last executing test programs:

1m50.20073863s ago: executing program 4 (id=77):
r0 = syz_create_resource$binfmt(&(0x7f0000000380)='./file1\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x42, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
execve(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0)={[&(0x7f00000000c0)='\x94\xfc\x01\x9e\xab\x80^\x86\x90f\xab8f2\xdb', &(0x7f0000000080)='/dev/net/tun\x00']}, 0x0)

1m49.945928093s ago: executing program 4 (id=79):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa40000003f000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000300)='GPL\x00', 0x2, 0x79, &(0x7f0000001e00)=""/4086, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)

1m49.877547104s ago: executing program 4 (id=81):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00'], 0x2c}}, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x814414, &(0x7f0000000140)=ANY=[], 0x1, 0x720, &(0x7f00000012c0)="$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")

1m49.726056986s ago: executing program 4 (id=84):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x9c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x6c, 0x2, {{}, [@TCA_NETEM_LOSS={0x30, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x16, 0x1, {0x10, 0xffffffff}}]}, @TCA_NETEM_RATE={0x14, 0xd}, @TCA_NETEM_CORRUPT={0xc, 0x2}]}}}]}, 0x9c}}, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240), 0xfe, 0x54b, &(0x7f0000000400)="$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")
r3 = socket(0x22, 0x2, 0x4)
ioctl$IMGETCOUNT(r3, 0x80044944, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x8)
unshare(0x20000400)
r4 = socket(0xa, 0x3, 0x6)
bind$bt_hci(r4, 0x0, 0x0)
r5 = semget$private(0x0, 0x1, 0x20)
semop(r5, &(0x7f0000000080)=[{0x1, 0x3ff, 0x800}, {0x3, 0x7ff, 0x1000}, {0x0, 0x6}, {0x602b65488ba60904, 0xc9ba, 0x800}], 0x4)
mount$bind(&(0x7f0000000180)='.\x00', &(0x7f0000000140)='./file0\x00', 0x0, 0x45110, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0/../file0'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)

1m49.444734778s ago: executing program 4 (id=85):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, 0x0, 0x0)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window, @window={0x3, 0x0, 0xfffc}, @timestamp, @timestamp], 0x8)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m46.418006539s ago: executing program 4 (id=103):
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7545}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x10000}}]}, 0x38}}, 0x20000010)

1m46.276516171s ago: executing program 32 (id=103):
r0 = syz_open_dev$dri(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_BALANCE_CTL(r0, 0x40049421, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x11, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r5, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, 0x1, 0x4, 0x801, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x7545}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_MODE={0xa, 0x2, {0x10000}}]}, 0x38}}, 0x20000010)

35.569715059s ago: executing program 5 (id=475):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112})
ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400})

35.541058061s ago: executing program 2 (id=477):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f60000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0))

35.297886056s ago: executing program 2 (id=484):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @random="000000000100"})

35.297617928s ago: executing program 5 (id=485):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x13, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000f0000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000020200828500000070000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0xfca804a0, 0x0, 0x62, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

35.170103587s ago: executing program 2 (id=488):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000080850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x10)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)

35.1698848s ago: executing program 5 (id=489):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f00000006c0)='%-010d \x00'}, 0x20)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb96f37538e486dd637265"], 0xe)

35.118560397s ago: executing program 2 (id=490):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r1)
recvmsg$unix(r0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [<r2=>0xffffffffffffffff]}}], 0x18}, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10)
write$cgroup_subtree(r2, &(0x7f0000000040)=ANY=[], 0xfdef)

35.06205675s ago: executing program 2 (id=491):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0)

23.457700249s ago: executing program 5 (id=495):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000eb060002000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x55)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

23.378066438s ago: executing program 5 (id=496):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000e000000c500000001f0ffff95"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x222, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe28, 0xfffffffffffffff5, &(0x7f0000000980)="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", 0x0, 0x2f, 0xe8034000, 0xf000, 0xfffffffffffffe2a, &(0x7f0000000000), &(0x7f00000000c0)="c6769e45b7c61302926682c7f9e9bb5ba2b3cdf023e8da0392a4cd62e2370f25ae5ba0dab896bcf5b774cd28bebbde39f796ae27d04582bb7c03e9fe830ea22c9fd03f6d2779515fdad3f5d0de07b7b70996102fdb67b1e77a34a5b7136a212fa2c0ea502588309dc3e42c55a6f93e6ba5e1b492f9db48f0fdd2f9fb937b3e8a63dcf9dd855837433998ba579da27559", 0x5dc}, 0x28)

23.367549381s ago: executing program 5 (id=497):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x30)

23.356982868s ago: executing program 0 (id=498):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef)

23.251301289s ago: executing program 1 (id=500):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r1}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r3}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x1ff, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe, 0x0, 0x0, @void, @value, @void, @value}, 0x48)

23.113985333s ago: executing program 1 (id=502):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xc, [@struct={0x8, 0x0, 0x0, 0xf, 0x0, 0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f, 0x2e, 0x5f, 0x30]}}, &(0x7f0000000040)=""/235, 0x30, 0xeb, 0x6, 0x0, 0x0, @void, @value}, 0x28)

23.113732135s ago: executing program 2 (id=503):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef)

23.072280476s ago: executing program 3 (id=504):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x2, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="b9ff030f6044238cb89e14f088ca1bff430500001100630377fbac141414e000000162079f4b4d2f87e56dca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000}, 0x2c)

23.043380472s ago: executing program 1 (id=505):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000eb060002000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x55)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000140)="b9ff03076804268cb89e14f088a847e0ffff2000000000000000ac141416e0885a049a179424", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48)

22.963833917s ago: executing program 1 (id=506):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00'}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xc0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000b40)='neigh_create\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r3, 0x18000000000002a0, 0xfe, 0x60000004, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x25, &(0x7f0000000040)="ded6e0966ec1cf6ba4b897a54e4e062b311453dcbb62932a01105d0a8066ca8e5e1f2f575d0d6e996b57fd408d420abb7337934e59815d75b4eb3e7206afce", &(0x7f0000000380)="af5fa441b438b5156d8a9fcc090f586e979858f64170cde36889dcc8539ffcca62621a4c3ea3f7acee366e6fb0b94314f90931dec60fed6c9fee64af416c29f65e47110b81f6b4da06db5e1aad1f627acb", 0x0, 0x3}, 0x2c)

22.955762189s ago: executing program 3 (id=507):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

22.877996364s ago: executing program 3 (id=508):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001300)={&(0x7f0000000c00)='net_dev_start_xmit\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x20e, 0xe40, 0xfd000004, &(0x7f00000004c0)="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", 0x0, 0x31, 0x6000000000000000, 0xfffffffffffffe7e, 0x1d4}, 0x28)

22.868452119s ago: executing program 3 (id=509):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00'}, 0x10)
r1 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000030000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r2}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1a, 0x3, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d00}}, 0x0, 0x1, 0xc5, &(0x7f0000000180)=""/197, 0x0, 0x0, '\x00', 0x0, 0x19, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = openat$cgroup_procs(r0, &(0x7f0000001a80)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r4, &(0x7f0000000380), 0x12)
write$cgroup_int(r1, &(0x7f0000000040)=0x2d000000, 0x1)

22.844384163s ago: executing program 1 (id=510):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x18000000000002a0, 0xf, 0x0, &(0x7f0000000400)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

22.758009951s ago: executing program 3 (id=511):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x1, 0x1, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYBLOB], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/cgroup\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_clone(0x2000100, &(0x7f0000000c40), 0x0, 0x0, &(0x7f0000000b00), 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x408, 0xcd, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$tipc(r3, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmsg$tipc(r3, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34000841}, 0x0)

22.757787842s ago: executing program 1 (id=512):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000471c466f5aa12eba5"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef2885630182700008"], 0xffdd)

22.730989151s ago: executing program 3 (id=513):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000780)='sched_switch\x00', r1, 0x0, 0xd}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'bridge_slave_1\x00'})

11.760622724s ago: executing program 0 (id=514):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000006000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x70000000, 0x0, 0x3f00, 0x0, 0x0, 0x1000, 0xff600000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x23000000}, 0x3b)

11.690083847s ago: executing program 0 (id=515):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x14, &(0x7f0000000680)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

11.689923631s ago: executing program 0 (id=516):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2})
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
gettid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast})

7.672585699s ago: executing program 33 (id=512):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000f3ff0000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000471c466f5aa12eba5"], 0x48)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_devices(r1, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef2885630182700008"], 0xffdd)

7.638960519s ago: executing program 34 (id=503):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000440)='kmem_cache_free\x00'}, 0x10)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@ringbuf_output={{0x18, 0x2, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x43}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r2}, 0x10)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[], 0xfdef)

7.610723743s ago: executing program 35 (id=513):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x5, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x19}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[], 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000780)='sched_switch\x00', r1, 0x0, 0xd}, 0x18)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'bridge_slave_1\x00'})

7.557743977s ago: executing program 36 (id=497):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000005000000020000000010"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xd, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f008", 0x0, 0x24, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x30)

48.016067ms ago: executing program 0 (id=521):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000008000000060000000010"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3579a3c2f1b1e7e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kmem_cache_free\x00', r2}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r0, 0x18000000000002a0, 0xe40, 0x2e, &(0x7f0000000040)="76389e147583ddd0569ba56a655855", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

0s ago: executing program 0 (id=522):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ffff0000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x40020000)
socketpair(0x28, 0x2, 0x0, &(0x7f0000000040))

kernel console output (not intermixed with test programs):

