last executing test programs:

5.882923614s ago: executing program 0:
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)

5.817305224s ago: executing program 3:
r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000200), &(0x7f0000000140)='./file0\x00', 0x400, &(0x7f0000000500)=ANY=[@ANYRES32=r0, @ANYRES8=0x0, @ANYRES32, @ANYRES16=r0, @ANYBLOB='\x00\v', @ANYRESOCT, @ANYBLOB="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"/531, @ANYRESOCT=r0], 0x2, 0x1cb, &(0x7f0000000300)="$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")
syz_emit_ethernet(0x1389, &(0x7f0000002640)={@empty, @link_local, @val={@void, {0x8100, 0x7, 0x0, 0x1}}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x134f, 0x3a, 0x0, @private2, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, [{0x18, 0x18, "2734f4c2432771d60c51bb3d882fc23bef81f4eeb51be6739dacd32a08adfb5099437825119113a43509a9d72c5be127e3e057f8f1a365a817f49b630f5c2ff0fff653ef7c60b4169afe6175ace4b50e0ecbcb851d1c2ccd0afc318ff5cb9a666ccae14d21f241eebd8a9de0e663a0efb7e4423264d13e80f5349ac65676370f26ddf2f644d6bf4d581fe5b8d4aa45df8a20cb5e4d3426e845fbc9e255f6c57350169d40d6d62b90f5d61c77adbedab4c154c272f66ea138a75e1bfad17a1b7539"}, {0x0, 0x7, "5524f758153c6ceb36e5e1ea1c727dc2311df5dbef6f1fe74c177c694f7f18d5973dd266cf243f51ee7782e1b2469de51109cf2c447089"}, {0x3, 0x1, "826b755fe06fdd9b93"}, {0x14, 0x200, "b67901e6bab45065642e9eb95fb1534f6e1e50b55f62a60c2f82f56d9ec1c640912afeb00d692e6785d43ec9757d7a193cf2557accdbd117fca1a809f8d02a46b14f8d845e7960a61a0367a87c13e81c6a80883013816d7e6d69f5abdefe2e2756b54f1372b20ad79b9a737b95750ecbb4e3b5ce21c9549755f5510490cb3343bc2d0c3a0a1990b42ba0b22605a252c84f6485ac4a4159a30227b38e2d5a002bcbb0949076f25d4f4bd8e398f53a13f72302ea6b4537c3dc1088e16133cea9c79374bb1de16148baa829444c599dad23aa3cbec6b1f264fa567e894ad7e5c5c4cb8a254087aecb979329d0250529b9161651aeff9b3bb7be602459bca51efe630e868878d6eda16c75d10a81c3b8acd117b0a136db7df877d63a3bf0759d3a8211a90ed2aa4d18c2f2a31fa141c8ca743ce2c44228337abf7a290a48724da9d5fb64d536d1c5cd747ca4b89da55ce08675a24e84d74ef6c15a319e6509f2bfcdd1798f53fc989e8aaa3b74f1dc6df4f9c1bc211af4bfd3fc188a57fe18765b726ca39b9911542d25d6d6eb869f5622a97bcb53ea2d015e677479f8d10bbd77fd0e2fefa677a88f8dc9eb6caf580faff7f13e00aa2db6c9347adbcdbab56de8d2d1d8c43f2eb72d317e4830407d2d9f24e309ade0affed2fc7856c2ccd34435ec67fe848648bad2eced1e96feb271eaefa64d95ad450c89afce5bd029f6895208d87b310f6c515f71fd1b6da59d2e09857e46dbac6f2f02ded96107f062aed41e4fd9e1be2bb66d6797bd87536cdeecba9ae6414ca4101c3d0244919724237a101221f3cd115577ea49c1cf790a8114b35867d9351640a26808d5d14885645197007689093927b35