[  377.980493][T11462]  ? lockdep_hardirqs_on+0x9c/0x150
[  377.985682][T11462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  377.991740][T11462]  ? clear_bhb_loop+0x60/0xb0
[  377.996411][T11462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  378.002294][T11462] RIP: 0033:0x7fd96a98e929
[  378.006696][T11462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  378.026289][T11462] RSP: 002b:00007fd96b763038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  378.034690][T11462] RAX: ffffffffffffffda RBX: 00007fd96abb5fa0 RCX: 00007fd96a98e929
[  378.042652][T11462] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  378.050609][T11462] RBP: 00007fd96aa10b39 R08: 0000000000000000 R09: 0000000000000000
[  378.058567][T11462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  378.066523][T11462] R13: 0000000000000000 R14: 00007fd96abb5fa0 R15: 00007ffdf70548c8
[  378.074491][T11462]  </TASK>
[  378.077817][T11462] Kernel Offset: disabled
[  378.082155][T11462] Rebooting in 86400 seconds..