 249 > 3
[   33.955909][ T6439] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   33.957565][ T6432] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   33.960472][ T6432] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   33.962193][ T6432] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   33.971090][   T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   33.974018][   T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   34.215021][ T6425] chnl_net:caif_netlink_parms(): no params data found
[   34.236643][ T6433] chnl_net:caif_netlink_parms(): no params data found
[   34.248899][ T6429] chnl_net:caif_netlink_parms(): no params data found
[   34.271216][ T6424] chnl_net:caif_netlink_parms(): no params data found
[   34.341793][ T6434] chnl_net:caif_netlink_parms(): no params data found
[   34.390522][ T6425] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.392122][ T6425] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.393809][ T6425] bridge_slave_0: entered allmulticast mode
[   34.395558][ T6425] bridge_slave_0: entered promiscuous mode
[   34.408039][ T6433] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.409518][ T6433] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.411050][ T6433] bridge_slave_0: entered allmulticast mode
[   34.412854][ T6433] bridge_slave_0: entered promiscuous mode
[   34.415840][ T6433] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.417378][ T6433] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.419047][ T6433] bridge_slave_1: entered allmulticast mode
[   34.420718][ T6433] bridge_slave_1: entered promiscuous mode
[   34.422929][ T6425] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.425343][ T6425] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.426916][ T6425] bridge_slave_1: entered allmulticast mode
[   34.428655][ T6425] bridge_slave_1: entered promiscuous mode
[   34.430280][ T6429] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.431768][ T6429] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.433949][ T6429] bridge_slave_0: entered allmulticast mode
[   34.435763][ T6429] bridge_slave_0: entered promiscuous mode
[   34.449569][ T6424] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.451010][ T6424] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.452647][ T6424] bridge_slave_0: entered allmulticast mode
[   34.454472][ T6424] bridge_slave_0: entered promiscuous mode
[   34.469932][ T6429] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.471438][ T6429] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.473056][ T6429] bridge_slave_1: entered allmulticast mode
[   34.475327][ T6429] bridge_slave_1: entered promiscuous mode
[   34.480740][ T6424] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.482199][ T6424] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.483916][ T6424] bridge_slave_1: entered allmulticast mode
[   34.485526][ T6424] bridge_slave_1: entered promiscuous mode
[   34.492469][ T6425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.496093][ T6425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.524639][ T6433] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.531808][ T6429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.535467][ T6429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.545807][ T6434] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.547343][ T6434] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.548964][ T6434] bridge_slave_0: entered allmulticast mode
[   34.550705][ T6434] bridge_slave_0: entered promiscuous mode
[   34.559726][ T6433] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.562926][ T6424] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.566996][ T6425] team0: Port device team_slave_0 added
[   34.569447][ T6424] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.579886][ T6434] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.581430][ T6434] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.582919][ T6434] bridge_slave_1: entered allmulticast mode
[   34.584983][ T6434] bridge_slave_1: entered promiscuous mode
[   34.601214][ T6425] team0: Port device team_slave_1 added
[   34.608477][ T6429] team0: Port device team_slave_0 added
[   34.627279][ T6424] team0: Port device team_slave_0 added
[   34.630902][ T6424] team0: Port device team_slave_1 added
[   34.645152][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.646616][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.651694][ T6425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.656540][ T6429] team0: Port device team_slave_1 added
[   34.659035][ T6434] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   34.662531][ T6433] team0: Port device team_slave_0 added
[   34.664291][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.665767][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.671210][ T6424] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.675009][ T6424] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.676495][ T6424] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.681893][ T6424] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.685577][ T6425] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.687148][ T6425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.692458][ T6425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.702598][ T6434] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   34.705872][ T6433] team0: Port device team_slave_1 added
[   34.732039][ T6434] team0: Port device team_slave_0 added
[   34.741621][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.743973][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.749319][ T6429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.752815][ T6429] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.754865][ T6429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.760449][ T6429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.764225][ T6434] team0: Port device team_slave_1 added
[   34.765961][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_0
[   34.767558][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.773034][ T6433] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   34.835608][ T6425] hsr_slave_0: entered promiscuous mode
[   34.873819][ T6425] hsr_slave_1: entered promiscuous mode
[   34.929701][ T6433] batman_adv: batadv0: Adding interface: batadv_slave_1
[   34.931166][ T6433] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   34.936556][ T6433] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   34.974683][ T6424] hsr_slave_0: entered promiscuous mode
[   35.033469][ T6424] hsr_slave_1: entered promiscuous mode
[   35.073264][ T6424] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   35.074929][ T6424] Cannot create hsr debugfs directory
[   35.082789][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_0
[   35.084538][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.089477][ T6434] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   35.092766][ T6434] batman_adv: batadv0: Adding interface: batadv_slave_1
[   35.094337][ T6434] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   35.099586][ T6434] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   35.196178][ T6434] hsr_slave_0: entered promiscuous mode
[   35.233607][ T6434] hsr_slave_1: entered promiscuous mode
[   35.283311][ T6434] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   35.284861][ T6434] Cannot create hsr debugfs directory
[   35.345046][ T6433] hsr_slave_0: entered promiscuous mode
[   35.383617][ T6433] hsr_slave_1: entered promiscuous mode
[   35.423364][ T6433] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   35.424989][ T6433] Cannot create hsr debugfs directory
[   35.464798][ T6429] hsr_slave_0: entered promiscuous mode
[   35.503482][ T6429] hsr_slave_1: entered promiscuous mode
[   35.543264][ T6429] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   35.544880][ T6429] Cannot create hsr debugfs directory
[   35.719409][ T6424] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   35.722624][ T6424] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   35.728822][ T6424] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   35.731706][ T6424] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   35.767451][ T6425] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   35.770617][ T6425] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   35.786573][ T6425] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   35.789805][ T6425] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   35.810252][ T6433] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   35.813932][ T6433] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   35.819075][ T6433] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   35.822209][ T6433] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   35.869392][ T6424] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.871050][ T6429] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   35.878716][ T6429] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   35.882195][ T6429] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   35.886102][ T6429] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   35.952283][ T6433] 8021q: adding VLAN 0 to HW filter on device bond0
[   35.961562][ T6424] 8021q: adding VLAN 0 to HW filter on device team0
[   35.967848][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.969507][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.976861][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.978471][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.985938][ T6433] 8021q: adding VLAN 0 to HW filter on device team0
[   35.987561][ T6434] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   35.990787][ T6434] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   35.997393][ T6434] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   36.002657][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.004306][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.014488][   T53] Bluetooth: hci1: command tx timeout
[   36.014636][ T5993] Bluetooth: hci0: command tx timeout
[   36.015909][   T53] Bluetooth: hci4: command tx timeout
[   36.017118][ T5993] Bluetooth: hci3: command tx timeout
[   36.018372][   T53] Bluetooth: hci2: command tx timeout
[   36.022624][ T6434] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   36.033491][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.035058][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.051117][ T6425] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.062193][ T6424] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.104310][ T6425] 8021q: adding VLAN 0 to HW filter on device team0
[   36.126465][ T6433] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   36.128732][ T6433] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.146877][ T6429] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.152910][ T6429] 8021q: adding VLAN 0 to HW filter on device team0
[   36.188204][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.189706][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.203052][ T6424] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.214674][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.216264][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.218666][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.220277][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.239686][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.241185][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.250042][ T6433] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.264437][ T6434] 8021q: adding VLAN 0 to HW filter on device bond0
[   36.280051][ T6433] veth0_vlan: entered promiscuous mode
[   36.284400][ T6433] veth1_vlan: entered promiscuous mode
[   36.294495][ T6433] veth0_macvtap: entered promiscuous mode
[   36.297429][ T6433] veth1_macvtap: entered promiscuous mode
[   36.305725][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.310275][ T6433] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.314471][ T6433] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.316410][ T6433] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.318156][ T6433] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.319886][ T6433] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.335518][ T6424] veth0_vlan: entered promiscuous mode
[   36.349230][ T6424] veth1_vlan: entered promiscuous mode
[   36.409199][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   36.410948][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   36.422704][ T6434] 8021q: adding VLAN 0 to HW filter on device team0
[   36.439587][ T6425] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   36.441674][ T6425] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.447841][  T613] bridge0: port 1(bridge_slave_0) entered blocking state
[   36.449299][  T613] bridge0: port 1(bridge_slave_0) entered forwarding state
[   36.482795][ T6434] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   36.485738][ T6434] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   36.491188][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   36.492745][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   36.501463][ T6424] veth0_macvtap: entered promiscuous mode
[   36.505354][ T6424] veth1_macvtap: entered promiscuous mode
[   36.510979][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.514303][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.517291][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.527897][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   36.529634][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   36.534352][ T6424] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.536467][ T6424] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.539296][ T6424] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.542547][ T6424] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   36.545983][ T6424] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   36.547825][ T6424] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   36.554400][ T6424] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   36.569590][ T6429] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.641624][ T6429] veth0_vlan: entered promiscuous mode
[   36.661096][ T6433] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   36.669718][ T6429] veth1_vlan: entered promiscuous mode
[   36.677238][  T803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   36.678940][  T803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   36.689898][ T6434] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.759032][  T812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   36.760638][  T812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   36.762052][ T6505] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   36.783110][ T6505] loop2: detected capacity change from 0 to 512
[   36.786300][ T6425] 8021q: adding VLAN 0 to HW filter on device batadv0
[   36.804472][ T6505] EXT4-fs (loop2): orphan cleanup on readonly fs
[   36.806843][ T6505] EXT4-fs error (device loop2): ext4_xattr_inode_iget:436: comm syz.2.3: Parent and EA inode have the same ino 15
[   36.810995][ T6429] veth0_macvtap: entered promiscuous mode
[   36.814841][ T6429] veth1_macvtap: entered promiscuous mode
[   36.820586][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.822771][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.825551][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.827729][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.834041][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_0
[   36.836109][ T6505] EXT4-fs (loop2): 1 orphan inode deleted
[   36.837925][ T6505] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   36.869588][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.871822][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.879614][ T6429] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   36.881965][ T6429] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.886393][ T6429] batman_adv: batadv0: Interface activated: batadv_slave_1
[   36.899705][ T6434] veth0_vlan: entered promiscuous mode
[   36.904370][ T6434] veth1_vlan: entered promiscuous mode
[   36.914903][ T6434] veth0_macvtap: entered promiscuous mode
[   36.917934][ T6434] veth1_macvtap: entered promiscuous mode
[   36.925308][ T6433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   36.937340][ T6425] veth0_vlan: entered promiscuous mode
[   36.942513][ T6425] veth1_vlan: entered promiscuous mode
[   36.992338][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.995220][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   36.997134][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   36.999191][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.007136][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   37.009636][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.010641][ T6513] loop2: detected capacity change from 0 to 16
[   37.012467][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_0
[   37.013482][ T6513] erofs: Unknown parameter ''
