last executing test programs:

13.009961645s ago: executing program 3:
r0 = socket$kcm(0x11, 0x2, 0x0)
r1 = socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000e80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000380)="b9ff03076808268cb89e14f008001be0ffff00fe4000632f77fbac141416e000000162079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

12.942078225s ago: executing program 3:
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x200000, &(0x7f0000001200), 0x0, 0x559e, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE(r0, 0x50009401, &(0x7f0000001600)={{}, "2e027fd20187e707f2c23217151d4c4507c7c085dd422660bda48e086cd2f808d5b6478c8cbea9b2ad3af2c0d89a0bb3693d4bbafc396326520398d1d306eeadbbc30061f8c77ac113c986ac3224717ffd13eb5d9385058a7f43f0bec54d7a9cfa0e9476ad1f5e3929aef800b6e05130321698ce486a9a471cb5f990a6090d5d08dbd76281074ccfcba7c541d1d90c7cda0c00db3fe016f476c4f0d8477d5a2a43b0b5996608f3285284834f76f3abc4fd6eb7bc98d25cf13ea9bf76c926015175d32ddb51f55aeb94cf79c5ae462344cb76d37e3de8268f6775462964f874cb532b06eb9e5530765b8a15c416f2c9f5d623d5d36f4e599dfe1e61ab723a38cfd8df003314b67e2497f1bb0e8ffe1c2ff51245449a41628b7d19ed163d3b8ef7c0e388c519f373534a70b19dcd3dcf73f734adaa0f56c44ba98f11293a837651846e44acda315cdbad251e91e7b45db0d2d7101ecda1b990580e8b80f770cbeefaa053ff8113c0d2c656ef14974ccd03d326d9072d8f6c124270df133679938a39ac6dcdca3fb6a36fda27694d8546d156fd3f99394266c1e5829fb6f4eda46914d2b68d41d3e00cef0dd85ffac1ec37e766cf9585332485e97d76760403dba1f42e6bb11da51fce5e6c82fdded15ae1c92fbe33baa213cae97aa116641bda9c59969d93b8103f1bf383339b9e9e416d42f9b1235acb1d899dcf6088bef22d6dbc724689d26f14e0a8fc335c16bcb28686703314e9e8abb715eb9120dc40e39e56c046cd30e8802cf0035f6edae9a27c205b9e27d0b43659bd004c3a0825e3320aa20a36407f1ca381a6b50a45023028b011c36cc34723e6e394fa695d5110b77ba96611a5b5a8ab538b26a19e44b5d2b5ba263141a8737e76555e5be78f54a3ba1bb366c6d7411a4c3431b7ae422dfcc785676a072d6609a708acfb703c330194565e3761b403798a6b2ed1da656da27dff2f4a13475e5f50e0cb9eac745ee6457cdd7cb4e46d4e34e27e2c5655340eb88cfdb31cb7ed3b8358fc2907eb2f63bda192403b0672de72aebb73ef7098b4a85a71dc73ce05b5e0e45b7a19f9c9a41df892172c4ef46f0d201ed67b69b62adc742fdf5c2f6052896873fc83180d2759b44b840944d440868fb03f660084af14293e83b65678e8a2372cc3664fb4f5a726463c7d002a92e3d2c4622dd21bba56df7679849a1d1ac1e35128447dd10908b045d722416cbbd79ea389687a8106d8f6954553084025c541a264dc2c3b75b53e803f24b4fcbeef27f22c98b6034cd767c5c3bc8a22eba95e5e6b3b2494b16b0b32419b6308132ec59a94afceed06d8a4742cd91a445c8816ec2642a6546743d1ffb15dd31925b640f462ea7978320d1f840a0c21f6afbe13f6b5a6eadf6dba255ac7f3d25b5d16abc14aae4dbc8561fd3bcb82a1c857611165af6194d9ad865ee7b3b053dbf5c3b943563c0530b00aed8d184b50d3deed849622d9570bab5947254c847bfdbebf0b6551cedefad75618e806261d0ebdba27a5145b409cde3cb2bdf794f6726c6bd5d3ca62a8bdf7ee594aa1089b8ac761435b82555b40d72d9d6948e8987ac516f53f68e4f60358793bc42fbfcef881a669be7fc94c18d7c61fc3c62ed434312924af7d4d7fa85bd1546650f35b0eb9be3b62fb527ce90deee19e0642d82da3915f69a36e6c4c44c32e78f589bf49eba8292ff8e5c0949e5783b61ae181c698e7afb88a6bf77909226902405ad152907a149cdbf23e1c324dc1854ae14d3c43e4efcba4f8d3e6a7f3229061f459db0265c2a73286e24e51dcc0349c7f861b52c38fe33f15ce3757acb6a8fbfa0e932cd58e57f0cb9bec752ce76a42fcb99e08c16cb0ed770d65c33756fb420472b78016bc346d3dfd41b779e858230d99fc806c759b9584f3f54538b78f31c69aac5250c750ecc32b4cdbef817076effc0b98e87f1ad6ec0c851c4b5c7cc57848eb042d89f1c380f21e5d0cc5bfce73940f7e1156a8248060fb2d0105a27a1ca7bcd66855e816cc027550821890e4511eedf28b839e90ce6d373fec645b22a060f3ef86e387ad20407555f508069b36f57a218a4bb3977267c66d94ecc80a2222a78bd9891394b6a66d2f48a2a926f5568f41b86d413492f68bf49a138442d40439e6a2425b06c88c8552b325642bc4fd6d0ac80056560073e827f651ec0db7c4e2a369afb625e669367a28ac6706ce1433696ccaf1416a43cdfa94b1f27664f3685d1bb72157d7577b20e9921def1460cfcd2cd806e3bafa83a3b5b4b4dac5d5f05d92d125fc295ea07ca4206b3f85a18f6f0c941d8df2f3dc57c87d9abcc7c3dbf91d7fa2f42df7b7df6371a901417507ab1093dbc0a17bca7575f4cbe6eb8151c9a6b76b04651c2c41e0bffc37708f1327ac3b204abe8af964a9cdb9997fdce64f36e606f4eb0e4564dc56ad43bb1b250ae4c64b6ba42499ee90ba37c6692f77218a49cb7ce38b3f8c8c58b3f6de5754d1b0890661145f023f83aff39d82030f4d7c1a6893b17b0379d63819c71b02a8ca450be5c97215d148812b1aeeeb0ee91534f7f83c17951140aaad6ccd8f7e5dca522139211d5f7358e32becc1d720a4ae7e08a6e48087761bbb1afbd3c4a0374d4ce65c192abefe6e4279f31249f0623490d30b8dc6094b6063ea503460e028b3ed76113bcb60b64d324d1b654d38cd64fe6384e928de69093f32c0967566cb9c65cd6c190292bbee355fb3ae73f8f51e67450018bde333435ecd18d87fe702be3f414cf0f75b6165f96ff0c2d11de264eefd28e4760b65e9e51a43a9968b74cfce50bdf200712b90c0591b258ca61f5394d68acc5ec281a5b35088aa5a78ad8978336d4bcbdfb940922fd2d09d9a2dbc2699a0d36389b08557149345bb6ff59bd01bab3701e8baf0de315bba270ef22fadccb80609e86ac75187c651e466307360e78f6ba4dd02a62d72b78ff03709375465b6f0c88b8fbcfb8d52e11866615c1bbf3d38da0b7b102e3f5cd0d8fd86d98fa7ed24a6b010b194a7a5b80fb6fb2b35e72a0c01af3042b14ff708f943849162a39bf7a501dbdff99a53ea7981a23a2ef0a5ee2cf6d8fdba31a8248adec3e753862544717db3a480534ec80e42c622f66e29bb124086e8f712a8ddad70449590653e764f98d7068664af7564608ceef80c8a1ad852632e667fd70b6d7184914e6e44eaeab7508e026a5a5c9b935130e76f962c472837f69a7f36742cac425440e337d367f82099ff8f66435fb1c2daf847e35e5e5ded5a5211ae1321a2bf2b82d60f9745464c97468c7516d54d18d7f6f9385c2aa2d6fb81894d30805c87babc2c6472f6e36a8efee06995e64408bac05bc6ca50caca126cee2ad4e527b4de778453efb3dd855249470778d280c7cce57571603a78f991ddae9690c6f9cb2f222d2441a113efdbef1e1d8786560dd6b39cc5b957185abf0ae65b2b0b1e2f2042d4d42575a3119418b5056dc5c12b0fceafa050026fecf61e746597b9717656f601fbf0c55ea1ead2484708bed524320ba1a109d705e60a53a2cafcae32c48b527cf5b2f9415ba26026164d71380ee95fbb8a467da5a686eeb618cd5591b2b975e888540f7b6b95c4b357b65c2f6a82958dd32f2fc95e1909ef5237604115b0d7202b596ac347d37595ba449e96718d7c3fc90f0970d70df061b201bdf5a0acad80c6961fac488a4b0a33a7a82ee5ffed2a772f51b023fcbdd1b0063014012f53602f2a54004f2227ff33e644dbc385fa23bb55d76ece6484a5022e86c5af75989d7b7a48a53f4a19a3007af6f66d2c17b298c81ea3b91c4da6ae0ebe908e623c6a8c8d45e6d5564c5cc873916d7a4ae0800dae31f1b43fd37585dd6a4c9bbab7bbd446001321809dc42c754db49cab3e200dfca0f5a0533aca50414c426787d5a799460bb2e4e0a4a68d447e506cf37bf76b22a9d13f15d4094ba02b3420616f85fffbc4304a27d93c7f260f1bb3a8279fa39a95966363a86c910527a1c4fae7d30423c706cfe47db865b697ed300dbc613b03accdf1ad524da027b62228bffec02ab4c765ffda774bbe4d950f25871c44ac0ebe56a3e30a827e6054eb8226e225fedf287249238c24150fb7f2eff97637bf8d88415ba133d51355880307455c09ba009b240614f1f9bbd77b9f9ca56ed1faa61d1fa1c1d366d380d67eb12a597b258fab8932b7fdb73b9452c74a4ebd0334dd580ff941447631ad9b464cf2ce346fc08cb743fd87dbed585e3218802f281c0fbff9a5fe2f3355f36f19e4bfd96262af0f8fd08f715752d79759191a249b60f05f6671eec600d29862ad71afc84f1de0c5ba6557cada7610625744ef1110d5016bb027699b3fd438978672a9aa228f68f9368036abef754fda4bd3cf9c88dddb28ae11238747b513e95c78828ab1143445077052d4699a1260c40b887b8907a8596de0ed908f1813de47c99b6fa498bc892aec67966139db8fbe6d17b3b6542da9868b5313de5b7651cda2c61aa2912951cf14d037ed1ab1ebfa9183852519c4717332f676a4fa79cc1c4c49253467195266a9edcb070e7caebc7d9f55d0ab773fcf85f089adbd6ba953f69eafec2e89dda7322041785d75895ecb46158989472f5a1bc7a28909741d0da7b11eaba264b5ff44bea22fae4ce9dc46fc71722b8153c8ac1e361f66116725bc5684b028a5d734bcbe4b8e746306ddf8512fd5fd4ed179f939cc50b8e15dfd12fbabe657d5158c31c42dc7b422ed3432b0cab81f2f5e9989ba00fc30c19141d3a97635cfe88e0d8eb5ca148b33635550f47af5d4bd06841c455b1f09c64681267b0d7a84cbd9a494b92a0fb6272f92f0f03a133f2d52ec8d94d32766607c54b955ebb8d91c34796b090b7894f36382db5f2856a63df7437d671dd815d0d313ba8f44b0d9e01d714daa4135f19089f2a3688ed2422670f54ab36f4a68626830e260c453b0d4e989f311149ebc755e984d6dd66e79b6cb394965f654cde57990a4274fd08a256c356f0dc05e608513b9b316821851c08356c1182476b085ca9b069f789601d60a8580a9d672b4b8d8b1747959b98e80b5d17501347c3c10aa52cfc7869f96890614778014baa91613767e4223c7f516cfba8b60f882ba233bd2f30b122c682ebf2f29fa1253d3c81bab5cf744d7262e4f00fc55b69caceee1d405184397d699776bdce71fd2306c1d8a70378be27cf07c000d30f8fe484eaea13b9b13ca7b3863d3233884497741ab4f2355dec89302ca459cf251c18b7d50dc0465113d8aeb44679551d0b8ea7595df9c35184b58334dfd5edd3a5a49d0d7528d130c268e07000000e015a825f821d648951619815a5a75dc06f070140e42005f670fb339cb86df0a80531005b9df0a14294d6994fb989f2ce6b1bbd82da15f03d94bea32a3272d438c2033f35e41473a5b70240d41a69076095693de5e0ccf50236588436c28e7f2b77992f2c56e7598e5500fe7c5e421dc1a0a1e2ec623bb279cedc62baa1613782d90a7cea40082ce647d3eadbbf76c4e601a78643aeed701e1a86c7dfe620bbe47e42a00b2cbd92635ed41e6a71371a5a938d7b38e6a30861b1ee2b8917cadc53bf7ad203582e051065432fadad2ec8d2435b50a08827ff89a8badb1220f59fb6606ddf5efd3a0d07f5be5fb907061adf171da7e30f6bb5aa9af9d1732d8e2b789edf0827862c742c8264c54e0b9ddf131087c08a24cda2b344ef035b6d3c57ee87f856377901e5f87bdb6a58f0e0347275868e1d9cd999a58"})

12.881910834s ago: executing program 1:
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={0xffffffffffffffff, &(0x7f0000000300)='@', 0x20000000}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000400)=' ', &(0x7f0000001400)=""/220}, 0x20)
r0 = socket$kcm(0x10, 0x2, 0x10)
ioctl$F2FS_IOC_WRITE_CHECKPOINT(r0, 0xf507, 0x0)
r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r2 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
inotify_init1(0x0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x4, &(0x7f0000001380)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\xa4y\x9e>\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\x8dr\xd5\xcd\xf2P\r.\"\x03\xa9\xab\xfa#\x01\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\x1a\x80=\xa72)\xd2\x00'/276, &(0x7f0000000000)='\x00\x00\x88', 0x0)
tkill(r2, 0xb)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0)

12.583041981s ago: executing program 1:
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffe, 0x6, 0x0, @buffer={0x2, 0x40002, &(0x7f00000000c0)=""/81}, &(0x7f0000000380)="259374c96ee3", 0x0, 0x0, 0x0, 0x0, 0x0})

12.553399525s ago: executing program 1:
r0 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000780), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200000000000800030000000000040004"], 0x7c}}, 0x0)

12.478476427s ago: executing program 1:
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b70800000000e1ff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1}, 0xc)

12.420590736s ago: executing program 1:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x20000, 0x80)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

12.383504502s ago: executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x3a)
r1 = dup(r0)
bind$unix(r1, &(0x7f00000007c0)=@abs, 0x6e)

12.320493062s ago: executing program 3:
sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16, @ANYBLOB="000426bd70000500000001"], 0x68}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r0], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a3000000000140000001100"], 0x50}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000010a0101"], 0x14}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f00000012c0)={{0x12, 0x1, 0x0, 0xf6, 0x90, 0x50, 0x40, 0x1199, 0x6850, 0x7c3b, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf, 0x3f, 0xa7}}]}}]}}, 0x0)

11.529849025s ago: executing program 1:
capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000400)={0x200000, 0x200000})
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x37}, 0x24)

10.27920962s ago: executing program 3:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x20000, 0x80)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

