last executing test programs:

55.781744373s ago: executing program 3:
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$eJzs3U1oHOf9B/DvrFay5T/Y+id24pZARAxpqaktWSitemjcUooPoQT30LOw5Vh4rQRJKUoojfpObz2k9/SgW6HQ0rshPbe3XEVPKYVechI9ZMuMZlcrafUWyXpJPh8zet5mnnme387O7MxiNsAX1p3raT7Je93y6spEa3Vl4lxdbCUp842kWVcVc0nxYXI760u+VFZ2Gnfaz/uzU3c/+mT14/VSs16q9Ru7bbc/y/WS0SQDdbrd4Gfq796W/l48+PiKzgzLgF07/HzhaLS3Wd7U/vvsesQ7juFzoFi/bm4zklyoTwDVZ4L67NA41sE9BcsnPQAAAAA4BpfWspalXDzpcQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAZtJykqH/fv0yL0RQXkpxPMlTXpc6faU+Kkx4BAAAAAAAAAGzxat/a5m6bvLiWtSzlYqfcLqrv/F8qs+12u6z6v7ydhcxkPjeylOksZjHzGU8y0tPR0NL04uL8eLVlcjk7bvlpu++Wtw43dQAAAAAAAAD4wvn2ptLPc2fj+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNimRgPamWy538SBrNJOeTDJXrLSf/6ORPicaure1LfaufPKXBAAAAwGlyaS1rWcrFqjCctIvqnv+56r7/fN7OXBYzm8W0MpP71bOA9bv+xurKRGt1ZeJxuWzv9zv/OdAwhur794Gq1G/PV6s1hvMgs1XNjdzLm2nlfhrdO/+rnfH0H9fPyjEVr9b2ObL7dVrO/Hd1us3dTw8026MxUkVksBuRsc7Dm9LukTjgq7N1T+NpdJ/8XO6/p3als9LOMR9MxrZVXqjTMta/7on5ptj3Pnr654GmcwhbI3Gr5+h7bnMktm/8lb/+8UcPW3OPHj5YuN73MDpLtkZioicSz3ejUCTLfc4Pn6tIjFWRuNIt38n388Ncz2hez3xm8+NMZzEzGc33qtx0fRwXO797Om5vKr2+xyPO6i0x0j2LHmxML1XbXsxsfpA3cz8zeaX6dyvj+UYmM5mpnlf4yj7OtI2+7/rzOw3+2lfrzHCS39Tp6VDG9f974tp7zh2p2nprNqL0zKYoFVuvHWWUXmse7HrU/HKdKffxiz2feh+nrZEY74nEs7sfL39ol38XWnOP5h9Ov1VV/WnPrxZertMyqr/a6cq8q+aBt9ifcujPdPvffHSUbc/2bRuv2i532xrb2q502/Z6pw7Vn+G293Sranu+b9tE1Xa1p23z5633qs9bxxFBAA7lwtcuDA3/e/jvwx8M/3L44fBr57977pvnXhjK4N8Gv9UcG3i58ULx53yQn9b3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKEsvPPuo+nWQObXM62ZfWbO5QAr7yNT1D/kc2QdnupMGoec6WD98p34dM4lhzwS/vLb9amc+ItyFJlm+ZqUs/mM/aRxGmZRZfb8HS7gjLu5+PitmwvvvPv12cfTb8y8MTM3ODk5NTY1+crEzQezrZmx9b8nPUrgadi46Pdt/texDwgAAAAAAAAAAADY03H8d4KTniMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwtt25nuaTFBkfuzFWlldXJlrl0slvrNlM0khS/CQpPkxuZ33JSE93xU77eX926u5Hn6x+vNFXs7N+2el/24eaxXK9ZDTJQJ0eVX/3Dt1f0Y1MGbBrncDBSftfAAAA//+gfAoT")
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x4]}}, @subvolid})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=' ', 0x0}, 0x50)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000001bc0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYBLOB="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", @ANYBLOB="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"/1301, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT], 0x1, 0x0, &(0x7f0000000000))

55.646970593s ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000380)='./file0\x00', 0x22000011, &(0x7f0000000000)={[{@commit}, {@noblock_validity}, {@user_xattr}]}, 0x86, 0x48e, &(0x7f0000000400)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

55.454905101s ago: executing program 3:
r0 = io_uring_setup(0x1613, &(0x7f0000000200)={0x0, 0x0, 0x3000})
ppoll(&(0x7f0000000000)=[{r0}], 0x1, 0x0, 0x0, 0x0)

55.249608999s ago: executing program 4:
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001f80)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4}}}]}, 0x48}}, 0x0)

54.95421585s ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpquota}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

54.586763312s ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x2)

54.579324859s ago: executing program 1:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000e40)="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", 0x127, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7fff}}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x34}}, 0x0)
sendto(r0, &(0x7f00000002c0)='%', 0x1, 0x0, 0x0, 0x0)

54.428792875s ago: executing program 3:
mremap(&(0x7f0000259000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000369000/0x3000)=nil)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000c75000/0x4000)=nil, &(0x7f000025a000/0x3000)=nil, 0x4000})

54.252795444s ago: executing program 3:
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0)
unshare(0x22020400)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000020004402505a1a440000102030109025c0002010000000904000001020d0000052406000105240000000d240f0100000000000000000006241aff0000090581030000000000090401"], 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

54.03238045s ago: executing program 2:
syz_mount_image$hfsplus(&(0x7f0000000500), &(0x7f0000000280)='./file0\x00', 0x3, &(0x7f0000000040)=ANY=[], 0x4, 0x67b, &(0x7f0000000bc0)="$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")
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{}, 0x0, 0x0, @inherit={0x70, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, {}, [0x0, 0x0, 0x0, 0x0, 0x4]}}, @subvolid})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000740)=' ', 0x0}, 0x50)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000001bc0)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYBLOB="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", @ANYBLOB="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"/1301, @ANYRES8, @ANYRESOCT, @ANYRES32, @ANYRESDEC, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT], 0x1, 0x0, &(0x7f0000000000))

53.527014322s ago: executing program 2:
r0 = eventfd2(0xfff, 0x0)
r1 = syz_io_uring_setup(0x24f9, &(0x7f0000000000)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r1, 0x6ed3, 0x0, 0x0, 0x0, 0x0)
read$eventfd(r0, &(0x7f0000000000), 0x38)

53.482893693s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000005c0)='./file1\x00', 0x1018e58, &(0x7f0000000140)={[{@sysvgroups}, {@noload}, {@auto_da_alloc}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x4}}, {@norecovery}, {}, {@bsdgroups}]}, 0x6, 0x640, &(0x7f0000000d80)="$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")
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000049000000000000000000009500"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90)
sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x0, 0x0, 0x0, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000180)={0x0, "c6fe924d35741d0685705f3f698d313500bfcd407e34e50f29522066cc5392fe"})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x0, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], 0x0}, 0x90)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000001300)=ANY=[], &(0x7f0000000240)='syzkaller\x00'}, 0x90)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r3, r2, 0x16, 0x0, @val=@tcx={@prog_fd}}, 0x40)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f0000000140), 0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r5}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32)
r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000c80)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000006000000042000000000000000000000000000006100"], 0x0, 0x2a}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000040)={r6, 0x20, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000001340)=""/4096, 0x1000}}, 0x10)
landlock_create_ruleset(&(0x7f0000000140)={0x6450}, 0x13, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89900)
r7 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCFLSH(r7, 0x4b45, 0x2)
open(&(0x7f0000002000)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000040)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./bus\x00', &(0x7f0000000300)='reiserfs\x00', 0x0, 0x0)

52.044158492s ago: executing program 1:
r0 = socket(0x40000000015, 0x5, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000007b80)={0xa, 0x0, 0x0, @local}, 0x1c)

51.177553126s ago: executing program 3:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x2)

50.250202326s ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0xe, &(0x7f0000000440)={[{@noload}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@grpquota}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef9cc093fce47d85272036dc78388e3dc177e9b496", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001"})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)

47.038330375s ago: executing program 0:
r0 = socket(0x200000000000011, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90)
syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @broadcast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x48, 0x11, 0x0, @empty, @mcast2, {[], {0x0, 0x0, 0x2, 0x0, @wg=@cookie={0x3, 0x0, "dac3aa740a0a8c89c9f966adadf3b0a7f13a639f71768050", "9603e6f247c73de51da4d1190600844f8752285fb6be0600b6cdffffffc4a6b8"}}}}}}}, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x89b0, &(0x7f0000000140)={'bridge0\x00'})

46.620600282s ago: executing program 0:
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000100)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54, 0x34]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@notreelog}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x163142, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000580), 0x4)
copy_file_range(r2, &(0x7f0000000080), r1, 0x0, 0xfffffffffffffff8, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
copy_file_range(r3, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x6, 0x0)

41.053200519s ago: executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x110000})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0)
sendmsg$NL80211_CMD_GET_KEY(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0xc, 0x0}, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_NMI(r2, 0xae9a)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

39.817243797s ago: executing program 4:
r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "7774002a390bf16450d6ed530e39c16d4db1e7038e2129d908a11f1f1be9de5241d10e8e2ee81c3933f99f1c6bc277c18510892f0a53cbd29f05037a4dc95b41"}, 0x48, 0xffffffffffffffff)
keyctl$revoke(0x5, r0)
add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @desc1}, &(0x7f0000000500)={0x0, "b7c913bb682eaddb954b9baa9e3beb3f62952860388464c531987523195928cd2bb67fb432881f0131abc85d7e683ac8222e8038d1cec8de23ca68d11b0e6b1e"}, 0x48, 0xffffffffffffffff)

39.783339351s ago: executing program 0:
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10)
getpeername$packet(0xffffffffffffffff, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r0, &(0x7f0000000e40)="bd3119fab037020de607352a978727cdd46a7ad7671829c16bb1339d3f711b7c5da66f48a8b5842dad66eedf75899eb65d733423ca5651013e1db97f5d192e302ac583ccd19e1e8a3e7812af51f0eea31c5e05cec737cc11a38936d67d4c7cd78351177f51dab5ebe8523e54dd8db33ab6214499c610051df74b67669c9b554b25c70c3238ffaa908675df728ef76e7ae5ee938e025ed07603ec4cc86ee67be10ef6087e7ff0017b358ebee016f08b756cfd2645ccdf335d8b62b630939ba724776a5f2caa487586527f2066b2845e52758b6da2ce07de99165195af70ea9659005901a0f28e90b49a0803ab10698ade4c07337535c2600c45b8c497ab6863ad984815f375df57e5940e5322d90d66c84937e9b7f2356a6e16a026b2393670d370759a4567a87f", 0x127, 0x0, 0x0, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)=@ipv4_newaddr={0x34, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7fff}}, @IFA_LOCAL={0x8, 0x2, @multicast2}]}, 0x34}}, 0x0)
sendto(r0, &(0x7f00000002c0)='%', 0x1, 0x0, 0x0, 0x0)

39.497680377s ago: executing program 4:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000640)=ANY=[@ANYRESDEC=r0, @ANYRES32, @ANYBLOB="1000000040000000a40034801400350073797a6b616c6c657230000000000000140035006e72300000000000000000000000000014003500766c616e3000000000000000000000001400350069705f7674693000000000000000000014003500677265300000000000000000000000001400350076657468305f6d61637674617000000014"], 0x100}}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0)
add_key(&(0x7f00000000c0)='cifs.spnego\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000300)=ANY=[@ANYBLOB="15"], 0x15)
r1 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0x10, &(0x7f0000000100)=@ready={0x0, 0x0, 0x8, '\x00B+\x00'})
syz_usb_ep_write$ath9k_ep2(r1, 0x83, 0xfffffc6b, &(0x7f00000000c0)=@conn_svc_rsp={0x0, 0x0, 0xa, "0f293bdf"})
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRESHEX, @ANYRESHEX=r3], 0x178}}, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
r5 = fsmount(r3, 0x0, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={0xffffffffffffffff, r5, 0x0, 0x0, @val=@netkit}, 0x40)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
iopl(0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0xe5f)
connect$inet(r6, 0x0, 0x0)
sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a00000001c0020002bbd7000fddbdf251c000000", @ANYRES32=0x0, @ANYBLOB="1000a00914000300310000000e0000000300f6000000000014000100ff0100000000000000000000000000010a000200aaaaaaaaaabb000038000e80040400020005000182e40000005e215b05000100fa00000005"], 0xa0}}, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080))
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
add_key(&(0x7f0000000380)='big_key\x00', &(0x7f0000000440)={'syz', 0x0}, &(0x7f0000000400)="d3", 0x1, 0xfffffffffffffffe)

38.614705109s ago: executing program 2:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000180)={0x0, {{0x2, 0x0, @multicast2}}}, 0x88)

37.400591212s ago: executing program 0:
inotify_add_watch(0xffffffffffffffff, 0x0, 0x92e6f42dac8bd113)
mkdir(&(0x7f0000000440)='./file1\x00', 0x36d010098156c0e2)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_dev$video(&(0x7f00000009c0), 0x0, 0x2800)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000100)=0xcf5)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r2, &(0x7f0000000000)={0x80000000})
ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000780)={0x0, 0x5, 0x0, 0x0, 0xff, "00ef5c6f24c7e932530000000000f7ffffff00"})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000080)={0x19})
setsockopt$inet_sctp6_SCTP_RECVNXTINFO(0xffffffffffffffff, 0x84, 0x21, &(0x7f0000000980)=0x2, 0x4)
r4 = syz_open_pts(r2, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f00000018c0)=0x13)
ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000180)={0x5, 0x0, 0x1, 0x0, 0x3, "d734b0d39bf5cf87f1e909116002b3f3ae2e1d"})
ioctl$VIDIOC_G_FREQUENCY(r1, 0xc02c5638, &(0x7f00000007c0)={0x5, 0x5, 0x10000})
socketpair(0x6da8b4a50f07af00, 0x80806, 0x2, &(0x7f00000000c0))
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x5}, 0x1c)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000700), 0x2, 0x0)
r6 = socket$alg(0x26, 0x5, 0x0)
setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10)
accept4(r6, 0x0, 0x0, 0x0)
readv(r6, &(0x7f0000000a40)=[{&(0x7f0000000ac0)=""/139, 0x8b}, {&(0x7f00000008c0)=""/123, 0x7b}, {&(0x7f0000000a80)=""/57, 0x39}], 0x3)