[   37.022776][ T6429] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   37.024929][ T6429] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   37.026776][ T6429] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   37.028650][ T6429] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   37.070906][  T613] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.072898][  T613] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.091439][  T613] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   37.094714][  T613] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   37.114505][ T6511] netlink: 'syz.1.2': attribute type 8 has an invalid length.
[   37.119776][ T6511] bridge1: entered allmulticast mode
[   37.121659][ T6425] veth0_macvtap: entered promiscuous mode
[   37.191542][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   37.202235][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   37.218334][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.106255][ T6522] loop1: detected capacity change from 0 to 256
[   38.188739][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.190800][ T6434] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   38.192972][ T6434] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   38.205045][ T6434] batman_adv: batadv0: Interface activated: batadv_slave_1
[   38.209773][ T6425] veth1_macvtap: entered promiscuous mode
[   38.215325][ T6434] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   38.217177][ T6434] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   38.218935][ T6434] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   38.218978][   T53] Bluetooth: hci2: command tx timeout
[   38.220711][ T6434] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   38.221829][   T53] Bluetooth: hci3: command tx timeout
[   38.224389][ T6522] exfat: Bad value for 'uid'
[   38.224896][   T53] Bluetooth: hci4: command tx timeout
[   38.225906][ T6522] exfat: Bad value for 'uid'
[   38.227124][   T53] Bluetooth: hci0: command tx timeout
[   38.229171][   T53] Bluetooth: hci1: command tx timeout
[   38.964113][ T6431] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[   38.966305][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: kworker/u9:3 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0
[   38.968337][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   38.970398][ T6431] Workqueue: hci3 hci_rx_work
[   38.971426][ T6431] Call trace:
[   38.972155][ T6431]  show_stack+0x2c/0x3c (C)
[   38.973076][ T6431]  dump_stack_lvl+0xe4/0x150
[   38.974115][ T6431]  dump_stack+0x1c/0x28
[   38.975075][ T6431]  sysfs_create_dir_ns+0x278/0x318
[   38.976155][ T6431]  kobject_add_internal+0x598/0xb04
[   38.977242][ T6431]  kobject_add+0x14c/0x224
[   38.978175][ T6431]  device_add+0x3a0/0xa6c
[   38.979116][ T6431]  hci_conn_add_sysfs+0xc4/0x1cc
[   38.980233][ T6431]  le_conn_complete_evt+0x9a8/0xf0c
[   38.981259][ T6431]  hci_le_conn_complete_evt+0x114/0x404
[   38.982475][ T6431]  hci_le_meta_evt+0x2a4/0x478
[   38.983471][ T6431]  hci_event_packet+0x890/0x106c
[   38.984534][ T6431]  hci_rx_work+0x318/0xa80
[   38.985507][ T6431]  process_one_work+0x7bc/0x1600
[   38.986559][ T6431]  worker_thread+0x97c/0xeec
[   38.987576][ T6431]  kthread+0x288/0x310
[   38.988456][ T6431]  ret_from_fork+0x10/0x20
[   38.990927][ T6431] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   38.996644][ T6431] Bluetooth: hci3: failed to register connection device
[   39.008472][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.010743][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.012701][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.014897][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.016899][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.019017][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.021016][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   39.023358][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.026293][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_0
[   39.032112][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.034309][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.036268][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.038410][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.040483][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.042669][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.044857][ T6425] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   39.047041][ T6425] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   39.049916][ T6425] batman_adv: batadv0: Interface activated: batadv_slave_1
[   39.052952][ T6425] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   39.055144][ T6425] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   39.057063][ T6425] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   39.058856][ T6425] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   39.156468][   T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   39.158122][   T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   39.245282][ T6531] loop0: detected capacity change from 0 to 16
[   39.247045][ T6531] erofs: Unknown parameter ''
[   40.228489][ T6431] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[   40.230505][ T6431] CPU: 1 UID: 0 PID: 6431 Comm: kworker/u9:3 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0
[   40.232528][ T6431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[   40.234562][ T6431] Workqueue: hci2 hci_rx_work
[   40.235549][ T6431] Call trace:
[   40.236197][ T6431]  show_stack+0x2c/0x3c (C)
[   40.237112][ T6431]  dump_stack_lvl+0xe4/0x150
[   40.238121][ T6431]  dump_stack+0x1c/0x28
[   40.239029][ T6431]  sysfs_create_dir_ns+0x278/0x318
[   40.240213][ T6431]  kobject_add_internal+0x598/0xb04
[   40.241356][ T6431]  kobject_add+0x14c/0x224
[   40.242283][ T6431]  device_add+0x3a0/0xa6c
[   40.243219][ T6431]  hci_conn_add_sysfs+0xc4/0x1cc
[   40.244327][ T6431]  le_conn_complete_evt+0x9a8/0xf0c
[   40.245547][ T6431]  hci_le_conn_complete_evt+0x114/0x404
[   40.246765][ T6431]  hci_le_meta_evt+0x2a4/0x478
[   40.247790][ T6431]  hci_event_packet+0x890/0x106c
[   40.248830][ T6431]  hci_rx_work+0x318/0xa80
[   40.249830][ T6431]  process_one_work+0x7bc/0x1600
[   40.250830][ T6431]  worker_thread+0x97c/0xeec
[   40.251976][ T6431]  kthread+0x288/0x310
[   40.252798][ T6431]  ret_from_fork+0x10/0x20
[   40.254498][ T6431] kobject: kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[   40.257679][ T6431] Bluetooth: hci2: failed to register connection device
[   40.259220][ T6431] Bluetooth: hci1: command tx timeout
[   40.260423][ T6431] Bluetooth: hci0: command tx timeout
[   40.261524][ T6431] Bluetooth: hci4: command tx timeout
[   40.262682][ T6431] Bluetooth: hci3: command tx timeout
[   40.263948][ T6431] Bluetooth: hci2: command tx timeout
[   40.274058][ T6529] netlink: 'syz.2.9': attribute type 8 has an invalid length.
[   40.471707][ T6529] bridge1: entered allmulticast mode
[   40.474553][ T6537] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'.
[   40.572197][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.574990][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.629507][  T803] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.631176][  T803] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.753070][ T6547] loop0: detected capacity change from 0 to 1024
[   40.759146][ T6543] loop1: detected capacity change from 0 to 32768
[   40.761502][ T6543] (syz.1.12,6543,1):ocfs2_fill_super:1178 ERROR: status = -22
[   40.775306][ T6547] EXT4-fs (loop0): blocks per group (131072) and clusters per group (8192) inconsistent
[   40.786057][  T185] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   40.806285][  T185] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   40.920241][ T6550] sctp: [Deprecated]: syz.1.12 (pid 6550) Use of struct sctp_assoc_value in delayed_ack socket option.
[   40.920241][ T6550] Use struct sctp_sack_info instead
[   41.159162][ T6546] loop2: detected capacity change from 0 to 32768
[   41.168091][ T6546] btrfs: Deprecated parameter 'usebackuproot'
[   41.169499][ T6546] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   41.175564][ T6546] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.13 (6546)
[   41.880418][ T6546] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   41.882613][ T6546] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   41.909483][ T6546] BTRFS info (device loop2): using free-space-tree
[   41.988072][ T6560] netlink: 468 bytes leftover after parsing attributes in process `syz.4.14'.
[   41.990040][ T6560] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14'.
[   42.064085][ T6551] loop3: detected capacity change from 0 to 32768
[   42.067107][ T6551] =======================================================
[   42.067107][ T6551] WARNING: The mand mount option has been deprecated and
[   42.067107][ T6551]          and is ignored by this kernel. Remove the mand
[   42.067107][ T6551]          option from the mount to silence this warning.
[   42.067107][ T6551] =======================================================
[   42.158814][   T11] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   42.162307][ T6546] BTRFS error (device loop2): failed to load root extent
[   42.164438][ T6546] BTRFS warning (device loop2): try to load backup roots slot 1
[   42.166234][  T185] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   42.183966][ T6551] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   42.186476][ T6546] BTRFS warning (device loop2): couldn't read tree root
[   42.191774][ T6546] BTRFS warning (device loop2): try to load backup roots slot 2
[   42.201428][   T44] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[   42.204372][ T6546] BTRFS warning (device loop2): couldn't read tree root
[   42.208411][ T6546] BTRFS warning (device loop2): try to load backup roots slot 3
[   42.286722][ T6546] BTRFS info (device loop2): rebuilding free space tree
[   42.293325][ T6551] XFS (loop3): Ending clean mount
[   42.302665][ T6598] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   42.318938][ T6546] BTRFS info (device loop2): checking UUID tree
[   42.343323][   T53] Bluetooth: hci2: command tx timeout
[   42.344601][ T6431] Bluetooth: hci3: command tx timeout
[   42.344626][   T53] Bluetooth: hci4: command tx timeout
[   42.345777][ T6431] Bluetooth: hci0: command tx timeout
[   42.346904][   T53] Bluetooth: hci1: command tx timeout
[   42.385409][ T6551] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   42.387000][ T6551] overlayfs: failed to set xattr on upper
[   42.403697][ T6551] overlayfs: ...falling back to redirect_dir=nofollow.
[   42.405347][ T6551] overlayfs: ...falling back to index=off.
[   42.406524][ T6551] overlayfs: ...falling back to uuid=null.
[   42.600949][ T6608] netlink: 'syz.4.21': attribute type 8 has an invalid length.
[   42.608498][ T6551] process 'syz.3.4' launched './file2' with NULL argv: empty string added
[   42.614469][ T6608] bridge1: entered allmulticast mode
[   42.633002][ T6433] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   42.773968][ T6615] pim6reg: entered allmulticast mode
[   42.781897][ T6615] netlink: 16 bytes leftover after parsing attributes in process `syz.2.23'.
[   42.798157][ T6615] vxcan3: entered promiscuous mode
[   42.801270][ T6615] vxcan3: entered allmulticast mode
[   42.878580][ T6425] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   42.900486][ T6618] loop2: detected capacity change from 0 to 128
[   42.958746][   T30] audit: type=1326 audit(42.940:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=6617 comm="syz.2.26" exe="/root/syz-executor" sig=31 arch=c00000b7 syscall=98 compat=0 ip=0xffffb234c768 code=0x0
[   43.629046][ T6627] loop3: detected capacity change from 0 to 1024
[   43.668059][ T6621] loop1: detected capacity change from 0 to 40427
[   43.687518][ T6627] hfsplus: request for non-existent node 1280 in B*Tree
[   43.689136][ T6627] hfsplus: request for non-existent node 1280 in B*Tree
[   43.698845][ T6621] F2FS-fs (loop1): Invalid log blocks per segment (83886089)
[   43.700583][ T6621] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   43.751101][ T6633] loop0: detected capacity change from 0 to 128
[   43.768629][ T6633] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   43.779772][ T6633] netlink: 76 bytes leftover after parsing attributes in process `syz.0.29'.
[   43.781743][ T6633] nbd: illegal input index 65508
[   43.902178][ T6429] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.910133][  T185] hfsplus: b-tree write err: -5, ino 8
[   44.065885][ T6475] kernel write not supported for file task/22/net/softnet_stat (pid: 6475 comm: kworker/1:3)
[   44.210613][ T6657] loop0: detected capacity change from 0 to 512
[   44.212596][ T6657] EXT4-fs: Ignoring removed nobh option
[   44.214223][ T6657] EXT4-fs: Ignoring removed nobh option
[   44.258809][ T6657] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   44.287187][ T6657] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #13: comm syz.0.38: invalid indirect mapped block 2683928664 (level 1)
[   44.341798][ T6657] EXT4-fs (loop0): Remounting filesystem read-only
[   44.372486][ T6657] EXT4-fs (loop0): 1 truncate cleaned up
[   44.386267][ T6657] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   44.449805][ T6429] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   44.521431][ T6655] loop1: detected capacity change from 0 to 32768
[   44.913409][ T6639] loop4: detected capacity change from 0 to 40427
[   44.932311][ T6668] loop0: detected capacity change from 0 to 4096
[   44.934170][ T6668] ntfs3: Unknown parameter 'id0x0000000000000000'
[   44.974054][ T6655] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   44.975812][ T6640] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(9)
[   44.977321][ T6640] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   44.979344][ T6640] vhci_hcd vhci_hcd.0: Device attached
[   45.063297][ T6669] vhci_hcd: connection closed
[   45.093459][  T803] vhci_hcd: stop threads
[   45.100249][ T6666] loop3: detected capacity change from 0 to 4096
[   45.102068][  T803] vhci_hcd: release socket
[   45.116664][ T6666] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   45.145126][  T803] vhci_hcd: disconnect device
[   45.159197][ T6655] XFS (loop1): Ending clean mount
[   45.185392][ T6655] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   45.186935][ T6655] overlayfs: failed to set xattr on upper
[   45.188033][ T6655] overlayfs: ...falling back to redirect_dir=nofollow.
[   45.189841][ T6655] overlayfs: ...falling back to index=off.
[   45.191052][ T6655] overlayfs: ...falling back to uuid=null.
[   45.232157][ T6680] loop2: detected capacity change from 0 to 512
[   45.237168][ T6666] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   45.300965][ T6680] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.447038][ T6433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   45.466269][ T6424] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   45.511145][ T6687] loop2: detected capacity change from 0 to 1024
[   45.536245][ T6687] hfsplus: unable to find HFS+ superblock
[   45.571948][ T6687] loop2: detected capacity change from 0 to 512
[   45.614900][ T6687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   45.626155][ T6687] netlink: 'syz.2.45': attribute type 10 has an invalid length.
[   45.629871][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state
[   45.632237][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state
[   45.658982][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state
[   45.660742][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state
[   45.662804][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state
[   45.664575][ T6687] bridge0: port 1(bridge_slave_0) entered forwarding state
[   45.702227][ T6687] team0: Port device bridge0 added
[   45.760390][ T6687] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   45.988599][ T6706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.993584][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.001723][ T6706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.004610][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.231411][ T6704] loop4: detected capacity change from 0 to 32768
[   46.243780][ T6704] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.50 (6704)
[   46.394365][ T6704] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   46.396888][ T6704] BTRFS info (device loop4): using sha256 (sha256-ce) checksum algorithm
[   46.397621][ T6433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   46.398677][ T6704] BTRFS info (device loop4): using free-space-tree
[   46.529715][ T6721] loop2: detected capacity change from 0 to 4096
[   46.542844][ T6721] ntfs3: Unknown parameter 'id0x0000000000000000'
[   46.641322][ T6732] capability: warning: `syz.1.55' uses deprecated v2 capabilities in a way that may be insecure
[   46.665166][ T6704] overlayfs: failed to resolve './file1': -2
[   46.827941][ T6434] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   46.888784][ T6738] loop0: detected capacity change from 0 to 8
[   46.901532][ T6738] SQUASHFS error: lzo decompression failed, data probably corrupt
[   46.904968][ T6738] SQUASHFS error: Failed to read block 0x91: -5
[   46.906312][ T6738] SQUASHFS error: Unable to read metadata cache entry [8f]
[   46.907728][ T6738] SQUASHFS error: Unable to read inode 0x11f
[   47.004387][ T6746] overlay: Unknown parameter 'mask'