6.433521468s ago: executing program 3:
ioperm(0x0, 0x9, 0x5)
r0 = fsopen(&(0x7f0000000040)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
mount_setattr(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001880)={0x10001b, 0xfa, 0x0, {r1}}, 0x2c)
sendmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0)
setgroups(0x1, &(0x7f0000000a80)=[0xffffffffffffffff])

6.432091279s ago: executing program 0:
syz_usb_connect(0x2, 0x2d, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904002c11018b75000905836d"], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000100), 0x4000000, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000086d0490c0000000000001090200008d"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x40305828, &(0x7f0000000040)={0xd, "3a82000000010000000000009d"})
r0 = syz_open_dev$hidraw(&(0x7f0000002300), 0x0, 0x14a042)
syz_usb_connect(0x6, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000d1d7a444041601801f44010203010902070001000000000904926e98651acd9e0e515d333d4031285aba2f71e56b503365d2fb5ad96b0b66b0aee8ae6874d55fc9ab38a8514d8f14f89021c7d86e6c342c18d9379107e6af12cc72f7bc7d777429e5aa5c1377a491d81c7b802ae1ec6f831e4e82c88273cdfaf18146dd8c0a35864d45fab9c49a51d1e1fb7cae116fc5b513e6539cb5a376968c6ec26942e8f923b4132d64cf0b51d32f6d684f50a615686f52366ade33d7f9a5ae1f8492021b583362876dc168202bc24d1895672baceb7a58af2ca433899cf7b45673"], 0x0)
ioctl$HIDIOCGRDESC(r0, 0x4030582b, &(0x7f0000000040))

4.085315533s ago: executing program 0:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1010040, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703837342c757466383d312c756e695f786c6174653d312c73686f72746e616d653d77696e39352c73686f72746e616d653d6c6f7765722c636f6465706167653d3835372c6465160ae42e00000000746e616d653d77696e6e742c73680672746e616d653d6d697865642c726f6469722c756e695f786c6174653d312c73686f72746e616d653d6d697865642c00"], 0x3, 0x351, &(0x7f0000000900)="$eJzs3U9oY1UXAPCTvjTpDMzXLj4YFISnO0HLTMWFrlqGDgxmoxL8sxCD01Fp6kCDwc6imboRl4JLXblzoQsXsxZBEXcu3DqCjIoLnd2Ag0+SvCQvTdpphSjF328RDueek3tfGpLX1+bm5dXYvDwfV27fvhULC6Uor15YjTulWIokBq7HpMqUHABwMtzJsvg96ztiS2nGSwIAZqz3/v/qmULm7S8Pq8+8+wPAiZf//n/qsJqFgwauzmRJAMCMTVz/f2hsuDL+p/5y4b8CAICT6tkXXnxqrRbxTJouRGy906636/HkaHztSrwezdiIc7EYdyP6Jwrdm1Lv9uKl2vq5NE078dNS1Lsd7XrEVqdd758prCW9/mqcj8VYyvvzs40sy5KLn9XWz6c9EXG905s/tkrt+nyczuf//nRsxEqk8f+J/ohLtfWVNL+D+tagvxOxN7pu0V3/cizGt6/E1WjG5ej2Dk5rauu759P0QlYb62/Xq726vgOvgAAAAAAAAAAAAAAAAAAAAAAAwN+ynA4tDfe/yUb79ywvTxnv7Y/T78/3B9rr7w+UVbPIst/eerT+bhJj+wPt35+nXS/HnO8SAAAAAAAAAAAAAAAAAAAAgJ7WTiUazebGdmvn2mYx6Gy3duYiopt54+tPvjgVkzX3CMr5HIWhNE9d22xkyaA4S8Zq8iDpTj7IfHxjuOJiTXV4FFOXUT14qNk88+CPH4wyDySDe/5zVJPE9ANM9i2jGGz9r7+k4zxQw2DlHjU3syw7qH33pcmuKEWUj/+DOzzIusFXt16777HW2cd7mc+zvocfWXzu5vsf/bLZaEa+t0OzWdlu3c02G4O9Ho45aTJ6/swNHtVS8ZlQPqx9bzzTSL779fn73/vmaLNnxcybEzURSf9wPt0/VOkH3WXuGzo1ba75KU/+GQRnP1xt3Nj94eejdhVeJOZm+AIEAAAAAAAAAAAAAAAAAAAMFT4rnss/7Dt/WNcTT89+ZQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwzxl9/38h2JvIHCX4oxOTQ9WN7VZE5d8+TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/uP+CgAA///Jq2y4")
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./bus\x00', 0x3000002, &(0x7f0000000580)={[{@uid}, {@file_umask={'file_umask', 0x3d, 0x1}}, {@part={'part', 0x3d, 0xc3}}, {@part={'part', 0x3d, 0xa5ef}}, {@creator={'creator', 0x3d, "a0a54db3"}}, {@part={'part', 0x3d, 0xfff}}, {@gid}, {@uid}, {@codepage={'codepage', 0x3d, 'iso8859-5'}}, {@dir_umask={'dir_umask', 0x3d, 0x2}}, {@codepage={'codepage', 0x3d, 'cp737'}}]}, 0x1, 0x2f2, &(0x7f00000006c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89fd, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x12}})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='huge=always,mpol=interleave'])
chdir(&(0x7f0000000140)='./file0\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)
sendfile(r2, r1, &(0x7f0000002080)=0x64, 0x23b)

3.611837258s ago: executing program 0:
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x4b40, 0xfffffffffffffffc)

3.537624239s ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x91, &(0x7f0000000000)=""/145}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945ff15d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26765ba5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f79f361879473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a0578442926ef4e912f01a201e694e3806e8c8fe8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c58eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f7faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4a189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbdf8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315878f88a8fb1dd679fb4c5557abae6849917dc51a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304165d39fd4afe683b2467c60e5b8eae897c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d9447c4df6e21ee0e54f8be072e0b083bbd86b19cb074577a25ff581d92af08a06f857311a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e9efb3e1e7a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x2}, 0x10}, 0x48)
r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000006c0), 0x0, 0x0)
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x149142, 0x0)
pwritev2(r3, &(0x7f00000000c0)=[{&(0x7f00000001c0)="06", 0x1}], 0x1, 0x3fffff, 0x0, 0x0)
ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611)
ftruncate(r3, 0x3)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x8, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0xcf8}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xc6, 0x0, 0x0, 0x0, 0x8}, @exit, @map_idx_val={0x18, 0xf, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000580)='GPL\x00', 0xd5, 0x5e, &(0x7f00000005c0)=""/94, 0x40f00, 0x9c708e4a6440be4e, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000640)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000680)={0x4, 0x8, 0xf8000000, 0x22}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000d40)=[0xffffffffffffffff, r2, r1, r3]}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0xfeffff, 0x1f0, 0x3f000002, &(0x7f0000000700)="c45c57ce395de5b289f07d637a223920f181c2e57d71483cfb2d075a3fa67258e080a194805cdb0c26d3f7ffb1e0d9cf4fa36dcb2168b72de48ac8f93e6804f1c4d70898d0810e044d7e1778eaac5dfdcc9f1208905522025bcfdf1b6f969b094d5c022c2b7ffefde71e0627b9a2069cc1e0175c4b8860aad4b0a103c589f676b6c4e85eb3950c533b6e62c39ccf9ae9bfe54ee5887358d44f46337fbe090d7c7e55847edee8130ffd3d1e719e01a68b0e691c0d35b0b56e0b514036342fd56f08ac0083f3c2fe41a1295a3d23cf3d160d4fd90f66beba68860456ed41272e1e68d16c2564c85f5556e18784113c493d13253e14d6eb891707fba3c30d07d5ee8619e4426cafec4cf6a3723c455d09b586b248", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='dax_writeback_one\x00', r1}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x149142, 0x0)
pwritev2(r6, &(0x7f00000000c0)=[{&(0x7f00000001c0)="06", 0x1}], 0x1, 0x3fffff, 0x0, 0x0)
ftruncate(r6, 0x3)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ec0)={&(0x7f0000000e80)='afs_make_fs_call\x00', r6}, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r7=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x1f00, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xfb00}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x44}}, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)=@newneigh={0x40, 0x1c, 0x200, 0x70bd26, 0x25dfdbfc, {0x2, 0x0, 0x0, r7, 0x8, 0x23}, [@NDA_PORT={0x6, 0x6, 0x4e23}, @NDA_DST_IPV4={0x8, 0x1, @multicast1}, @NDA_PORT={0x6, 0x6, 0x4e22}, @NDA_LLADDR={0xa, 0x2, @link_local}]}, 0x40}, 0x1, 0x0, 0x0, 0x8040}, 0x20000001)
socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8911, &(0x7f00000002c0))
r8 = socket$netlink(0x10, 0x3, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = syz_open_dev$radio(&(0x7f0000000e00), 0x3, 0x2)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r10, 0x4020565a, &(0x7f0000000e40)={0x1, 0x1, 0x2})
ioctl$ifreq_SIOCGIFINDEX_team(r9, 0x8933, &(0x7f0000000040)={'team0\x00', <r11=>0x0})
sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000380)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x1c, 0x2, 0x0, 0x1, {{0x8, 0x5}, {0x8}, [@IFLA_GTP_FD1={0x8}]}}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x50}}, 0x0)

3.324901842s ago: executing program 0:
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = open(&(0x7f0000000000)='.\x00', 0x20000, 0x80)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
add_key$keyring(0x0, &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

2.467576536s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x12, 0x4, 0x4, 0xc}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000004c0)={r0, &(0x7f0000000a00), 0x0}, 0x20)

1.776541213s ago: executing program 4:
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$FIOCLEX(r1, 0x5451)
r2 = fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mknodat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
linkat(r2, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000000)='sync\x00', 0x0, 0x0)

1.189688555s ago: executing program 4:
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$F2FS_IOC_MOVE_RANGE(r1, 0x541b, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
close_range(r2, 0xffffffffffffffff, 0x0)
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$xdp(0x2c, 0x3, 0x0)
recvfrom$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.148241151s ago: executing program 4:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000079120800000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.127259834s ago: executing program 4:
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f0000000240)={[{@nobarrier}, {@nossd}, {}, {@nobarrier}, {@clear_cache}, {@compress}, {@barrier}, {@skip_balance}, {@compress_algo={'compress', 0x3d, 'no'}}, {@enospc_debug}]}, 0x3, 0x55a3, &(0x7f000000ac00)="$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")
r1 = open(&(0x7f0000000200)='./bus\x00', 0x141a42, 0x0)
sendfile(r1, r0, 0x0, 0x100800001)

652.145168ms ago: executing program 4:
r0 = socket(0x200000100000011, 0x803, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14)
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="82570ee7ff072d2200000e210806000108"], 0x120)

288.821595ms ago: executing program 4:
syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"/297], 0x1, 0x5519, &(0x7f0000005d00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
open(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
epoll_create1(0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100), 0x1, 0x782, &(0x7f0000000f40)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0xfffffffffffffffe, 0x3c)

196.221279ms ago: executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000006c0)={'batadv0\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000026c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002680)={&(0x7f0000000700)={0x18cc, r2, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x124c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x13c, 0x3, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mpls\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mpls\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mpls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}, {0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '@,)#\xa6}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ']\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mpls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x1004, 0x4, "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"}, @ETHTOOL_A_BITSET_BITS={0x104, 0x3, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x95}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mpls\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '(+\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x518b}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, ':\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mpls\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x100, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8000}, @ETHTOOL_A_BITSET_MASK={0x5b, 0x5, "0842ac3800f79be3ee1ea63dd9dc69c32cbf5c709f52f79019c02a53ca8d951b2e708bbabb546f881372aedee430fb09eb7d073a728db7264b890e600b34226a7984774f33606d3f77f2663987897f033754133c681e0f"}, @ETHTOOL_A_BITSET_BITS={0x98, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '\'@\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mpls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfd}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa9}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xe0, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x28}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xcb, 0x5, "4a617235f459eb299b9477decc8ba80f846c68a2fa9cbad7b93116334e9b7f8e9f208bc49f4cc727a13675a8e0412b81a31fec2c2140c60c722d74b7b39023924263bb3dea45973076b60262f734e9a48af980ba9b323d55e5727b84a3f08373b368746557edf0678ec1623b25a9c0e198dc0a4a2f79e48ee1194fab4c9ae7b8cd924663e2e42cb7b2cde8dd52b3f1e60e2012fde3a400643f107e383fea3197f306747b924268ca9aa7cec18c235271e6f17fa04cc5be37fe50086d76039a2fcadf0d6e28f267"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xd4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffff}, @ETHTOOL_A_BITSET_BITS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x100}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '}\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xd52}]}]}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_MASK={0x84, 0x5, "d471913a58df869c762a820faa6add26a4916462350450e07d793338ac56750a53a18e5be4436d4b7802cb772eecc929c82b80a2806932a7765bb1440ac8fb3e727750ec00fbf223e4e1f3e067cc91747ae691f8b64e6211def040f0a62d6516f64c7d8af366dc08cec24705e66eb66da71c1e227d03b2c87c225db3fbb14b91"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x58, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x36, 0x5, "c8eaf927e2091b8e5648239e059d0614820f75ef8d559d322c3b998eb234a1be0369deb356e464798c85ed8291c6e5d26596"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x324, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x57, 0x5, "5dc203bb1d2e518183cc4bb1533dfcf8e4608ceb4d7db3b013c929a6c8de157fecb67b456e19661c2e827f931e5b47571055f2fa385adcbe021283519ce275ef2ca6d526a7dbbdeee510e99ca4aeb1f7874a3b"}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x800}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0xaf, 0x4, "60e4d251682cd6dca1d0944d9075ef5711c0d0a1b06989bb5afdda69cc632d4a94e66903fa4ebd1ff5e422ebaaf4519dff0a953f4e7f99c57a4501d3295fe54cb4bbbdf792205aee260b0d002b9abd6372932c502373be21e0d61277e04c1cfe3b251d62d268f8d4745912f72c315a4d64b20bc96ec23a4ef25a6871cd3cea4e82195a68f21d4b25b4d707b32980a87cbd1bd60044bde088e3172976e5755fbdcba21f72c967e4b2860139"}, @ETHTOOL_A_BITSET_VALUE={0xbe, 0x4, "60afbb2dad0e7bf8cf585cd9ecb0c1237c9f093e1e733bd4ff0b6b9086f51bee63e4e30824e0ff093f3e9b8f8f8590e3ba4e56ef6bb2bf473c6bfce9d5de41c2cb3aa027be5e5c4682088feb0cd984273bc082c8f0002e88d43dbfaf9180dca6bf7d3d984eca2a65e1248add1ce58782f7096ce3531202b987e269816759b1c6452012f031819409754eda0d96508134839f799c4462584db2c20ea9b50dfdcc5158d98762525fbff5426f559b8d76060d03d3382b37b70662b7"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}, @ETHTOOL_A_BITSET_BITS={0xa4, 0x3, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}]}, {0x4}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, ',-\x00'}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, 'mpls\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xfff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_VALUE={0x62, 0x4, "fbe49a6d7f66ec905b22ec49465274a17ac6397123c4356f4a0924315a1269acf91b4a217f60af1dda1ece51cd2156c90057146d1cc853b27672efbab0e1952543668aa7616de29fa2c1055e3ef32f5443d2e545f29f37d6aeb33dc1e691"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xffffffe0}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x18cc}, 0x1, 0x0, 0x0, 0x40040}, 0x48001)
syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_TTL={0x5, 0x7, 0x6}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0)