35.328796678s ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0xd}], 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x1e8640, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
fcntl$setlease(r7, 0x400, 0x1)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r8 = socket(0x840000000002, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f000000c180)={0x0, 0x0, 0x0}, 0x44845)
sendmsg$kcm(r9, &(0x7f0000011e40)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

34.91753435s ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r1, &(0x7f0000000780)=[{&(0x7f00000004c0)='4', 0xd}], 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
r2 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301)
r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
pipe(&(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
r6 = accept4(r5, 0x0, 0x0, 0x0)
splice(r4, 0x0, r6, 0x0, 0x1e8640, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
r7 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
fcntl$setlease(r7, 0x400, 0x0)
fcntl$setlease(r7, 0x400, 0x1)
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200))
ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect)
r8 = socket(0x840000000002, 0x3, 0x0)
getsockopt$sock_cred(r8, 0x1, 0x11, 0x0, &(0x7f0000000140))
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r9 = socket$kcm(0x29, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f000000c180)={0x0, 0x0, 0x0}, 0x44845)
sendmsg$kcm(r9, &(0x7f0000011e40)={0x0, 0x0, 0x0}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()

31.480770882s ago: executing program 1:
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x8000003d)
fcntl$setsig(r0, 0xa, 0x21)
fchown(r0, 0x0, 0x0)

31.239026168s ago: executing program 1:
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x0, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000380)={0x1, 0x0, 0x0, &(0x7f0000000280)=""/233, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x1, 0x0, &(0x7f0000000700)=""/99, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000004c0))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)
write$eventfd(r1, &(0x7f00000000c0)=0xfffffffffffffffe, 0x8)

30.311424133s ago: executing program 0:
r0 = fanotify_init(0x0, 0x0)
write$binfmt_misc(r0, &(0x7f0000000300)=ANY=[], 0xffffff03)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280))
socket$alg(0x26, 0x5, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'crc32-pclmul\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
write$binfmt_script(r3, &(0x7f0000000340), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000340), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x10, 0xffffffffffffffff, 0x0)
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000080), 0x7fffffff)
r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000740)=[@text64={0x40, 0x0}], 0x1, 0x7b, 0x0, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000004c0)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0x7}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x60, 0x0, 0x0, 0x80}, {0xffff, 0x0, 0x9c, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}], 0x1a})
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='stack\x00')
read$FUSE(0xffffffffffffffff, &(0x7f0000000140)={0x2020}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
r7 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="180100002020702502000000002020207b1af8ff00000000bfa100000000000007010000f8fffffff2d0000008000000b70300000000000085000000af000000"], &(0x7f0000000200)='syzkaller\x00'}, 0x90)
mmap(&(0x7f00002e1000/0x800000)=nil, 0x800000, 0x0, 0x10, r7, 0x0)
syz_open_procfs(0x0, &(0x7f0000000780)='map_files\x00')
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf22}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xd, 0x69, 0x4, 0x5}, 0x48)

1.110816197s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2008002, &(0x7f0000000080), 0x1, 0x53d, &(0x7f0000000a80)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000340)='.\x00', 0xa50003d1)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f0000005780)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f00000016c0)='./file0\x00', 0x2)

0s ago: executing program 0:
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000340)='./bus\x00', 0x8, &(0x7f0000000100)={[{@autodefrag}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x54, 0x34]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@barrier}, {@notreelog}]}, 0x1, 0x55a3, &(0x7f0000005680)="$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")
r0 = open(&(0x7f0000000000)='./bus\x00', 0x163142, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000006ac0)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000580), 0x4)
copy_file_range(r2, &(0x7f0000000080), r1, 0x0, 0xfffffffffffffff8, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
copy_file_range(r3, 0x0, r0, &(0x7f00000000c0)=0x10000, 0x6, 0x0)

kernel console output (not intermixed with test programs):