[   47.034935][ T6750] loop2: detected capacity change from 0 to 64
[   47.046458][ T6746] loop1: detected capacity change from 0 to 256
[   47.087790][ T6754] loop0: detected capacity change from 0 to 1024
[   47.089503][ T6754] ext4: Unknown parameter 'appraise_type'
[   47.332256][ T6752] loop3: detected capacity change from 0 to 32768
[   47.336055][ T6752] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.61 (6752)
[   47.344061][ T6752] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   47.346355][ T6752] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   47.349740][ T6752] BTRFS info (device loop3): using free-space-tree
[   47.472733][ T6777] loop2: detected capacity change from 0 to 256
[   47.488984][ T6754] loop0: detected capacity change from 0 to 32768
[   47.539954][ T6777] netlink: 'syz.2.65': attribute type 21 has an invalid length.
[   47.550135][ T6754] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   47.623731][ T6425] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   47.721854][ T6798] delete_channel: no stack
[   47.742440][ T6754] XFS (loop0): Ending clean mount
[   48.089710][ T6429] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   48.307531][ T6803] loop2: detected capacity change from 0 to 32768
[   48.326257][ T6803] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.68 (6803)
[   48.352223][ T6803] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   48.359590][ T6803] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   48.368103][ T6803] BTRFS info (device loop2): using free-space-tree
[   48.647157][ T6803] overlayfs: "xino" feature enabled using 2 upper inode bits.
[   48.780401][ T6433] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   49.204008][ T6806] loop1: detected capacity change from 0 to 65536
[   49.220798][ T6806] XFS: noikeep mount option is deprecated.
[   49.252067][ T6825] loop0: detected capacity change from 0 to 32768
[   49.266902][ T6838] loop2: detected capacity change from 0 to 2048
[   49.309729][ T6838] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   49.311365][ T6806] XFS (loop1): Mounting V5 Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[   49.331781][ T6825] netlink: 44 bytes leftover after parsing attributes in process `syz.0.75'.
[   49.357640][ T6825] netlink: 'syz.0.75': attribute type 1 has an invalid length.
[   49.387426][ T6850] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   49.451690][ T6806] XFS (loop1): Ending clean mount
[   49.495596][ T6854] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.75'.
[   49.506294][ T6854] netlink: 8280 bytes leftover after parsing attributes in process `syz.0.75'.
[   49.558399][ T6424] XFS (loop1): Unmounting Filesystem 6653b971-41ab-480a-bd7b-5ff79b9409b5
[   49.611547][ T6860] loop4: detected capacity change from 0 to 1024
[   49.770690][ T6864] netem: incorrect gi model size
[   49.771945][ T6864] netem: change failed
[   49.817345][ T6864] loop4: detected capacity change from 0 to 1024
[   49.870190][ T6864] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   49.919735][ T6864] overlayfs: workdir and upperdir must be separate subtrees
[   50.063058][ T6434] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11
[   50.064305][ T6872] bridge0: port 3(gretap0) entered blocking state
[   50.071483][ T6872] bridge0: port 3(gretap0) entered disabled state
[   50.074265][ T6872] gretap0: entered allmulticast mode
[   50.082922][ T6862] loop2: detected capacity change from 0 to 32768
[   50.083453][ T6434] EXT4-fs error (device loop4): ext4_lookup:1817: inode #2: comm syz-executor: deleted inode referenced: 11
[   50.088453][ T6872] gretap0: entered promiscuous mode
[   50.090425][ T6872] bridge0: port 3(gretap0) entered blocking state
[   50.091973][ T6872] bridge0: port 3(gretap0) entered forwarding state
[   50.093710][ T6862] (syz.2.82,6862,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option "heartbeat=nonelheartbeat=none" or missing value
[   50.097597][ T6862] (syz.2.82,6862,1):ocfs2_fill_super:1178 ERROR: status = -22
[   50.196992][ T6868] loop0: detected capacity change from 0 to 32768
[   50.204000][ T6868] ERROR: (device loop0): diRead: i_ino != di_number
[   50.204000][ T6868] 
[   50.320226][ T6877] loop0: detected capacity change from 0 to 2048
[   50.360674][ T6877] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   50.493484][ T6880] UDF-fs: error (device loop0): udf_read_inode: (ino 1345) failed !bh
[   50.572937][ T6876] UDF-fs: warning (device loop0): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 134220898 lbcount: 134222336 extent 0+132835840
[   50.615543][  T185] kworker/u8:4: attempt to access beyond end of device
[   50.615543][  T185] loop0: rw=1, sector=2048, nr_sectors = 1 limit=2048
[   50.634383][ T6429] UDF-fs: warning (device loop0): udf_evict_inode: Inode 1367 (mode 100000) has inode size 134220898 different from extent length 134222336. Filesystem need not be standards compliant.
[   50.775007][ T6885] loop0: detected capacity change from 0 to 4096
[   50.787091][ T6885] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[   50.944942][ T6888] loop1: detected capacity change from 0 to 512
[   50.996524][ T6888] loop1: detected capacity change from 0 to 512
[   51.142356][ T6882] loop3: detected capacity change from 0 to 32768
[   51.159821][ T6885] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[   51.263690][ T6882] JFS: metapage_get_blocks failed
[   51.265003][ T6882] ERROR: (device loop3): release_metapage: metapage_write_one() failed
[   51.265003][ T6882] 
[   51.280487][ T6896] loop2: detected capacity change from 0 to 512
[   51.363600][ T6882] ERROR: (device loop3): remounting filesystem as read-only
[   51.503591][   T98] blkno = 5002c, nblocks = 1
[   51.504823][   T98] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   51.504823][   T98] 
[   51.512584][   T98] blkno = 5002d, nblocks = 1
[   51.524007][   T98] ERROR: (device loop3): dbUpdatePMap: blocks are outside the map
[   51.524007][   T98] 
[   51.531509][ T6425] JFS: metapage_get_blocks failed
[   51.542626][ T6901] netlink: 176 bytes leftover after parsing attributes in process `syz.2.94'.
[   51.570186][ T6893] loop1: detected capacity change from 0 to 32768
[   51.600781][ T6893] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   51.675351][ T6893] XFS (loop1): Ending clean mount
[   51.698557][ T6893] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   51.700135][ T6893] overlayfs: failed to set xattr on upper
[   51.701276][ T6893] overlayfs: ...falling back to redirect_dir=nofollow.
[   51.702667][ T6893] overlayfs: ...falling back to index=off.
[   51.708235][ T6893] overlayfs: ...falling back to uuid=null.
[   51.953596][ T6424] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   51.958088][ T6922] loop3: detected capacity change from 0 to 512
[   51.958188][ T6907] loop2: detected capacity change from 0 to 32768
[   51.961209][ T6907] btrfs: Unknown parameter 'noinode_cache'
[   52.015144][ T6431] Bluetooth: hci4: command 0x0405 tx timeout
[   52.018858][ T6907] netlink: 'syz.2.96': attribute type 1 has an invalid length.
[   52.020420][ T6907] netlink: 'syz.2.96': attribute type 4 has an invalid length.
[   52.021940][ T6907] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.96'.
[   52.136384][ T6922] EXT4-fs: Ignoring removed nomblk_io_submit option
[   52.138391][ T6922] EXT4-fs (loop3): Test dummy encryption mode enabled
[   52.142071][ T6922] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 17. Delete some EAs or run e2fsck.
[   52.147241][ T6922] EXT4-fs (loop3): 1 truncate cleaned up
[   52.148949][ T6922] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   52.200335][ T6425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.204202][ T6931] loop1: detected capacity change from 0 to 4096
[   52.366468][ T6935] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   52.757905][ T6940] loop2: detected capacity change from 0 to 4096
[   52.853789][ T6434] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   52.886879][ T6940] ntfs3(loop2): Failed to load $MFT (-22).
[   53.314402][ T5993] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   53.317986][ T5993] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   53.320149][ T5993] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   53.333389][ T5993] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   53.335365][ T5993] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   53.336969][ T5993] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   53.609652][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   53.611548][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   53.647141][  T185] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.647919][ T6956] loop0: detected capacity change from 0 to 256
[   53.651428][ T6956] exfat: Deprecated parameter 'utf8'
[   53.675894][ T6956] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5b52992a, utbl_chksum : 0xe619d30d)
[   53.771093][ T6962] loop0: detected capacity change from 0 to 16
[   53.777961][ T6962] erofs: (device loop0): erofs_read_superblock: cannot read erofs superblock
[   53.844231][  T185] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   53.876928][ T6965] loop0: detected capacity change from 0 to 1024
[   53.933995][ T5993] Bluetooth: hci0: command 0x0406 tx timeout
[   53.954727][  T185] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.009916][ T6950] loop1: detected capacity change from 0 to 32768
[   54.145439][ T6968] loop0: detected capacity change from 0 to 32768
[   54.159321][ T6950] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   54.189803][ T6944] loop2: detected capacity change from 0 to 65536
[   54.204714][  T185] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.262971][ T6947] chnl_net:caif_netlink_parms(): no params data found
[   54.324319][ T6944] XFS (loop2): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   54.324569][ T6968] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[   54.330775][ T6968] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   54.332647][ T6968] bcachefs (loop0): Version upgrade required:
[   54.332647][ T6968] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   54.332647][ T6968] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[   54.332647][ T6968]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[   54.342719][ T6950] XFS (loop1): Ending clean mount
[   54.357355][ T6968] bcachefs (loop0): dropping and reconstructing all alloc info
[   54.385371][ T6968] bcachefs (loop0): check_topology... done
[   54.386806][ T6968] bcachefs (loop0): accounting_read...
[   54.401120][ T6944] XFS (loop2): Ending clean mount
[   54.433286][ T6968]  done
[   54.433951][ T6968] bcachefs (loop0): alloc_read... done
[   54.435171][ T6968] bcachefs (loop0): stripes_read... done
[   54.436304][ T6968] bcachefs (loop0): snapshots_read... done
[   54.437737][ T6968] bcachefs (loop0): check_allocations...
[   54.443945][ T6947] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.446699][ T6947] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.448282][ T6947] bridge_slave_0: entered allmulticast mode
[   54.461252][ T6947] bridge_slave_0: entered promiscuous mode
[   54.476626][ T6968]  done
[   54.479437][ T6968] bcachefs (loop0): going read-write
[   54.488839][ T6968] bcachefs (loop0): done starting filesystem
[   54.533724][ T6965] bcachefs (loop0): going read-only
[   54.534985][ T6965] bcachefs (loop0): finished waiting for writes to stop
[   54.558536][ T6947] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.568675][ T6947] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.576640][ T6947] bridge_slave_1: entered allmulticast mode
[   54.578609][ T6947] bridge_slave_1: entered promiscuous mode
[   54.607783][ T6965] bcachefs (loop0): flushing journal and stopping allocators, journal seq 11
[   54.614442][ T6424] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   54.634838][ T6433] XFS (loop2): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   54.657463][  T185] bridge_slave_1: left allmulticast mode
[   54.658944][  T185] bridge_slave_1: left promiscuous mode
[   54.660630][  T185] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.668622][  T185] bridge_slave_0: left allmulticast mode
[   54.669790][  T185] bridge_slave_0: left promiscuous mode
[   54.670938][  T185] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.728544][ T6965] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 14
[   54.735673][ T6965] bcachefs (loop0): unshutdown complete, journal seq 15
[   54.737739][ T6965] bcachefs (loop0): done going read-only, filesystem not clean
[   55.249556][ T7018] misc userio: Invalid payload size
[   55.392017][ T5993] Bluetooth: hci4: command tx timeout
[   55.566047][ T6429] bcachefs (loop0): shutting down
[   55.606106][ T7014] loop1: detected capacity change from 0 to 32768
[   55.611158][ T6429] bcachefs (loop0): shutdown complete
[   55.647501][ T7014] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   55.798450][ T7014] XFS (loop1): Ending clean mount
[   55.835285][ T7014] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   55.836694][ T7014] overlayfs: failed to set xattr on upper
[   55.838009][ T7014] overlayfs: ...falling back to redirect_dir=nofollow.
[   55.839504][ T7014] overlayfs: ...falling back to index=off.
[   55.840796][ T7014] overlayfs: ...falling back to uuid=null.
[   55.952843][ T7038] loop2: detected capacity change from 0 to 1764
[   56.051688][ T6424] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   56.267422][ T7042] loop1: detected capacity change from 0 to 8192
[   56.628744][ T7044] loop1: detected capacity change from 0 to 32768
[   56.658493][ T7048] netlink: 96 bytes leftover after parsing attributes in process `syz.3.122'.
[   56.836729][ T7056] loop3: detected capacity change from 0 to 256
[   56.862337][  T185] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   56.897024][ T7059] loop1: detected capacity change from 0 to 4096
[   56.899728][ T7056] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[   56.901448][ T7059] ext4: Unknown parameter 'uid'
[   56.930964][ T7059] loop1: detected capacity change from 0 to 8
[   56.953641][ T7059] SQUASHFS error: lzo decompression failed, data probably corrupt
[   56.955338][ T7059] SQUASHFS error: Failed to read block 0x91: -5
[   56.963232][ T7059] SQUASHFS error: Unable to read metadata cache entry [8f]
[   56.976618][ T7059] SQUASHFS error: Unable to read inode 0x11f
[   57.000019][ T7059] afs: Unknown parameter 'dynile0'
[   57.051643][  T185] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   57.097425][ T7064] loop1: detected capacity change from 0 to 4096
[   57.119832][  T185] bond0 (unregistering): Released all slaves
[   57.235411][ T6947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.239117][ T6947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.325536][ T7074] netlink: 'syz.3.132': attribute type 11 has an invalid length.
[   57.327072][ T7074] netlink: 212 bytes leftover after parsing attributes in process `syz.3.132'.
[   57.367385][ T7084] loop2: detected capacity change from 0 to 512
[   57.487573][ T5993] Bluetooth: hci4: command tx timeout
[   57.581050][ T6947] team0: Port device team_slave_0 added
[   57.597731][ T7084] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.629320][ T6947] team0: Port device team_slave_1 added
[   57.711402][ T6433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   57.833346][ T7104] capability: warning: `syz.3.135' uses 32-bit capabilities (legacy support in use)
[   57.863664][ T7104] loop3: detected capacity change from 0 to 8
[   58.073585][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_0
[   58.075309][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.080942][ T6947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   58.084368][ T6947] batman_adv: batadv0: Adding interface: batadv_slave_1
[   58.085884][ T6947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.091126][ T6947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.259845][ T6947] hsr_slave_0: entered promiscuous mode
[   58.303708][ T6947] hsr_slave_1: entered promiscuous mode
[   58.355946][ T6947] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.357628][ T6947] Cannot create hsr debugfs directory
[   58.683392][  T185] hsr_slave_0: left promiscuous mode
[   58.736597][  T185] hsr_slave_1: left promiscuous mode
[   58.756990][ T7118] loop0: detected capacity change from 0 to 32768
[   58.761427][ T7118] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.139 (7118)
[   58.798234][ T7118] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   58.800392][ T7118] BTRFS info (device loop0): using sha256 (sha256-ce) checksum algorithm
[   58.808464][ T7118] BTRFS info (device loop0): using free-space-tree
[   58.833302][  T185] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   58.835032][  T185] batman_adv: batadv0: Removing interface: batadv_slave_0
[   58.853503][  T185] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   58.855198][  T185] batman_adv: batadv0: Removing interface: batadv_slave_1
[   58.909144][  T185] veth1_macvtap: left promiscuous mode
[   58.910726][  T185] veth0_macvtap: left promiscuous mode
[   58.911910][  T185] veth1_vlan: left promiscuous mode
[   58.923230][  T185] veth0_vlan: left promiscuous mode