174.180562ms ago: executing program 2:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@getnexthop={0x28, 0x76, 0xb0d, 0x0, 0x0, {0x3}, [@NHA_MASTER={0x8, 0xa, 0x81000000}, @NHA_OIF={0x8}]}, 0x28}}, 0x0)

152.136556ms ago: executing program 2:
r0 = fsopen(&(0x7f0000000100)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
ioctl$FIOCLEX(r1, 0x5451)
r2 = fsmount(r0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
mknodat(r2, &(0x7f0000000180)='./file0\x00', 0x0, 0x0)
linkat(r2, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={<r3=>0xffffffffffffffff})
r4 = dup(r3)
epoll_wait(r4, &(0x7f0000000080)=[{}], 0x1, 0x0)
fsconfig$FSCONFIG_SET_FLAG(r4, 0x0, &(0x7f0000000000)='sync\x00', 0x0, 0x0)

126.51234ms ago: executing program 2:
mknod(&(0x7f0000000000)='./bus\x00', 0x1000, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0)
write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef)
r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
r2 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
fcntl$setstatus(r2, 0x4, 0x6800)
splice(r1, 0x0, r2, 0x0, 0x4, 0x0)

90.490436ms ago: executing program 2:
r0 = timerfd_create(0x0, 0x0)
readv(r0, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1)
r1 = socket$inet_mptcp(0x2, 0x1, 0x106)
shutdown(r1, 0x1)
r2 = syz_io_uring_setup(0xf00, &(0x7f0000000200), &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x2, 0x0, 0x0, 0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000003a80)={{0x0, 0x989680}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000})

0s ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_TRANSLATE(r2, 0xc018ae85, &(0x7f0000000200))

kernel console output (not intermixed with test programs):