Found nat_bits in checkpoint
[  441.992862][T11560] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  442.081634][T11136] syz-executor.0: attempt to access beyond end of device
[  442.081634][T11136] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  442.103001][T11136] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  442.511430][ T5114] Bluetooth: hci4: command tx timeout
[  442.779402][   T29] audit: type=1400 audit(1716840750.531:937): avc:  denied  { create } for  pid=11595 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  442.801884][   T12] team0 (unregistering): Port device team_slave_1 removed
[  442.816953][   T29] audit: type=1400 audit(1716840750.551:938): avc:  denied  { write } for  pid=11595 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  442.847460][   T29] audit: type=1400 audit(1716840750.551:939): avc:  denied  { nlmsg_read } for  pid=11595 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1
[  442.919489][   T12] team0 (unregistering): Port device team_slave_0 removed
[  443.492044][T11506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  443.539360][T11594] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[  443.559680][   T29] audit: type=1400 audit(1716840751.311:940): avc:  denied  { map } for  pid=11600 comm="syz-executor.3" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=729 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  443.585825][T11594] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  443.624930][T11506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  443.819361][T11609] loop3: detected capacity change from 0 to 128
[  443.828921][   T29] audit: type=1400 audit(1716840751.581:941): avc:  denied  { ioctl } for  pid=11608 comm="syz-executor.1" path="/dev/vhost-net" dev="devtmpfs" ino=1084 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1
[  443.853236][T11506] team0: Port device team_slave_0 added
[  443.868457][T11609] FAT-fs (loop3): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1)
[  443.951226][T11506] team0: Port device team_slave_1 added
[  444.006277][T11615] loop1: detected capacity change from 0 to 16
[  444.015772][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'.
[  444.057926][T11615] erofs: (device loop1): mounted with root inode @ nid 36.
[  444.094300][T11613] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  444.128211][T11615] syz-executor.1: attempt to access beyond end of device
[  444.128211][T11615] loop1: rw=0, sector=4294967295, nr_sectors = 1 limit=16
[  444.272225][T11506] batman_adv: batadv0: Adding interface: batadv_slave_0
[  444.306178][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.355306][T11506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  444.373743][T11506] batman_adv: batadv0: Adding interface: batadv_slave_1
[  444.388951][T11506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  444.415056][T11506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  444.555665][T11623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  444.581321][T11624] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  444.600203][ T5114] Bluetooth: hci4: command tx timeout
[  444.648370][T11506] hsr_slave_0: entered promiscuous mode
[  444.696800][T11506] hsr_slave_1: entered promiscuous mode
[  444.833966][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  444.885689][T11631] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  445.161656][T11637] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'.
[  445.190293][T11637] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  445.302173][T11610] loop2: detected capacity change from 0 to 32768
[  445.388666][T11610] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  445.630165][T11610] XFS (loop2): Ending clean mount
[  445.637568][T11653] loop3: detected capacity change from 0 to 256
[  445.651910][T11610] XFS (loop2): Quotacheck needed: Please wait.
[  445.738994][T11653] FAT-fs (loop3): Directory bread(block 64) failed
[  445.746693][T11653] FAT-fs (loop3): Directory bread(block 65) failed
[  445.747007][T11610] XFS (loop2): Quotacheck: Done.
[  445.753454][T11653] FAT-fs (loop3): Directory bread(block 66) failed
[  445.765049][T11653] FAT-fs (loop3): Directory bread(block 67) failed
[  445.771825][T11653] FAT-fs (loop3): Directory bread(block 68) failed
[  445.778541][T11653] FAT-fs (loop3): Directory bread(block 69) failed
[  445.785351][T11653] FAT-fs (loop3): Directory bread(block 70) failed
[  445.792155][T11653] FAT-fs (loop3): Directory bread(block 71) failed
[  445.819505][T11653] FAT-fs (loop3): Directory bread(block 72) failed
[  445.830602][T11653] FAT-fs (loop3): Directory bread(block 73) failed
[  445.887982][ T5158] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  445.912193][T11173] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  445.955992][T11630] loop0: detected capacity change from 0 to 32768
[  446.065837][T11506] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  446.120179][T11506] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  446.131970][ T5158] usb 2-1: Using ep0 maxpacket: 8
[  446.156449][ T5158] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  446.169749][T11506] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  446.206844][ T5158] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  446.233917][ T5158] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  446.259347][T11506] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  446.279405][ T5158] usb 2-1: config 250 has no interface number 0
[  446.302074][ T5158] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  446.343228][ T5158] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  446.360685][T11630] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[  446.384970][ T5158] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  446.407767][T11630] bcachefs (loop0): recovering from clean shutdown, journal seq 8
[  446.416217][ T5158] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  446.459640][ T5158] usb 2-1: config 250 interface 228 has no altsetting 0
[  446.501136][ T5158] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  446.519046][ T5099] libceph: connect (1)[c::]:6789 error -101
[  446.559206][ T5099] libceph: mon0 (1)[c::]:6789 connect error
[  446.567904][ T5158] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  446.584962][T11506] 8021q: adding VLAN 0 to HW filter on device bond0
[  446.603443][ T5158] usb 2-1: Product: syz
[  446.609293][ T5099] libceph: connect (1)[c::]:6789 error -101
[  446.615428][ T5099] libceph: mon0 (1)[c::]:6789 connect error
[  446.628575][ T5158] usb 2-1: SerialNumber: syz
[  446.657211][T11630] bcachefs (loop0): alloc_read... done
[  446.663939][T11506] 8021q: adding VLAN 0 to HW filter on device team0
[  446.672730][T11630] bcachefs (loop0): stripes_read... done
[  446.677468][ T5114] Bluetooth: hci4: command tx timeout
[  446.687853][T11630] bcachefs (loop0): snapshots_read... done
[  446.705629][ T5158] hub 2-1:250.228: bad descriptor, ignoring hub
[  446.717940][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.725136][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state
[  446.726101][ T5158] hub 2-1:250.228: probe with driver hub failed with error -5
[  446.760172][T11630] bcachefs (loop0): journal_replay... done
[  446.798339][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.805505][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  446.813223][T11630] bcachefs (loop0): resume_logged_ops... done
[  446.827690][T11630] bcachefs (loop0): going read-write
[  446.892411][T11630] bcachefs (loop0): done starting filesystem
[  446.951057][T11506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  446.979451][ T5098] libceph: connect (1)[c::]:6789 error -101
[  446.987283][ T5158] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  446.999142][ T5098] libceph: mon0 (1)[c::]:6789 connect error
[  447.089530][   T29] audit: type=1400 audit(1716844849.822:942): avc:  denied  { read write open } for  pid=11627 comm="syz-executor.0" path=2F726F6F742F73797A6B616C6C65722D74657374646972333139303239383930362F73797A6B616C6C65722E79556B3167522F33302F66696C65302F2334313032202864656C6574656429 dev="loop0" ino=4102 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  447.233162][T11661] ceph: No mds server is up or the cluster is laggy
[  447.409074][T11136] bcachefs (loop0): shutting down
[  447.414754][T11136] bcachefs (loop0): going read-only
[  447.463066][T11136] bcachefs (loop0): finished waiting for writes to stop
[  447.508785][T11136] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[  447.525409][T11506] 8021q: adding VLAN 0 to HW filter on device batadv0
[  447.566819][ T5158] usb 2-1: USB disconnect, device number 5
[  447.578394][T11136] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 11
[  447.626830][T11136] bcachefs (loop0): shutdown complete, journal seq 12
[  447.643771][ T5158] usblp0: removed
[  447.661002][T11136] bcachefs (loop0): marking filesystem clean
[  447.950162][T11136] bcachefs (loop0): shutdown complete
[  448.018819][T11677] loop2: detected capacity change from 0 to 40427
[  448.079043][T11677] F2FS-fs (loop2): invalid crc value
[  448.094575][T11677] F2FS-fs (loop2): Found nat_bits in checkpoint
[  448.169546][T11677] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  448.396965][T11684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  448.485348][T11684] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  449.402469][T11506] veth0_vlan: entered promiscuous mode
[  449.455584][T11506] veth1_vlan: entered promiscuous mode
[  449.632199][T11506] veth0_macvtap: entered promiscuous mode
[  449.645726][T11506] veth1_macvtap: entered promiscuous mode
[  449.732646][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.751078][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.778603][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.826178][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.851042][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.877655][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.895366][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  449.928329][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  449.975587][T11506] batman_adv: batadv0: Interface activated: batadv_slave_0
[  450.018414][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.057859][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.072627][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.097249][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.136128][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.164233][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.190584][T11506] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  450.213938][T11710] 9pnet: p9_errstr2errno: server reported unknown error Çi6ÿ
[  450.220621][T11506] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  450.280533][T11506] batman_adv: batadv0: Interface activated: batadv_slave_1
[  450.334383][T11506] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  450.374572][T11506] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  450.412216][T11506] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  450.436755][T11506] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  450.711160][ T5157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.739638][ T5157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.796151][ T5158] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  450.886371][ T1042] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  450.910580][ T1042] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  450.975520][T11706] loop1: detected capacity change from 0 to 32768
[  450.986365][ T5158] usb 1-1: Using ep0 maxpacket: 8
[  451.007901][ T5158] usb 1-1: config index 0 descriptor too short (expected 5924, got 36)
[  451.042329][ T5158] usb 1-1: config 250 has an invalid interface number: 228 but max is -1
[  451.076496][ T5158] usb 1-1: config 250 has 1 interface, different from the descriptor's value: 0
[  451.087306][ T5158] usb 1-1: config 250 has no interface number 0
[  451.105067][ T5158] usb 1-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  451.117490][ T5158] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  451.129615][ T5158] usb 1-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 26
[  451.140111][ T5158] usb 1-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  451.154048][ T5158] usb 1-1: config 250 interface 228 has no altsetting 0
[  451.165018][ T5158] usb 1-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  451.177540][ T5158] usb 1-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  451.185848][ T5158] usb 1-1: Product: syz
[  451.190114][ T5158] usb 1-1: SerialNumber: syz
[  451.233741][ T5158] hub 1-1:250.228: bad descriptor, ignoring hub
[  451.261600][ T5158] hub 1-1:250.228: probe with driver hub failed with error -5
[  451.362339][T11706] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[  451.370279][T11735] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'.
[  451.400039][T11706] bcachefs (loop1): recovering from clean shutdown, journal seq 8
[  451.422713][T11735] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  451.487807][ T5158] usblp 1-1:250.228: usblp0: USB Bidirectional printer dev 5 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  451.558526][T11706] bcachefs (loop1): alloc_read... done
[  451.564086][T11706] bcachefs (loop1): stripes_read... done
[  451.588458][T11706] bcachefs (loop1): snapshots_read... done
[  451.636660][T11706] bcachefs (loop1): journal_replay... done
[  451.666149][T11706] bcachefs (loop1): resume_logged_ops... done
[  451.672387][T11706] bcachefs (loop1): going read-write
[  451.744345][T11706] bcachefs (loop1): done starting filesystem
[  452.003116][T11752] 9pnet: p9_errstr2errno: server reported unknown error Çi6ÿ
[  452.064927][T11138] bcachefs (loop1): shutting down
[  452.079643][ T5158] usb 1-1: USB disconnect, device number 5
[  452.099706][ T5158] usblp0: removed
[  452.106145][T11138] bcachefs (loop1): going read-only
[  452.111383][T11138] bcachefs (loop1): finished waiting for writes to stop
[  452.184265][T11138] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  452.234324][T11138] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 11
[  452.248906][T11758] loop3: detected capacity change from 0 to 16
[  452.284451][T11758] erofs: (device loop3): mounted with root inode @ nid 36.
[  452.292867][T11138] bcachefs (loop1): shutdown complete, journal seq 12
[  452.306675][T11138] bcachefs (loop1): marking filesystem clean
[  452.461696][T11138] bcachefs (loop1): shutdown complete
[  453.289422][T11781] openvswitch: netlink: Missing key (keys=40, expected=80)
[  453.305478][T11783] openvswitch: netlink: Message has 4 unknown bytes.
[  453.631352][T11791] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  454.290765][T11794] loop2: detected capacity change from 0 to 40427
[  454.317743][T11794] F2FS-fs (loop2): invalid crc value
[  454.341648][T11794] F2FS-fs (loop2): Found nat_bits in checkpoint
[  454.437578][T11794] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  455.546460][T11779] loop3: detected capacity change from 0 to 32768
[  455.681185][T11816] openvswitch: netlink: Missing key (keys=40, expected=80)
[  455.737586][T11821] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'.
[  456.023918][T11779] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[  456.058269][T11779] bcachefs (loop3): recovering from clean shutdown, journal seq 8
[  456.118764][T11779] bcachefs (loop3): alloc_read... done
[  456.134797][T11779] bcachefs (loop3): stripes_read... done
[  456.157361][T11779] bcachefs (loop3): snapshots_read... done
[  456.188442][T11779] bcachefs (loop3): journal_replay... done
[  456.194347][T11779] bcachefs (loop3): resume_logged_ops... done
[  456.226190][T11779] bcachefs (loop3): going read-write
[  456.258636][T11779] bcachefs (loop3): done starting filesystem
[  456.345999][T11097] bcachefs (loop3): shutting down
[  456.353040][T11097] bcachefs (loop3): going read-only
[  456.368614][T11841] EXT4-fs warning (device sda1): verify_group_input:166: Cannot read last block (281374)
[  456.386141][T11097] bcachefs (loop3): finished waiting for writes to stop
[  456.408050][T11097] bcachefs (loop3): flushing journal and stopping allocators, journal seq 8
[  456.422080][T11097] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 8
[  456.448424][T11097] bcachefs (loop3): shutdown complete, journal seq 9
[  456.463214][T11097] bcachefs (loop3): marking filesystem clean
[  456.533468][T11097] bcachefs (loop3): shutdown complete
[  456.620589][T11814] loop1: detected capacity change from 0 to 32768
[  456.631353][T11814] XFS: attr2 mount option is deprecated.
[  456.644274][T11814] XFS: noikeep mount option is deprecated.
[  456.699266][T11814] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  456.835867][T11814] XFS (loop1): Ending clean mount
[  456.849406][T11814] XFS (loop1): Quotacheck needed: Please wait.
[  456.957229][T11860] loop2: detected capacity change from 0 to 512
[  456.990904][T11860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  457.004768][T11814] XFS (loop1): Quotacheck: Done.
[  457.057249][T11860] EXT4-fs (loop2): orphan cleanup on readonly fs
[  457.112157][T11860] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set
[  457.140841][   T29] audit: type=1400 audit(1716844859.892:943): avc:  denied  { write } for  pid=11813 comm="syz-executor.1" name="bus" dev="loop1" ino=1067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  457.180123][   T29] audit: type=1400 audit(1716844859.892:944): avc:  denied  { add_name } for  pid=11813 comm="syz-executor.1" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  457.232961][T11860] Quota error (device loop2): write_blk: dquota write failed
[  457.276418][T11860] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  457.292803][T11860] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 1
[  457.308439][T11860] EXT4-fs (loop2): 1 truncate cleaned up
[  457.325767][T11860] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  457.394702][T11138] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  457.415685][T11860] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  457.418913][T11861] loop0: detected capacity change from 0 to 8192
[  457.442193][T11860] EXT4-fs error (device loop2): __ext4_remount:6503: comm syz-executor.2: Abort forced by user
[  457.511334][T11860] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  457.614571][T11860] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  457.642433][T11860] ext4 filesystem being remounted at /root/syzkaller-testdir2489537428/syzkaller.MYba39/43/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  457.692833][T11837] loop4: detected capacity change from 0 to 32768