[   59.163674][ T6429] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   59.250072][ T7116] loop2: detected capacity change from 0 to 65536
[   59.318603][ T7116] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   59.417115][ T7116] XFS (loop2): Ending clean mount
[   59.433645][ T7155] loop3: detected capacity change from 0 to 256
[   59.435304][ T7155] exfat: Unknown parameter '000000000000000000030x0000000000000000'
[   59.483925][ T6433] XFS (loop2): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   59.533300][ T5993] Bluetooth: hci4: command tx timeout
[   59.862971][ T7160] loop1: detected capacity change from 0 to 32768
[   59.870927][ T7160] (syz.1.143,7160,1):ocfs2_parse_options:1448 ERROR: Unrecognized mount option ")Ñx�¼barrier=00000000000000026115" or missing value
[   59.881709][ T7160] (syz.1.143,7160,1):ocfs2_fill_super:1178 ERROR: status = -22
[   59.906541][ T7170] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   59.908114][ T7170] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   59.920030][ T7162] loop3: detected capacity change from 0 to 32768
[   59.921744][ T7162] bcachefs: bch2_parse_one_mount_opt() Invalid mount option compression: parse error
[   60.218385][ T7172] loop1: detected capacity change from 0 to 1764
[   60.220217][ T7172] iso9660: Unknown parameter ''
[   60.278247][ T7155] loop3: detected capacity change from 0 to 32768
[   60.291817][ T7155] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.142 (7155)
[   60.299963][ T7155] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.302366][ T7155] BTRFS info (device loop3): using sha256 (sha256-ce) checksum algorithm
[   60.306647][ T7155] BTRFS info (device loop3): using free-space-tree
[   60.397417][ T7155] overlay: ./file1 is not a directory
[   60.417340][ T6425] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   60.654892][ T7199] loop1: detected capacity change from 0 to 512
[   60.657620][ T7199] EXT4-fs: Invalid journal IO priority (must be 0-7)
[   60.680732][ T7199] loop1: detected capacity change from 0 to 2048
[   60.720120][ T7199] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   61.633605][ T5993] Bluetooth: hci4: command tx timeout
[   61.649321][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.040742][  T185] team0 (unregistering): Port device team_slave_1 removed
[   62.214166][ T7213] 9pnet_fd: Insufficient options for proto=fd
[   62.233418][  T185] team0 (unregistering): Port device team_slave_0 removed
[   62.885346][ T7220] loop1: detected capacity change from 0 to 16
[   62.890879][ T7220] erofs: (device loop1): erofs_fc_fill_super: rootino(nid 36) is not a directory(i_mode 66300)
[   62.902108][ T7220] loop1: detected capacity change from 0 to 1024
[   62.914707][ T7220] netlink: 332 bytes leftover after parsing attributes in process `syz.1.155'.
[   63.090289][ T7228] loop1: detected capacity change from 0 to 1024
[   63.092826][ T7228] EXT4-fs: Ignoring removed nomblk_io_submit option
[   63.126281][ T7228] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   63.188045][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.840907][ T7233] loop1: detected capacity change from 0 to 131072
[   64.312764][ T7241] loop1: detected capacity change from 0 to 32768
[   64.366404][ T7241] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   64.366995][ T7170] hsr_slave_0: left promiscuous mode
[   64.454891][ T7170] hsr_slave_1: left promiscuous mode
[   64.500912][ T2349] ieee802154 phy0 wpan0: encryption failed: -22
[   64.502444][ T2349] ieee802154 phy1 wpan1: encryption failed: -22
[   65.184134][ T7212] warning: `syz.3.153' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   65.231044][ T6947] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   65.261194][ T6424] ocfs2: Unmounting device (7,1) on (node local)
[   65.273696][ T7249] Bluetooth: MGMT ver 1.23
[   65.336272][ T6947] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   65.341035][ T6947] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   65.351116][ T6947] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   65.360204][ T7253] loop3: detected capacity change from 0 to 128
[   65.392112][ T7253] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   65.688852][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.706606][ T6947] 8021q: adding VLAN 0 to HW filter on device team0
[   65.756477][  T729] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.758047][  T729] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.760354][  T729] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.761951][  T729] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.892720][ T6425] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.356451][ T7292] loop0: detected capacity change from 0 to 512
[   66.358259][ T7292] EXT4-fs: Ignoring removed oldalloc option
[   66.582669][ T7292] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   66.585478][ T7292] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   66.928936][ T6947] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.940718][ T7292] EXT4-fs (loop0): 1 truncate cleaned up
[   66.942422][ T7292] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.027209][ T5993] Bluetooth: hci0: unexpected event for opcode 0x041b
[   67.178651][ T6429] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.192997][ T7303] loop1: detected capacity change from 0 to 4096
[   67.201048][ T7303] ntfs3: Unknown parameter 'id0x0000000000000000'
[   67.266927][ T6947] veth0_vlan: entered promiscuous mode
[   67.271130][ T6947] veth1_vlan: entered promiscuous mode
[   67.291838][ T6947] veth0_macvtap: entered promiscuous mode
[   67.300954][ T7316] loop3: detected capacity change from 0 to 1024
[   67.302883][ T7316] hfsplus: uid requires an argument
[   67.304130][ T7316] hfsplus: unable to parse mount options
[   67.324660][ T6947] veth1_macvtap: entered promiscuous mode
[   67.330780][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.332946][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.335065][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.337124][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.339100][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.341242][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.343357][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.345530][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.348354][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.350988][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.353381][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.355454][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.357566][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.359665][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.361860][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.364161][ T6947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.366274][ T6947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.369173][ T6947] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.373028][ T6947] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.383630][ T6947] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.385486][ T6947] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.387888][ T6947] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.501784][ T7330] loop1: detected capacity change from 0 to 1024
[   67.511296][ T7330] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   67.525163][ T7331] netlink: 401 bytes leftover after parsing attributes in process `syz.0.175'.
[   67.583919][ T7330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   67.595861][ T7335] loop3: detected capacity change from 0 to 512
[   67.600669][ T7335] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   67.654453][ T7335] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[   67.778427][ T7335] EXT4-fs (loop3): 1 truncate cleaned up
[   67.780171][ T7335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.085610][  T185] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.104305][  T185] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.204568][ T6425] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.206628][  T476] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.214859][  T476] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.350472][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.512726][ T7325] loop2: detected capacity change from 0 to 32768
[   68.542312][ T7325] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[   68.564715][ T7325] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   68.568522][ T7366] loop5: detected capacity change from 0 to 512
[   68.580731][ T7366] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[   68.654130][ T7373] syz.0.183 uses obsolete (PF_INET,SOCK_PACKET)
[   68.684400][ T7375] loop0: detected capacity change from 0 to 24
[   68.690472][ T7375] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   68.700108][ T6433] ocfs2: Unmounting device (7,2) on (node local)
[   68.706792][ T7375] romfs: Mounting image 'rom 637cf1fa' through the block layer
[   69.054083][ T7381] loop2: detected capacity change from 0 to 32768
[   69.066476][ T7381] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.184 (7381)
[   69.075520][ T7389] loop0: detected capacity change from 0 to 4096
[   69.077340][ T7389] ntfs3: Unknown parameter 'id0x0000000000000000'
[   69.089269][ T7381] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.091390][ T7381] BTRFS info (device loop2): using crc32c (crc32c-generic) checksum algorithm
[   69.093674][ T7381] BTRFS info (device loop2): using free-space-tree
[   69.105970][ T7361] loop1: detected capacity change from 0 to 32768
[   69.352200][ T7361] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.359915][ T7408] loop0: detected capacity change from 0 to 8
[   69.488955][ T7361] XFS (loop1): Ending clean mount
[   69.558141][ T7390] loop5: detected capacity change from 0 to 32768
[   69.572194][ T7361] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   69.573976][ T7361] overlayfs: failed to set xattr on upper
[   69.575153][ T7361] overlayfs: ...falling back to redirect_dir=nofollow.
[   69.576489][ T7361] overlayfs: ...falling back to index=off.
[   69.577567][ T7361] overlayfs: ...falling back to uuid=null.
[   69.615806][ T2256] cfg80211: failed to load regulatory.db
[   69.675990][ T7390] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[   69.687624][ T6433] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   69.826941][ T7390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.188'.
[   69.829532][ T6424] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   69.832834][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.190'.
[   69.837723][ T7390] sch_fq: defrate 2 ignored.
[   70.047152][ T7444] rtc-efi rtc-efi.0: write status is 3
[   70.317011][ T7398] loop3: detected capacity change from 0 to 32768
[   70.426797][ T6947] ocfs2: Unmounting device (7,5) on (node local)
[   70.557774][ T7455] netlink: 'syz.5.194': attribute type 1 has an invalid length.
[   70.646690][ T7398] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   71.001056][ T7398] XFS (loop3): Ending clean mount
[   71.039179][ T7398] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   71.040651][ T7398] overlayfs: failed to set xattr on upper
[   71.041875][ T7398] overlayfs: ...falling back to redirect_dir=nofollow.
[   71.105197][ T7398] overlayfs: ...falling back to index=off.
[   71.106482][ T7398] overlayfs: ...falling back to uuid=null.
[   71.335021][ T6425] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   71.873425][ T7458] loop2: detected capacity change from 0 to 262144
[   71.903945][ T7458] F2FS-fs (loop2): Found nat_bits in checkpoint
[   71.937556][ T7458] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   72.052385][ T7463] loop5: detected capacity change from 0 to 40427
[   72.071525][ T7463] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[   72.075357][ T7463] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[   72.091664][ T7463] F2FS-fs (loop5): invalid crc value
[   72.274443][ T7463] F2FS-fs (loop5): Found nat_bits in checkpoint
[   72.328108][ T7463] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[   72.338274][ T7463] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[   72.431789][ T7463] F2FS-fs (loop5): Can't flush 0 in 0 for SEGS_PER_SEC 1 != 1
[   72.488733][ T7513] loop0: detected capacity change from 0 to 32768
[   72.494177][ T7513] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.204 (7513)
[   72.500951][ T7513] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   72.504205][ T7513] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   72.506248][ T7513] BTRFS info (device loop0): disk space caching is enabled
[   72.508232][ T7513] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   72.555208][ T7522] loop3: detected capacity change from 0 to 4096
[   72.557105][ T7522] ntfs3: Unknown parameter 'id0x0000000000000000'
[   72.711504][ T7532] x_tables: ip_tables: ah match: only valid for protocol 51
[   72.968802][ T7513] BTRFS info (device loop0): rebuilding free space tree
[   73.086829][ T7513] BTRFS info (device loop0): disabling free space tree
[   73.088400][ T7513] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   73.090513][ T7513] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   73.370331][ T7513] BTRFS info (device loop0): balance: start -f -svrange=0..0,limit=1630855084369772560,limit=16..379713039
[   73.372987][ T7513] BTRFS info (device loop0): balance: ended with status: 0
[   73.385534][ T7549] loop3: detected capacity change from 0 to 256
[   73.423931][ T7553] loop2: detected capacity change from 0 to 64
[   73.454213][ T7553] hfs: unable to open extent tree
[   73.455505][ T7553] hfs: can't find a HFS filesystem on dev loop2
[   73.590340][ T7566] loop2: detected capacity change from 0 to 128
[   73.634217][ T6429] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   73.793553][ T7574] loop5: detected capacity change from 0 to 64
[   74.104757][ T7532] loop1: detected capacity change from 0 to 131072
[   74.120110][ T7532] F2FS-fs (loop1): Unrecognized mount option "" or missing value
[   75.125029][ T7607] loop0: detected capacity change from 0 to 4096
[   75.138900][ T7607] ntfs3: Unknown parameter 'id0x0000000000000000'
[   75.705783][ T7620] loop0: detected capacity change from 0 to 1024
[   75.774477][ T7620] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.826106][ T7611] loop5: detected capacity change from 0 to 32768
[   76.341074][ T7611] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,fsck,fix_errors=yes,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow,no_data_io
[   76.412886][ T7611] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[   76.484097][ T7611] bcachefs (loop5): Version upgrade required:
[   76.484097][ T7611] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   76.484097][ T7611] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[   76.484097][ T7611]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[   76.903786][ T7611] bcachefs (loop5): dropping and reconstructing all alloc info
[   76.929822][ T7611] bcachefs (loop5): error validating btree node on loop5 at btree dirents level 0/0
[   76.929861][ T7611]   u64s 11 type btree_ptr_v2 648518346341351423:U64_MAX:U32_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0  
[   76.929874][ T7611]   node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX
[   76.945597][ T7611] bcachefs (loop5): flagging btree dirents lost data
[   76.967026][ T7611] error reading btree root dirents l=0: btree_node_read_error, fixing
[   76.970137][ T7611] bcachefs (loop5): will run btree node scan
[   76.998644][ T7611] bcachefs (loop5): error validating btree node on loop5 at btree lru level 0/0
[   76.998661][ T7611]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 85c written 0 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0  
[   76.998671][ T7611]   node offset 0/0: got wrong btree node: got
[   76.998679][ T7611]   btree=lru l=0 seq 2951579623591295324x
[   76.998687][ T7611]   min: POS_MIN
[   76.998694][ T7611]   max: SPOS_MAX
[   77.020096][ T7611] bcachefs (loop5): flagging btree lru lost data
[   77.022978][ T7611] error reading btree root lru l=0: btree_node_read_error, fixing
[   77.027770][ T7611] bcachefs (loop5): scan_for_btree_nodes...
[   77.128199][ T7611] bch2_scan_for_btree_nodes: nodes found after overwrites:
[   77.128229][ T7611]   extents l=0 seq=1 journal_seq=5 cookie=c6c25c03258c59c5 POS_MIN-SPOS_MAX ptr: 0:27:0 gen 0
[   77.128239][ T7611]   inodes l=0 seq=1 journal_seq=5 cookie=7589ab5e0c11cc7a POS_MIN-SPOS_MAX ptr: 0:38:0 gen 0
[   77.128249][ T7611]   dirents l=0 seq=1 journal_seq=4 cookie=9aa2895aefce4bdf POS_MIN-SPOS_MAX ptr: 0:41:0 gen 0
[   77.128259][ T7611]   xattrs l=0 seq=1 journal_seq=4 cookie=2285c34bed0abe32 POS_MIN-SPOS_MAX ptr: 0:31:0 gen 0
[   77.128268][ T7611]   subvolumes l=0 seq=1 journal_seq=1 cookie=c0bef60d07ceb940 POS_MIN-SPOS_MAX ptr: 0:35:0 gen 0
[   77.128277][ T7611]   snapshots l=0 seq=1 journal_seq=1 cookie=ebb8d5a9e3463bdb POS_MIN-SPOS_MAX ptr: 0:32:0 gen 0
[   77.128287][ T7611]   lru l=0 seq=1 journal_seq=5 cookie=28f61e078e70b95c POS_MIN-SPOS_MAX ptr: 0:28:0 gen 0
[   77.128296][ T7611]   deleted_inodes l=0 seq=1 journal_seq=0 cookie=1db8f60c84bb244c POS_MIN-SPOS_MAX ptr: 0:42:0 gen 0