 3
[  186.341206][ T6884] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  186.350763][ T6884] BTRFS info (device loop2): use lzo compression, level 0
[  186.364696][ T6884] BTRFS info (device loop2): turning on flush-on-commit
[  186.374029][ T6884] BTRFS info (device loop2): enabling auto defrag
[  186.380639][ T6884] BTRFS info (device loop2): using free space tree
[  186.391448][ T6884] BTRFS info (device loop2): has skinny extents
[  186.407451][ T3615] team0 (unregistering): Port device team_slave_1 removed
[  186.423644][ T3615] team0 (unregistering): Port device team_slave_0 removed
[  186.442545][ T3615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.459609][ T3615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  186.501128][ T6884] BTRFS info (device loop2): enabling ssd optimizations
[  186.564178][ T3615] bond0 (unregistering): Released all slaves
[  186.794188][ T3523] bridge0: port 3(syz_tun) entered disabled state
[  186.825053][ T3523] device syz_tun left promiscuous mode
[  186.830599][ T3523] bridge0: port 3(syz_tun) entered disabled state
[  187.450482][ T6918] hub 9-0:1.0: USB hub found
[  187.473181][ T6918] hub 9-0:1.0: 8 ports detected
[  188.240399][ T3569] usb 2-1: USB disconnect, device number 7
[  188.344996][ T6933] loop0: detected capacity change from 0 to 256
[  188.483882][ T6933] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  188.496332][ T4687] usb 2-1-port2: config error
[  188.866489][   T26] audit: type=1326 audit(1718774307.629:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52e77cf29 code=0x7fc00000
[  188.889962][ T6933] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  189.049627][ T6923] loop2: detected capacity change from 0 to 32768
[  189.068564][ T6939] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 125 (only 8 groups)
[  189.117349][ T6923] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6923)
[  189.317542][ T6923] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  189.336290][ T6923] BTRFS info (device loop2): using free space tree
[  189.399625][ T6923] BTRFS info (device loop2): has skinny extents
[  189.723495][ T6947] hub 9-0:1.0: USB hub found
[  189.764950][ T6947] hub 9-0:1.0: 8 ports detected
[  191.252835][ T6943] chnl_net:caif_netlink_parms(): no params data found
[  191.354068][ T4687] Bluetooth: hci0: command 0x0409 tx timeout
[  191.366629][ T6970] loop1: detected capacity change from 0 to 4096
[  191.462805][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  191.500710][ T6923] BTRFS error (device loop2): open_ctree failed
[  191.639584][ T6970] ntfs3: loop1: mft corrupted
[  191.644424][ T6970] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  191.672052][ T6970] ntfs3: loop1: mft corrupted
[  191.681712][ T6943] bridge0: port 1(bridge_slave_0) entered blocking state
[  191.705738][ T6943] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.715509][ T6988] loop0: detected capacity change from 0 to 64
[  191.755079][ T6943] device bridge_slave_0 entered promiscuous mode
[  191.794511][ T6943] bridge0: port 2(bridge_slave_1) entered blocking state
[  191.831361][ T6943] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.861662][ T6943] device bridge_slave_1 entered promiscuous mode
[  191.914035][ T6988] hfs: request for non-existent node 1291 in B*Tree
[  191.944176][ T6988] hfs: request for non-existent node 1291 in B*Tree
[  191.958084][ T6943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  192.014385][ T6943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  192.052289][  T154] hfs: request for non-existent node 1291 in B*Tree
[  192.059532][  T154] hfs: request for non-existent node 1291 in B*Tree
[  192.077122][  T154] hfs: request for non-existent node 1291 in B*Tree
[  192.093809][  T154] hfs: request for non-existent node 1291 in B*Tree
[  192.121605][ T6943] team0: Port device team_slave_0 added
[  192.147365][ T6998] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
[  192.168492][ T6943] team0: Port device team_slave_1 added
[  192.230868][ T6997] loop1: detected capacity change from 0 to 24
[  192.282703][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_0
[  192.298010][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.405397][ T6943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  192.449216][ T6943] batman_adv: batadv0: Adding interface: batadv_slave_1
[  192.477340][ T6943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  192.538973][ T6943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  192.647429][ T6943] device hsr_slave_0 entered promiscuous mode
[  192.668707][ T6943] device hsr_slave_1 entered promiscuous mode
[  192.703997][   T26] audit: type=1800 audit(1718774311.539:238): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0
[  192.725250][ T6943] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  192.731641][ T7012] tmpfs: Bad value for 'mpol'
[  192.745941][ T7010] loop1: detected capacity change from 0 to 1024
[  192.747761][   T26] audit: type=1800 audit(1718774311.559:239): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1952 res=0 errno=0
[  192.781725][ T6943] Cannot create hsr debugfs directory
[  192.860883][ T7010] EXT4-fs (loop1): mounted filesystem without journal. Opts: user_xattr,init_itable=0x0000000000000003,discard,max_batch_time=0x0000000004000000,block_validity,i_version,bsddf,min_batch_time=0x0000000000000008,max_batch_time=0x0000000000000006,noquota,stripe=0x00000000000000ff,discard,errors=continue. Quota mode: none.
[  193.002340][ T6943] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.108937][ T6943] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.214007][ T6943] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.405161][ T6943] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.412333][ T4685] Bluetooth: hci0: command 0x041b tx timeout
[  193.494237][ T7028] loop0: detected capacity change from 0 to 256
[  193.677719][ T6943] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  193.723756][ T6943] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  193.758361][ T6943] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  193.783405][ T6943] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  194.011174][ T6943] 8021q: adding VLAN 0 to HW filter on device bond0
[  194.053173][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  194.076688][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  194.096265][ T6943] 8021q: adding VLAN 0 to HW filter on device team0
[  194.118119][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  194.161727][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  194.183778][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state
[  194.190952][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  194.205559][ T7043] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  194.218346][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  194.224832][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  194.224910][ T7043] device vlan2 entered promiscuous mode
[  194.241223][ T7043] device batadv0 entered promiscuous mode
[  194.251048][ T7043] device batadv0 left promiscuous mode
[  194.289768][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  194.305903][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  194.315178][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  194.325488][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state
[  194.332610][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state
[  194.344132][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  194.372429][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  194.392191][ T4339] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  194.429020][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  194.444888][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  194.458678][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  194.483758][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  194.500784][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  194.510693][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  194.527879][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  194.555516][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  194.574309][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  194.608465][ T6943] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  194.661123][ T4339] usb 3-1: Using ep0 maxpacket: 16
[  194.738751][ T7060] EXT4-fs warning (device sda1): verify_group_input:147: Cannot add at group 125 (only 8 groups)
[  194.791381][ T4339] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.817242][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  194.841163][ T4339] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  194.871775][ T4339] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  194.936674][ T7040] chnl_net:caif_netlink_parms(): no params data found
[  194.948208][ T4339] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.493079][ T4683] Bluetooth: hci0: command 0x040f tx timeout
[  195.714685][ T7072] trusted_key: encrypted_key: insufficient parameters specified
[  195.751636][ T4339] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  195.760719][ T4339] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  195.768972][ T4339] usb 3-1: Manufacturer: syz
[  195.786217][ T4339] usb 3-1: config 0 descriptor??
[  195.793527][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  195.811309][ T4683] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  195.882325][ T6943] 8021q: adding VLAN 0 to HW filter on device batadv0
[  195.930737][ T3615] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  195.971535][ T7082] netlink: 'syz-executor.3': attribute type 10 has an invalid length.
[  196.004874][ T7082] bond0: (slave bond_slave_0): Releasing backup interface
[  196.110275][ T7040] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.129218][ T7040] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.164448][ T7040] device bridge_slave_0 entered promiscuous mode
[  196.191035][ T4339] rc_core: IR keymap rc-hauppauge not found
[  196.194254][ T3615] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.211150][ T4339] Registered IR keymap rc-empty
[  196.211145][ T4683] Bluetooth: hci2: command 0x0409 tx timeout
[  196.226709][ T7040] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.241677][ T7040] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.261087][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.278106][ T7040] device bridge_slave_1 entered promiscuous mode
[  196.331118][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.338928][ T3615] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.371624][ T4339] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  196.388874][ T4339] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9
[  196.419748][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.434952][ T7040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.446089][ T7093] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  196.461188][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.501134][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.521290][ T3615] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  196.551477][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.562481][ T7040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.581046][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.631158][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.644187][ T7040] team0: Port device team_slave_0 added
[  196.671256][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.705627][ T7040] team0: Port device team_slave_1 added
[  196.720688][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  196.731195][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.739549][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  196.771186][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.818926][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.826783][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.837956][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.871247][ T4339] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.879334][ T7040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.891669][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  196.900092][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  196.914468][ T4339] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  196.933204][ T7040] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.941293][ T4339] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  196.950486][ T7040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.963370][ T4339] usb 3-1: USB disconnect, device number 6
[  196.994724][ T7040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  197.040613][ T6943] device veth0_vlan entered promiscuous mode
[  197.057000][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  197.075565][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  197.164930][ T6943] device veth1_vlan entered promiscuous mode
[  197.208823][ T4685] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  197.219034][ T7118] loop0: detected capacity change from 0 to 64
[  197.230202][ T7116] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  197.263610][ T7040] device hsr_slave_0 entered promiscuous mode
[  197.273042][ T7040] device hsr_slave_1 entered promiscuous mode
[  197.279805][ T7040] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  197.288542][ T7040] Cannot create hsr debugfs directory
[  197.365628][ T7118] MINIX-fs: bad superblock or unable to read bitmaps
[  197.385375][ T7125] overlayfs: failed to resolve './file0': -2
[  197.406877][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  197.422208][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  197.432647][ T6943] device veth0_macvtap entered promiscuous mode
[  197.495180][ T6943] device veth1_macvtap entered promiscuous mode
[  197.580257][ T4687] Bluetooth: hci0: command 0x0419 tx timeout
[  197.697467][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.718453][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.749165][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.769575][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.789878][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.805451][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.819539][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.844087][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.863598][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.883035][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.930403][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.976450][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  197.994121][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  198.023988][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  198.055670][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  198.133570][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.151468][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.181154][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.211758][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.224476][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.272774][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.290994][ T3517] Bluetooth: hci2: command 0x041b tx timeout
[  198.327276][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.352006][ T7134] loop2: detected capacity change from 0 to 40427
[  198.358084][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.368614][ T6943] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  198.381703][ T6943] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  198.402083][ T6943] batman_adv: batadv0: Interface activated: batadv_slave_1
[  198.444196][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  198.452684][ T7134] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  198.460462][ T7134] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  198.473818][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  198.493273][ T7134] F2FS-fs (loop2): invalid crc value
[  198.541562][ T6943] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  198.560884][ T6943] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  198.570406][ T6943] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  198.589485][ T6943] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  198.600512][ T7134] F2FS-fs (loop2): Found nat_bits in checkpoint
[  198.771541][ T7134] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  198.779777][ T7134] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  198.938301][ T6673] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  198.982033][ T6673] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  198.996357][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  199.026976][  T157] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  199.089491][  T157] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  199.124952][ T7134] attempt to access beyond end of device
[  199.124952][ T7134] loop2: rw=2049, want=45104, limit=40427
[  199.145612][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  199.153801][ T7134] attempt to access beyond end of device
[  199.153801][ T7134] loop2: rw=2049, want=77928, limit=40427
[  199.249420][ T7134] attempt to access beyond end of device
[  199.249420][ T7134] loop2: rw=10241, want=45120, limit=40427
[  199.252699][ T7040] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  199.293350][ T7040] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  199.354536][ T7040] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  199.428872][ T7040] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  199.545108][ T3726] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  199.818342][ T3615] device hsr_slave_0 left promiscuous mode
[  199.835963][ T3615] device hsr_slave_1 left promiscuous mode
[  199.890647][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.908544][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.943535][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.951884][ T3726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.972124][ T3726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.004803][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.012952][ T3726] usb 5-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice=80.00
[  200.026812][ T3726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.037939][ T3726] usb 5-1: config 0 descriptor??
[  200.056000][ T3615] device bridge_slave_1 left promiscuous mode
[  200.063072][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state
[  200.072022][ T3615] device bridge_slave_0 left promiscuous mode
[  200.086614][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.109573][ T3615] device hsr_slave_0 left promiscuous mode
[  200.116479][ T3615] device hsr_slave_1 left promiscuous mode
[  200.123471][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.132505][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  200.142246][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.149711][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  200.160293][ T3615] device bridge_slave_0 left promiscuous mode
[  200.178209][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.227261][ T3615] device veth1_macvtap left promiscuous mode
[  200.241312][ T3615] device veth0_macvtap left promiscuous mode
[  200.244873][ T7174] loop2: detected capacity change from 0 to 4096
[  200.247698][ T3615] device veth1_vlan left promiscuous mode
[  200.268705][ T3615] device veth0_vlan left promiscuous mode
[  200.271271][ T4685] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  200.307008][ T3615] device dummy0 left promiscuous mode
[  200.320743][ T3615] device veth1_macvtap left promiscuous mode
[  200.327956][ T3615] device veth0_macvtap left promiscuous mode
[  200.335899][ T3615] device veth1_vlan left promiscuous mode
[  200.342928][ T3615] device veth0_vlan left promiscuous mode
[  200.367941][ T7174] ntfs3: loop2: mft corrupted
[  200.371102][ T4683] Bluetooth: hci2: command 0x040f tx timeout
[  200.372742][ T7174] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  200.444754][ T7174] ntfs3: loop2: mft corrupted
[  200.524742][ T4685] usb 4-1: Using ep0 maxpacket: 16
[  200.536530][ T3726] wacom 0003:056A:032C.0001: item fetching failed at offset 0/2
[  200.567279][ T3726] wacom 0003:056A:032C.0001: parse failed
[  200.576589][ T3726] wacom: probe of 0003:056A:032C.0001 failed with error -22
[  200.647418][ T4685] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  200.671448][ T4685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  200.701048][ T4685] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  200.720548][ T4685] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  200.740723][ T7182] loop0: detected capacity change from 0 to 32768
[  200.747936][ T4685] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  200.761656][ T4687] usb 5-1: USB disconnect, device number 7
[  200.777444][ T7182] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7182)
[  200.825916][ T7182] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  200.835172][ T7182] BTRFS info (device loop0): using free space tree
[  200.841281][ T4685] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  200.844535][ T7182] BTRFS info (device loop0): has skinny extents
[  200.869374][ T4685] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  200.878453][ T4685] usb 4-1: Manufacturer: syz
[  200.886006][ T4685] usb 4-1: config 0 descriptor??
[  200.960352][ T3615] team0 (unregistering): Port device team_slave_1 removed
[  200.975817][ T3615] team0 (unregistering): Port device team_slave_0 removed
[  200.983188][ T7182] BTRFS info (device loop0): enabling ssd optimizations
[  200.990824][ T3615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  201.017382][ T3615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  201.259576][ T3615] bond0 (unregistering): Released all slaves
[  201.371494][ T4685] rc_core: IR keymap rc-hauppauge not found
[  201.377478][ T4685] Registered IR keymap rc-empty
[  201.377804][ T3615] bond2 (unregistering): (slave veth7): Releasing backup interface
[  201.382518][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.411403][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.442954][ T4685] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  201.443707][ T3615] bond2 (unregistering): Released all slaves
[  201.476408][ T4685] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input10
[  201.496587][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.533550][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.541159][ T3615] bond1 (unregistering): (slave veth3): Releasing backup interface
[  201.571309][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.580156][ T3615] bond1 (unregistering): Released all slaves
[  201.591297][ T3726] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  201.602868][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.631291][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.661236][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.703672][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.741261][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.781125][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.821138][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.852002][ T3726] usb 5-1: Using ep0 maxpacket: 32