[  457.856712][T11173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  457.981340][T11837] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,str_hash=crc64,nojournal_transaction_names
[  457.998721][T11837] bcachefs (loop4): recovering from clean shutdown, journal seq 8
[  458.128572][T11837] bcachefs (loop4): alloc_read... done
[  458.134133][T11837] bcachefs (loop4): stripes_read... done
[  458.149596][T11837] bcachefs (loop4): snapshots_read... done
[  458.166272][T11837] bcachefs (loop4): journal_replay... done
[  458.181950][T11837] bcachefs (loop4): resume_logged_ops... done
[  458.198574][T11837] bcachefs (loop4): going read-write
[  458.215954][T11837] bcachefs (loop4): done starting filesystem
[  458.238560][T11879] EXT4-fs warning (device sda1): verify_group_input:166: Cannot read last block (281374)
[  458.330423][T11883] loop0: detected capacity change from 0 to 8
[  458.358661][T11883] SQUASHFS error: lzo decompression failed, data probably corrupt
[  458.360580][T11506] bcachefs (loop4): shutting down
[  458.380689][T11883] SQUASHFS error: Failed to read block 0x91: -5
[  458.388427][T11506] bcachefs (loop4): going read-only
[  458.393659][T11506] bcachefs (loop4): finished waiting for writes to stop
[  458.432297][T11883] SQUASHFS error: Unable to read metadata cache entry [8f]
[  458.440277][T11883] SQUASHFS error: Unable to read inode 0x11f
[  458.462751][T11874] loop2: detected capacity change from 0 to 8192
[  458.470381][T11506] bcachefs (loop4): flushing journal and stopping allocators, journal seq 9
[  458.483919][T11877] loop1: detected capacity change from 0 to 8192
[  458.524425][T11506] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  458.576860][T11506] bcachefs (loop4): shutdown complete, journal seq 11
[  458.597966][T11506] bcachefs (loop4): marking filesystem clean
[  458.627423][T11885] input: syz1 as /devices/virtual/input/input46
[  458.698519][T11506] bcachefs (loop4): shutdown complete
[  458.875279][T11883] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=11883 comm=syz-executor.0
[  460.060188][T11902] loop2: detected capacity change from 0 to 40427
[  460.091011][T11902] F2FS-fs (loop2): invalid crc value
[  460.122773][T11902] F2FS-fs (loop2): Found nat_bits in checkpoint
[  460.216220][T11902] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  461.248163][T11888] loop3: detected capacity change from 0 to 32768
[  461.267670][T11915] input: syz1 as /devices/virtual/input/input47
[  461.306635][T11888] XFS: attr2 mount option is deprecated.
[  461.334541][T11888] XFS: noikeep mount option is deprecated.
[  461.434012][T11888] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  461.588374][T11888] XFS (loop3): Ending clean mount
[  461.603587][T11906] loop1: detected capacity change from 0 to 32768
[  461.635777][T11888] XFS (loop3): Quotacheck needed: Please wait.
[  461.747289][T11888] XFS (loop3): Quotacheck: Done.
[  461.921134][T11906] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,str_hash=crc64,nojournal_transaction_names
[  461.941095][T11926] loop0: detected capacity change from 0 to 8192
[  461.970416][T11906] bcachefs (loop1): recovering from clean shutdown, journal seq 8
[  462.049739][T11097] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  462.072013][T11906] bcachefs (loop1): alloc_read... done
[  462.087434][T11906] bcachefs (loop1): stripes_read... done
[  462.096194][T11906] bcachefs (loop1): snapshots_read... done
[  462.113348][T11935] loop2: detected capacity change from 0 to 512
[  462.129849][T11906] bcachefs (loop1): journal_replay... done
[  462.135746][T11906] bcachefs (loop1): resume_logged_ops... done
[  462.142072][T11935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  462.162214][T11906] bcachefs (loop1): going read-write
[  462.203181][T11935] EXT4-fs (loop2): orphan cleanup on readonly fs
[  462.217743][T11935] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz-executor.2: bg 0: block 248: padding at end of block bitmap is not set
[  462.237903][T11935] Quota error (device loop2): write_blk: dquota write failed
[  462.245648][T11935] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  462.275583][T11935] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 1
[  462.293381][T11935] EXT4-fs (loop2): 1 truncate cleaned up
[  462.310034][T11906] bcachefs (loop1): done starting filesystem
[  462.334946][T11935] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  462.464173][T11912] loop4: detected capacity change from 0 to 32768
[  462.466764][T11935] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  462.505290][T11935] EXT4-fs error (device loop2): __ext4_remount:6503: comm syz-executor.2: Abort forced by user
[  462.547488][T11935] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  462.586913][T11138] bcachefs (loop1): shutting down
[  462.592099][T11138] bcachefs (loop1): going read-only
[  462.599478][T11138] bcachefs (loop1): finished waiting for writes to stop
[  462.610243][T11138] bcachefs (loop1): flushing journal and stopping allocators, journal seq 10
[  462.623728][T11138] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10
[  462.633475][T11935] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w. Quota mode: writeback.
[  462.646370][T11935] ext4 filesystem being remounted at /root/syzkaller-testdir2489537428/syzkaller.MYba39/48/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  462.668429][T11912] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  462.690172][T11912] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  462.698376][T11138] bcachefs (loop1): shutdown complete, journal seq 11
[  462.717160][T11138] bcachefs (loop1): marking filesystem clean
[  462.775909][T11950] loop0: detected capacity change from 0 to 8
[  462.819556][T11950] SQUASHFS error: lzo decompression failed, data probably corrupt
[  462.835375][T11950] SQUASHFS error: Failed to read block 0x91: -5
[  462.845689][T11138] bcachefs (loop1): shutdown complete
[  462.851314][T11950] SQUASHFS error: Unable to read metadata cache entry [8f]
[  462.872118][T11173] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  462.876119][T11950] SQUASHFS error: Unable to read inode 0x11f
[  462.963691][T11952] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  463.286665][T11950] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=11950 comm=syz-executor.0
[  463.567502][T11959] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  464.426606][T11977] loop1: detected capacity change from 0 to 8
[  464.448900][T11977] SQUASHFS error: lzo decompression failed, data probably corrupt
[  464.472693][T11977] SQUASHFS error: Failed to read block 0x91: -5
[  464.490042][T11979] loop2: detected capacity change from 0 to 8
[  464.490655][T11977] SQUASHFS error: Unable to read metadata cache entry [8f]
[  464.521803][T11979] SQUASHFS error: lzo decompression failed, data probably corrupt
[  464.532545][T11977] SQUASHFS error: Unable to read inode 0x11f
[  464.547652][T11979] SQUASHFS error: Failed to read block 0x91: -5
[  464.564229][T11979] SQUASHFS error: Unable to read metadata cache entry [8f]
[  464.581225][T11979] SQUASHFS error: Unable to read inode 0x11f
[  464.939341][T11977] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=11977 comm=syz-executor.1
[  465.076235][T11979] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=11979 comm=syz-executor.2
[  465.254362][T11985] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  465.370261][T11987] loop2: detected capacity change from 0 to 8
[  465.426921][T11987] SQUASHFS error: lzo decompression failed, data probably corrupt
[  465.434809][T11987] SQUASHFS error: Failed to read block 0x91: -5
[  465.467512][T11987] SQUASHFS error: Unable to read metadata cache entry [8f]
[  465.496907][T11987] SQUASHFS error: Unable to read inode 0x11f
[  465.563883][T11991] usb usb9: check_ctrlrecip: process 11991 (syz-executor.1) requesting ep 01 but needs 81
[  465.582223][T11991] usb usb9: usbfs: process 11991 (syz-executor.1) did not claim interface 0 before use
[  465.922068][T11987] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=11987 comm=syz-executor.2
[  465.937216][T11970] loop4: detected capacity change from 0 to 32768
[  466.325704][T11975] loop3: detected capacity change from 0 to 32768
[  466.358971][T11970] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names
[  466.393405][T11970] bcachefs (loop4): recovering from clean shutdown, journal seq 8
[  466.445153][T11970] bcachefs (loop4): alloc_read... done
[  466.453696][T11970] bcachefs (loop4): stripes_read... done
[  466.462004][T11970] bcachefs (loop4): snapshots_read... done
[  466.472514][T11970] bcachefs (loop4): journal_replay... done
[  466.478667][T11970] bcachefs (loop4): resume_logged_ops... done
[  466.487231][T11970] bcachefs (loop4): going read-write
[  466.502537][T11970] bcachefs (loop4): done starting filesystem
[  466.525685][T11975] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  466.578680][T11975] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  466.856160][T11993] loop0: detected capacity change from 0 to 32768
[  466.875437][T11506] bcachefs (loop4): shutting down
[  466.900225][T11506] bcachefs (loop4): going read-only
[  466.919305][T11506] bcachefs (loop4): finished waiting for writes to stop
[  466.939416][T11506] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  466.980012][T11506] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 12
[  467.038087][T11993] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): filesystem UUID already open
[  467.047518][T11993] bcachefs (a46a46fb-710c-4d8a-8a40-d337fbcdfe7d): shutdown complete
[  467.056958][T11506] bcachefs (loop4): shutdown complete, journal seq 13
[  467.064552][T11506] bcachefs (loop4): marking filesystem clean
[  467.231433][T11506] bcachefs (loop4): shutdown complete
[  467.474124][T12031] syz-executor.1[12031] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  467.474341][T12031] syz-executor.1[12031] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  467.536902][T12033] syz-executor.2[12033] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  467.584738][T12033] syz-executor.2[12033] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  467.686170][   T29] audit: type=1400 audit(1716844870.432:945): avc:  denied  { read } for  pid=12032 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  467.717321][T12033] hub 6-0:1.0: USB hub found
[  467.740975][T12033] hub 6-0:1.0: 1 port detected
[  467.765713][T12036] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  467.918342][T12037] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  468.205906][T12043] loop3: detected capacity change from 0 to 2048
[  468.221555][T12045] loop0: detected capacity change from 0 to 2048
[  468.283115][T12045] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  468.544523][T12051] loop1: detected capacity change from 0 to 512
[  468.571953][T12053] loop4: detected capacity change from 0 to 8
[  468.598368][T12051] EXT4-fs warning (device loop1): dx_probe:874: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  468.612594][T12051] EXT4-fs warning (device loop1): dx_probe:879: Enable large directory feature to access it
[  468.616181][T12053] SQUASHFS error: lzo decompression failed, data probably corrupt
[  468.628872][T12051] EXT4-fs warning (device loop1): dx_probe:964: inode #2: comm syz-executor.1: Corrupt directory, running e2fsck is recommended
[  468.647579][T12051] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  468.655990][T12051] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino
[  468.676314][T12051] EXT4-fs (loop1): Remounting filesystem read-only
[  468.684790][T12051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  468.687944][T12053] SQUASHFS error: Failed to read block 0x91: -5
[  468.697293][T12051] SELinux: (dev loop1, type ext4) getxattr errno 5
[  468.700386][T12051] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  468.726334][T12053] SQUASHFS error: Unable to read metadata cache entry [8f]
[  468.744833][T12053] SQUASHFS error: Unable to read inode 0x11f
[  468.782863][T12058] syz-executor.2[12058] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.783056][T12058] syz-executor.2[12058] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.830269][T12056] syz-executor.3[12056] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.866382][T12056] syz-executor.3[12056] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  468.883341][T12058] hub 6-0:1.0: USB hub found
[  468.911174][T12058] hub 6-0:1.0: 1 port detected
[  469.087116][T12061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  469.239377][T12053] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=46 sclass=netlink_audit_socket pid=12053 comm=syz-executor.4
[  469.276595][T12058] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  469.530629][   T29] audit: type=1400 audit(1716844872.282:946): avc:  denied  { listen } for  pid=12073 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[  469.617825][T12078] loop1: detected capacity change from 0 to 8
[  469.640891][T12078] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported
[  469.868362][T12082] syz-executor.3[12082] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  469.868552][T12082] syz-executor.3[12082] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  469.943026][   T29] audit: type=1400 audit(1716844872.692:947): avc:  denied  { bind } for  pid=12085 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  470.104244][T12082] hub 6-0:1.0: USB hub found
[  470.117639][T12082] hub 6-0:1.0: 1 port detected
[  470.183103][T12082] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  470.509091][T12067] loop0: detected capacity change from 0 to 32768
[  470.875125][T12067] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=crc64,str_hash=crc64,nojournal_transaction_names
[  470.901138][T12110] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  470.919148][T12067] bcachefs (loop0): recovering from clean shutdown, journal seq 8
[  470.983557][T12067] bcachefs (loop0): alloc_read... done
[  471.004195][T12067] bcachefs (loop0): stripes_read... done
[  471.016235][ T5099] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  471.032861][T12067] bcachefs (loop0): snapshots_read... done
[  471.059956][T12108] hub 6-0:1.0: USB hub found
[  471.061364][T12067] bcachefs (loop0): journal_replay...
[  471.072320][T12108] hub 6-0:1.0: 1 port detected
[  471.076813][T12067]  done
[  471.097023][T12067] bcachefs (loop0): resume_logged_ops... done
[  471.118576][T12067] bcachefs (loop0): going read-write
[  471.127959][T12108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  471.154287][T12067] bcachefs (loop0): done starting filesystem
[  471.269496][ T5099] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  471.310624][ T5099] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  471.342886][ T5099] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  471.357627][ T5099] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  471.375238][T11136] bcachefs (loop0): shutting down
[  471.383497][T11136] bcachefs (loop0): going read-only
[  471.393810][T11136] bcachefs (loop0): finished waiting for writes to stop
[  471.401665][T12106] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  471.418642][T11136] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9
[  471.463366][T11136] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[  471.516181][T11136] bcachefs (loop0): shutdown complete, journal seq 11
[  471.527181][T11136] bcachefs (loop0): marking filesystem clean
[  471.713871][T12118] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'.
[  471.752929][   T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  471.781838][T11136] bcachefs (loop0): shutdown complete
[  471.872067][ T5098] usb 4-1: USB disconnect, device number 3
[  471.999640][T12096] loop4: detected capacity change from 0 to 32768
[  472.013184][T12122] loop1: detected capacity change from 0 to 47
[  472.099376][   T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.123269][T12096] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  472.203205][   T29] audit: type=1400 audit(1716844874.952:948): avc:  denied  { rename } for  pid=12120 comm="syz-executor.1" name="bus" dev="loop1" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  472.271464][T12096] XFS (loop4): Ending clean mount
[  472.299867][T12096] XFS (loop4): Quotacheck needed: Please wait.
[  472.321349][   T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.405732][T12096] XFS (loop4): Quotacheck: Done.
[  472.499833][   T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  472.660798][T11506] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  472.685902][T12135] bpf_get_probe_write_proto: 2 callbacks suppressed
[  472.685924][T12135] syz-executor.3[12135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  472.692856][T12135] syz-executor.3[12135] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  472.781650][   T29] audit: type=1400 audit(1716844875.522:949): avc:  denied  { mounton } for  pid=12137 comm="syz-executor.2" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1
[  472.861508][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  472.879638][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  472.896724][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  472.905970][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  472.922113][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  472.929738][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  473.014530][   T45] IPVS: starting estimator thread 0...
[  473.068241][T12140] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  473.093209][T12135] hub 6-0:1.0: USB hub found
[  473.099909][T12135] hub 6-0:1.0: 1 port detected
[  473.137644][T12135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  473.150001][T12141] IPVS: using max 16 ests per chain, 38400 per kthread
[  473.256934][   T61] bridge_slave_1: left allmulticast mode
[  473.267955][   T61] bridge_slave_1: left promiscuous mode
[  473.273792][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  473.320206][   T61] bridge_slave_0: left allmulticast mode
[  473.334092][   T61] bridge_slave_0: left promiscuous mode
[  473.340747][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  473.831200][   T29] audit: type=1326 audit(1716844876.582:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12152 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80f1e7cee9 code=0x0