[   77.128305][ T7611] 
[   77.240661][ T7611]  done
[   77.241261][ T7611] bcachefs (loop5): check_topology...
[   77.241283][ T7611] bcachefs (loop5): btree root dirents unreadable, must recover from scan
[   77.253541][ T7611] bcachefs (loop5): bch2_get_scanned_nodes(): recovering dirents l=0 POS_MIN - SPOS_MAX
[   77.255662][ T7611] bcachefs (loop5): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0
[   77.288924][ T7611] bcachefs (loop5): btree root lru unreadable, must recover from scan
[   77.291227][ T7611] bcachefs (loop5): bch2_get_scanned_nodes(): recovering lru l=0 POS_MIN - SPOS_MAX
[   77.298642][ T7611] bcachefs (loop5): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0
[   77.316301][ T7611]  done
[   77.317021][ T7611] bcachefs (loop5): accounting_read... done
[   77.344960][ T7611] bcachefs (loop5): alloc_read... done
[   77.346138][ T7611] bcachefs (loop5): stripes_read... done
[   77.347378][ T7611] bcachefs (loop5): snapshots_read... done
[   77.348730][ T7611] bcachefs (loop5): check_allocations... done
[   77.379928][ T7611] bcachefs (loop5): going read-write
[   77.401157][ T7611] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[   77.448838][ T7611] bcachefs (loop5): done starting filesystem
[   77.475198][ T7611] bcachefs (loop5): btree_path_down(): fatal error node not found at pos 4096:2:U32_MAX within parent node u64s 5 type btree_ptr SPOS_MAX len 0 ver 0
[   77.480997][ T6477] bcachefs (loop5): going read-only
[   77.482281][ T6477] bcachefs (loop5): finished waiting for writes to stop
[   77.511281][ T7611] bcachefs (loop5): fatal error - emergency read only
[   77.512720][ T7611] bcachefs (loop5): bch2_vfs_readdir(): error btree_need_topology_repair
[   77.540948][ T6477] bcachefs (loop5): flushing journal and stopping allocators, journal seq 11
[   77.542962][ T6477] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 11
[   77.549284][ T6429] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.563603][ T6477] bcachefs (loop5): unshutdown complete, journal seq 11
[   77.565620][ T6477] bcachefs (loop5): done going read-only, filesystem not clean
[   77.581397][ T7674] loop3: detected capacity change from 0 to 32768
[   77.626064][ T6947] bcachefs (loop5): shutting down
[   77.648403][ T7674] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   77.685415][ T6947] bcachefs (loop5): shutdown complete
[   77.692043][ T7669] loop2: detected capacity change from 0 to 32768
[   77.706475][ T7669] btrfs: Deprecated parameter 'usebackuproot'
[   77.707743][ T7669] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   77.709489][ T7669] btrfs: Unknown parameter 'fsuuid'
[   77.786128][ T7698] loop0: detected capacity change from 0 to 128
[   77.790109][ T7698] qnx6: unable to set blocksize
[   77.819949][ T7674] XFS (loop3): Ending clean mount
[   77.867126][ T7674] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   77.868650][ T7674] overlayfs: failed to set xattr on upper
[   77.872868][ T7674] overlayfs: ...falling back to redirect_dir=nofollow.
[   77.876227][ T7674] overlayfs: ...falling back to index=off.
[   77.877432][ T7674] overlayfs: ...falling back to uuid=null.
[   77.909567][ T7669] overlay: Unknown parameter 'dont_hash'
[   77.954825][ T6425] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   78.288848][ T7724] loop1: detected capacity change from 0 to 1024
[   78.301234][ T7725] loop2: detected capacity change from 0 to 164
[   78.351074][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.363023][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.381597][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.387493][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.399520][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.401033][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.419327][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.420936][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.444445][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.445937][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.468411][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   78.470017][ T7724] hfsplus: request for non-existent node 33423360 in B*Tree
[   79.080647][ T7735] loop0: detected capacity change from 0 to 32768
[   79.111543][ T7735] xfs: Unknown parameter '©ûúáÜime'
[   79.463989][ T7745] loop2: detected capacity change from 0 to 65536
[   79.677702][ T7745] XFS (loop2): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   79.764037][ T7745] XFS (loop2): Ending clean mount
[   79.915530][ T6433] XFS (loop2): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   80.154663][ T7781] binder_alloc: binder_alloc_mmap_handler: 7778 20ffd000-21000000 already mapped failed -16
[   80.164083][ T7779] binder: 7778:7779 tried to acquire reference to desc 0, got 1 instead
[   80.168823][ T7779] binder_alloc: 7778: binder_alloc_buf, no vma
[   80.170288][ T7779] binder: cannot allocate buffer: vma cleared, target dead or dying
[   80.170327][ T7779] binder: 7778:7779 transaction async to 7778:0 failed 5/29189/-3, size 72-24 line 3333
[   80.193401][ T7781] binder: 7778:7781 DecRefs 0 refcount change on invalid ref 1 ret -22
[   80.195103][ T7781] binder: 7778:7781 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   80.197646][ T7781] binder: 7781 RLIMIT_NICE not set
[   80.208162][ T7761] loop0: detected capacity change from 0 to 32768
[   80.215000][ T7761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.247 (7761)
[   80.263888][ T7761] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.266179][ T7761] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
[   80.267985][ T7761] BTRFS info (device loop0): using free-space-tree
[   80.338140][ T7770] loop5: detected capacity change from 0 to 32768
[   80.456211][ T1763] binder: undelivered TRANSACTION_ERROR: 29189
[   80.550628][ T7770] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[   80.595562][ T7770] JBD2: Ignoring recovery information on journal
[   80.648481][ T7804] loop2: detected capacity change from 0 to 1024
[   80.690073][ T7795] loop3: detected capacity change from 0 to 32768
[   80.691884][ T7795] XFS: noikeep mount option is deprecated.
[   80.695729][ T7770] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[   80.749727][ T7770] (syz.5.234,7770,0):ocfs2_parse_options:1460 ERROR: Invalid heartbeat mount options
[   80.757351][ T7770] 9pnet_virtio: no channels available for device syz
[   80.759634][ T7795] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   80.801690][ T6429] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.804512][ T7795] XFS (loop3): Ending clean mount
[   80.848454][ T7795] XFS (loop3): Quotacheck needed: Please wait.
[   80.911687][ T7795] XFS (loop3): Quotacheck: Done.
[   80.948487][ T6947] ocfs2: Unmounting device (7,5) on (node local)
[   80.969587][ T7756] loop1: detected capacity change from 0 to 131072
[   80.997030][  T185] hfsplus: b-tree write err: -5, ino 4
[   81.017369][ T7756] F2FS-fs (loop1): Found nat_bits in checkpoint
[   81.047803][ T7756] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   81.192174][ T7837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.201302][ T7837] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.491952][ T6425] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[   81.745596][ T7866] loop0: detected capacity change from 0 to 4096
[   81.772500][ T7866] ntfs3: Unknown parameter 'id0x0000000000000000'
[   82.099221][   T44] tipc: Subscription rejected, illegal request
[   82.237922][ T7891] netlink: 8 bytes leftover after parsing attributes in process `syz.5.267'.
[   82.239974][ T7891] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[   82.242394][ T7891] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[   82.489506][ T7895] loop5: detected capacity change from 0 to 64
[   82.491523][ T7895] hfs: unable to parse mount options
[   82.677531][ T7859] loop1: detected capacity change from 0 to 65536
[   82.726591][ T7859] XFS (loop1): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   82.729872][ T7889] loop0: detected capacity change from 0 to 32768
[   82.773081][ T7859] XFS (loop1): Ending clean mount
[   82.890157][ T7889] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   82.909893][ T6424] XFS (loop1): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   82.937346][ T7889] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[   82.939099][ T7889] bcachefs (loop0): Version upgrade required:
[   82.939099][ T7889] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   82.939099][ T7889] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[   82.939099][ T7889]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[   82.975662][ T7889] bcachefs (loop0): dropping and reconstructing all alloc info
[   82.984095][ T7889] bcachefs (loop0): check_topology... done
[   82.985493][ T7889] bcachefs (loop0): accounting_read... done
[   83.025046][ T7889] bcachefs (loop0): alloc_read... done
[   83.026200][ T7889] bcachefs (loop0): stripes_read... done
[   83.027415][ T7889] bcachefs (loop0): snapshots_read... done
[   83.031195][ T7889] bcachefs (loop0): check_allocations... done
[   83.111184][ T7889] bcachefs (loop0): going read-write
[   83.118039][ T7889] bcachefs (loop0): done starting filesystem
[   83.202537][ T6429] bcachefs (loop0): shutting down
[   83.208207][ T6429] bcachefs (loop0): going read-only
[   83.209380][ T6429] bcachefs (loop0): finished waiting for writes to stop
[   83.283094][ T6429] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[   83.284060][ T7926] netlink: 32 bytes leftover after parsing attributes in process `syz.5.274'.
[   83.285162][ T6429] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[   83.307301][ T6429] bcachefs (loop0): unshutdown complete, journal seq 11
[   83.309361][ T6429] bcachefs (loop0): done going read-only, filesystem not clean
[   83.332722][ T6429] bcachefs (loop0): shutdown complete
[   83.335153][ T7926] loop5: detected capacity change from 0 to 1024
[   83.571120][ T7928] loop5: detected capacity change from 0 to 256
[   83.591832][ T7928] exFAT-fs (loop5): Invalid exboot-signature(sector = 2): 0x1119abd0
[   83.603174][ T7928] exFAT-fs (loop5): Invalid exboot-signature(sector = 5): 0x1119abd0
[   83.623331][ T7928] exFAT-fs (loop5): Invalid exboot-signature(sector = 6): 0x00000000
[   83.633611][ T7928] exFAT-fs (loop5): Invalid exboot-signature(sector = 7): 0x00000000
[   83.656546][ T7869] loop3: detected capacity change from 0 to 131072
[   83.673390][ T7928] exFAT-fs (loop5): Invalid exboot-signature(sector = 8): 0x00000000
[   83.679846][ T7928] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[   83.681910][ T7928] exFAT-fs (loop5): invalid boot region
[   83.683099][ T7928] exFAT-fs (loop5): failed to recognize exfat type
[   83.731782][ T7922] loop2: detected capacity change from 0 to 40427
[   83.746229][ T7922] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[   83.747671][ T7922] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   83.755997][ T7922] F2FS-fs (loop2): invalid crc value
[   83.775465][ T7922] F2FS-fs (loop2): Found nat_bits in checkpoint
[   83.800912][ T7922] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   83.802405][ T7922] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   83.826365][ T7922] syz.2.273 (7922): /proc/7920/oom_adj is deprecated, please use /proc/7920/oom_score_adj instead.
[   85.111017][ T7956] loop5: detected capacity change from 0 to 64
[   85.122593][ T7956] hfs: unable to read volume bitmap
[   85.123805][ T7956] hfs: can't find a HFS filesystem on dev loop5
[   85.129697][ T7956] netlink: 28 bytes leftover after parsing attributes in process `syz.5.281'.
[   85.131827][ T7956] netlink: 'syz.5.281': attribute type 7 has an invalid length.
[   85.137322][ T7956] netlink: 'syz.5.281': attribute type 8 has an invalid length.
[   85.139012][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.5.281'.
[   85.355329][ T7956] erspan0: entered promiscuous mode
[   85.403903][ T7956] batadv_slave_1: entered promiscuous mode
[   85.414475][ T6433] syz-executor: attempt to access beyond end of device
[   85.414475][ T6433] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.453658][ T7956] gretap0: entered promiscuous mode
[   85.473370][ T6433] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   85.649140][ T7943] loop3: detected capacity change from 0 to 65536
[   85.896492][ T7924] loop1: detected capacity change from 0 to 262144
[   85.906734][ T7924] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.269 (7924)
[   85.930387][ T7924] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   85.932542][ T7924] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[   85.934688][ T7924] BTRFS info (device loop1): using free-space-tree
[   85.958731][ T7943] XFS (loop3): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   85.989371][ T7943] XFS (loop3): Ending clean mount
[   86.056904][ T6425] XFS (loop3): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   86.168743][ T6424] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   86.252887][ T8007] loop2: detected capacity change from 0 to 2048
[   86.334863][ T7997] loop5: detected capacity change from 0 to 32768
[   86.379941][ T7997] loop5: detected capacity change from 0 to 512
[   86.389684][ T7997] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[   86.396223][ T7997] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a84ec02c, mo2=0002]
[   86.397969][ T7997] System zones: 0-2, 18-18, 34-34
[   86.401887][ T7997] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1138: updating to rev 1 because of new feature flag, running e2fsck is recommended
[   86.410181][ T7997] EXT4-fs (loop5): 1 truncate cleaned up
[   86.411915][ T7997] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   86.417402][ T8007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.441224][ T7997] EXT4-fs error (device loop5): ext4_generic_delete_entry:2680: inode #2: block 3: comm syz.5.284: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1
[   86.508265][ T8020] ext4: Unknown parameter '/dev/video#'
[   86.523080][ T7997] EXT4-fs (loop5): Remounting filesystem read-only
[   86.530031][ T7997] EXT4-fs warning (device loop5): ext4_rename_delete:3733: inode #2: comm syz.5.284: Deleting old file: nlink 4, error=-117
[   86.575938][ T8016] netlink: 'syz.0.272': attribute type 9 has an invalid length.
[   86.577990][ T6947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.579980][ T8016] bond_slave_0: entered promiscuous mode
[   86.581486][ T8016] bond_slave_1: entered promiscuous mode
[   86.587872][ T8016] macvlan2: entered promiscuous mode
[   86.589101][ T8016] bond0: entered promiscuous mode
[   86.590397][ T8016] macvlan2: entered allmulticast mode
[   86.591684][ T8016] bond0: entered allmulticast mode
[   86.592714][ T8016] bond_slave_0: entered allmulticast mode
[   86.663185][ T8016] bond_slave_1: entered allmulticast mode
[   86.665192][ T8016] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   86.713032][ T8027] 9pnet_fd: p9_fd_create_tcp (8027): problem connecting socket to 127.0.0.1
[   86.788678][ T8031] x_tables: duplicate underflow at hook 2
[   86.813085][ T8031] loop0: detected capacity change from 0 to 2048
[   86.818933][ T8031] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.887000][ T8033] Zero length message leads to an empty skb
[   86.968082][ T6433] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.022911][  T729] Bluetooth: hci5: Frame reassembly failed (-84)
[   88.188314][ T8039] loop2: detected capacity change from 0 to 32768
[   88.494092][ T8039] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[   88.501909][ T8039] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[   88.506267][ T8039] bcachefs (loop2): Version upgrade required:
[   88.506267][ T8039] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   88.506267][ T8039] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.13: inode_has_child_snapshots
[   88.506267][ T8039]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[   89.005880][ T8039] bcachefs (loop2): dropping and reconstructing all alloc info
[   89.030567][ T8039] bcachefs (loop2): check_topology... done
[   89.031808][ T8039] bcachefs (loop2): accounting_read...
[   89.053567][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   89.084879][ T8039]  done
[   89.085826][ T8039] bcachefs (loop2): alloc_read... done
[   89.087154][ T8039] bcachefs (loop2): stripes_read... done
[   89.088515][ T8039] bcachefs (loop2): snapshots_read... done
[   89.089891][ T8039] bcachefs (loop2): check_allocations... done
[   89.196344][ T8039] bcachefs (loop2): going read-write
[   89.201304][ T8039] bcachefs (loop2): done starting filesystem
[   89.305551][ T8039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.290'.
[   89.494013][ T8048] loop1: detected capacity change from 0 to 32768
[   89.554057][ T8048] XFS: ikeep mount option is deprecated.
[   89.582368][ T6433] bcachefs (loop2): shutting down
[   89.583511][ T6433] bcachefs (loop2): going read-only
[   89.584611][ T6433] bcachefs (loop2): finished waiting for writes to stop
[   89.623831][ T6433] bcachefs (loop2): flushing journal and stopping allocators, journal seq 11
[   89.636804][  T812] bcachefs (loop2): bch2_write_super(): fatal error  loop2: Superblock write was silently dropped! (seq 0 expected 54)