[  201.861234][ T4685] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  201.893122][ T4685] mceusb 4-1:0.0: Registered  with mce emulator interface version 1
[  201.914140][ T4685] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  201.959476][ T4685] usb 4-1: USB disconnect, device number 9
[  201.982611][ T3726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  202.003211][ T3615] team0 (unregistering): Port device team_slave_1 removed
[  202.041615][ T3726] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  202.053331][ T3726] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  202.062464][ T3726] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.076324][ T3726] usb 5-1: config 0 descriptor??
[  202.086902][ T3615] team0 (unregistering): Port device team_slave_0 removed
[  202.106212][ T7205] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  202.116339][ T3615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.149775][ T3615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.162643][ T3726] hub 5-1:0.0: USB hub found
[  202.381384][ T3726] hub 5-1:0.0: 2 ports detected
[  202.425873][ T3615] bond0 (unregistering): Released all slaves
[  202.453093][ T4685] Bluetooth: hci2: command 0x0419 tx timeout
[  202.612735][ T7040] 8021q: adding VLAN 0 to HW filter on device bond0
[  202.632917][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  202.642873][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  202.657217][ T7040] 8021q: adding VLAN 0 to HW filter on device team0
[  202.677335][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'.
[  202.729312][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  202.739634][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  202.748505][ T4339] bridge0: port 1(bridge_slave_0) entered blocking state
[  202.755816][ T4339] bridge0: port 1(bridge_slave_0) entered forwarding state
[  202.761869][ T7233] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  202.800330][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  202.809708][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  202.819297][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  202.827957][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state
[  202.835090][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state
[  202.843077][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  202.851998][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  202.877395][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  202.897178][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  202.911715][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  202.916968][ T7242] IPv6: addrconf: prefix option has invalid lifetime
[  202.928567][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  202.944947][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  202.964767][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  203.000247][ T7040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  203.030201][ T7040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  203.052315][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  203.060346][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  203.069595][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  203.650503][ T7040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  203.695854][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  203.723147][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  203.827732][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  203.847210][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  203.889828][ T7240] loop0: detected capacity change from 0 to 32768
[  203.930043][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  203.957567][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  203.993903][ T7040] device veth0_vlan entered promiscuous mode
[  204.052169][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  204.060313][ T4636] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  204.096408][ T7040] device veth1_vlan entered promiscuous mode
[  204.174304][ T1068] usb 5-1: USB disconnect, device number 8
[  204.192696][ T7240] XFS (loop0): Mounting V5 Filesystem
[  204.309533][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  204.332882][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  204.361812][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  204.392361][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  204.417766][ T7040] device veth0_macvtap entered promiscuous mode
[  204.451348][ T7240] XFS (loop0): Ending clean mount
[  204.461540][ T4339] usb 5-1-port2: config error
[  204.492189][ T7040] device veth1_macvtap entered promiscuous mode
[  204.535553][ T7240] XFS (loop0): Quotacheck needed: Please wait.
[  204.642509][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  204.696628][ T7240] XFS (loop0): Quotacheck: Done.
[  204.712150][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  204.766289][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.012340][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  205.862557][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  205.991263][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.007029][ T7277] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  206.040978][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  206.072021][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.100464][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  206.119523][ T7279] IPv6: addrconf: prefix option has invalid lifetime
[  206.182017][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  206.192577][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  206.211579][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  206.232579][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  206.261636][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.310704][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.338991][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.366989][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.398412][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.451475][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.498863][ T7040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  206.550152][ T7040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  206.594183][ T6043] XFS (loop0): Unmounting Filesystem
[  206.618443][ T7040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  206.684044][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  206.710025][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  206.745616][ T7040] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  206.785154][ T7040] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  206.820059][ T7040] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  206.840344][ T7040] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  207.198722][ T4126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.250954][ T4126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  207.494379][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  207.622326][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  207.980171][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  208.091353][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  208.313061][ T7304] loop1: detected capacity change from 0 to 256
[  208.418497][ T7304] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x421408f7, utbl_chksum : 0xe619d30d)
[  208.436755][ T7309] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'.
[  208.451606][ T7304] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  209.790909][    C0] sched: RT throttling activated
[  210.156983][ T7335] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[  210.209135][ T7342] overlayfs: missing 'lowerdir'
[  210.309930][   T26] audit: type=1326 audit(1718774329.139:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7faf6f29 code=0x7ffc0000
[  210.396921][   T26] audit: type=1326 audit(1718774329.149:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f3b7faf6f29 code=0x7ffc0000
[  210.408505][ T7355] loop2: detected capacity change from 0 to 16
[  210.459321][ T7325] loop0: detected capacity change from 0 to 512
[  210.472663][   T26] audit: type=1326 audit(1718774329.149:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7faf6f29 code=0x7ffc0000
[  210.547297][   T26] audit: type=1326 audit(1718774329.179:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7348 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3b7faf6f29 code=0x7ffc0000
[  210.553353][ T7355] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  210.622836][ T7325] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  210.653093][ T7325] ext4 filesystem being mounted at /root/syzkaller-testdir3727945735/syzkaller.pmq15Y/70/file0 supports timestamps until 2038 (0x7fffffff)
[  210.670820][   T26] audit: type=1326 audit(1718774329.509:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7362 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc52e77cf29 code=0x0
[  210.697821][ T7370] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'.
[  211.754111][ T7378] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  211.867979][   T26] audit: type=1326 audit(1718774330.699:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce48b7f29 code=0x7ffc0000
[  211.951560][ T7391] loop0: detected capacity change from 0 to 1024
[  211.964258][   T26] audit: type=1326 audit(1718774330.699:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=82 compat=0 ip=0x7f4ce48b7f29 code=0x7ffc0000
[  212.008104][   T26] audit: type=1326 audit(1718774330.699:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce48b7f29 code=0x7ffc0000
[  212.062588][ T7391] hfsplus: unable to parse mount options
[  212.068401][   T26] audit: type=1326 audit(1718774330.739:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7385 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce48b7f29 code=0x7ffc0000
[  212.086887][ T7395] loop4: detected capacity change from 0 to 64
[  212.306591][ T7395] MINIX-fs: bad superblock or unable to read bitmaps
[  212.310822][ T7391] ntfs3: nbd0: try to read out of volume at offset 0x0
[  213.305692][ T7406] overlayfs: missing 'lowerdir'
[  213.404144][   T26] audit: type=1800 audit(1718774332.239:249): pid=7415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1949 res=0 errno=0
[  215.126715][ T7441] netlink: 'syz-executor.3': attribute type 30 has an invalid length.
[  215.238866][ T7420] fscrypt (sda1, inode 1944): Missing crypto API support for AES-128-CTS-CBC (API name: "cts(cbc(aes))")
[  215.246200][ T7443] loop1: detected capacity change from 0 to 1024
[  215.274313][ T7420] fscrypt (sda1, inode 1944): Missing crypto API support for AES-128-CTS-CBC (API name: "cts(cbc(aes))")
[  215.304963][ T7443] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  215.327810][ T7443] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (42840!=20869)
[  215.417586][ T7443] EXT4-fs error (device loop1): ext4_get_journal_inode:5159: inode #5: comm syz-executor.1: casefold flag without casefold feature
[  215.432271][ T7443] EXT4-fs error (device loop1): ext4_get_journal_inode:5159: inode #5: comm syz-executor.1: unexpected EA_INODE flag
[  215.445334][ T7443] EXT4-fs (loop1): no journal found
[  215.571144][ T3540] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  215.603991][ T7460] loop1: detected capacity change from 0 to 47
[  215.961190][ T3540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.990617][ T3540] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  216.038992][ T3540] usb 4-1: New USB device found, idVendor=056a, idProduct=00ed, bcdDevice= 0.00
[  216.051232][ T3540] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.106856][ T3540] usb 4-1: config 0 descriptor??
[  216.125970][ T7457] loop2: detected capacity change from 0 to 32768
[  216.148613][ T7465] loop0: detected capacity change from 0 to 512
[  216.189646][ T7457] XFS (loop2): Mounting V5 Filesystem
[  216.234368][ T7475] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  216.279471][ T7465] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  216.290714][ T7465] ext4 filesystem being mounted at /root/syzkaller-testdir3727945735/syzkaller.pmq15Y/75/bus supports timestamps until 2038 (0x7fffffff)
[  216.420797][ T7457] XFS (loop2): Ending clean mount
[  216.447333][ T7457] XFS (loop2): Quotacheck needed: Please wait.
[  216.712732][ T3540] wacom 0003:056A:00ED.0002: hidraw0: USB HID v0.00 Device [HID 056a:00ed] on usb-dummy_hcd.3-1/input0
[  216.817565][ T7457] XFS (loop2): Quotacheck: Done.
[  216.895051][ T7450] udc-core: couldn't find an available UDC or it's busy
[  216.933490][ T7450] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  216.995023][ T5998] XFS (loop2): Unmounting Filesystem
[  217.017319][ T3517] usb 4-1: USB disconnect, device number 10
[  217.078014][ T7490] device syzkaller0 entered promiscuous mode
[  217.363570][ T7497] loop0: detected capacity change from 0 to 2048
[  217.415312][ T7497] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  218.101247][   T26] kauditd_printk_skb: 1 callbacks suppressed
[  218.101264][   T26] audit: type=1326 audit(1718774336.889:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7510 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f316d83ff29 code=0x7fc00000
[  218.130139][    C0] vkms_vblank_simulate: vblank timer overrun
[  218.426186][ T7525] bridge0: port 3(veth1_vlan) entered blocking state
[  218.445784][ T7501] loop1: detected capacity change from 0 to 32768
[  218.452899][ T7525] bridge0: port 3(veth1_vlan) entered disabled state
[  218.453294][ T7528] loop0: detected capacity change from 0 to 64
[  218.482089][ T7526] loop2: detected capacity change from 0 to 4096
[  218.495562][ T7501] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7501)
[  218.519467][ T7503] loop4: detected capacity change from 0 to 40427
[  218.564730][ T7503] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  218.576213][ T7503] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  218.589947][ T7501] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  218.595761][ T7528] MINIX-fs: bad superblock or unable to read bitmaps
[  218.600155][ T7501] BTRFS info (device loop1): using free space tree
[  218.621804][ T7503] F2FS-fs (loop4): invalid crc value
[  218.624932][ T7501] BTRFS info (device loop1): has skinny extents
[  218.638054][ T7532] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.650679][ T7503] F2FS-fs (loop4): Found nat_bits in checkpoint
[  218.735378][ T7503] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  218.739187][ T7547] tmpfs: Bad value for 'mpol'
[  218.743266][ T7503] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  218.879376][ T7501] BTRFS info (device loop1): enabling ssd optimizations
[  219.026210][ T7503] attempt to access beyond end of device
[  219.026210][ T7503] loop4: rw=2049, want=45104, limit=40427
[  219.045303][ T7503] attempt to access beyond end of device
[  219.045303][ T7503] loop4: rw=2049, want=77928, limit=40427
[  219.146827][ T7503] attempt to access beyond end of device
[  219.146827][ T7503] loop4: rw=10241, want=45120, limit=40427
[  219.796898][ T7574] loop1: detected capacity change from 0 to 2048
[  219.979598][ T7582] bridge0: port 3(veth1_vlan) entered blocking state
[  219.987082][ T7582] bridge0: port 3(veth1_vlan) entered disabled state
[  220.023537][ T7574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  220.341111][   T26] audit: type=1326 audit(1718774339.139:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4ce48b7f29 code=0x7fc00000
[  220.521925][ T7588] netlink: 'syz-executor.3': attribute type 30 has an invalid length.
[  220.721746][ T7596] loop1: detected capacity change from 0 to 128
[  220.766502][ T7598] ntfs3: nbd3: try to read out of volume at offset 0x0
[  220.781457][ T7596] VFS: Found a Xenix FS (block size = 512) on device loop1
[  220.833205][ T7040] sysv_free_block: trying to free block not in datazone
[  220.851230][ T6986] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  220.874726][ T7040] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  221.150711][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  221.199143][ T7612] loop1: detected capacity change from 0 to 8192
[  221.257302][ T7612] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  221.268431][ T6986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.288778][ T6986] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.302989][   T26] audit: type=1804 audit(1718774340.129:253): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2089420276/syzkaller.MvKtcK/23/file2/bus" dev="loop1" ino=1048679 res=1 errno=0
[  221.339885][ T6986] usb 3-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice=80.00
[  221.369507][ T6986] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.383512][   T26] audit: type=1804 audit(1718774340.169:254): pid=7619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2089420276/syzkaller.MvKtcK/23/file2/bus" dev="loop1" ino=1048679 res=1 errno=0
[  221.419964][ T6986] usb 3-1: config 0 descriptor??
[  221.606708][ T7624] fscrypt: AES-128-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  221.721128][   T26] audit: type=1326 audit(1718774340.529:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f316d83ff29 code=0x0
[  222.002207][ T7624] fscrypt (sda1): Missing crypto API support for AES-128-CBC-ESSIV (API name: "essiv(cbc(aes),sha256)")
[  222.887141][ T6986] wacom 0003:056A:032C.0003: item fetching failed at offset 0/2
[  222.934744][ T6986] wacom 0003:056A:032C.0003: parse failed
[  222.976037][ T6986] wacom: probe of 0003:056A:032C.0003 failed with error -22
[  223.113825][ T6986] usb 3-1: USB disconnect, device number 7
[  223.136641][ T7660] loop1: detected capacity change from 0 to 64
[  223.172956][ T7664] xt_CT: You must specify a L4 protocol and not use inversions on it
[  223.184080][ T7665] loop0: detected capacity change from 0 to 64
[  223.313472][ T7672] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  223.780599][ T7627] loop4: detected capacity change from 0 to 262144
[  223.842776][ T7627] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7627)
[  223.886325][ T7665] MINIX-fs: bad superblock or unable to read bitmaps
[  223.910131][ T7627] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  223.920766][ T7627] BTRFS info (device loop4): using free space tree
[  223.927333][ T7627] BTRFS info (device loop4): has skinny extents
[  223.933630][ T7627] BTRFS info (device loop4): flagging fs with big metadata feature
[  224.157065][ T7627] BTRFS info (device loop4): enabling ssd optimizations
[  224.238212][ T7705] bridge0: port 3(veth1_vlan) entered blocking state
[  224.247653][ T7705] bridge0: port 3(veth1_vlan) entered disabled state
[  224.837578][ T7710] loop2: detected capacity change from 0 to 1024
[  224.912993][ T7710] hfsplus: bad catalog entry type
[  225.035697][ T3904] hfsplus: b-tree write err: -5, ino 4
[  225.528595][ T7723] loop1: detected capacity change from 0 to 8192
[  225.597558][ T7723] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  225.661140][   T26] audit: type=1804 audit(1718774344.489:256): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2089420276/syzkaller.MvKtcK/31/file2/bus" dev="loop1" ino=1048680 res=1 errno=0
[  225.758324][   T26] audit: type=1804 audit(1718774344.529:257): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2089420276/syzkaller.MvKtcK/31/file2/bus" dev="loop1" ino=1048680 res=1 errno=0
[  225.827950][   T26] audit: type=1800 audit(1718774344.529:258): pid=7723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=1048680 res=0 errno=0
[  226.307491][ T7727] loop2: detected capacity change from 0 to 32768
[  226.409831][ T7748] loop0: detected capacity change from 0 to 1764
[  226.480158][ T7727] XFS (loop2): Mounting V5 Filesystem
[  226.541847][ T7744] kvm [7743]: vcpu0, guest rIP: 0x20e ignored wrmsr: 0x11e data 0x0
[  226.662275][ T7727] XFS (loop2): Ending clean mount
[  226.683466][ T7727] XFS (loop2): Quotacheck needed: Please wait.
[  226.698967][ T7766] nbd0: detected capacity change from 0 to 6
[  226.802574][ T7769] block nbd0: shutting down sockets
[  226.834735][ T7727] XFS (loop2): Quotacheck: Done.
[  226.887386][    C1] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.898621][    C1] Buffer I/O error on dev nbd0, logical block 0, async page read
[  226.909712][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.922913][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  226.936006][ T1160] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.947327][ T1160] Buffer I/O error on dev nbd0, logical block 0, async page read
[  226.962385][   T26] audit: type=1800 audit(1718774345.799:259): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  226.985026][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  226.996167][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.004213][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.015640][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.035648][ T7768] ldm_validate_partition_table(): Disk read failed.
[  227.067254][ T1160] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.078232][ T1160] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.095948][ T1160] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.107084][ T1160] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.123333][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.134225][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.142517][ T5998] XFS (loop2): Unmounting Filesystem
[  227.166759][ T1160] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.178017][ T1160] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.186125][ T7768] Dev nbd0: unable to read RDB block 0
[  227.212044][  T150] blk_update_request: I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  227.229562][ T7764] loop4: detected capacity change from 0 to 32768
[  227.236464][  T150] Buffer I/O error on dev nbd0, logical block 0, async page read
[  227.248513][ T7768]  nbd0: unable to read partition table
[  227.254370][ T7768] nbd0: partition table beyond EOD, truncated
[  227.316082][ T7764] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (7764)
[  227.394390][ T7764] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  227.428016][ T7764] BTRFS info (device loop4): using free space tree
[  227.448064][ T7764] BTRFS info (device loop4): has skinny extents
[  227.640380][ T7799] xt_CT: You must specify a L4 protocol and not use inversions on it
[  227.648897][ T7764] BTRFS info (device loop4): enabling ssd optimizations
[  228.377377][ T7813] kvm [7812]: vcpu0, guest rIP: 0x20e ignored wrmsr: 0x11e data 0x0
[  228.435591][ T7817] loop4: detected capacity change from 0 to 2048
[  228.526500][ T7817] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  228.844327][ T7810] loop0: detected capacity change from 0 to 32768
[  228.984612][ T7810] XFS (loop0): Mounting V5 Filesystem
[  229.243752][ T7810] XFS (loop0): Ending clean mount
[  229.613671][ T7810] XFS (loop0): Quotacheck needed: Please wait.
[  229.686317][ T6943] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  229.707942][ T6943] UDF-fs: error (device loop4): udf_read_inode: (ino 1317) failed !bh