[  474.283459][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  474.299952][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  474.303635][   T61] bond0 (unregistering): Released all slaves
[  474.628449][   T29] audit: type=1400 audit(1716844877.382:951): avc:  denied  { mounton } for  pid=12160 comm="syz-executor.3" path="/root/syzkaller-testdir1035128607/syzkaller.cqP8Us/74/file0" dev="configfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  474.756994][   T29] audit: type=1400 audit(1716844877.452:952): avc:  denied  { read } for  pid=12160 comm="syz-executor.3" name="/" dev="configfs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  474.890301][   T29] audit: type=1400 audit(1716844877.452:953): avc:  denied  { open } for  pid=12160 comm="syz-executor.3" path="/root/syzkaller-testdir1035128607/syzkaller.cqP8Us/74/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  474.918405][    C1] vkms_vblank_simulate: vblank timer overrun
[  475.079561][   T53] Bluetooth: hci3: command tx timeout
[  475.146562][ T5191] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  475.297938][   T61] hsr_slave_0: left promiscuous mode
[  475.330283][   T61] hsr_slave_1: left promiscuous mode
[  475.348270][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  475.349181][ T5191] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  475.364760][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  475.394479][ T5191] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  475.395432][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  475.427676][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  475.431846][ T5191] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  475.470005][ T5191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.528606][T12164] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  475.535230][   T61] veth1_macvtap: left promiscuous mode
[  475.549177][   T61] veth0_macvtap: left promiscuous mode
[  475.564872][   T61] veth1_vlan: left promiscuous mode
[  475.585557][   T61] veth0_vlan: left promiscuous mode
[  476.062117][   T45] usb 5-1: USB disconnect, device number 6
[  476.421499][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  476.437604][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  476.450778][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  476.459655][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  476.470932][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  476.480207][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  476.552443][T12166] loop3: detected capacity change from 0 to 32768
[  476.553566][T12178] loop1: detected capacity change from 0 to 16
[  476.582566][T12178] erofs: (device loop1): mounted with root inode @ nid 36.
[  476.631552][T12166] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  476.661717][T12178] erofs: (device loop1): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  476.740125][T12166] XFS (loop3): Ending clean mount
[  476.752964][T12166] XFS (loop3): Quotacheck needed: Please wait.
[  476.786211][ T5106] IPVS: starting estimator thread 0...
[  476.811092][T12188] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  476.868760][T12166] XFS (loop3): Quotacheck: Done.
[  476.888863][T12189] IPVS: using max 17 ests per chain, 40800 per kthread
[  477.096439][T11097] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  477.146309][ T5114] Bluetooth: hci3: command tx timeout
[  477.402863][   T61] team0 (unregistering): Port device team_slave_1 removed
[  477.480394][   T61] team0 (unregistering): Port device team_slave_0 removed
[  477.726210][   T29] audit: type=1326 audit(1716844880.472:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12195 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f80f1e7cee9 code=0x0
[  477.749516][    C1] vkms_vblank_simulate: vblank timer overrun
[  478.593181][ T5114] Bluetooth: hci0: command tx timeout
[  478.803040][T12137] chnl_net:caif_netlink_parms(): no params data found
[  479.226535][ T5114] Bluetooth: hci3: command tx timeout
[  479.317695][T12137] bridge0: port 1(bridge_slave_0) entered blocking state
[  479.347808][T12137] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.355152][T12137] bridge_slave_0: entered allmulticast mode
[  479.381848][T12137] bridge_slave_0: entered promiscuous mode
[  479.495313][T12137] bridge0: port 2(bridge_slave_1) entered blocking state
[  479.551769][T12137] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.579366][T12137] bridge_slave_1: entered allmulticast mode
[  479.625838][T12137] bridge_slave_1: entered promiscuous mode
[  479.795373][T12137] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  479.853454][T12137] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  480.234360][T12137] team0: Port device team_slave_0 added
[  480.313181][T12137] team0: Port device team_slave_1 added
[  480.372261][   T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  480.381521][   T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  480.397826][   T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  480.410256][   T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  480.424384][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  480.447759][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  480.540279][   T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.540416][T12221] loop3: detected capacity change from 0 to 256
[  480.666557][   T53] Bluetooth: hci0: command tx timeout
[  480.745391][   T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  480.774275][T12137] batman_adv: batadv0: Adding interface: batadv_slave_0
[  480.795170][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  480.843156][T12137] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  480.944303][   T29] audit: type=1400 audit(1716844883.692:955): avc:  denied  { mounton } for  pid=12222 comm="syz-executor.3" path="/proc/12222/task" dev="proc" ino=38110 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1
[  480.945607][T12175] chnl_net:caif_netlink_parms(): no params data found
[  481.037446][   T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.065020][T12137] batman_adv: batadv0: Adding interface: batadv_slave_1
[  481.072725][T12137] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  481.099559][T12137] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  481.226886][   T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  481.309867][   T53] Bluetooth: hci3: command tx timeout
[  481.558517][T12137] hsr_slave_0: entered promiscuous mode
[  481.581821][T12137] hsr_slave_1: entered promiscuous mode
[  481.609513][T12137] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  481.631349][T12137] Cannot create hsr debugfs directory
[  481.823067][T12175] bridge0: port 1(bridge_slave_0) entered blocking state
[  481.838347][T12175] bridge0: port 1(bridge_slave_0) entered disabled state
[  481.845561][T12175] bridge_slave_0: entered allmulticast mode
[  481.868407][T12175] bridge_slave_0: entered promiscuous mode
[  481.960904][T12175] bridge0: port 2(bridge_slave_1) entered blocking state
[  481.999284][T12175] bridge0: port 2(bridge_slave_1) entered disabled state
[  482.023428][   T29] audit: type=1400 audit(1716844884.772:956): avc:  denied  { write } for  pid=12247 comm="syz-executor.3" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1
[  482.053910][T12175] bridge_slave_1: entered allmulticast mode
[  482.071998][T12175] bridge_slave_1: entered promiscuous mode
[  482.365887][T12243] loop4: detected capacity change from 0 to 32768
[  482.400310][   T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.434270][T12243] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  482.454498][T12175] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  482.473881][T12175] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  482.506256][   T53] Bluetooth: hci1: command tx timeout
[  482.570030][   T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.582139][T12243] XFS (loop4): Ending clean mount
[  482.615400][T12243] XFS (loop4): Quotacheck needed: Please wait.
[  482.706986][T12243] XFS (loop4): Quotacheck: Done.
[  482.756939][   T53] Bluetooth: hci0: command tx timeout
[  482.765611][   T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  482.812574][T12175] team0: Port device team_slave_0 added
[  482.880674][T12175] team0: Port device team_slave_1 added
[  482.933009][T11506] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  482.939318][   T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  483.143660][T12175] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.169996][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.226501][T12175] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.253206][T12175] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.261333][T12175] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.295979][T12175] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.445904][T12217] chnl_net:caif_netlink_parms(): no params data found
[  483.524178][T12175] hsr_slave_0: entered promiscuous mode
[  483.530729][T12175] hsr_slave_1: entered promiscuous mode
[  483.541465][T12175] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  483.550704][T12175] Cannot create hsr debugfs directory
[  484.247035][   T61] bridge_slave_1: left allmulticast mode
[  484.252721][   T61] bridge_slave_1: left promiscuous mode
[  484.266824][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.277481][   T61] bridge_slave_0: left allmulticast mode
[  484.283618][   T61] bridge_slave_0: left promiscuous mode
[  484.289668][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.353524][   T61] bridge_slave_1: left allmulticast mode
[  484.370475][   T61] bridge_slave_1: left promiscuous mode
[  484.419313][   T61] bridge0: port 2(bridge_slave_1) entered disabled state
[  484.448560][   T61] bridge_slave_0: left allmulticast mode
[  484.465160][   T61] bridge_slave_0: left promiscuous mode
[  484.475674][   T61] bridge0: port 1(bridge_slave_0) entered disabled state
[  484.586614][   T53] Bluetooth: hci1: command tx timeout
[  484.619471][   T29] audit: type=1400 audit(1716844887.332:957): avc:  denied  { ioctl } for  pid=12274 comm="syz-executor.3" path="socket:[39017]" dev="sockfs" ino=39017 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  484.826468][   T53] Bluetooth: hci0: command tx timeout
[  484.984467][T12282] loop4: detected capacity change from 0 to 16
[  485.002326][T12282] erofs: (device loop4): mounted with root inode @ nid 36.
[  485.149970][T12282] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  485.777086][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  485.807063][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  485.838181][   T61] bond0 (unregistering): Released all slaves
[  486.129465][   T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  486.149959][   T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  486.177710][   T61] bond0 (unregistering): Released all slaves
[  486.222976][T12217] bridge0: port 1(bridge_slave_0) entered blocking state
[  486.235757][T12217] bridge0: port 1(bridge_slave_0) entered disabled state
[  486.276304][T12217] bridge_slave_0: entered allmulticast mode
[  486.317819][T12217] bridge_slave_0: entered promiscuous mode
[  486.505008][T12217] bridge0: port 2(bridge_slave_1) entered blocking state
[  486.515823][T12217] bridge0: port 2(bridge_slave_1) entered disabled state
[  486.523218][T12217] bridge_slave_1: entered allmulticast mode
[  486.556911][T12217] bridge_slave_1: entered promiscuous mode
[  486.666732][   T53] Bluetooth: hci1: command tx timeout
[  486.960444][   T29] audit: type=1400 audit(1716844889.692:958): avc:  denied  { bind } for  pid=12286 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  487.931914][T12217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  488.025166][T12217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  488.065302][T12137] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  488.076981][T12137] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  488.120585][T12217] team0: Port device team_slave_0 added
[  488.159998][T12137] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  488.180194][T12137] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  488.306749][T12217] team0: Port device team_slave_1 added
[  488.463135][T12217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  488.499762][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.533732][T12217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  488.628083][T12217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  488.635320][T12217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  488.663269][T12217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  488.804022][   T61] hsr_slave_0: left promiscuous mode
[  488.813282][   T61] hsr_slave_1: left promiscuous mode
[  488.866464][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  488.896243][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  488.907268][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  488.916452][   T53] Bluetooth: hci1: command tx timeout
[  488.946237][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  488.976476][   T61] hsr_slave_0: left promiscuous mode
[  488.986820][   T61] hsr_slave_1: left promiscuous mode
[  489.014311][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  489.039306][   T61] batman_adv: batadv0: Removing interface: batadv_slave_0
[  489.058064][   T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  489.070010][   T61] batman_adv: batadv0: Removing interface: batadv_slave_1
[  489.196648][   T61] veth1_macvtap: left promiscuous mode
[  489.202308][   T61] veth0_macvtap: left promiscuous mode
[  489.228077][T12303] loop4: detected capacity change from 0 to 32768
[  489.234597][   T61] veth1_vlan: left promiscuous mode
[  489.247289][   T61] veth0_vlan: left promiscuous mode
[  489.269511][   T61] veth1_macvtap: left promiscuous mode
[  489.275173][   T61] veth0_macvtap: left promiscuous mode
[  489.281218][   T61] veth1_vlan: left promiscuous mode
[  489.287314][   T61] veth0_vlan: left promiscuous mode
[  489.301935][T12303] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  489.364218][T12303] XFS (loop4): Ending clean mount
[  489.392341][T12303] XFS (loop4): Quotacheck needed: Please wait.
[  489.481062][T12303] XFS (loop4): Quotacheck: Done.
[  489.616924][T11506] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  490.512262][T12322] hub 9-0:1.0: USB hub found
[  490.518347][T12322] hub 9-0:1.0: 8 ports detected
[  491.351133][T12324] loop4: detected capacity change from 0 to 16
[  491.378655][T12324] erofs: (device loop4): mounted with root inode @ nid 36.
[  491.401987][   T61] team0 (unregistering): Port device team_slave_1 removed
[  491.479050][T12324] erofs: (device loop4): z_erofs_read_folio: read error -117 @ 0 of nid 36
[  491.488841][   T61] team0 (unregistering): Port device team_slave_0 removed
[  492.134989][T12330] IPVS: rr: TCP 172.20.20.170:0 - no destination available
[  493.536806][   T61] team0 (unregistering): Port device team_slave_1 removed
[  493.592817][   T61] team0 (unregistering): Port device team_slave_0 removed
[  494.292268][T12217] hsr_slave_0: entered promiscuous mode
[  494.324028][T12217] hsr_slave_1: entered promiscuous mode
[  494.343241][T12217] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  494.361846][T12217] Cannot create hsr debugfs directory
[  494.420111][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  494.867283][T12175] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  494.891086][T12175] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  494.955743][T12175] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  495.136154][T12175] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  495.223335][T12137] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.375905][T12137] 8021q: adding VLAN 0 to HW filter on device team0
[  495.384264][   T29] audit: type=1400 audit(1716844898.132:959): avc:  denied  { read } for  pid=12352 comm="syz-executor.4" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  495.444226][ T5188] bridge0: port 1(bridge_slave_0) entered blocking state
[  495.451452][ T5188] bridge0: port 1(bridge_slave_0) entered forwarding state
[  495.469748][   T29] audit: type=1400 audit(1716844898.162:960): avc:  denied  { open } for  pid=12352 comm="syz-executor.4" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  495.481215][ T5188] bridge0: port 2(bridge_slave_1) entered blocking state
[  495.500882][ T5188] bridge0: port 2(bridge_slave_1) entered forwarding state
[  495.566208][   T29] audit: type=1400 audit(1716844898.182:961): avc:  denied  { ioctl } for  pid=12352 comm="syz-executor.4" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1
[  495.624409][   T61] IPVS: stop unused estimator thread 0...
[  495.747123][T12175] 8021q: adding VLAN 0 to HW filter on device bond0
[  495.831874][T12357] loop4: detected capacity change from 0 to 4096
[  495.876851][T12357] NILFS (loop4): invalid segment: Checksum error in segment payload
[  495.885309][T12357] NILFS (loop4): trying rollback from an earlier position
[  495.903284][T12359] loop3: detected capacity change from 0 to 4096
[  495.958079][T12357] NILFS (loop4): recovery complete
[  495.963427][T12359] NILFS (loop3): invalid segment: Checksum error in segment payload
[  495.979114][T12359] NILFS (loop3): trying rollback from an earlier position
[  495.984121][T12175] 8021q: adding VLAN 0 to HW filter on device team0
[  496.007049][T12362] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  496.042991][T12359] NILFS (loop3): recovery complete
[  496.043259][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state
[  496.055322][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state
[  496.082415][T12364] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  496.091597][T12217] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  496.144283][T12217] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  496.182395][T12217] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  496.205534][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  496.212747][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  496.221193][T12359] overlayfs: upper fs does not support tmpfile.
[  496.223773][T12357] overlayfs: upper fs does not support tmpfile.
[  496.235864][T12359] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  496.241196][   T29] audit: type=1400 audit(1716844898.982:962): avc:  denied  { rename } for  pid=12358 comm="syz-executor.3" name="#21" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  496.243016][T12359] overlayfs: failed to set xattr on upper