[   89.640976][  T812] bcachefs (loop2): fatal error - emergency read only
[   89.645845][ T6433] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11
[   89.648468][ T6433] bcachefs (loop2): unshutdown complete, journal seq 11
[   89.650418][ T6433] bcachefs (loop2): done going read-only, filesystem not clean
[   89.659417][ T8048] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.722885][ T8048] XFS (loop1): Ending clean mount
[   89.738933][ T8065] loop5: detected capacity change from 0 to 65536
[   89.747297][ T8048] XFS (loop1): Quotacheck needed: Please wait.
[   89.753893][ T6433] bcachefs (loop2): shutdown complete
[   89.764632][ T8065] XFS (loop5): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   89.840330][ T8065] XFS (loop5): Ending clean mount
[   89.848030][ T8048] XFS (loop1): Quotacheck: Done.
[   89.896897][ T6947] XFS (loop5): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   90.095922][ T8135] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains
[   90.189174][ T8088] loop3: detected capacity change from 0 to 32768
[   90.273273][ T8102] loop0: detected capacity change from 0 to 65536
[   90.304757][ T8088] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.306356][ T6424] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   90.322320][ T8102] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   90.323691][ T8145] IPVS: length: 29 != 8
[   90.389539][ T8102] XFS (loop0): Ending clean mount
[   90.410677][ T8102] XFS (loop0): Quotacheck needed: Please wait.
[   90.427002][   T25] XFS (loop0): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_cntbt block 0x6 
[   90.429449][   T25] XFS (loop0): Unmount and run xfs_repair
[   90.430665][   T25] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   90.432136][   T25] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[   90.445650][   T25] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[   90.447394][   T25] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[   90.449107][   T25] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[   90.482265][   T25] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[   90.485626][   T25] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[   90.487589][   T25] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   90.489622][   T25] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   90.491993][  T800] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x274/0x434" at daddr 0x6 len 2 error 74
[   90.501972][ T8102] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[   90.527211][ T8088] XFS (loop3): Ending clean mount
[   91.324023][ T6425] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.460044][ T8183] loop5: detected capacity change from 0 to 128
[   91.533584][ T8183] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   91.588471][ T6947] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.591414][ T8102] syz.0.298 uses old SIOCAX25GETINFO
[   91.627861][   T25] XFS (loop0): Metadata CRC error detected at xfs_agfl_read_verify+0x134/0x1f8, xfs_agfl block 0x8003 
[   91.630132][   T25] XFS (loop0): Unmount and run xfs_repair
[   91.631276][   T25] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[   91.632797][   T25] 00000000: 58 41 46 4c 00 00 00 01 9b 73 48 e5 2f a0 41 a5  XAFL.....sH./.A.
[   91.649021][   T25] 00000010: 95 26 c5 3a 67 8b 01 f3 00 00 00 00 00 00 00 00  .&.:g...........
[   91.650931][   T25] 00000020: a7 57 40 a5 ff ff ff ff 00 00 04 a0 00 00 04 a1  .W@.............
[   91.652731][   T25] 00000030: 00 00 08 00 00 00 04 a3 ff ff ff ff ff ff ff ff  ................
[   91.669266][   T25] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   91.671080][   T25] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   91.672792][   T25] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   91.678608][   T25] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[   91.680561][ T8102] XFS (loop0): metadata I/O error in "xfs_alloc_read_agfl+0x1fc/0x414" at daddr 0x8003 len 1 error 74
[   91.682130][ T8196] loop5: detected capacity change from 0 to 1024
[   91.725473][ T8196] /dev/loop5: Can't open blockdev
[   91.828221][ T6429] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   91.840840][ T6429] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[   92.892589][ T8210] loop5: detected capacity change from 0 to 65536
[   92.903781][ T8219] loop1: detected capacity change from 0 to 1024
[   92.905483][ T8219] EXT4-fs: Ignoring removed i_version option
[   92.906725][ T8219] EXT4-fs: Ignoring removed bh option
[   92.931291][ T8210] XFS (loop5): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   92.942884][ T8219] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   92.997328][ T8210] XFS (loop5): Ending clean mount
[   93.007137][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.081411][ T6947] XFS (loop5): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[   93.117440][ T8231] loop1: detected capacity change from 0 to 1024
[   93.263982][ T8214] loop3: detected capacity change from 0 to 32768
[   93.322447][ T8241] loop2: detected capacity change from 0 to 512
[   93.337157][ T8241] vfat: Unknown parameter ''
[   93.612950][ T8217] netlink: 12 bytes leftover after parsing attributes in process `syz.0.309'.
[   93.622971][ T8252] loop5: detected capacity change from 0 to 1024
[   93.675987][ T8252] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.677864][ T8256] xt_ecn: cannot match TCP bits for non-tcp packets
[   93.749961][ T8258] syzkaller1: entered promiscuous mode
[   93.754435][ T8258] syzkaller1: entered allmulticast mode
[   93.979381][  T729] hfsplus: b-tree write err: -5, ino 4
[   94.016097][ T8252] EXT4-fs error (device loop5): ext4_get_first_dir_block:3554: inode #11: comm syz.5.319: directory missing '..'
[   94.036358][ T8272] loop2: detected capacity change from 0 to 64
[   94.060104][ T8272] hfs: unable to parse mount options
[   94.103525][ T8271] loop1: detected capacity change from 0 to 2048
[   94.140503][ T8271] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   94.360550][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.370217][ T6947] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.484781][ T8299] loop2: detected capacity change from 0 to 256
[   94.500572][ T8301] loop5: detected capacity change from 0 to 128
[   94.567471][ T8301] VFS: Found a Xenix FS (block size = 512) on device loop5
[   94.591119][ T8301] sysv_free_block: trying to free block not in datazone
[   94.610140][ T8301] sysv_free_inode: inode 0,1,2 or nonexistent inode
[   94.634524][ T8301] netlink: 'syz.5.327': attribute type 19 has an invalid length.
[   94.962404][ T8313] loop5: detected capacity change from 0 to 4096
[   95.145732][ T8299] loop2: detected capacity change from 0 to 32768
[   95.147542][ T8299] XFS (loop2): invalid logbufsize: 8192 [not 16k,32k,64k,128k or 256k]
[   95.171846][ T8325] loop5: detected capacity change from 0 to 2048
[   95.192952][ T8325] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   95.395918][ T8341] bridge_slave_1: left allmulticast mode
[   95.397205][ T8341] bridge_slave_1: left promiscuous mode
[   95.399692][ T8341] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.562503][ T8348] loop2: detected capacity change from 0 to 1024
[   95.848967][ T8325] fuse: Bad value for 'fd'
[   95.941653][ T8356] loop2: detected capacity change from 0 to 4096
[   96.407963][ T8316] loop3: detected capacity change from 0 to 131072
[   96.431209][ T8316] F2FS-fs (loop3): Found nat_bits in checkpoint
[   96.456313][ T8371] loop5: detected capacity change from 0 to 32768
[   96.487859][ T8371] JBD2: Ignoring recovery information on journal
[   96.498247][ T8316] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   96.558580][ T8316] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[   96.592592][ T8371] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[   96.602473][ T8316] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[   96.610996][ T8316] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[   96.625660][ T8316] F2FS-fs (loop3): recover xattr in inode (7), error(0)
[   96.636953][ T8316] F2FS-fs (loop3): set inode (7) has corrupted xattr
[   96.643261][ T8380] F2FS-fs (loop3): lookup inode (7) has corrupted xattr
[   96.691372][ T8371] netlink: 'syz.5.348': attribute type 4 has an invalid length.
[   96.739689][ T8373] loop2: detected capacity change from 0 to 32768
[   96.768107][ T8373] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   96.867975][ T6947] ocfs2: Unmounting device (7,5) on (node local)
[   97.214348][ T8389] netlink: 16 bytes leftover after parsing attributes in process `syz.0.351'.
[   97.274092][ T6433] ocfs2: Unmounting device (7,2) on (node local)
[   97.472044][ T8411] loop2: detected capacity change from 0 to 64
[   98.042454][ T8429] loop2: detected capacity change from 0 to 4096
[   98.101065][ T8429] ntfs3: Unknown parameter 'id0x0000000000000000'
[   98.617770][ T8410] loop1: detected capacity change from 0 to 32768
[   98.619461][ T8410] btrfs: Unknown parameter 'fsuuid'
[   98.686267][ T8462] netlink: 32 bytes leftover after parsing attributes in process `syz.0.367'.
[   98.800494][ T8456] loop2: detected capacity change from 0 to 32768
[   98.800501][ T8465] netlink: 8 bytes leftover after parsing attributes in process `syz.5.366'.
[   98.820803][ T8465] loop5: detected capacity change from 0 to 512
[   98.831216][ T8456] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   98.869051][ T8465] loop5: detected capacity change from 0 to 16
[   98.892057][ T8465] cramfs: Unknown parameter 'ð2þaxÿ0¼ÚŒÿƒh°õÚ}ÿ8€v'
[   98.954519][ T8465] overlayfs: failed to resolve './file0': -2
[   98.996454][ T8402] UBIFS error (pid: 8402): cannot open "./file0", error -22
[   99.434659][ T6433] ocfs2: Unmounting device (7,2) on (node local)
[  100.431069][ T8566] loop3: detected capacity change from 0 to 32768
[  100.438154][ T8568] loop1: detected capacity change from 0 to 4096
[  100.446536][ T8568] ntfs3: Unknown parameter 'id0x0000000000000000'
[  100.476213][ T2256] XFS (loop3): Metadata CRC error detected at xfs_sb_read_verify+0x288/0x3cc, xfs_sb block 0x0 
[  100.489147][ T2256] XFS (loop3): Unmount and run xfs_repair
[  100.491292][ T2256] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  100.492848][ T2256] 00000000: 58 46 53 42 00 00 08 00 00 00 00 00 00 00 20 00  XFSB.......... .
[  100.629960][ T2256] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  100.632113][ T2256] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  100.635163][ T2256] 00000030: 00 00 00 00 00 00 00 05 00 00 00 00 00 00 24 40  ..............$@
[  100.637148][ T2256] 00000040: 00 00 00 00 00 00 24 41 00 00 00 00 00 00 24 42  ......$A......$B
[  100.638941][ T2256] 00000050: 00 00 00 02 00 00 20 00 00 00 00 01 00 00 00 00  ...... .........
[  100.640889][ T2256] 00000060: 00 00 12 00 b4 b5 02 00 04 00 00 02 00 00 00 00  ................
[  100.643526][ T2256] 00000070: 00 00 00 00 00 00 00 00 0b 09 0a 01 0d 00 00 32  ...............2
[  100.646042][ T8566] XFS (loop3): SB validate failed with error -74.
[  100.860802][ T8585] loop2: detected capacity change from 0 to 4096
[  100.942657][ T8587] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  101.201825][ T8585] overlayfs: upper fs does not support tmpfile.
[  101.215081][ T8585] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  101.216562][ T8585] overlayfs: failed to set xattr on upper
[  101.217757][ T8585] overlayfs: ...falling back to redirect_dir=nofollow.
[  101.219252][ T8585] overlayfs: ...falling back to index=off.
[  101.220435][ T8585] overlayfs: ...falling back to uuid=null.
[  101.224771][ T8584] loop1: detected capacity change from 0 to 65536
[  101.228842][ T8585] evm: overlay not supported
[  101.285370][ T8584] XFS (loop1): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[  101.319212][ T8584] XFS (loop1): Ending clean mount
[  101.376516][ T6424] XFS (loop1): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[  101.381424][ T2256] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  101.385452][ T2256] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=12)
[  101.496230][ T8566] loop3: detected capacity change from 0 to 40427
[  101.499614][ T8566] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  101.501327][ T8566] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  101.505871][ T8566] F2FS-fs (loop3): Unrecognized mount option "pquota" or missing value
[  101.509174][ T2256] Remounting filesystem read-only
[  101.510235][ T2256] NILFS (loop2): error -5 truncating bmap (ino=12)
[  101.606723][ T8592] loop5: detected capacity change from 0 to 32768
[  101.626597][ T8592] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.380 (8592)
[  101.655565][ T8601] loop2: detected capacity change from 0 to 256
[  101.681953][ T8601] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  101.725807][ T8592] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.728027][ T8592] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  101.729796][ T8592] BTRFS info (device loop5): using free-space-tree
[  102.301536][ T8623] loop1: detected capacity change from 0 to 32768
[  102.868405][ T8636] loop2: detected capacity change from 0 to 4096
[  102.870399][ T8636] ntfs3: Unknown parameter 'id0x0000000000000000'
[  102.902071][ T8623] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.105029][ T8623] XFS (loop1): Ending clean mount
[  103.171069][ T8662] input: syz1 as /devices/virtual/input/input2
[  103.212310][ T8662] netlink: 24 bytes leftover after parsing attributes in process `syz.2.390'.
[  103.305932][ T6424] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  103.609056][ T8673] loop1: detected capacity change from 0 to 1024
[  103.610889][ T8673] EXT4-fs: Ignoring removed orlov option
[  103.612107][ T8673] EXT4-fs: Ignoring removed nomblk_io_submit option
[  103.650036][ T8673] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8843c118, mo2=0002]
[  103.655304][ T8673] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  103.782928][ T8592] overlayfs: workdir and upperdir must reside under the same mount
[  104.048771][ T6947] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  104.099096][ T6424] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.311308][ T8718] loop5: detected capacity change from 0 to 256
[  105.359782][ T8718] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x59626b74, utbl_chksum : 0xe619d30d)
[  105.721996][ T8732] loop1: detected capacity change from 0 to 4096
[  105.820129][ T8692] loop3: detected capacity change from 0 to 65536
[  105.957316][ T8662] loop2: detected capacity change from 0 to 131072
[  105.984636][ T8732] tmpfs: Bad value for 'mpol'
[  106.100688][ T8692] XFS (loop3): Mounting V5 Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[  106.186779][ T8754] loop1: detected capacity change from 0 to 4096
[  106.190728][ T8754] ntfs3: Unknown parameter 'id0x0000000000000000'
[  106.257058][ T8692] XFS (loop3): Ending clean mount
[  106.369130][ T6425] XFS (loop3): Unmounting Filesystem e4654a66-62e5-4963-a81e-012d9d4871af
[  106.735374][ T8762] netlink: 'syz.0.400': attribute type 10 has an invalid length.
[  107.476332][ T8780] loop3: detected capacity change from 0 to 1024
[  107.488234][ T8783] loop2: detected capacity change from 0 to 512
[  107.499460][ T8780] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  107.501531][ T8780] EXT4-fs (loop3): required journal recovery suppressed and not mounted read-only
[  107.504227][ T8783] EXT4-fs (loop2): can't mount with both data=journal and delalloc
[  107.677974][ T8783] overlayfs: overlapping lowerdir path
[  107.728865][ T8783] loop2: detected capacity change from 0 to 512
[  107.800616][ T8791] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.808080][ T8791] bridge0: port 2(bridge_slave_1) entered disabled state
[  107.840083][ T8780] loop3: detected capacity change from 0 to 4096
[  107.863490][ T8780] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  107.977941][ T8780] ntfs3(loop3): failed to convert "c46c" to cp864
[  108.131731][ T8805] bpf: Bad value for 'mode'
[  108.402394][ T5993] Bluetooth: hci4: link tx timeout
[  108.405133][ T5993] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  108.413080][ T8810] loop3: detected capacity change from 0 to 4096
[  108.423991][ T8810] ntfs3: Unknown parameter 'id0x0000000000000000'
[  108.591230][ T8812] netlink: 'syz.2.415': attribute type 1 has an invalid length.
[  109.622068][ T8833] netlink: 32 bytes leftover after parsing attributes in process `syz.1.417'.
[  109.774114][ T8789] loop5: detected capacity change from 0 to 32768
[  109.775930][ T8789] btrfs: Unknown parameter 'fsuuid'
[  110.495121][ T6431] Bluetooth: hci4: command 0x0406 tx timeout
[  111.010115][ T8835] loop2: detected capacity change from 0 to 40427
[  111.017589][ T8831] loop3: detected capacity change from 0 to 32768
[  111.023651][ T8835] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff
[  111.025619][ T8835] F2FS-fs (loop2): heap/no_heap options were deprecated
[  111.030077][ T8835] F2FS-fs (loop2): Image doesn't support compression
[  111.039273][ T8835] F2FS-fs (loop2): invalid crc value
[  111.048781][ T8835] F2FS-fs (loop2): Found nat_bits in checkpoint
[  111.171686][ T8865] loop1: detected capacity change from 0 to 32768