[  229.723581][ T7810] XFS (loop0): Quotacheck: Done.
[  229.752973][   T26] audit: type=1800 audit(1718774348.589:260): pid=7810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  229.780838][ T7839] loop1: detected capacity change from 0 to 24
[  229.911078][ T6043] XFS (loop0): Unmounting Filesystem
[  230.160852][ T3615] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.302889][ T3615] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.398185][ T3615] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.439573][ T7853] kvm [7851]: vcpu0, guest rIP: 0x20e ignored wrmsr: 0x11e data 0x0
[  230.503496][ T3615] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  230.534836][ T7874] loop0: detected capacity change from 0 to 24
[  230.788275][ T7884] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  231.062916][ T7875] chnl_net:caif_netlink_parms(): no params data found
[  231.134939][ T7868] loop2: detected capacity change from 0 to 32768
[  231.190463][ T7903] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'.
[  231.236626][ T7868] XFS (loop2): Mounting V5 Filesystem
[  231.294517][   T26] audit: type=1326 audit(1718774350.129:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52e77cf29 code=0x7ffc0000
[  231.356228][   T26] audit: type=1326 audit(1718774350.149:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc52e77cf29 code=0x7ffc0000
[  231.379411][   T26] audit: type=1326 audit(1718774350.149:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52e77cf29 code=0x7ffc0000
[  231.407742][   T26] audit: type=1326 audit(1718774350.149:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc52e77cf29 code=0x7ffc0000
[  231.420470][ T7868] XFS (loop2): Ending clean mount
[  231.431387][   T26] audit: type=1326 audit(1718774350.169:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52e77cf29 code=0x7ffc0000
[  231.464941][   T26] audit: type=1326 audit(1718774350.169:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fc52e77cf29 code=0x7ffc0000
[  231.502120][ T7868] XFS (loop2): Quotacheck needed: Please wait.
[  231.515331][   T26] audit: type=1326 audit(1718774350.169:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc52e77a6a7 code=0x7ffc0000
[  231.554401][   T26] audit: type=1326 audit(1718774350.169:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc52e740379 code=0x7ffc0000
[  231.578478][ T7868] XFS (loop2): Quotacheck: Done.
[  231.583625][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  231.583913][ T7875] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.594348][   T26] audit: type=1326 audit(1718774350.169:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc52e77cf29 code=0x7ffc0000
[  231.621885][ T7875] bridge0: port 1(bridge_slave_0) entered disabled state
[  231.630383][   T26] audit: type=1326 audit(1718774350.179:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7920 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc52e77a6a7 code=0x7ffc0000
[  231.639377][ T7875] device bridge_slave_0 entered promiscuous mode
[  231.665041][ T7875] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.679236][ T7875] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.689952][ T7875] device bridge_slave_1 entered promiscuous mode
[  231.726422][ T7875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  231.728743][ T7931] loop0: detected capacity change from 0 to 1024
[  231.752629][ T7875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  231.755570][ T5998] XFS (loop2): Unmounting Filesystem
[  231.832044][ T7931] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  231.888746][ T7875] team0: Port device team_slave_0 added
[  231.905355][ T7875] team0: Port device team_slave_1 added
[  231.967241][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_0
[  231.975279][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.002894][ T7875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  232.050151][ T7875] batman_adv: batadv0: Adding interface: batadv_slave_1
[  232.057724][ T7875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  232.086316][ T7875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  232.182909][ T7875] device hsr_slave_0 entered promiscuous mode
[  232.201375][ T7875] device hsr_slave_1 entered promiscuous mode
[  232.493954][ T7957] syz-executor.0 (7957) used greatest stack depth: 18872 bytes left
[  232.536149][ T7960] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  232.626781][ T7965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  232.637903][ T7965] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  232.647171][ T7966] loop1: detected capacity change from 0 to 1024
[  232.674137][ T3615] device hsr_slave_0 left promiscuous mode
[  232.683505][ T3615] device hsr_slave_1 left promiscuous mode
[  232.691366][ T4333] Bluetooth: hci0: command 0x0409 tx timeout
[  232.697678][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.705804][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.714626][ T3615] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.722940][ T3615] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.732592][ T3615] device bridge_slave_1 left promiscuous mode
[  232.738355][ T7966] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback.
[  232.739028][ T3615] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.763658][    C0] vkms_vblank_simulate: vblank timer overrun
[  232.779301][ T3615] device bridge_slave_0 left promiscuous mode
[  232.785882][ T3615] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.796831][ T3615] device veth1_macvtap left promiscuous mode
[  232.803003][ T3615] device veth0_macvtap left promiscuous mode
[  232.809227][ T3615] device veth1_vlan left promiscuous mode
[  232.815321][ T3615] device veth0_vlan left promiscuous mode
[  232.841353][ T3727] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  233.066967][ T3615] team0 (unregistering): Port device team_slave_1 removed
[  233.088107][ T3727] usb 3-1: Using ep0 maxpacket: 8
[  233.096124][ T3615] team0 (unregistering): Port device team_slave_0 removed
[  233.116276][ T3615] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  233.134178][ T3615] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  233.227445][ T3615] bond0 (unregistering): Released all slaves
[  233.259218][ T3727] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  233.268677][ T3727] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  233.283049][ T3727] usb 3-1: config 135 has no interface number 0
[  233.289385][ T3727] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  233.316470][ T7979] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  233.486604][ T3727] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  233.502764][ T3727] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.512485][ T3727] usb 3-1: Product: syz
[  233.516942][ T3727] usb 3-1: Manufacturer: syz
[  233.521810][ T3727] usb 3-1: SerialNumber: syz
[  233.597419][ T7875] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  233.613453][ T7875] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  233.630141][ T7875] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  233.669941][ T7875] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  233.797255][ T7875] 8021q: adding VLAN 0 to HW filter on device bond0
[  233.813577][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  233.822792][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  233.841711][ T7875] 8021q: adding VLAN 0 to HW filter on device team0
[  233.866129][ T6986] usb 3-1: USB disconnect, device number 8
[  233.926421][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  233.957518][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  234.012026][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.019187][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.077140][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  234.116933][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  234.175359][ T3579] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.182555][ T3579] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.218773][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  234.269310][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  234.288616][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  234.325346][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  234.370091][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  234.448829][ T7875] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  234.572965][ T7875] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  234.646144][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  234.665840][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  234.725499][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  234.788391][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  234.817931][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  234.837291][ T8015] loop2: detected capacity change from 0 to 8192
[  234.855367][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  234.882456][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  234.929226][ T4337] Bluetooth: hci0: command 0x041b tx timeout
[  234.953930][ T8015] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  234.967024][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  234.989374][ T8015] REISERFS (device loop2): using ordered data mode
[  235.027237][ T8015] reiserfs: using flush barriers
[  235.072080][ T8015] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  235.174619][ T8015] REISERFS (device loop2): checking transaction log (loop2)
[  235.225939][ T8015] REISERFS (device loop2): Using r5 hash to sort names
[  235.271522][ T8015] REISERFS (device loop2): using 3.5.x disk format
[  235.311987][ T8015] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  235.453452][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  235.473976][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  235.522738][ T7875] 8021q: adding VLAN 0 to HW filter on device batadv0
[  236.057324][ T8046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  236.263405][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  236.283289][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  236.388476][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  236.428935][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  236.461251][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  236.492877][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  236.530419][ T7875] device veth0_vlan entered promiscuous mode
[  236.573097][ T7875] device veth1_vlan entered promiscuous mode
[  236.597015][ T8032] loop1: detected capacity change from 0 to 32768
[  236.643904][ T8056] loop2: detected capacity change from 0 to 4096
[  236.678547][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  236.688914][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  236.697998][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  236.707940][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  236.728036][ T8056] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  236.742315][ T7875] device veth0_macvtap entered promiscuous mode
[  236.754910][ T8032] XFS (loop1): Mounting V5 Filesystem
[  236.779940][ T8056] ntfs3: loop2: Failed to load $BadClus.
[  236.792374][ T7875] device veth1_macvtap entered promiscuous mode
[  236.850222][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.863286][ T8032] XFS (loop1): Ending clean mount
[  236.884955][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.897672][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.914446][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.925155][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.937115][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.951093][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.961836][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.973733][ T7040] XFS (loop1): Unmounting Filesystem
[  236.974518][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.010871][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  237.011594][ T4333] Bluetooth: hci0: command 0x040f tx timeout
[  237.020568][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  237.036129][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  237.047380][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  237.058584][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.070396][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.081932][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.097269][   T26] kauditd_printk_skb: 26 callbacks suppressed
[  237.097283][   T26] audit: type=1326 audit(1718774355.929:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8073 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc52e77cf29 code=0x0
[  237.128488][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.203111][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.280603][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.326525][ T7875] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.360618][ T7875] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.395457][ T7875] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.455871][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  237.470542][ T3517] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  237.500077][ T7875] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.537134][ T7875] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.557391][ T7875] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.581556][ T7875] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.882353][  T157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  237.906003][  T157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  237.991459][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  238.014089][ T6302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  238.035956][ T6302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  238.118878][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  239.174966][ T3572] Bluetooth: hci0: command 0x0419 tx timeout
[  239.366100][   T26] audit: type=1326 audit(1718774358.199:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8113 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f316d83ff29 code=0x0
[  241.449882][ T8144] loop2: detected capacity change from 0 to 262144
[  241.496329][ T8144] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8144)
[  241.556801][ T8144] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  241.566329][ T8144] BTRFS info (device loop2): using free space tree
[  241.573059][ T8144] BTRFS info (device loop2): has skinny extents
[  241.579317][ T8144] BTRFS info (device loop2): flagging fs with big metadata feature
[  241.740536][ T8152] loop1: detected capacity change from 0 to 4096
[  241.776338][ T8152] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  241.802421][ T8152] ntfs3: loop1: Failed to load $BadClus.
[  241.856676][ T8144] BTRFS info (device loop2): enabling ssd optimizations
[  242.087266][ T8191] loop0: detected capacity change from 0 to 16
[  242.166037][ T8191] erofs: (device loop0): mounted with root inode @ nid 36.
[  242.581087][ T3727] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  242.798985][ T8215] syz-executor.3 sent an empty control message without MSG_MORE.
[  242.836136][ T8212] can: request_module (can-proto-0) failed.
[  242.875143][ T8214] loop4: detected capacity change from 0 to 4096
[  242.926005][ T8214] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[  242.976965][ T8214] ntfs3: loop4: Failed to load $BadClus.
[  242.986675][ T3695] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.997950][ T3727] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  243.024122][ T3727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  243.056336][ T3727] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  243.082015][ T3727] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  243.111847][ T3727] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  243.138285][ T3727] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.165702][ T3727] usb 2-1: config 0 descriptor??
[  243.207158][ T3695] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.282742][ T8218] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  243.366595][ T3695] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.464588][ T3695] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.683198][ T3727] hid-picolcd 0003:04D8:C002.0004: unknown main item tag 0x0
[  243.793196][ T3727] hid-picolcd 0003:04D8:C002.0004: No report with id 0x11 found
[  243.884380][ T3727] usb 2-1: USB disconnect, device number 8
[  244.057939][ T8221] chnl_net:caif_netlink_parms(): no params data found
[  244.295630][ T8221] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.313808][ T8221] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.322147][ T8221] device bridge_slave_0 entered promiscuous mode
[  244.339565][ T8221] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.354327][   T26] audit: type=1804 audit(1718774363.189:299): pid=8228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2742433244/syzkaller.8ArtPD/232/file0" dev="sda1" ino=1936 res=1 errno=0
[  244.356850][ T8221] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.388931][ T8221] device bridge_slave_1 entered promiscuous mode
[  244.519128][ T8221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.598308][ T8221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.728738][ T8221] team0: Port device team_slave_0 added
[  244.756587][ T8221] team0: Port device team_slave_1 added
[  244.871741][ T8257] loop1: detected capacity change from 0 to 1024
[  244.905676][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_0
[  244.930531][ T8254] can: request_module (can-proto-0) failed.
[  244.947851][ T8257] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  244.957568][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  244.973735][ T8257] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  245.000432][ T8221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.038678][ T8221] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.045886][ T8257] EXT4-fs (loop1): group descriptors corrupted!
[  245.060256][ T8221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.089309][ T8221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.238623][ T8221] device hsr_slave_0 entered promiscuous mode
[  245.250707][ T8221] device hsr_slave_1 entered promiscuous mode
[  245.259515][ T8257] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'.
[  245.277406][ T8221] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  245.287970][ T8221] Cannot create hsr debugfs directory
[  245.300314][ T3695] device hsr_slave_0 left promiscuous mode
[  245.311433][ T3695] device hsr_slave_1 left promiscuous mode
[  245.319030][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  245.336124][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  245.353479][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  245.369407][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  245.392392][ T3695] device bridge_slave_1 left promiscuous mode
[  245.402562][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.429755][ T3695] device bridge_slave_0 left promiscuous mode
[  245.436262][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.451893][ T3695] device veth1_macvtap left promiscuous mode
[  245.458437][ T3695] device veth0_macvtap left promiscuous mode
[  245.469210][ T3695] device veth1_vlan left promiscuous mode
[  245.476388][ T3695] device veth0_vlan left promiscuous mode
[  245.571200][ T3573] Bluetooth: hci3: command 0x0409 tx timeout
[  245.726841][ T8281] netlink: 'syz-executor.1': attribute type 1 has an invalid length.
[  245.776856][ T8279] EXT4-fs (sda1): re-mounted. Opts: (null). Quota mode: none.
[  245.985376][ T3695] team0 (unregistering): Port device team_slave_1 removed
[  246.023762][ T3695] team0 (unregistering): Port device team_slave_0 removed
[  246.038985][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.074204][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.220477][ T8305] can: request_module (can-proto-0) failed.
[  246.250811][ T3695] bond0 (unregistering): Released all slaves
[  246.507477][ T8317] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  246.696490][ T8258] chnl_net:caif_netlink_parms(): no params data found
[  247.011195][ T6986] Bluetooth: hci0: command 0x0409 tx timeout
[  247.032199][ T8258] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.039517][ T8258] bridge0: port 1(bridge_slave_0) entered disabled state
[  247.047936][ T8258] device bridge_slave_0 entered promiscuous mode
[  247.060458][ T8258] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.068193][ T8258] bridge0: port 2(bridge_slave_1) entered disabled state
[  247.076698][ T8258] device bridge_slave_1 entered promiscuous mode
[  247.112077][ T8258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.154450][ T8258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.208974][   T26] audit: type=1804 audit(1718774366.039:300): pid=8337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1616124091/syzkaller.W2bqpF/125/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0
[  247.275147][ T8258] team0: Port device team_slave_0 added
[  247.284915][ T8258] team0: Port device team_slave_1 added
[  247.327279][ T8258] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.344276][ T8258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.374442][ T8258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.399444][ T8258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  247.411138][ T8258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.438052][ T8258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  247.599081][ T8258] device hsr_slave_0 entered promiscuous mode
[  247.619843][ T8258] device hsr_slave_1 entered promiscuous mode
[  247.642952][ T8258] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  247.650539][ T8258] Cannot create hsr debugfs directory
[  247.661082][ T3517] Bluetooth: hci3: command 0x041b tx timeout
[  247.686884][ T8221] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  247.726358][ T8221] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  247.747466][ T8221] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  247.793925][ T8221] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  247.996465][ T8258] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.056633][ T8221] 8021q: adding VLAN 0 to HW filter on device bond0
[  248.090722][ T8258] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.139461][ T8221] 8021q: adding VLAN 0 to HW filter on device team0
[  248.168826][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  248.184651][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  248.188324][ T8382] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'.
[  248.218266][ T8258] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.263534][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  248.283990][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  248.324199][ T3573] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.331586][ T3573] bridge0: port 1(bridge_slave_0) entered forwarding state