[  496.284557][T12357] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  496.300159][T12217] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  496.314270][   T29] audit: type=1400 audit(1716844898.982:963): avc:  denied  { unlink } for  pid=12358 comm="syz-executor.3" name="#21" dev="loop3" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  496.331659][T12357] overlayfs: failed to set xattr on upper
[  496.339362][T12359] overlayfs: ...falling back to redirect_dir=nofollow.
[  496.372805][T12357] overlayfs: ...falling back to redirect_dir=nofollow.
[  496.379028][T12359] overlayfs: ...falling back to index=off.
[  496.385496][T12359] overlayfs: ...falling back to uuid=null.
[  496.397334][T12137] 8021q: adding VLAN 0 to HW filter on device batadv0
[  496.443999][T12357] overlayfs: ...falling back to index=off.
[  496.499413][T12357] overlayfs: ...falling back to uuid=null.
[  496.657529][T12137] veth0_vlan: entered promiscuous mode
[  496.753401][   T29] audit: type=1400 audit(1716844899.502:964): avc:  denied  { write } for  pid=12355 comm="syz-executor.4" name="/" dev="overlay" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  496.753765][T12137] veth1_vlan: entered promiscuous mode
[  496.804660][   T29] audit: type=1400 audit(1716844899.532:965): avc:  denied  { add_name } for  pid=12355 comm="syz-executor.4" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  496.922740][   T29] audit: type=1400 audit(1716844899.572:966): avc:  denied  { remove_name } for  pid=12355 comm="syz-executor.4" name="bus" dev="overlay" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  496.937475][T12217] 8021q: adding VLAN 0 to HW filter on device bond0
[  496.984394][   T29] audit: type=1400 audit(1716844899.582:967): avc:  denied  { rename } for  pid=12355 comm="syz-executor.4" name="bus" dev="overlay" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  497.078355][   T29] audit: type=1400 audit(1716844899.582:968): avc:  denied  { rmdir } for  pid=12355 comm="syz-executor.4" name="file0" dev="overlay" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  497.111549][T12217] 8021q: adding VLAN 0 to HW filter on device team0
[  497.144577][T12137] veth0_macvtap: entered promiscuous mode
[  497.160209][T12137] veth1_macvtap: entered promiscuous mode
[  497.205941][ T5099] bridge0: port 1(bridge_slave_0) entered blocking state
[  497.213102][ T5099] bridge0: port 1(bridge_slave_0) entered forwarding state
[  497.251303][T12175] 8021q: adding VLAN 0 to HW filter on device batadv0
[  497.290279][ T5098] bridge0: port 2(bridge_slave_1) entered blocking state
[  497.297490][ T5098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  497.364880][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.383787][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.402195][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  497.422477][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.451514][T12137] batman_adv: batadv0: Interface activated: batadv_slave_0
[  497.484122][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.505426][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.516620][T12137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  497.532631][T12137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  497.555279][T12137] batman_adv: batadv0: Interface activated: batadv_slave_1
[  497.593522][T12137] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  497.639699][T12137] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  497.666109][T12137] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  497.674844][T12137] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  497.728667][T12382] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'.
[  497.830586][T12175] veth0_vlan: entered promiscuous mode
[  497.898772][T12175] veth1_vlan: entered promiscuous mode
[  498.141047][T12175] veth0_macvtap: entered promiscuous mode
[  498.195921][T12175] veth1_macvtap: entered promiscuous mode
[  498.278052][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.294589][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.435671][ T3438] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  498.455093][ T3438] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  498.512969][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.540814][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.553245][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.581578][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.622496][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  498.645407][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.651861][T12406] loop2: detected capacity change from 0 to 256
[  498.672248][T12402] loop3: detected capacity change from 0 to 4096
[  498.682955][T12175] batman_adv: batadv0: Interface activated: batadv_slave_0
[  498.713582][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.744386][T12402] NILFS (loop3): invalid segment: Checksum error in segment payload
[  498.762797][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.773219][T12402] NILFS (loop3): trying rollback from an earlier position
[  498.780838][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.805471][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.818975][T12402] NILFS (loop3): recovery complete
[  498.821384][T12175] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  498.844671][T12175] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  498.847971][T12408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  498.858420][T12175] batman_adv: batadv0: Interface activated: batadv_slave_1
[  498.893213][T12217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  498.942227][T12175] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  498.969801][T12175] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  499.008535][T12175] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  499.018570][T12175] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  499.027077][T12402] overlayfs: upper fs does not support tmpfile.
[  499.034032][T12402] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  499.084541][T12402] overlayfs: failed to set xattr on upper
[  499.112986][T12402] overlayfs: ...falling back to redirect_dir=nofollow.
[  499.172760][T12402] overlayfs: ...falling back to index=off.
[  499.220608][T12402] overlayfs: ...falling back to uuid=null.
[  499.284718][T12217] veth0_vlan: entered promiscuous mode
[  499.353155][T12217] veth1_vlan: entered promiscuous mode
[  499.374603][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.410082][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.493752][T12421] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  499.525353][ T5099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  499.546595][ T5099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  499.581868][T12217] veth0_macvtap: entered promiscuous mode
[  499.632517][T12217] veth1_macvtap: entered promiscuous mode
[  499.753431][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.785626][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.801460][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.812860][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.827453][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.842504][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.852661][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  499.867664][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  499.891729][T12217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  499.944390][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.003647][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.022979][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.057720][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.085980][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.110789][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.130787][T12217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  500.152632][T12217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  500.190602][T12217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  500.220060][T12436] loop2: detected capacity change from 0 to 256
[  500.270857][T12217] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  500.300531][T12217] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  500.325865][T12217] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  500.356280][T12217] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  500.495952][T12441] 9pnet_fd: Insufficient options for proto=fd
[  500.702843][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.732908][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  500.761629][   T29] kauditd_printk_skb: 6 callbacks suppressed
[  500.761645][   T29] audit: type=1400 audit(1716844903.512:975): avc:  denied  { mount } for  pid=12442 comm="syz-executor.4" name="/" dev="hugetlbfs" ino=39907 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  500.895244][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  500.905094][   T29] audit: type=1400 audit(1716844903.652:976): avc:  denied  { unmount } for  pid=11506 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1
[  500.937921][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  501.190911][   T29] audit: type=1400 audit(1716844903.942:977): avc:  denied  { ioctl } for  pid=12456 comm="syz-executor.3" path="/dev/usbmon0" dev="devtmpfs" ino=705 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  501.200071][T12454] loop4: detected capacity change from 0 to 4096
[  501.259028][T12454] ntfs3: Bad value for 'gid'
[  501.475429][T12466] Cannot find add_set index 0 as target
[  501.517846][T12466] loop1: detected capacity change from 0 to 256
[  501.533809][T12468] Cannot find add_set index 0 as target
[  501.570568][T12468] loop4: detected capacity change from 0 to 256
[  501.742961][T12472] loop2: detected capacity change from 0 to 256
[  501.773978][   T29] audit: type=1400 audit(1716844904.522:978): avc:  denied  { setattr } for  pid=12465 comm="syz-executor.1" name="[io_uring]" dev="anon_inodefs" ino=40729 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[  501.816744][T12470] pim6reg1: entered allmulticast mode
[  501.882034][T12470] pim6reg1: entered promiscuous mode
[  501.960075][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  502.223822][T12483] input: syz0 as /devices/virtual/input/input50
[  502.233327][T12479] pim6reg1: entered allmulticast mode
[  502.290707][T12479] pim6reg1: entered promiscuous mode
[  502.749177][T12493] loop4: detected capacity change from 0 to 4096
[  502.771818][T12493] ntfs3: Bad value for 'gid'
[  502.893651][T12499] loop1: detected capacity change from 0 to 512
[  502.944668][T12499] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent
[  503.100584][T12503] Cannot find add_set index 0 as target
[  503.138673][T12503] loop4: detected capacity change from 0 to 256
[  503.146924][T12505] Cannot find add_set index 0 as target
[  503.246386][T12505] loop0: detected capacity change from 0 to 256
[  503.863897][T12485] loop2: detected capacity change from 0 to 32768
[  503.978664][T12485] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  504.103519][T12485] XFS (loop2): Ending clean mount
[  504.121607][T12485] XFS (loop2): Quotacheck needed: Please wait.
[  504.325451][T12485] XFS (loop2): Quotacheck: Done.
[  504.498083][T12137] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  504.656688][T12514] loop4: detected capacity change from 0 to 32768
[  504.681853][T12514] btrfs: Deprecated parameter 'usebackuproot'
[  504.701269][T12514] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  504.735932][T12514] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12514)
[  504.789496][T12514] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  504.810661][T12514] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  504.825583][T12514] BTRFS info (device loop4): using free-space-tree
[  505.053263][T12514] BTRFS info (device loop4): rebuilding free space tree
[  505.345359][   T29] audit: type=1800 audit(1716844908.092:979): pid=12514 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0
[  505.716729][T11506] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  507.577103][T12552] loop4: detected capacity change from 0 to 4096
[  507.596322][T12552] ntfs3: Bad value for 'gid'
[  507.894033][T12558] Cannot find add_set index 0 as target
[  507.954740][T12558] loop2: detected capacity change from 0 to 256
[  508.155117][T12566] input: syz1 as /devices/virtual/input/input54
[  508.375300][T12573] loop4: detected capacity change from 0 to 512
[  508.404934][T12573] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  508.419030][T12573] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  508.450189][T12573] EXT4-fs (loop4): group descriptors corrupted!
[  509.104797][T12528] team_slave_1: vlans aren't supported yet for dev_uc|mc_add()
[  509.314121][   T61] Bluetooth: hci5: Frame reassembly failed (-84)
[  509.349824][T12593] input: syz0 as /devices/virtual/input/input55
[  509.427215][T12595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  509.531022][T12598] input: syz1 as /devices/virtual/input/input56
[  509.551442][   T29] audit: type=1326 audit(1716844912.302:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12599 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f29e4c7cee9 code=0x0
[  509.908984][T12611] loop4: detected capacity change from 0 to 512
[  509.931422][T12611] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  509.959753][T12611] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  509.989541][T12611] EXT4-fs (loop4): group descriptors corrupted!
[  510.321778][   T29] audit: type=1400 audit(1716844913.072:981): avc:  denied  { mount } for  pid=12614 comm="syz-executor.3" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1
[  510.836095][   T29] audit: type=1326 audit(1716844913.582:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e4c7cee9 code=0x7ffc0000
[  510.908416][   T29] audit: type=1326 audit(1716844913.582:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e4c7cee9 code=0x7ffc0000
[  510.981799][   T29] audit: type=1326 audit(1716844913.592:984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f29e4c7cee9 code=0x7ffc0000
[  511.012633][   T29] audit: type=1326 audit(1716844913.592:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e4c7cee9 code=0x7ffc0000
[  511.052327][   T29] audit: type=1326 audit(1716844913.592:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12623 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f29e4c7cee9 code=0x7ffc0000
[  511.386483][ T5114] Bluetooth: hci5: command 0x1003 tx timeout
[  511.395205][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  511.600485][T12619] loop3: detected capacity change from 0 to 32768
[  511.631347][T12619] 
[  511.631347][T12619]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  511.631347][T12619] 
[  511.760908][T11097] 
[  511.760908][T11097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  511.760908][T11097] 
[  511.815016][T11097] 
[  511.815016][T11097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  511.815016][T11097] 
[  512.600917][T12646] loop3: detected capacity change from 0 to 512
[  512.628660][T12646] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  512.664325][T12646] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  512.703804][T12646] EXT4-fs (loop3): group descriptors corrupted!
[  513.095097][T12636] loop1: detected capacity change from 0 to 32768
[  513.164585][T12636] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12636)
[  513.811539][T12642] loop2: detected capacity change from 0 to 32768
[  513.848351][T12642] 
[  513.848351][T12642]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  513.848351][T12642] 
[  514.009843][T12137] 
[  514.009843][T12137]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  514.009843][T12137] 
[  514.037760][T12137] 
[  514.037760][T12137]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  514.037760][T12137] 
[  514.189020][T12636] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  514.247850][T12636] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  514.306966][T12636] BTRFS info (device loop1): using free-space-tree
[  514.558552][   T29] audit: type=1400 audit(1716844917.312:987): avc:  denied  { write } for  pid=12659 comm="syz-executor.3" name="nullb0" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[  514.582606][   T29] audit: type=1400 audit(1716844917.322:988): avc:  denied  { setopt } for  pid=12668 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1
[  514.623420][   T29] audit: type=1400 audit(1716844917.372:989): avc:  denied  { unmount } for  pid=11097 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[  514.798369][T12217] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  514.847250][T12676] Bluetooth: MGMT ver 1.22
[  514.948210][T12679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  515.294598][T12688] loop4: detected capacity change from 0 to 1024
[  515.339638][T12688] EXT4-fs (loop4): can't mount with both data=journal and delalloc
[  515.561026][T12692] input: syz0 as /devices/virtual/input/input57
[  515.601497][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  515.951856][T12703] loop1: detected capacity change from 0 to 128
[  516.079359][T12703] VFS: unable to find oldfs superblock on device loop1
[  516.189833][T12706] loop0: detected capacity change from 0 to 256
[  516.355465][T12706] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  516.425309][T12706] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  516.444434][T12712] loop2: detected capacity change from 0 to 64
[  516.526601][   T29] audit: type=1400 audit(1716844919.262:990): avc:  denied  { append } for  pid=12705 comm="syz-executor.0" path="/root/syzkaller-testdir3890522576/syzkaller.nSoM2w/9/file2/memory.events" dev="loop0" ino=1048852 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  516.745822][   T29] audit: type=1400 audit(1716844919.352:991): avc:  denied  { ioctl } for  pid=12705 comm="syz-executor.0" path="/root/syzkaller-testdir3890522576/syzkaller.nSoM2w/9/file2/memory.events" dev="loop0" ino=1048852 ioctlcmd=0x5879 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[  517.300420][    C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  517.473213][T12691] loop3: detected capacity change from 0 to 32768
[  517.603151][T12691] 
[  517.603151][T12691]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  517.603151][T12691] 
[  517.704818][   T29] audit: type=1400 audit(1716844920.452:992): avc:  denied  { setopt } for  pid=12741 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1