[  111.195421][ T8865] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.425 (8865)
[  111.207913][ T8831] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  111.208079][ T8865] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.211875][ T8865] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[  111.213704][ T8865] BTRFS info (device loop1): using free-space-tree
[  111.215118][ T8835] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  111.269127][ T8835] F2FS-fs (loop2): inject checkpoint error in f2fs_balance_fs of f2fs_convert_inline_inode+0x66c/0x6dc
[  111.282950][ T8831] XFS (loop3): Ending clean mount
[  111.328581][ T8835] F2FS-fs (loop2): Stopped filesystem due to reason: 1
[  111.343858][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  111.345708][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  111.374663][ T8831] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  111.376253][ T8831] overlayfs: failed to set xattr on upper
[  111.377379][ T8831] overlayfs: ...falling back to redirect_dir=nofollow.
[  111.378789][ T8831] overlayfs: ...falling back to index=off.
[  111.379931][ T8831] overlayfs: ...falling back to uuid=null.
[  111.632686][ T6425] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  112.319594][ T8865] btrfs: Deprecated parameter 'usebackuproot'
[  112.321085][ T8865] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  112.351918][ T8865] BTRFS warning (device loop1 state M): remount supports changing free space tree only from RO to RW
[  112.354504][ T8865] BTRFS info (device loop1 state M): setting nodatasum
[  112.356041][ T8865] BTRFS info (device loop1 state M): setting nodatasum
[  112.357496][ T8865] BTRFS info (device loop1 state M): turning on sync discard
[  112.359129][ T8865] BTRFS info (device loop1 state M): force clearing of disk cache
[  112.360788][ T8865] BTRFS info (device loop1 state M): trying to use backup root at mount time
[  112.362648][ T8865] BTRFS info (device loop1 state M): not using ssd optimizations
[  112.598307][ T6424] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  115.623443][ T6431] Bluetooth: hci3: command 0x0406 tx timeout
[  123.753818][ T8990] pim6reg1: entered promiscuous mode
[  123.755344][ T8990] pim6reg1: entered allmulticast mode
[  124.166779][ T9026] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.935592][ T2349] ieee802154 phy0 wpan0: encryption failed: -22
[  125.936998][ T2349] ieee802154 phy1 wpan1: encryption failed: -22
[  136.044331][ T9047] wg2: entered promiscuous mode
[  136.045374][ T9047] wg2: entered allmulticast mode
[  136.051939][ T9048] pim6reg1: entered promiscuous mode
[  136.053056][ T9048] pim6reg1: entered allmulticast mode
[  151.948192][ T6431] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  151.963408][ T6431] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  151.967426][ T6431] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  151.970566][ T6431] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  151.972952][ T6431] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  151.977402][ T6431] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  152.011559][ T6431] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  152.021893][ T6431] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  152.039552][ T6431] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[  152.043492][ T6431] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  152.045266][ T6431] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[  152.052141][ T6432] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[  152.053867][ T6431] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[  152.053950][ T6431] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  152.062261][ T6431] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  152.066528][ T6432] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[  152.078114][ T6432] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[  152.080182][ T6432] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[  152.081955][ T6432] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3
[  152.083606][ T6432] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[  152.083715][ T6431] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  152.087082][ T6439] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[  152.087152][ T6431] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3
[  152.091567][   T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[  154.015290][ T6432] Bluetooth: hci5: command tx timeout
[  154.173279][ T6432] Bluetooth: hci8: command tx timeout
[  154.183391][ T5993] Bluetooth: hci6: command tx timeout
[  154.185227][ T6432] Bluetooth: hci7: command tx timeout
[  156.093875][ T6432] Bluetooth: hci5: command tx timeout
[  156.253357][ T6432] Bluetooth: hci7: command tx timeout
[  156.253385][ T5993] Bluetooth: hci6: command tx timeout
[  156.254719][ T6431] Bluetooth: hci8: command tx timeout
[  158.173274][ T6432] Bluetooth: hci5: command tx timeout
[  158.333336][   T53] Bluetooth: hci7: command tx timeout
[  158.333637][ T6435] Bluetooth: hci8: command tx timeout
[  158.335712][ T6432] Bluetooth: hci6: command tx timeout
[  158.738922][ T6432] Bluetooth: hci1: command 0x0406 tx timeout
[  158.740371][ T6432] Bluetooth: hci2: command 0x0406 tx timeout
[  159.074286][ T9109] bridge0: port 2(bridge_slave_1) entered disabled state
[  159.081535][ T9125] pim6reg1: entered promiscuous mode
[  159.082733][ T9125] pim6reg1: entered allmulticast mode
[  159.491486][ T7671] ==================================================================
[  159.493159][ T7671] BUG: KASAN: slab-use-after-free in device_for_each_child+0xac/0x180
[  159.494797][ T7671] Read of size 8 at addr ffff0000c7339308 by task kbnepd bnep0/7671
[  159.496485][ T7671] 
[  159.496981][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: kbnepd bnep0 Not tainted 6.12.0-syzkaller-g7b1d1d4cfac0 #0
[  159.498990][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  159.501071][ T7671] Call trace:
[  159.501820][ T7671]  show_stack+0x2c/0x3c (C)
[  159.502765][ T7671]  dump_stack_lvl+0xe4/0x150
[  159.503748][ T7671]  print_report+0x198/0x538
[  159.504709][ T7671]  kasan_report+0xd8/0x138
[  159.505648][ T7671]  __asan_report_load8_noabort+0x20/0x2c
[  159.506837][ T7671]  device_for_each_child+0xac/0x180
[  159.507918][ T7671]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  159.509264][ T7671]  netdev_unregister_kobject+0x148/0x208
[  159.510501][ T7671]  unregister_netdevice_many_notify+0x15f4/0x1c64
[  159.511909][ T7671]  unregister_netdev+0x180/0x1f8
[  159.512890][ T7671]  bnep_session+0x23cc/0x258c
[  159.513839][ T7671]  kthread+0x288/0x310
[  159.514773][ T7671]  ret_from_fork+0x10/0x20
[  159.515722][ T7671] 
[  159.516231][ T7671] Allocated by task 6947:
[  159.517066][ T7671]  kasan_save_track+0x40/0x78
[  159.518009][ T7671]  kasan_save_alloc_info+0x40/0x50
[  159.519011][ T7671]  __kasan_kmalloc+0xac/0xc4
[  159.519953][ T7671]  __kmalloc_noprof+0x2a4/0x49c
[  159.521005][ T7671]  hci_alloc_dev_priv+0x30/0x1ae0
[  159.522048][ T7671]  vhci_create_device+0x114/0x68c
[  159.523168][ T7671]  vhci_write+0x324/0x3c8
[  159.524131][ T7671]  vfs_write+0x920/0xcf4
[  159.525016][ T7671]  ksys_write+0x15c/0x26c
[  159.525886][ T7671]  __arm64_sys_write+0x7c/0x90
[  159.526861][ T7671]  invoke_syscall+0x98/0x2b8
[  159.527775][ T7671]  el0_svc_common+0x130/0x23c
[  159.528807][ T7671]  do_el0_svc+0x48/0x58
[  159.529634][ T7671]  el0_svc+0x54/0x168
[  159.530516][ T7671]  el0t_64_sync_handler+0x84/0x108
[  159.531619][ T7671]  el0t_64_sync+0x198/0x19c
[  159.532571][ T7671] 
[  159.533031][ T7671] Freed by task 9062:
[  159.533892][ T7671]  kasan_save_track+0x40/0x78
[  159.534847][ T7671]  kasan_save_free_info+0x54/0x6c
[  159.535898][ T7671]  __kasan_slab_free+0x64/0x8c
[  159.536832][ T7671]  kfree+0x184/0x47c
[  159.537671][ T7671]  hci_release_dev+0x1044/0x11a4
[  159.538725][ T7671]  bt_host_release+0x70/0x88
[  159.539655][ T7671]  device_release+0x8c/0x1ac
[  159.540599][ T7671]  kobject_put+0x2a8/0x41c
[  159.541593][ T7671]  put_device+0x28/0x40
[  159.542523][ T7671]  hci_free_dev+0x24/0x34
[  159.543416][ T7671]  vhci_release+0x84/0xd0
[  159.544346][ T7671]  __fput+0x1bc/0x75c
[  159.545256][ T7671]  ____fput+0x20/0x30
[  159.546181][ T7671]  task_work_run+0x230/0x2e0
[  159.547192][ T7671]  do_exit+0x4ec/0x1ad0
[  159.548069][ T7671]  do_group_exit+0x194/0x22c
[  159.549074][ T7671]  get_signal+0x1410/0x152c
[  159.549999][ T7671]  do_signal+0x23c/0x391c
[  159.550959][ T7671]  do_notify_resume+0x74/0x1f4
[  159.551917][ T7671]  el0_svc+0xac/0x168
[  159.552851][ T7671]  el0t_64_sync_handler+0x84/0x108
[  159.553951][ T7671]  el0t_64_sync+0x198/0x19c
[  159.554866][ T7671] 
[  159.555395][ T7671] Last potentially related work creation:
[  159.556637][ T7671]  kasan_save_stack+0x40/0x6c
[  159.557660][ T7671]  __kasan_record_aux_stack+0xd0/0xec
[  159.558862][ T7671]  kasan_record_aux_stack_noalloc+0x14/0x20
[  159.560185][ T7671]  insert_work+0x54/0x2d4
[  159.561247][ T7671]  __queue_work+0xe20/0x1308
[  159.562246][ T7671]  queue_work_on+0xe0/0x1a0
[  159.563229][ T7671]  hci_send_acl+0x768/0xa50
[  159.564153][ T7671]  l2cap_chan_send+0x1214/0x213c
[  159.565145][ T7671]  l2cap_sock_sendmsg+0x184/0x2a8
[  159.566153][ T7671]  kernel_sendmsg+0x1d0/0x2e4
[  159.567099][ T7671]  bnep_session+0x1f30/0x258c
[  159.568032][ T7671]  kthread+0x288/0x310
[  159.568893][ T7671]  ret_from_fork+0x10/0x20
[  159.569732][ T7671] 
[  159.570258][ T7671] Second to last potentially related work creation:
[  159.571678][ T7671]  kasan_save_stack+0x40/0x6c
[  159.572675][ T7671]  __kasan_record_aux_stack+0xd0/0xec
[  159.573962][ T7671]  kasan_record_aux_stack_noalloc+0x14/0x20
[  159.575292][ T7671]  insert_work+0x54/0x2d4
[  159.576282][ T7671]  __queue_work+0xcf4/0x1308
[  159.577300][ T7671]  queue_work_on+0xe0/0x1a0
[  159.578198][ T7671]  hci_cmd_timeout+0x198/0x1cc
[  159.579163][ T7671]  process_one_work+0x7bc/0x1600
[  159.580253][ T7671]  worker_thread+0x97c/0xeec
[  159.581274][ T7671]  kthread+0x288/0x310
[  159.582142][ T7671]  ret_from_fork+0x10/0x20
[  159.583130][ T7671] 
[  159.583668][ T7671] The buggy address belongs to the object at ffff0000c7338000
[  159.583668][ T7671]  which belongs to the cache kmalloc-8k of size 8192
[  159.586871][ T7671] The buggy address is located 4872 bytes inside of
[  159.586871][ T7671]  freed 8192-byte region [ffff0000c7338000, ffff0000c733a000)
[  159.589777][ T7671] 
[  159.590273][ T7671] The buggy address belongs to the physical page:
[  159.591607][ T7671] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x107338
[  159.593447][ T7671] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  159.595296][ T7671] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  159.596961][ T7671] page_type: f5(slab)
[  159.597898][ T7671] raw: 05ffc00000000040 ffff0000c0002280 fffffdffc3622800 0000000000000002
[  159.599807][ T7671] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  159.601788][ T7671] head: 05ffc00000000040 ffff0000c0002280 fffffdffc3622800 0000000000000002
[  159.603615][ T7671] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000
[  159.605356][ T7671] head: 05ffc00000000003 fffffdffc31cce01 ffffffffffffffff 0000000000000000
[  159.607181][ T7671] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000
[  159.608996][ T7671] page dumped because: kasan: bad access detected
[  159.610294][ T7671] 
[  159.610807][ T7671] Memory state around the buggy address:
[  159.612044][ T7671]  ffff0000c7339200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.613723][ T7671]  ffff0000c7339280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.615365][ T7671] >ffff0000c7339300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.617243][ T7671]                       ^
[  159.618189][ T7671]  ffff0000c7339380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.619953][ T7671]  ffff0000c7339400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  159.621766][ T7671] ==================================================================
[  159.625276][ T7671] Disabling lock debugging due to kernel taint
[  159.626664][ T7671] ------------[ cut here ]------------
[  159.627745][ T7671] UBSAN: array-index-out-of-bounds in kernel/locking/qspinlock.c:131:9
[  159.629471][ T7671] index 12443 is out of range for type 'unsigned long[8]'
[  159.630977][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: kbnepd bnep0 Tainted: G    B              6.12.0-syzkaller-g7b1d1d4cfac0 #0
[  159.633296][ T7671] Tainted: [B]=BAD_PAGE
[  159.634111][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  159.636216][ T7671] Call trace:
[  159.636998][ T7671]  show_stack+0x2c/0x3c (C)
[  159.637940][ T7671]  dump_stack_lvl+0xe4/0x150
[  159.638848][ T7671]  dump_stack+0x1c/0x28
[  159.639735][ T7671]  __ubsan_handle_out_of_bounds+0xf8/0x148
[  159.641025][ T7671]  queued_spin_lock_slowpath+0x974/0xd00
[  159.642272][ T7671]  do_raw_spin_lock+0x2ec/0x334
[  159.643326][ T7671]  _raw_spin_lock_irqsave+0x64/0x7c
[  159.644514][ T7671]  klist_next+0x8c/0x2e4
[  159.645314][ T7671]  device_for_each_child+0xc4/0x180
[  159.646391][ T7671]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  159.647589][ T7671]  netdev_unregister_kobject+0x148/0x208
[  159.648782][ T7671]  unregister_netdevice_many_notify+0x15f4/0x1c64
[  159.649997][ T7671]  unregister_netdev+0x180/0x1f8
[  159.651076][ T7671]  bnep_session+0x23cc/0x258c
[  159.652179][ T7671]  kthread+0x288/0x310
[  159.653045][ T7671]  ret_from_fork+0x10/0x20
[  159.653957][ T7671] ---[ end trace ]---
[  159.654824][ T7671] Unable to handle kernel paging request at virtual address ffff80008f835820
[  159.656713][ T7671] KASAN: probably user-memory-access in range [0x000000047c1ac100-0x000000047c1ac107]
[  159.658725][ T7671] Mem abort info:
[  159.659491][ T7671]   ESR = 0x0000000096000047
[  159.660452][ T7671]   EC = 0x25: DABT (current EL), IL = 32 bits
[  159.661741][ T7671]   SET = 0, FnV = 0
[  159.662589][ T7671]   EA = 0, S1PTW = 0
[  159.663383][ T7671]   FSC = 0x07: level 3 translation fault
[  159.664732][ T7671] Data abort info:
[  159.665508][ T7671]   ISV = 0, ISS = 0x00000047, ISS2 = 0x00000000
[  159.666893][ T7671]   CM = 0, WnR = 1, TnD = 0, TagAccess = 0
[  159.668154][ T7671]   GCS = 0, Overlay = 0, DirtyBit = 0, Xs = 0
[  159.669452][ T7671] swapper pgtable: 4k pages, 48-bit VAs, pgdp=00000001a57d1000
[  159.671082][ T7671] [ffff80008f835820] pgd=0000000000000000, p4d=10000001adc7a003, pud=10000001adc7b003, pmd=10000001adc80003, pte=0000000000000000
[  159.673954][ T7671] Internal error: Oops: 0000000096000047 [#1] PREEMPT SMP
[  159.675600][ T7671] Modules linked in:
[  159.676498][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: kbnepd bnep0 Tainted: G    B              6.12.0-syzkaller-g7b1d1d4cfac0 #0
[  159.678974][ T7671] Tainted: [B]=BAD_PAGE
[  159.679871][ T7671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  159.682064][ T7671] pstate: 804000c5 (Nzcv daIF +PAN -UAO -TCO -DIT -SSBS BTYPE=--)
[  159.683691][ T7671] pc : queued_spin_lock_slowpath+0x3cc/0xd00
[  159.685034][ T7671] lr : queued_spin_lock_slowpath+0x974/0xd00
[  159.686354][ T7671] sp : ffff80009d4b74a0
[  159.687252][ T7671] x29: ffff80009d4b7540 x28: 000000000000c272 x27: 1ffff00013a96ea0
[  159.688936][ T7671] x26: dfff800000000000 x25: 1fffe0001a4bca80 x24: 0000000000040000
[  159.690700][ T7671] x23: ffff0001b3632808 x22: ffff80008f835820 x21: ffff0001b3632800
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  159.692408][ T7671] x20: 1fffe000366c6500 x19: ffff0000d25e5400 x18: 0000000000000008
[  159.694132][ T7671] x17: 0000000000000000 x16: ffff8000831615b0 x15: ffff7000125bc240
[  159.695951][ T7671] x14: 1ffff000125bc240 x13: 0000000000000004 x12: ffffffffffffffff
[  159.697721][ T7671] x11: ffff7000125bc240 x10: ffff80008f835800 x9 : 0000000000000002
[  159.699573][ T7671] x8 : 0000000000000000 x7 : 0000000000000001 x6 : 0000000000000001
[  159.701365][ T7671] x5 : ffff80009d4b6b98 x4 : ffff80008f9bd220 x3 : ffff8000801ea08c
[  159.703087][ T7671] x2 : 0000000000000001 x1 : 0000000000000004 x0 : ffff0001b3632808
[  159.704881][ T7671] Call trace:
[  159.705597][ T7671]  queued_spin_lock_slowpath+0x3cc/0xd00 (P)
[  159.707026][ T7671]  queued_spin_lock_slowpath+0x974/0xd00 (L)
[  159.708333][ T7671]  do_raw_spin_lock+0x2ec/0x334
[  159.709356][ T7671]  _raw_spin_lock_irqsave+0x64/0x7c
[  159.710439][ T7671]  klist_next+0x8c/0x2e4
[  159.711403][ T7671]  device_for_each_child+0xc4/0x180
[  159.712705][ T7671]  pm_runtime_set_memalloc_noio+0xf0/0x210
[  159.714064][ T7671]  netdev_unregister_kobject+0x148/0x208
[  159.715266][ T7671]  unregister_netdevice_many_notify+0x15f4/0x1c64
[  159.716668][ T7671]  unregister_netdev+0x180/0x1f8
[  159.717711][ T7671]  bnep_session+0x23cc/0x258c
[  159.718879][ T7671]  kthread+0x288/0x310
[  159.719849][ T7671]  ret_from_fork+0x10/0x20
[  159.720765][ T7671] Code: aa1603e0 9722f4d7 aa1703e0 52800081 (f90002d5) 
[  159.722318][ T7671] ---[ end trace 0000000000000000 ]---
[  160.329588][ T7671] Kernel panic - not syncing: Oops: Fatal exception
[  160.331108][ T7671] SMP: stopping secondary CPUs
[  160.332153][ T7671] Kernel Offset: disabled
[  160.333093][ T7671] CPU features: 0x40,0000081c,00800250,82017203
[  160.334370][ T7671] Memory Limit: none
[  160.903199][ T7671] Rebooting in 86400 seconds..