[  248.388212][ T8258] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.442037][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  248.450220][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  248.474028][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  248.505745][ T4337] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.512884][ T4337] bridge0: port 2(bridge_slave_1) entered forwarding state
[  248.572814][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  248.642781][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  249.103082][ T3517] Bluetooth: hci0: command 0x041b tx timeout
[  249.212850][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  249.223610][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  249.321149][ T8258] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  249.377923][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  249.392343][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  249.411663][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  249.420441][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  249.449625][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  249.485962][ T8221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  249.536634][ T8221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  249.547480][ T8258] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  249.560180][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  249.574419][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  249.732815][ T3569] Bluetooth: hci3: command 0x040f tx timeout
[  250.410880][ T8258] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  250.444232][ T8258] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  250.717264][ T8258] 8021q: adding VLAN 0 to HW filter on device bond0
[  250.738213][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.747759][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.784077][ T8221] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.805824][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  250.814628][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  250.834775][ T8258] 8021q: adding VLAN 0 to HW filter on device team0
[  250.862957][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  250.877639][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  250.891463][ T3569] bridge0: port 1(bridge_slave_0) entered blocking state
[  250.898729][ T3569] bridge0: port 1(bridge_slave_0) entered forwarding state
[  250.972507][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  250.997845][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  251.013524][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  251.014542][ T8428] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.3'.
[  251.036526][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  251.051819][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  251.060361][   T21] bridge0: port 2(bridge_slave_1) entered blocking state
[  251.067487][   T21] bridge0: port 2(bridge_slave_1) entered forwarding state
[  251.106913][ T8221] device veth0_vlan entered promiscuous mode
[  251.131778][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  251.140679][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  251.165392][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  251.181465][ T3569] Bluetooth: hci0: command 0x040f tx timeout
[  251.200590][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  251.228006][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  251.256877][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  251.286239][ T8221] device veth1_vlan entered promiscuous mode
[  251.311953][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  251.319994][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  251.335686][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  251.346069][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  251.359113][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  251.370373][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  251.386370][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  251.395120][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  251.404039][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  251.413310][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  251.430394][ T8258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  251.455871][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  251.477022][ T8439] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  251.511084][ T3727] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  251.555875][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  251.582048][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  251.613255][ T8221] device veth0_macvtap entered promiscuous mode
[  251.629249][ T8221] device veth1_macvtap entered promiscuous mode
[  251.688190][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.718516][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.721082][ T3727] usb 4-1: device descriptor read/64, error -71
[  251.748885][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.779550][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.790608][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.801858][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.812463][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.823423][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.824259][ T3569] Bluetooth: hci3: command 0x0419 tx timeout
[  251.835050][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.865612][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.887150][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.911242][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.930462][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.941247][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.952792][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.963207][ T8221] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.975438][ T8221] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.988444][ T8221] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.000001][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  252.009582][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  252.021697][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  252.026707][ T3727] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  252.030532][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  252.046568][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  252.054366][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  252.062099][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  252.070838][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  252.089569][ T8258] 8021q: adding VLAN 0 to HW filter on device batadv0
[  252.104385][ T8221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.125719][ T8221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.153110][ T8221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.175755][ T8221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.247099][ T3727] usb 4-1: device descriptor read/64, error -71
[  252.391384][ T3727] usb usb4-port1: attempt power cycle
[  252.475488][ T3904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.491504][ T3904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.530358][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.605554][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  252.614955][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.628419][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  252.636876][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.680874][ T4337] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.705221][ T8258] device veth0_vlan entered promiscuous mode
[  252.727069][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  252.750152][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  252.779448][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  252.799085][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  252.821299][ T3727] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  252.860366][ T8258] device veth1_vlan entered promiscuous mode
[  252.928486][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  252.941819][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  252.957968][ T3727] usb 4-1: device descriptor read/8, error -71
[  252.971839][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  252.990951][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  253.036789][ T8258] device veth0_macvtap entered promiscuous mode
[  253.057869][ T8258] device veth1_macvtap entered promiscuous mode
[  253.122360][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.160964][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.170808][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.201055][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.214662][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.241088][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.251400][ T3574] Bluetooth: hci0: command 0x0419 tx timeout
[  253.257491][ T3727] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  253.259336][ T8467] loop1: detected capacity change from 0 to 32768
[  253.275457][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.296403][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.311132][   T26] audit: type=1804 audit(1718774372.139:301): pid=8472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1616124091/syzkaller.W2bqpF/127/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0
[  253.316988][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  253.355864][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.366216][ T3727] usb 4-1: device descriptor read/8, error -71
[  253.374081][ T8258] batman_adv: batadv0: Interface activated: batadv_slave_0
[  253.397382][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  253.407697][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  253.416988][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  253.417185][ T8469] loop0: detected capacity change from 0 to 32768
[  253.427483][ T3574] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  253.445251][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.456851][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.469353][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.473338][ T8467] XFS (loop1): Mounting V5 Filesystem
[  253.483224][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.503572][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.511131][ T3727] usb usb4-port1: unable to enumerate USB device
[  253.514809][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.530727][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.541231][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.551204][ T8258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  253.564194][ T8258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  253.569834][ T8467] XFS (loop1): Ending clean mount
[  253.575802][ T8258] batman_adv: batadv0: Interface activated: batadv_slave_1
[  253.588701][ T8467] XFS (loop1): Quotacheck needed: Please wait.
[  253.615221][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  253.624394][ T3540] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  253.644827][ T8258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  253.654839][ T8467] XFS (loop1): Quotacheck: Done.
[  253.654962][ T8258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  253.674332][ T8258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  253.683558][ T8258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  253.706462][ T8469] XFS (loop0): Mounting V5 Filesystem
[  253.806691][ T8469] XFS (loop0): Ending clean mount
[  253.879753][ T8221] XFS (loop0): Unmounting Filesystem
[  254.016718][ T3695] device hsr_slave_0 left promiscuous mode
[  254.032404][ T3695] device hsr_slave_1 left promiscuous mode
[  254.059299][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.067355][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.117222][ T3695] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  254.157047][ T3695] batman_adv: batadv0: Removing interface: batadv_slave_1
[  254.215312][ T3695] device bridge_slave_1 left promiscuous mode
[  254.241160][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state
[  254.270173][ T3695] device bridge_slave_0 left promiscuous mode
[  254.297618][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state
[  254.315956][ T3695] device veth1_macvtap left promiscuous mode
[  254.355178][ T3695] device veth0_macvtap left promiscuous mode
[  254.381467][ T3695] device veth1_vlan left promiscuous mode
[  254.397888][ T3695] device veth0_vlan left promiscuous mode
[  255.193333][ T7040] XFS (loop1): Unmounting Filesystem
[  255.276361][ T3695] team0 (unregistering): Port device team_slave_1 removed
[  255.301551][ T3695] team0 (unregistering): Port device team_slave_0 removed
[  255.331763][ T3695] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  255.375899][ T3695] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  255.587780][ T3695] bond0 (unregistering): Released all slaves
[  255.664157][ T1375] ieee802154 phy0 wpan0: encryption failed: -22
[  255.670489][ T1375] ieee802154 phy1 wpan1: encryption failed: -22
[  255.685362][ T8518] loop0: detected capacity change from 0 to 4101
[  255.755957][ T8496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  255.782653][ T8500] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  255.803988][ T8518] ntfs3: loop0: failed to replay log file. Can't mount rw!
[  255.812287][   T26] audit: type=1326 audit(1718774374.649:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8514 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc52e77cf29 code=0x0
[  255.852408][ T3904] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  255.867471][ T3904] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  255.950697][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  255.965189][ T3904] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.004118][ T3904] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.030996][ T4339] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  256.087697][ T6986] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  256.231051][ T4339] usb 2-1: device descriptor read/64, error -71
[  256.264189][ T8532] loop0: detected capacity change from 0 to 2048
[  256.288773][ T8536] loop4: detected capacity change from 0 to 512
[  256.419259][ T8537] syz-executor.3[8537] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  256.419337][ T8537] syz-executor.3[8537] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  257.651323][ T4339] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  257.863426][ T4339] usb 2-1: device descriptor read/64, error -71
[  257.875892][ T8532] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  257.890605][ T8536] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  258.005287][ T4339] usb usb2-port1: attempt power cycle
[  258.041240][ T8545] loop2: detected capacity change from 0 to 4096
[  258.117185][ T8545] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  258.139241][ T8536] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.4: corrupted in-inode xattr
[  258.173706][ T8536] EXT4-fs (loop4): Remounting filesystem read-only
[  258.207128][ T8536] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 15 (err -117)
[  258.241549][ T8536] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,noload,errors=remount-ro,resgid=0x000000000000ee00,min_batch_time=0x0000000000000006,usrjquota=,nombcache,noquota,grpid,norecovery,. Quota mode: none.
[  258.405638][ T3904] ntfs3: loop2: ntfs3_write_inode r=1a failed, -22.
[  258.412392][ T4339] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  258.443523][ T5998] ntfs3: loop2: ntfs_sync_fs r=1a failed, -22.
[  258.460479][ T5998] ntfs3: loop2: ntfs_evict_inode r=1a failed, -22.
[  258.486453][ T5998] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  258.523571][ T4339] usb 2-1: device descriptor read/8, error -71
[  258.632782][ T8564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  258.829159][ T8576] netlink: 'syz-executor.4': attribute type 8 has an invalid length.
[  258.885145][ T8577] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  258.920573][ T8577] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.941198][ T8577] batman_adv: batadv0: Removing interface: batadv_slave_0
[  258.959901][ T8577] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  259.032601][ T8583] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  260.174388][ T8622] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'.
[  260.192679][ T8622] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  260.200545][ T8622] batman_adv: batadv0: Removing interface: batadv_slave_0
[  260.217362][ T8615] Invalid ELF header magic: != ELF
[  260.224690][ T8581] loop1: detected capacity change from 0 to 32768
[  260.236284][ T8622] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  260.288737][ T8581] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (8581)
[  260.359032][ T8581] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  260.379231][ T8581] BTRFS info (device loop1): using free space tree
[  260.389304][ T8581] BTRFS info (device loop1): has skinny extents
[  260.566790][ T8581] BTRFS info (device loop1): enabling ssd optimizations
[  261.152356][ T8675] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'.
[  261.204227][ T8681] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  261.210824][ T8680] loop4: detected capacity change from 0 to 764
[  261.582102][ T8689] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  262.160511][ T8683] loop1: detected capacity change from 0 to 4096
[  262.337080][ T8683] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512)
[  262.477673][ T8708] loop2: detected capacity change from 0 to 256
[  262.519766][  T144] ntfs3: loop1: ntfs3_write_inode r=1a failed, -22.
[  262.542535][ T8708] FAT-fs (loop2): Unrecognized mount option "de
[  262.542535][ T8708] ä." or missing value
[  262.549060][ T7040] ntfs3: loop1: ntfs_sync_fs r=1a failed, -22.
[  262.579930][ T7040] ntfs3: loop1: ntfs_evict_inode r=1a failed, -22.
[  262.594231][ T7040] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  262.612011][ T8710] ceph: No mds server is up or the cluster is laggy
[  262.645719][ T8708] loop2: detected capacity change from 0 to 64
[  262.852132][   T21] Bluetooth: hci1: command 0x0406 tx timeout
[  262.963529][ T8724] loop0: detected capacity change from 0 to 4096
[  263.105578][ T8724] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  263.172133][ T8735] x_tables: ip6_tables: sctp match: only valid for protocol 132
[  263.731697][ T8732] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'.
[  263.826476][   T26] audit: type=1800 audit(1718774382.659:303): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0
[  263.886667][   T26] audit: type=1800 audit(1718774382.689:304): pid=8724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=33 res=0 errno=0
[  263.932894][ T8708] syz-executor.2 (8708): drop_caches: 2
[  264.057560][ T3727] libceph: connect (1)[c::]:6789 error -101
[  264.107168][ T3727] libceph: mon0 (1)[c::]:6789 connect error
[  264.141677][ T8747] ceph: No mds server is up or the cluster is laggy
[  264.199211][ T8756] loop4: detected capacity change from 0 to 8192
[  264.266033][ T8756] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  264.315613][ T8756] REISERFS (device loop4): using ordered data mode
[  264.327641][ T8756] reiserfs: using flush barriers
[  264.341950][ T8756] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  264.355966][ T8767] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
[  264.384810][ T8756] REISERFS (device loop4): checking transaction log (loop4)
[  264.462112][ T8756] REISERFS (device loop4): Using r5 hash to sort names
[  264.485803][ T8756] reiserfs: enabling write barrier flush mode
[  264.496318][ T8775] loop2: detected capacity change from 0 to 256
[  264.519117][ T8756] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  264.557681][ T8775] FAT-fs (loop2): Unrecognized mount option "de
[  264.557681][ T8775] ä." or missing value
[  264.726118][ T8775] loop2: detected capacity change from 0 to 64
[  264.799819][ T8781] loop0: detected capacity change from 0 to 32768
[  264.848095][ T8785] ceph: No mds server is up or the cluster is laggy
[  264.861075][   T21] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  265.050701][ T8781] 
[  265.050701][ T8781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.050701][ T8781] 
[  265.119648][ T8781] 
[  265.119648][ T8781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.119648][ T8781] 
[  265.154722][ T8781] 
[  265.154722][ T8781]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.154722][ T8781] 
[  265.155181][ T8791] rdma_op ffff888058fd31f0 conn xmit_rdma 0000000000000000
[  265.217520][ T8792] 
[  265.217520][ T8792]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.217520][ T8792] 
[  265.357811][ T8775] syz-executor.2 (8775): drop_caches: 2
[  265.362301][ T8221] 
[  265.362301][ T8221]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.362301][ T8221] 
[  265.391468][ T8221] 
[  265.391468][ T8221]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  265.391468][ T8221] 
[  265.471100][   T21] usb 4-1: New USB device found, idVendor=1199, idProduct=6850, bcdDevice=7c.3b
[  265.481347][   T21] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.501036][   T21] usb 4-1: Product: syz
[  265.505232][   T21] usb 4-1: Manufacturer: syz
[  265.518767][   T21] usb 4-1: SerialNumber: syz
[  265.537544][   T21] usb 4-1: config 0 descriptor??
[  265.592542][   T21] sierra 4-1:0.0: Sierra USB modem converter detected
[  265.808050][   T21] usb 4-1: Sierra USB modem converter now attached to ttyUSB0
[  265.823010][ T8801] loop4: detected capacity change from 0 to 32768
[  265.833558][   T21] usb 4-1: USB disconnect, device number 15
[  265.847542][   T21] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  265.857994][   T21] sierra 4-1:0.0: device disconnected
[  265.885818][ T8801] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (8801)
[  265.920886][ T8806] loop2: detected capacity change from 0 to 40427
[  265.933505][ T8801] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  265.942139][ T3574] libceph: connect (1)[c::]:6789 error -101
[  265.942282][ T3574] libceph: mon0 (1)[c::]:6789 connect error
[  265.951390][ T8806] F2FS-fs (loop2): Invalid log blocks per segment (5)
[  265.956647][ T8801] BTRFS info (device loop4): using free space tree
[  265.967616][ T8801] BTRFS info (device loop4): has skinny extents
[  265.968249][ T8806] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  265.989583][ T8806] F2FS-fs (loop2): Found nat_bits in checkpoint
[  265.997955][ T8801] BTRFS info (device loop4): enabling ssd optimizations
[  266.030281][ T8810] ceph: No mds server is up or the cluster is laggy
[  266.082241][ T8806] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  266.089321][ T8806] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  266.498711][ T5998] attempt to access beyond end of device
[  266.498711][ T5998] loop2: rw=2049, want=45104, limit=40427
[  267.258212][ T8860] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'.
[  267.273462][ T8860] netlink: zone id is out of range