[  517.761788][T11097] 
[  517.761788][T11097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  517.761788][T11097] 
[  517.819421][T11097] 
[  517.819421][T11097]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  517.819421][T11097] 
[  517.885567][   T29] audit: type=1326 audit(1716844920.632:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ae7cee9 code=0x7ffc0000
[  517.931325][   T29] audit: type=1326 audit(1716844920.662:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ae7cee9 code=0x7ffc0000
[  518.002535][   T29] audit: type=1326 audit(1716844920.662:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f893ae7cee9 code=0x7ffc0000
[  518.072148][   T29] audit: type=1326 audit(1716844920.662:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12745 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f893ae7cee9 code=0x7ffc0000
[  518.153426][T12749] input: syz0 as /devices/virtual/input/input58
[  518.372036][T12754] loop3: detected capacity change from 0 to 256
[  518.426487][T12754] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  518.456887][    C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies.
[  518.466960][T12754] exFAT-fs (loop3): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  518.690008][T12763] loop4: detected capacity change from 0 to 22
[  518.706621][T12763] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  518.737654][T12763] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  518.830254][T12737] loop1: detected capacity change from 0 to 32768
[  518.871098][T12737] btrfs: Deprecated parameter 'usebackuproot'
[  518.890229][T12737] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  518.923661][T12737] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12737)
[  518.950743][T12737] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  518.962949][T12737] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  518.971929][T12737] BTRFS info (device loop1): using free-space-tree
[  518.972083][T12767] loop2: detected capacity change from 0 to 4096
[  519.013986][T12767] ntfs3: Unknown parameter 'fma{k'
[  519.057311][T12737] BTRFS info (device loop1): rebuilding free space tree
[  519.178035][T12793] loop3: detected capacity change from 0 to 1024
[  519.189806][T12793] hfsplus: failed to load catalog file
[  519.385323][T12217] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  519.403573][ T5114] Bluetooth: hci2: command 0x0406 tx timeout
[  519.423297][T12797] netlink: 'syz-executor.2': attribute type 12 has an invalid length.
[  519.633695][T12804] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  519.650415][T12804] netlink: 'syz-executor.3': attribute type 4 has an invalid length.
[  519.680614][T12804] netlink: 'syz-executor.3': attribute type 5 has an invalid length.
[  519.722348][T12804] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  519.780544][T12804] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  519.819675][T12804] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  519.842377][T12804] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'.
[  519.876011][T12806] loop0: detected capacity change from 0 to 256
[  519.953845][T12806] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  519.974460][T12806] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  520.466294][T12818] loop4: detected capacity change from 0 to 256
[  520.524243][T12818] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  520.574274][T12823] input: syz0 as /devices/virtual/input/input60
[  520.873509][T12837] loop1: detected capacity change from 0 to 64
[  521.142653][T12851] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[  521.157094][ T5188] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  521.199808][   T61] Bluetooth: hci5: Frame reassembly failed (-84)
[  521.359457][ T5188] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  521.376767][ T5188] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  521.391755][ T5188] usb 5-1: config 0 descriptor??
[  521.887693][ T5188] usb 5-1: Cannot read MAC address
[  521.902224][ T5188] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -61
[  521.995373][T12860] loop0: detected capacity change from 0 to 256
[  522.034863][T12860] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  522.116473][T12863] loop2: detected capacity change from 0 to 1024
[  522.237718][T12867] loop1: detected capacity change from 0 to 64
[  522.488279][T12880] loop1: detected capacity change from 0 to 512
[  522.506522][T12880] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  522.514478][T12880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  522.520784][T12882] loop2: detected capacity change from 0 to 1024
[  522.532085][T12880] EXT4-fs (loop1): orphan cleanup on readonly fs
[  522.539443][T12882] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  522.539497][T12880] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279949761 > max in inode 13
[  522.561259][T12880] EXT4-fs warning (device loop1): ext4_block_to_path:105: block 3279949762 > max in inode 13
[  522.573149][T12880] EXT4-fs (loop1): 1 truncate cleaned up
[  522.584490][T12880] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  522.599245][T12882] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:482: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0
[  522.616393][T12880] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[  522.622354][T12882] __quota_error: 27 callbacks suppressed
[  522.622373][T12882] Quota error (device loop2): write_blk: dquota write failed
[  522.631620][T12880] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  522.632223][T12882] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  522.639432][T12880] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  522.668134][T12882] EXT4-fs error (device loop2): ext4_acquire_dquot:6858: comm syz-executor.2: Failed to acquire dquot type 0
[  522.689552][T12882] EXT4-fs error (device loop2): ext4_free_blocks:6589: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096
[  522.717931][T12882] EXT4-fs error (device loop2): ext4_read_inode_bitmap:139: comm syz-executor.2: Invalid inode bitmap blk 0 in block_group 0
[  522.718369][T12217] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.732254][T12882] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  522.756643][T12882] EXT4-fs (loop2): 1 orphan inode deleted
[  522.764761][T12882] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  522.786435][   T61] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[  522.795990][   T61] EXT4-fs error (device loop2): ext4_release_dquot:6881: comm kworker/u8:4: Failed to release dquot type 0
[  522.873925][T12137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  522.888069][   T61] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[  522.906095][   T61] EXT4-fs error (device loop2): ext4_release_dquot:6881: comm kworker/u8:4: Failed to release dquot type 0
[  523.120362][T12897] loop2: detected capacity change from 0 to 1024
[  523.172453][T12899] loop1: detected capacity change from 0 to 1024
[  523.196108][T12899] hfsplus: failed to load catalog file
[  523.226398][   T53] Bluetooth: hci5: command 0x1003 tx timeout
[  523.226406][ T5114] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  523.405977][T12904] loop2: detected capacity change from 0 to 512
[  523.467950][T12904] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.491590][T12904] ext4 filesystem being mounted at /root/syzkaller-testdir2181583484/syzkaller.zP5nZQ/44/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  523.511656][T12911] loop3: detected capacity change from 0 to 64
[  523.555990][   T29] audit: type=1400 audit(1716844926.302:1024): avc:  denied  { create } for  pid=12912 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  523.608628][T12904] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents
[  523.627075][   T29] audit: type=1400 audit(1716844926.312:1025): avc:  denied  { setopt } for  pid=12912 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  523.675784][T12904] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error
[  523.691032][T12904] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents
[  523.731737][T12904] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error
[  523.780211][T12908] loop1: detected capacity change from 0 to 4096
[  523.803542][T12908] ntfs3: Unknown parameter 'fma{k'
[  523.838613][   T29] audit: type=1400 audit(1716844926.592:1026): avc:  denied  { watch watch_reads } for  pid=12902 comm="syz-executor.2" path="/root/syzkaller-testdir2181583484/syzkaller.zP5nZQ/44/file0" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  523.851888][T12920] loop3: detected capacity change from 0 to 1024
[  523.895595][   T29] audit: type=1400 audit(1716844926.622:1027): avc:  denied  { rename } for  pid=12902 comm="syz-executor.2" name="file0" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  523.920758][T12920] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  523.923689][   T29] audit: type=1400 audit(1716844926.622:1028): avc:  denied  { rmdir } for  pid=12902 comm="syz-executor.2" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[  523.980426][T12137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  523.988713][T12920] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:482: comm syz-executor.3: Invalid block bitmap block 0 in block_group 0
[  524.016708][T12920] Quota error (device loop3): write_blk: dquota write failed
[  524.031988][T12920] EXT4-fs error (device loop3): ext4_acquire_dquot:6858: comm syz-executor.3: Failed to acquire dquot type 0
[  524.075994][T12920] EXT4-fs error (device loop3): ext4_free_blocks:6589: comm syz-executor.3: Freeing blocks not in datazone - block = 0, count = 4096
[  524.127225][T12922] loop0: detected capacity change from 0 to 8192
[  524.150696][T12920] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz-executor.3: Invalid inode bitmap blk 0 in block_group 0
[  524.180470][T12920] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem
[  524.183268][ T1100] EXT4-fs error (device loop3): ext4_release_dquot:6881: comm kworker/u8:6: Failed to release dquot type 0
[  524.206785][T12920] EXT4-fs (loop3): 1 orphan inode deleted
[  524.215775][T12920] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  524.442129][T11097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.464878][T12927] loop2: detected capacity change from 0 to 8
[  524.466002][ T3438] EXT4-fs error (device loop3): ext4_release_dquot:6881: comm kworker/u8:7: Failed to release dquot type 0
[  524.473518][T12927] squashfs: Unknown parameter '0x0000000000000006	'
[  524.668661][ T5106] usb 5-1: USB disconnect, device number 7
[  524.904716][T12947] loop4: detected capacity change from 0 to 256
[  525.057242][T12951] loop3: detected capacity change from 0 to 512
[  525.102357][T12951] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  525.146580][T12951] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  525.154886][T12951] EXT4-fs (loop3): orphan cleanup on readonly fs
[  525.172803][T12958] netlink: 'syz-executor.4': attribute type 12 has an invalid length.
[  525.200064][T12951] EXT4-fs warning (device loop3): ext4_block_to_path:105: block 3279949761 > max in inode 13
[  525.216674][T12951] EXT4-fs warning (device loop3): ext4_block_to_path:105: block 3279949762 > max in inode 13
[  525.236244][T12951] EXT4-fs (loop3): 1 truncate cleaned up
[  525.238630][T12960] loop1: detected capacity change from 0 to 512
[  525.287204][T12951] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  525.384815][T12951] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[  525.400018][T12960] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  525.412950][T12960] ext4 filesystem being mounted at /root/syzkaller-testdir2623551803/syzkaller.CTgn7A/32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  525.488212][T12965] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  525.489478][T12960] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents
[  525.512646][T12960] EXT4-fs error (device loop1): ext4_dirty_inode:5935: inode #2: comm syz-executor.1: mark_inode_dirty error
[  525.525676][T12960] EXT4-fs error (device loop1): ext4_do_update_inode:5075: inode #2: comm syz-executor.1: corrupted inode contents
[  525.553891][T12960] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz-executor.1: mark_inode_dirty error
[  525.616978][T12965] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  525.705231][T11097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  525.775931][T12217] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.195487][T12984] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.1'.
[  526.492579][T12989] loop3: detected capacity change from 0 to 1024
[  526.618723][T12989] openvswitch: netlink: Unknown nsh attribute 0
[  526.652488][T12989] hfsplus: filesystem is marked journaled, leaving read-only.
[  526.667111][T12996] loop4: detected capacity change from 0 to 512
[  526.682516][T12998] loop2: detected capacity change from 0 to 512
[  526.688793][T12996] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  526.688817][T12996] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  526.689180][T12996] EXT4-fs (loop4): orphan cleanup on readonly fs
[  526.720404][T12996] EXT4-fs warning (device loop4): ext4_block_to_path:105: block 3279949761 > max in inode 13
[  526.739741][T12996] EXT4-fs warning (device loop4): ext4_block_to_path:105: block 3279949762 > max in inode 13
[  526.751780][T12996] EXT4-fs (loop4): 1 truncate cleaned up
[  526.759575][T12996] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  526.809423][T12996] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. Quota mode: none.
[  526.811114][T12998] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  526.834971][T12996] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  526.856954][T12996] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  526.899084][T12998] ext4 filesystem being mounted at /root/syzkaller-testdir2181583484/syzkaller.zP5nZQ/51/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  526.917681][ T5158] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  526.947776][T11506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  526.961301][T13004] loop1: detected capacity change from 0 to 1024
[  527.043021][T12998] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents
[  527.060980][T12998] EXT4-fs error (device loop2): ext4_dirty_inode:5935: inode #2: comm syz-executor.2: mark_inode_dirty error
[  527.092003][T12998] EXT4-fs error (device loop2): ext4_do_update_inode:5075: inode #2: comm syz-executor.2: corrupted inode contents
[  527.106855][T12998] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #2: comm syz-executor.2: mark_inode_dirty error
[  527.148069][ T5158] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  527.165594][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.190772][ T5158] usb 1-1: Product: syz
[  527.194980][ T5158] usb 1-1: Manufacturer: syz
[  527.206925][ T5158] usb 1-1: SerialNumber: syz
[  527.247712][ T5158] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  527.342975][T13013] loop4: detected capacity change from 0 to 512
[  527.352531][T13013] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  527.361829][T11234] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  527.388417][T13013] EXT4-fs (loop4): 1 truncate cleaned up
[  527.414105][T13013] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  527.455041][T12137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  527.526626][T13013] loop4: detected capacity change from 512 to 64
[  527.611816][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.634210][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.648852][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.663710][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.678292][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.698190][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.768341][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.814366][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.853424][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.875917][T11506] EXT4-fs warning (device loop4): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.4: error -12 reading directory block
[  527.998216][T13020] kvm: emulating exchange as write
[  528.264864][T12993] overlayfs: missing 'lowerdir'
[  528.307730][T13031] loop2: detected capacity change from 0 to 1024
[  528.381669][T13031] openvswitch: netlink: Unknown nsh attribute 0
[  528.533100][T13031] hfsplus: filesystem is marked journaled, leaving read-only.
[  528.860964][ T5188] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  528.881037][T13033] loop1: detected capacity change from 0 to 1024
[  528.906968][T13033] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  528.992216][T13033] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:482: comm syz-executor.1: Invalid block bitmap block 0 in block_group 0
[  529.025505][T13033] __quota_error: 6 callbacks suppressed
[  529.025523][T13033] Quota error (device loop1): write_blk: dquota write failed
[  529.075158][T13033] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  529.094699][ T5188] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  529.105184][T13033] EXT4-fs error (device loop1): ext4_acquire_dquot:6858: comm syz-executor.1: Failed to acquire dquot type 0
[  529.126795][ T5188] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  529.145447][T13033] EXT4-fs error (device loop1): ext4_free_blocks:6589: comm syz-executor.1: Freeing blocks not in datazone - block = 0, count = 4096
[  529.172096][ T5188] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  529.221049][T13033] EXT4-fs error (device loop1): ext4_read_inode_bitmap:139: comm syz-executor.1: Invalid inode bitmap blk 0 in block_group 0
[  529.250630][ T5188] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  529.272579][T13033] EXT4-fs error (device loop1) in ext4_free_inode:362: Corrupt filesystem
[  529.284071][ T5188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.306712][T13033] EXT4-fs (loop1): 1 orphan inode deleted
[  529.313682][ T5188] usb 4-1: Product: syz
[  529.322590][ T5188] usb 4-1: Manufacturer: syz
[  529.332634][T13033] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  529.354164][ T5188] usb 4-1: SerialNumber: syz
[  529.450283][ T5188] usb 4-1: selecting invalid altsetting 1
[  530.423228][T11506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  530.965441][ T5188] cdc_ncm 4-1:1.0: failed GET_NTB_PARAMETERS