[  267.284444][ T8860] netlink: zone id is out of range
[  267.300558][ T8860] netlink: del zone limit has 4 unknown bytes
[  267.404549][ T8872] loop2: detected capacity change from 0 to 2048
[  267.477480][ T8872] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  267.516698][ T8865] loop0: detected capacity change from 0 to 32768
[  267.565846][ T8865] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (8865)
[  267.613697][ T8865] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  267.625879][ T8865] BTRFS info (device loop0): using free space tree
[  267.632670][ T8865] BTRFS info (device loop0): has skinny extents
[  267.651029][ T3569] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  267.670156][ T8865] BTRFS info (device loop0): enabling ssd optimizations
[  268.254419][ T3574] Bluetooth: hci4: command 0x0406 tx timeout
[  268.781197][ T3569] usb 5-1: New USB device found, idVendor=1199, idProduct=6850, bcdDevice=7c.3b
[  268.790538][ T3569] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.798690][ T3569] usb 5-1: Product: syz
[  268.802880][ T3569] usb 5-1: Manufacturer: syz
[  268.807489][ T3569] usb 5-1: SerialNumber: syz
[  268.813983][ T3569] usb 5-1: config 0 descriptor??
[  268.852082][ T3569] sierra 5-1:0.0: Sierra USB modem converter detected
[  269.082632][ T3569] usb 5-1: Sierra USB modem converter now attached to ttyUSB0
[  269.095485][ T3569] usb 5-1: USB disconnect, device number 9
[  269.103892][ T3569] sierra ttyUSB0: Sierra USB modem converter now disconnected from ttyUSB0
[  269.112732][ T3569] sierra 5-1:0.0: device disconnected
[  270.600615][ T8911] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  270.614989][ T8911] bridge0: port 3(ipvlan2) entered blocking state
[  270.621614][ T8911] bridge0: port 3(ipvlan2) entered disabled state
[  270.775636][ T8914] loop2: detected capacity change from 0 to 256
[  271.174944][ T8912] team0: Device gtp0 is of different type
[  271.362137][ T8914] exfat: Deprecated parameter 'utf8'
[  271.368377][ T8914] exfat: Deprecated parameter 'namecase'
[  271.374332][ T8914] exfat: Deprecated parameter 'namecase'
[  271.380094][ T8914] exfat: Deprecated parameter 'utf8'
[  271.385495][ T8914] exfat: Deprecated parameter 'utf8'
[  271.401998][ T8914] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xdc42f586, utbl_chksum : 0xe619d30d)
[  271.431060][ T3573] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  271.643492][ T8918] loop2: detected capacity change from 0 to 2048
[  271.700674][ T8918] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  271.731272][ T4340] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  271.791165][ T3573] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  271.797453][ T8920] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.2'.
[  271.802577][ T3573] usb 1-1: config 0 interface 0 altsetting 44 endpoint 0x83 has invalid wMaxPacketSize 0
[  271.802609][ T3573] usb 1-1: config 0 interface 0 altsetting 44 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  271.802635][ T3573] usb 1-1: config 0 interface 0 has no altsetting 0
[  271.843275][ T8920] netlink: zone id is out of range
[  271.848422][ T8920] netlink: zone id is out of range
[  271.856978][ T8920] netlink: del zone limit has 4 unknown bytes
[  271.904818][ T8925] loop2: detected capacity change from 0 to 512
[  271.931128][ T4340] usb 5-1: device descriptor read/64, error -71
[  271.961210][ T3573] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  271.970284][ T3573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  271.980343][ T3573] usb 1-1: Product: syz
[  271.984871][ T3573] usb 1-1: Manufacturer: syz
[  271.989472][ T3573] usb 1-1: SerialNumber: syz
[  271.995669][ T3573] usb 1-1: config 0 descriptor??
[  271.999450][ T8925] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e028, mo2=0002]
[  272.008934][ T8925] System zones: 1-12
[  272.014442][ T8925] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpjquota=,data_err=ignore,data_err=ignore,sysvgroups,errors=remount-ro,. Quota mode: none.
[  272.032337][ T8925] EXT4-fs error (device loop2): ext4_map_blocks:601: inode #2: block 5: comm syz-executor.2: lblock 0 mapped to illegal pblock 5 (length 1)
[  272.034207][ T3573] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14
[  272.057459][ T8925] EXT4-fs (loop2): Remounting filesystem read-only
[  272.064484][ T8925] EXT4-fs warning (device loop2): ext4_empty_dir:3093: inode #2: lblock 0: comm syz-executor.2: error -117 reading directory block
[  272.183043][ T8931] tmpfs: Bad value for 'mpol'
[  272.201269][ T4340] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  272.236589][ T8907] udc-core: couldn't find an available UDC or it's busy
[  272.243726][ T8907] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  272.257076][ T3573] usb 1-1: USB disconnect, device number 10
[  272.357418][ T8939] device ip6tnl2 entered promiscuous mode
[  272.391140][ T4340] usb 5-1: device descriptor read/64, error -71
[  272.513110][ T4340] usb usb5-port1: attempt power cycle
[  272.533996][ T8948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'.
[  272.786308][ T8954] loop0: detected capacity change from 0 to 256
[  272.833074][ T8954] FAT-fs (loop0): Unrecognized mount option "de
[  272.833074][ T8954] ä." or missing value
[  272.921057][ T4340] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  272.956580][ T8954] loop0: detected capacity change from 0 to 64
[  273.012955][ T4340] usb 5-1: device descriptor read/8, error -71
[  273.135594][ T8954] ODEBUG: Out of memory. ODEBUG disabled
[  273.204252][ T8954] syz-executor.0 (8954): drop_caches: 2
[  273.217620][ T8954] syz-executor.0 (8954): drop_caches: 2
[  273.281045][ T4340] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  273.371228][ T4340] usb 5-1: device descriptor read/8, error -71
[  273.381652][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  273.393323][ T8958] bridge0: port 3(ipvlan2) entered blocking state
[  273.400301][ T8958] bridge0: port 3(ipvlan2) entered disabled state
[  273.446962][ T8959] team0: Device gtp0 is of different type
[  273.491614][ T4340] usb usb5-port1: unable to enumerate USB device
[  273.545677][ T8963] loop2: detected capacity change from 0 to 4096
[  273.589900][ T8963] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[  273.624293][ T8963] ntfs3: loop2: failed to convert "c46c" to cp861
[  273.880191][ T8967] loop2: detected capacity change from 0 to 40427
[  273.925550][ T8967] F2FS-fs (loop2): Invalid log blocks per segment (5)
[  273.932475][ T8967] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  273.948108][ T8967] F2FS-fs (loop2): Found nat_bits in checkpoint
[  273.982382][ T8967] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  273.989704][ T8967] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  274.020714][ T5998] attempt to access beyond end of device
[  274.020714][ T5998] loop2: rw=2049, want=45104, limit=40427
[  274.382858][ T8988] loop2: detected capacity change from 0 to 2048
[  274.434462][ T8988]  loop2: p3 < > p4 < >
[  274.438798][ T8988] loop2: partition table partially beyond EOD, truncated
[  274.446217][ T8988] loop2: p3 start 4284289 is beyond EOD, truncated
[  274.487220][ T3569] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  274.532408][ T8993] loop4: detected capacity change from 0 to 256
[  274.572395][ T8993] exfat: Deprecated parameter 'utf8'
[  274.577758][ T8993] exfat: Deprecated parameter 'utf8'
[  274.583151][ T8993] exfat: Deprecated parameter 'utf8'
[  274.588460][ T8993] exfat: Deprecated parameter 'utf8'
[  274.605044][ T8993] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d)
[  274.606541][ T8995] tmpfs: Bad value for 'mpol'
[  274.870531][ T8997] loop2: detected capacity change from 0 to 32768
[  274.883622][ T9005] loop4: detected capacity change from 0 to 8192
[  274.951549][ T9005] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  274.961640][ T9005] REISERFS (device loop4): using ordered data mode
[  274.968167][ T9005] reiserfs: using flush barriers
[  274.981311][ T9005] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  275.003736][ T9005] REISERFS (device loop4): checking transaction log (loop4)
[  275.027377][ T9005] REISERFS (device loop4): Using r5 hash to sort names
[  275.046999][ T9005] reiserfs: enabling write barrier flush mode
[  275.065003][ T9005] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  275.905630][ T9016] loop4: detected capacity change from 0 to 32768
[  275.946295][ T9016] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (9016)
[  275.955869][ T9018] loop2: detected capacity change from 0 to 2048
[  275.994164][ T9016] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  276.002951][ T9016] BTRFS info (device loop4): turning off barriers
[  276.009397][ T9016] BTRFS info (device loop4): allowing degraded mounts
[  276.010412][ T9018]  loop2: p3 < > p4 < >
[  276.016388][ T9016] BTRFS info (device loop4): force clearing of disk cache
[  276.016413][ T9016] BTRFS info (device loop4): use zlib compression, level 3
[  276.016432][ T9016] BTRFS info (device loop4): turning on barriers
[  276.016450][ T9016] BTRFS info (device loop4): use no compression
[  276.020780][ T9018] loop2: partition table partially beyond EOD, 
[  276.027868][ T9016] BTRFS info (device loop4): using free space tree
[  276.027887][ T9016] BTRFS info (device loop4): has skinny extents
[  276.060696][ T9016] BTRFS info (device loop4): clearing free space tree
[  276.063432][ T9018] truncated
[  276.067612][ T9016] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  276.077345][ T9018] loop2: p3 start 4284289 is beyond EOD, 
[  276.077566][ T9016] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  276.089296][ T9018] truncated
[  276.111195][ T9016] BTRFS info (device loop4): creating free space tree
[  276.119482][ T9016] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  276.129105][ T9016] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  276.389244][ T9039] loop2: detected capacity change from 0 to 256
[  276.471194][ T9039] exfat: Deprecated parameter 'utf8'
[  276.476999][ T9039] exfat: Deprecated parameter 'utf8'
[  276.482848][ T9039] exfat: Deprecated parameter 'utf8'
[  276.488182][ T9039] exfat: Deprecated parameter 'utf8'
[  276.506136][ T9039] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d)
[  381.820922][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  381.828177][    C0] rcu: 	1-...!: (2 ticks this GP) idle=d79/1/0x4000000000000000 softirq=29278/29280 fqs=4 
[  381.840122][    C0] 	(detected by 0, t=10502 jiffies, g=39637, q=89)
[  381.846647][    C0] Sending NMI from CPU 0 to CPUs 1:
[  381.851852][    C1] NMI backtrace for cpu 1
[  381.851872][    C1] CPU: 1 PID: 9043 Comm: syz-executor.4 Not tainted 5.15.161-syzkaller #0
[  381.851888][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  381.851899][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0xc/0x60
[  381.851933][    C1] Code: 89 fb e8 17 00 00 00 48 8b 3d 98 13 64 0c 48 89 de 5b e9 47 f7 48 00 cc cc cc cc cc cc cc 48 8b 04 24 65 48 8b 0d e4 14 82 7e <65> 8b 15 e5 14 82 7e f7 c2 00 01 ff 00 74 11 f7 c2 00 01 00 00 74
[  381.851945][    C1] RSP: 0018:ffffc90000dd0cb8 EFLAGS: 00000046
[  381.851958][    C1] RAX: ffffffff842dad05 RBX: ffff888074772b40 RCX: ffff88805ca5d940
[  381.851969][    C1] RDX: 0000000080010003 RSI: ffff888074772b40 RDI: ffff888074772b40
[  381.851979][    C1] RBP: 1ffff1100e8ee568 R08: ffffffff842dacf7 R09: fffffbfff1bc8d86
[  381.851990][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffff8880b9b2a350
[  381.852000][    C1] R13: ffff8880b9b2a350 R14: ffff888074772b40 R15: ffff888074772b40
[  381.852011][    C1] FS:  00007f136719f6c0(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[  381.852024][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  381.852034][    C1] CR2: 00007f4ce49f098c CR3: 000000007841a000 CR4: 00000000003506e0
[  381.852047][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  381.852055][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  381.852064][    C1] Call Trace:
[  381.852069][    C1]  <NMI>
[  381.852076][    C1]  ? nmi_cpu_backtrace+0x39f/0x4a0
[  381.852092][    C1]  ? read_lock_is_recursive+0x10/0x10
[  381.852108][    C1]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  381.852122][    C1]  ? unknown_nmi_error+0xd0/0xd0
[  381.852143][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  381.852157][    C1]  ? nmi_handle+0xf7/0x370
[  381.852172][    C1]  ? __sanitizer_cov_trace_pc+0xc/0x60
[  381.852186][    C1]  ? default_do_nmi+0x62/0x150
[  381.852201][    C1]  ? exc_nmi+0xa8/0x100
[  381.852215][    C1]  ? end_repeat_nmi+0x16/0x31
[  381.852231][    C1]  ? timerqueue_add+0x47/0x280
[  381.852245][    C1]  ? timerqueue_add+0x55/0x280
[  381.852260][    C1]  ? __sanitizer_cov_trace_pc+0xc/0x60
[  381.852275][    C1]  ? __sanitizer_cov_trace_pc+0xc/0x60
[  381.852289][    C1]  ? __sanitizer_cov_trace_pc+0xc/0x60
[  381.852304][    C1]  </NMI>
[  381.852308][    C1]  <IRQ>
[  381.852312][    C1]  timerqueue_add+0x55/0x280
[  381.852327][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  381.852345][    C1]  enqueue_hrtimer+0x1a0/0x390
[  381.852361][    C1]  __hrtimer_run_queues+0x6b6/0xcf0
[  381.852382][    C1]  ? hrtimer_interrupt+0x980/0x980
[  381.852395][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  381.852412][    C1]  hrtimer_interrupt+0x392/0x980
[  381.852435][    C1]  __sysvec_apic_timer_interrupt+0x139/0x470
[  381.852453][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[  381.852469][    C1]  </IRQ>
[  381.852477][    C1]  <TASK>
[  381.852483][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  381.852497][    C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xd4/0x130
[  381.852514][    C1] Code: 9c 8f 44 24 20 42 80 3c 23 00 74 08 4c 89 f7 e8 62 6c a2 f7 f6 44 24 21 02 75 4e 41 f7 c7 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 57 ac 2f f7 65 8b 05 d8 b2 da 75 85 c0 74 3f 48 c7 04 24 0e 36
[  381.852525][    C1] RSP: 0018:ffffc900036476a0 EFLAGS: 00000206
[  381.852537][    C1] RAX: f53c03b134fe8600 RBX: 1ffff920006c8ed8 RCX: ffffffff81631688
[  381.852547][    C1] RDX: dffffc0000000000 RSI: ffffffff8a8b2a00 RDI: 0000000000000001
[  381.852557][    C1] RBP: ffffc90003647730 R08: dffffc0000000000 R09: fffffbfff1f7f221
[  381.852567][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  381.852577][    C1] R13: 1ffff920006c8ed4 R14: ffffc900036476c0 R15: 0000000000000246
[  381.852590][    C1]  ? mark_lock+0x98/0x340
[  381.852606][    C1]  ? _raw_spin_unlock+0x40/0x40
[  381.852625][    C1]  __pagevec_lru_add+0x155a/0x18d0
[  381.852644][    C1]  ? lru_cache_add+0x7e0/0x7e0
[  381.852662][    C1]  lru_cache_add+0x556/0x7e0
[  381.852677][    C1]  shmem_getpage_gfp+0x1b6f/0x3190
[  381.852691][    C1]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  381.852718][    C1]  ? shmem_getpage+0xa0/0xa0
[  381.852731][    C1]  ? fault_in_safe_writeable+0x250/0x250
[  381.852749][    C1]  shmem_write_begin+0xce/0x1a0
[  381.852765][    C1]  generic_perform_write+0x2bf/0x5b0
[  381.852786][    C1]  ? grab_cache_page_write_begin+0x90/0x90
[  381.852801][    C1]  ? file_remove_privs+0x610/0x610
[  381.852816][    C1]  ? rwsem_write_trylock+0x166/0x210
[  381.852835][    C1]  __generic_file_write_iter+0x243/0x4f0
[  381.852853][    C1]  generic_file_write_iter+0xa7/0x1b0
[  381.852869][    C1]  vfs_write+0xacf/0xe50
[  381.852887][    C1]  ? file_end_write+0x250/0x250
[  381.852904][    C1]  ? __fget_files+0x413/0x480
[  381.852922][    C1]  ? __fdget_pos+0x1e9/0x380
[  381.852935][    C1]  ? ksys_write+0x77/0x2c0
[  381.852950][    C1]  ksys_write+0x1a2/0x2c0
[  381.852963][    C1]  ? print_irqtrace_events+0x210/0x210
[  381.852977][    C1]  ? __ia32_sys_read+0x80/0x80
[  381.852992][    C1]  ? syscall_enter_from_user_mode+0x2e/0x240
[  381.853008][    C1]  ? lockdep_hardirqs_on+0x94/0x130
[  381.853023][    C1]  ? syscall_enter_from_user_mode+0x2e/0x240
[  381.853039][    C1]  do_syscall_64+0x3b/0xb0
[  381.853053][    C1]  ? clear_bhb_loop+0x15/0x70
[  381.853066][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  381.853080][    C1] RIP: 0033:0x7f1368624c6f
[  381.853100][    C1] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 b9 80 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 0c 81 02 00 48
[  381.853111][    C1] RSP: 002b:00007f136719ee80 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  381.853124][    C1] RAX: ffffffffffffffda RBX: 00000000013bd7ef RCX: 00007f1368624c6f
[  381.853134][    C1] RDX: 00000000013bd7ef RSI: 00007f135ed7f000 RDI: 0000000000000003
[  381.853143][    C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000005513
[  381.853152][    C1] R10: 00000000000003c8 R11: 0000000000000293 R12: 0000000000000003
[  381.853161][    C1] R13: 00007f136719ef80 R14: 00007f136719ef40 R15: 00007f135ed7f000
[  381.853198][    C1]  </TASK>
[  381.853846][    C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g39637 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  382.447457][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  382.457602][    C0] rcu: RCU grace-period kthread stack dump:
[  382.463481][    C0] task:rcu_preempt     state:R  running task     stack:26712 pid:   15 ppid:     2 flags:0x00004000
[  382.474255][    C0] Call Trace:
[  382.477527][    C0]  <TASK>
[  382.480461][    C0]  __schedule+0x12c4/0x45b0
[  382.484960][    C0]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  382.490850][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  382.496748][    C0]  ? __mod_timer+0xa8e/0xeb0
[  382.501338][    C0]  ? release_firmware_map_entry+0x190/0x190
[  382.507357][    C0]  ? mod_timer_pending+0x20/0x20
[  382.512311][    C0]  ? lockdep_softirqs_off+0x420/0x420
[  382.517698][    C0]  schedule+0x11b/0x1f0
[  382.521857][    C0]  schedule_timeout+0x1b9/0x300
[  382.526710][    C0]  ? console_conditional_schedule+0x40/0x40
[  382.532606][    C0]  ? update_process_times+0x200/0x200
[  382.537986][    C0]  ? prepare_to_swait_event+0x321/0x340
[  382.543526][    C0]  rcu_gp_fqs_loop+0x2bf/0x1080
[  382.548376][    C0]  ? dyntick_save_progress_counter+0x230/0x230
[  382.554528][    C0]  ? rcu_gp_init+0x1140/0x1140
[  382.559294][    C0]  ? finish_swait+0xc5/0x1d0
[  382.563876][    C0]  rcu_gp_kthread+0xa4/0x360
[  382.568458][    C0]  ? _raw_spin_unlock+0x40/0x40
[  382.573309][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  382.578427][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  382.584323][    C0]  ? __kthread_parkme+0x15c/0x1c0
[  382.589346][    C0]  kthread+0x3f6/0x4f0
[  382.593406][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  382.598524][    C0]  ? kthread_blkcg+0xd0/0xd0
[  382.603194][    C0]  ret_from_fork+0x1f/0x30
[  382.607632][    C0]  </TASK>
[  382.610639][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  382.616947][    C0] NMI backtrace for cpu 0
[  382.621259][    C0] CPU: 0 PID: 9058 Comm: syz-executor.2 Not tainted 5.15.161-syzkaller #0
[  382.630368][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  382.640929][    C0] Call Trace:
[  382.644216][    C0]  <IRQ>
[  382.647756][    C0]  dump_stack_lvl+0x1e3/0x2d0
[  382.652706][    C0]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  382.658708][    C0]  ? panic+0x860/0x860
[  382.662876][    C0]  nmi_cpu_backtrace+0x46a/0x4a0
[  382.667816][    C0]  ? __wake_up_klogd+0xd5/0x100
[  382.672755][    C0]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  382.678901][    C0]  ? _printk+0xd1/0x120
[  382.683056][    C0]  ? cpu_online+0x1f/0x40
[  382.687409][    C0]  ? panic+0x860/0x860
[  382.691500][    C0]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  382.697579][    C0]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  382.703572][    C0]  rcu_check_gp_kthread_starvation+0x1d2/0x240
[  382.709726][    C0]  print_other_cpu_stall+0x137a/0x14d0
[  382.715215][    C0]  ? print_cpu_stall+0x600/0x600
[  382.720176][    C0]  ? __lock_acquire+0x1ff0/0x1ff0
[  382.725222][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  382.730504][    C0]  rcu_sched_clock_irq+0xa38/0x1150
[  382.735815][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  382.740674][    C0]  ? hrtimer_run_queues+0x163/0x450
[  382.745864][    C0]  ? account_process_tick+0x232/0x3a0
[  382.751235][    C0]  update_process_times+0x196/0x200
[  382.756426][    C0]  tick_sched_timer+0x386/0x550
[  382.761271][    C0]  ? tick_setup_sched_timer+0x2d0/0x2d0
[  382.766808][    C0]  __hrtimer_run_queues+0x55b/0xcf0
[  382.772023][    C0]  ? hrtimer_interrupt+0x980/0x980
[  382.777188][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  382.783273][    C0]  hrtimer_interrupt+0x392/0x980
[  382.788314][    C0]  __sysvec_apic_timer_interrupt+0x139/0x470
[  382.794289][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[  382.799917][    C0]  </IRQ>
[  382.802836][    C0]  <TASK>
[  382.805756][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  382.811730][    C0] RIP: 0010:smp_call_function_many_cond+0xa93/0xd90
[  382.818308][    C0] Code: 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 4c cf 0b 00 41 83 e7 01 75 07 e8 e1 cb 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00
[  382.837985][    C0] RSP: 0018:ffffc90003067c20 EFLAGS: 00000246
[  382.844051][    C0] RAX: ffffffff81748f14 RBX: 1ffff110173680b9 RCX: 0000000000040000
[  382.852015][    C0] RDX: ffffc9000a992000 RSI: 000000000003ffff RDI: 0000000000040000
[  382.859974][    C0] RBP: ffffc90003067d48 R08: ffffffff81748ee4 R09: fffffbfff1f7f248
[  382.867938][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  382.875985][    C0] R13: ffff8880b9b405c8 R14: ffff8880b9a3b3c0 R15: 0000000000000001
[  382.883956][    C0]  ? smp_call_function_many_cond+0xa84/0xd90
[  382.889931][    C0]  ? smp_call_function_many_cond+0xab4/0xd90
[  382.895915][    C0]  ? kvm_io_bus_sort_cmp+0x110/0x110
[  382.901208][    C0]  ? smp_call_function_many+0x30/0x30
[  382.906570][    C0]  ? __rwlock_init+0x140/0x140
[  382.911331][    C0]  ? kvm_io_bus_sort_cmp+0x110/0x110
[  382.916622][    C0]  on_each_cpu_cond_mask+0x3b/0x80
[  382.921777][    C0]  hardware_enable_all+0x77/0x120
[  382.926796][    C0]  kvm_dev_ioctl+0x1210/0x2030
[  382.931569][    C0]  ? __fget_files+0x413/0x480
[  382.936248][    C0]  ? kvm_reboot+0x40/0x40
[  382.940576][    C0]  ? bpf_lsm_file_ioctl+0x5/0x10
[  382.945509][    C0]  ? security_file_ioctl+0x7d/0xa0
[  382.950702][    C0]  ? kvm_reboot+0x40/0x40
[  382.955024][    C0]  __se_sys_ioctl+0xf1/0x160
[  382.959614][    C0]  do_syscall_64+0x3b/0xb0
[  382.964021][    C0]  ? clear_bhb_loop+0x15/0x70
[  382.968694][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  382.974575][    C0] RIP: 0033:0x7f4ce48b7f29
[  382.978988][    C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  382.998756][    C0] RSP: 002b:00007f4ce34310c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  383.007170][    C0] RAX: ffffffffffffffda RBX: 00007f4ce49eef80 RCX: 00007f4ce48b7f29
[  383.015142][    C0] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000003
[  383.023145][    C0] RBP: 00007f4ce4927074 R08: 0000000000000000 R09: 0000000000000000
[  383.031141][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  383.039219][    C0] R13: 000000000000000b R14: 00007f4ce49eef80 R15: 00007ffe4ef7ab68
[  383.047213][    C0]  </TASK>