[  531.012715][ T5188] cdc_ncm 4-1:1.0: bind() failure
[  531.029468][T12217] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  531.089696][ T5188] usb 4-1: USB disconnect, device number 4
[  531.221308][T13039] loop3: detected capacity change from 0 to 512
[  531.311076][T13039] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  531.358099][T13039] ext4 filesystem being mounted at /root/syzkaller-testdir1035128607/syzkaller.cqP8Us/147/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  531.523385][T13036] loop0: detected capacity change from 0 to 1024
[  531.587369][T13039] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents
[  531.663902][T13039] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error
[  531.738584][T13039] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents
[  531.804746][T13039] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error
[  532.131965][T13050] loop2: detected capacity change from 0 to 512
[  532.200877][T13050] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  532.246372][T11234] usb 1-1: Service connection timeout for: 256
[  532.249284][T13050] EXT4-fs (loop2): 1 truncate cleaned up
[  532.274188][T13050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  532.554836][T11234] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[  534.272249][ T1100] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  535.384017][ T1100] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  536.445492][T13058] loop0: detected capacity change from 0 to 32768
[  536.471480][T13058] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13058)
[  536.625369][ T1100] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.272863][ T1100] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  537.953775][ T1100] bridge_slave_1: left allmulticast mode
[  537.965785][ T1100] bridge_slave_1: left promiscuous mode
[  537.971750][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state
[  538.160710][ T1100] bridge_slave_0: left allmulticast mode
[  538.171389][ T1100] bridge_slave_0: left promiscuous mode
[  538.180450][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state
[  541.239587][T11097] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  541.403797][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  541.554308][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  541.717262][ T1100] bond0 (unregistering): Released all slaves
[  543.303697][T12901] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  543.314773][T12901] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  543.324790][T12901] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  543.336311][T12901] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  543.344645][T12901] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  543.358326][T12901] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  543.461490][T13050] loop2: detected capacity change from 512 to 64
[  543.607624][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  543.667345][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  543.743065][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  543.819837][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  543.870879][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  543.957009][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  544.013448][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  544.097200][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  544.165880][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  544.224192][T12137] EXT4-fs warning (device loop2): ext4_empty_dir:3116: inode #11: lblock 5: comm syz-executor.2: error -12 reading directory block
[  544.479054][T13060] chnl_net:caif_netlink_parms(): no params data found
[  545.128260][T13070] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25 (only 8 groups)
[  545.386558][ T5114] Bluetooth: hci4: command tx timeout
[  546.063286][T13060] bridge0: port 1(bridge_slave_0) entered blocking state
[  546.079620][T13060] bridge0: port 1(bridge_slave_0) entered disabled state
[  546.092487][T13060] bridge_slave_0: entered allmulticast mode
[  546.104625][T13060] bridge_slave_0: entered promiscuous mode
[  546.654478][T13060] bridge0: port 2(bridge_slave_1) entered blocking state
[  546.671058][T13060] bridge0: port 2(bridge_slave_1) entered disabled state
[  546.684944][T13060] bridge_slave_1: entered allmulticast mode
[  546.703319][T13060] bridge_slave_1: entered promiscuous mode
[  546.811612][T12137] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  547.466487][ T5114] Bluetooth: hci4: command tx timeout
[  547.572845][T13060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  547.610724][T13060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  548.054004][T12901] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  548.067393][T12901] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  548.077124][T12901] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  548.085655][T12901] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  548.094378][T12901] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  548.104632][T12901] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  548.443566][T13060] team0: Port device team_slave_0 added
[  548.454016][T13060] team0: Port device team_slave_1 added
[  548.764550][T13060] batman_adv: batadv0: Adding interface: batadv_slave_0
[  548.788299][T13060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.829314][T13060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  548.879946][T13060] batman_adv: batadv0: Adding interface: batadv_slave_1
[  548.890850][T13060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  548.925694][T13060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  549.542090][T13060] hsr_slave_0: entered promiscuous mode
[  549.548538][T12901] Bluetooth: hci4: command tx timeout
[  549.635255][T13060] hsr_slave_1: entered promiscuous mode
[  549.694594][T13060] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  549.705848][T13060] Cannot create hsr debugfs directory
[  550.038848][ T5365] Quota error (device loop1): do_check_range: Getting block 0 out of range 1-8
[  550.056211][ T5365] EXT4-fs error (device loop1): ext4_release_dquot:6881: comm kworker/u8:10: Failed to release dquot type 0
[  550.194555][T12901] Bluetooth: hci3: command tx timeout
[  550.632765][T13076] chnl_net:caif_netlink_parms(): no params data found
[  551.626959][T12901] Bluetooth: hci4: command tx timeout
[  552.266679][T12901] Bluetooth: hci3: command tx timeout
[  552.610958][T13076] bridge0: port 1(bridge_slave_0) entered blocking state
[  552.645749][T13076] bridge0: port 1(bridge_slave_0) entered disabled state
[  552.672480][T13076] bridge_slave_0: entered allmulticast mode
[  552.730585][T13076] bridge_slave_0: entered promiscuous mode
[  552.770352][T13076] bridge0: port 2(bridge_slave_1) entered blocking state
[  552.810793][T13076] bridge0: port 2(bridge_slave_1) entered disabled state
[  552.842995][T13076] bridge_slave_1: entered allmulticast mode
[  552.893355][T13076] bridge_slave_1: entered promiscuous mode
[  553.981759][   T29] audit: type=1400 audit(1716844956.732:1032): avc:  denied  { map } for  pid=13096 comm="syz-executor.0" path="/dev/usbmon0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  554.348087][T12901] Bluetooth: hci3: command tx timeout
[  554.947390][T13076] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  554.981526][T13076] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  556.426852][T12901] Bluetooth: hci3: command tx timeout
[  563.598272][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  583.468116][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  583.479057][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  583.487671][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  583.496172][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  583.504153][ T5116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  583.513026][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  583.554637][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  583.568733][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  583.588979][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  583.597572][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  583.605834][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  583.614651][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  585.546796][ T5114] Bluetooth: hci1: command tx timeout
[  585.706363][ T5114] Bluetooth: hci5: command tx timeout
[  587.626779][ T5114] Bluetooth: hci1: command tx timeout
[  587.786368][ T5114] Bluetooth: hci5: command tx timeout
[  589.706672][ T5114] Bluetooth: hci1: command tx timeout
[  589.868027][ T5114] Bluetooth: hci5: command tx timeout
[  591.788149][ T5114] Bluetooth: hci1: command tx timeout
[  591.946272][ T5114] Bluetooth: hci5: command tx timeout
[  601.318367][ T5116] Bluetooth: hci0: command 0x0406 tx timeout
[  609.700647][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  609.724754][ T5116] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  609.767702][ T5116] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  609.778156][ T5116] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  609.787372][ T5116] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  609.794850][ T5116] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  611.866424][ T5116] Bluetooth: hci6: command tx timeout
[  613.248350][ T5114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  613.260043][ T5114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  613.283856][ T5114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  613.293767][ T5114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  613.302086][ T5114] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  613.311710][ T5114] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  613.947900][ T5116] Bluetooth: hci6: command tx timeout
[  615.386705][ T5114] Bluetooth: hci7: command tx timeout
[  616.026370][ T5114] Bluetooth: hci6: command tx timeout
[  617.475582][ T5114] Bluetooth: hci7: command tx timeout
[  618.106255][ T5114] Bluetooth: hci6: command tx timeout
[  619.548176][ T5114] Bluetooth: hci7: command tx timeout
[  621.632555][ T5114] Bluetooth: hci7: command tx timeout
[  625.250186][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  667.887721][ T5116] Bluetooth: hci4: command 0x0406 tx timeout
[  673.007005][ T5116] Bluetooth: hci3: command 0x0406 tx timeout
[  673.075887][T12901] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  673.088417][T12901] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  673.102616][T12901] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  673.112254][T12901] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  673.126466][T12901] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  673.133959][T12901] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  673.239751][   T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[  673.251439][   T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[  673.260133][   T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[  673.268669][   T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[  673.276756][   T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3
[  673.288186][   T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[  674.712228][ T5116] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1
[  674.732981][ T5116] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9
[  674.772742][ T5116] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9
[  674.793253][ T5116] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4
[  674.812752][ T5116] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3
[  674.822499][ T5116] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2
[  675.626655][ T5114] Bluetooth: hci9: command tx timeout
[  675.646140][ T5116] Bluetooth: hci8: command tx timeout
[  676.917910][ T5116] Bluetooth: hci10: command tx timeout
[  677.706687][ T5116] Bluetooth: hci8: command tx timeout
[  677.712169][ T5116] Bluetooth: hci9: command tx timeout
[  678.413255][ T5116] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1
[  678.434178][ T5116] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9
[  678.445643][ T5116] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9
[  678.460644][ T5116] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4
[  678.471107][ T5116] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3
[  678.498440][ T5116] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2
[  679.001868][ T5114] Bluetooth: hci10: command tx timeout
[  679.796354][ T5116] Bluetooth: hci8: command tx timeout
[  679.803268][ T5114] Bluetooth: hci9: command tx timeout
[  680.596676][ T5114] Bluetooth: hci11: command tx timeout
[  681.077624][ T5114] Bluetooth: hci10: command tx timeout
[  681.876482][ T5116] Bluetooth: hci8: command tx timeout
[  681.881962][ T5114] Bluetooth: hci9: command tx timeout
[  682.676524][ T5114] Bluetooth: hci11: command tx timeout
[  683.158566][ T5114] Bluetooth: hci10: command tx timeout
[  684.756683][ T5114] Bluetooth: hci11: command tx timeout
[  686.509165][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  686.836437][ T5114] Bluetooth: hci11: command tx timeout
[  688.197081][   T30] INFO: task kworker/R-mm_pe:13 blocked for more than 143 seconds.
[  688.205019][   T30]       Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0
[  688.226211][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  688.234906][   T30] task:kworker/R-mm_pe state:D stack:29552 pid:13    tgid:13    ppid:2      flags:0x00004000
[  688.257820][   T30] Workqueue:  0x0 (mm_percpu_wq)
2024/05/27 21:24:51 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF
[  688.349037][   T30] Call Trace:
[  688.352365][   T30]  <TASK>
[  688.355313][   T30]  __schedule+0xf15/0x5d00
[  688.396414][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  688.401671][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  688.426188][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  688.431443][   T30]  ? __pfx___schedule+0x10/0x10
[  688.459790][   T30]  ? schedule+0x298/0x350
[  688.464164][   T30]  ? __pfx_lock_release+0x10/0x10
[  688.516272][   T30]  ? __mutex_lock+0x5b3/0x9c0
[  688.521002][   T30]  ? __mutex_trylock_common+0x78/0x250
[  688.546282][   T30]  schedule+0xe7/0x350
[  688.550399][   T30]  schedule_preempt_disabled+0x13/0x30
[  688.555892][   T30]  __mutex_lock+0x5b8/0x9c0
[  688.584771][   T30]  ? worker_detach_from_pool+0x95/0x3f0
[  688.618707][   T30]  ? __pfx___mutex_lock+0x10/0x10
[  688.623784][   T30]  ? rescuer_thread+0x803/0xd40
[  688.646258][   T30]  ? __pfx_lock_release+0x10/0x10
[  688.651333][   T30]  ? worker_detach_from_pool+0x95/0x3f0
[  688.686257][   T30]  worker_detach_from_pool+0x95/0x3f0
[  688.691679][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  688.727830][   T30]  rescuer_thread+0x80b/0xd40
[  688.732550][   T30]  ? __pfx_rescuer_thread+0x10/0x10
[  688.766353][   T30]  ? lockdep_hardirqs_on+0x7c/0x110
[  688.771601][   T30]  ? __kthread_parkme+0x148/0x220
[  688.802357][   T30]  ? __pfx_rescuer_thread+0x10/0x10
[  688.818684][   T30]  kthread+0x2c1/0x3a0
[  688.822794][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  688.892042][   T30]  ? __pfx_kthread+0x10/0x10
[  688.914943][   T30]  ret_from_fork+0x45/0x80
[  688.927685][   T30]  ? __pfx_kthread+0x10/0x10
[  688.932317][   T30]  ret_from_fork_asm+0x1a/0x30
[  688.966209][   T30]  </TASK>
[  688.969300][   T30] INFO: task kworker/u8:6:1100 blocked for more than 144 seconds.
[  688.994701][   T30]       Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0
[  689.026407][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  689.035104][   T30] task:kworker/u8:6    state:D stack:23088 pid:1100  tgid:1100  ppid:2      flags:0x00004000
[  689.103382][   T30] Workqueue: netns cleanup_net
[  689.114547][   T30] Call Trace:
[  689.121015][   T30]  <TASK>
[  689.123973][   T30]  __schedule+0xf15/0x5d00
[  689.144325][   T30]  ? __pfx___lock_acquire+0x10/0x10
[  689.158931][   T30]  ? mark_held_locks+0x9f/0xe0
[  689.172086][   T30]  ? __pfx___schedule+0x10/0x10
[  689.193956][   T30]  ? schedule+0x298/0x350
[  689.206122][   T30]  ? __pfx_lock_release+0x10/0x10
[  689.211189][   T30]  ? __pfx_mark_lock+0x10/0x10
[  689.215982][   T30]  schedule+0xe7/0x350
[  689.254283][   T30]  schedule_timeout+0x258/0x2a0
[  689.284017][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  689.326092][   T30]  ? mark_held_locks+0x9f/0xe0
[  689.330906][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  689.360143][   T30]  __wait_for_common+0x3de/0x5f0
[  689.365127][   T30]  ? __pfx_schedule_timeout+0x10/0x10
[  689.398310][   T30]  ? __pfx___wait_for_common+0x10/0x10
[  689.403812][   T30]  ? destroy_workqueue+0x12c/0xaa0
[  689.446588][   T30]  kthread_stop+0x19a/0x670
[  689.451138][   T30]  destroy_workqueue+0x154/0xaa0
[  689.482010][   T30]  bond_destructor+0x45/0x90
[  689.491394][   T30]  ? __pfx_bond_destructor+0x10/0x10
[  689.516310][   T30]  netdev_run_todo+0x775/0x1250
[  689.521201][   T30]  ? __pfx_netdev_run_todo+0x10/0x10
[  689.546240][   T30]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  689.552525][   T30]  ? __pfx_unregister_netdevice_queue+0x10/0x10
[  689.584051][   T30]  ? __pfx_unregister_netdevice_many_notify+0x10/0x10
[  689.626497][   T30]  ? mutex_is_locked+0x12/0x50
[  689.631315][   T30]  ? nexthop_net_exit_batch_rtnl+0x1df/0x2b0
[  689.658464][   T30]  cleanup_net+0x591/0xbf0
[  689.662929][   T30]  ? __pfx_cleanup_net+0x10/0x10
[  689.692858][   T30]  process_one_work+0x9fb/0x1b60
[  689.712502][   T30]  ? __pfx_lock_acquire+0x10/0x10
[  689.727549][   T30]  ? __pfx_process_one_work+0x10/0x10
[  689.732964][   T30]  ? assign_work+0x1a0/0x250
[  689.758906][   T30]  worker_thread+0x6c8/0xf70
[  689.763542][   T30]  ? __kthread_parkme+0x148/0x220
[  689.790254][   T30]  ? __pfx_worker_thread+0x10/0x10
[  689.795405][   T30]  kthread+0x2c1/0x3a0
[  689.841084][   T30]  ? _raw_spin_unlock_irq+0x23/0x50
[  689.861005][   T30]  ? __pfx_kthread+0x10/0x10
[  689.865636][   T30]  ret_from_fork+0x45/0x80
[  689.890937][   T30]  ? __pfx_kthread+0x10/0x10
[  689.895569][   T30]  ret_from_fork_asm+0x1a/0x30
[  689.923095][   T30]  </TASK>
[  689.936457][   T30] INFO: task syz-executor.3:11097 blocked for more than 145 seconds.
[  689.944547][   T30]       Not tainted 6.10.0-rc1-syzkaller-00013-g2bfcfd584ff5 #0
[  689.982421][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  690.026153][   T30] task:syz-executor.3  state:D stack:24224 pid:11097 tgid:11097 ppid:1      flags:0x00004006
[