af0f8ebfd175c412eec222feeb6a2a5ce0c9fa912b3a3ae8624c06c2e83222658d15753cd7c938f9864c11e6875e26b2ac67fdfe356c99dd4f80950b2648ea7786adb2175e5f4dae17e975f0328e527fdf7bf964bad863606ac4052725c388e65cfee576330c3399db686a7e508824f8227d04dc00cb0715b51ef44b8fa3fb3fd9c2a7cc76e260d8551edabcec8a15dd513a0adc459b39cb69f3ade0b9fa35bd487b2f4c6640a80750bc3e676462f2e6ffadf7da07347f59dfa3963bc0db8e9aa081eae618d10d17f5b0da093b18fb0c3e620085f3832a3b744c027c8fa6fa8b067d26a97c0de399161c0218f08c914d80fa37d759708e42339e0dfb022b8ad18391257950031356947a2ac6487319f89952ce8609a51df53d7fbf4da3cce6498722c41eadb7d17ea68e8029561fde2a182db9fc61b26698bfd3af7ef2d4256e7cf7f1c844037501276478d27005a4f01aa08412b67a5c1ab5b0eeb5c9cc76fd2386cb172b8a27ff8c2ce5a46313034a7ef27ed70d98b35a5415220b83936a825581256ec172e59ed27a5da71b958a7277695fc8885e5231cb440932277582f27c0804f05d309ab8df49fe50cc268d7d6b0556ca9334cdc524dd002152d7361acb82a20face126bd8a6a81a12badfb56200caea81a6c3fd397ee094e94e837c9ee27c1fbbd023214a05d96d6cd5841f760b37fb612013e6120c93d08ee0683a11f47c481ba3a08e6269148d4fe0259687794102ba43d55084422961d81af49936471d80553f870b7a39194799ea590b66dc03c3650d558d290c5cb613ebd9e82c635254a94730d9c1f2d66f0e30d0aa5fbda0c8a1e891ce5189ff50c64fb4b540fa95065888a8d3aecd8afda1fe41957c71e17f64156628a4b82ffcde69588905fe42f4690369249a675fba959aa4616ea438f6adb6b40252f677583e0061d11103980be17c5fc7a2b31443bb089e5526e656cbfd8c0a0f57ce4712414451cda7c408b89c6d6cea93d9f4b50b987cf6897c05eb2cab406ebdc8eb6014526ddd528d7d9259a7b4484e2629af5d8aab59903f8f41786f6dd9c085e3e50d0f3058a62800fe5f6ba189f2d6f30a16bd0ed834f1711cbb62993d889ccdd19a07cacf9fa527a28fcb1454ac92e3bd1268cbb87f57507cb887e33e503a61e1420992097239469a844347e6efea2eebbfddffb2f7cfe0c7ebb22c5313a2d18792c6dee8e4711436c8d31efb16f33663d7f8ee3d4b6ce2f6a1a967fbaba9c264396f63d907a9b3cc5ae22d51918dbbc55edb4cf90be19d09108f6df421d55f4fe8d7f18c30eec1bc36e407c77899839f58994f627b1a44c372873e0b22b19f70df8278708e9297c9849f0c03d226298d447178f8bdceb1789128a3122be5faadef4240a24e9bd3f2035a052d9563a35d1a6df99554e88905183fcbd0fc8fba4c26b5b9d319108f9515811afbce606aefa876e70709fb95a931ac48f4d7c3d808378a1fbb905f116cebcece71e430b6e08c7abd2cd06990a84852c84dd28d27cc0b96e4699afc760b4ddca92d442aa8cdb6c6290915aa35a7bb972a5af383babccc271711a67318fc6a8c408ebd282f2067b75d65612674cf799e24a33e3f540e7dcc92258568ec383528b5e135c4f05c4f927bcab60b6c18dab070565dee44cfb037c3785c5d35475141692fe6f8456d80b882504ad1b662a5c8b2595178ea4aee0c4f905c11209d4c1a5aecd9acae406f2118f5e26f11fcdfebc8b0bc012207f79cfa7ef600c31b7cfa4d3d798a9f8f4793a3ae47879280a9b75d57230dbbe25d7b3e0b99edf36b8178066d8411d37654c50ae0ba70dc8d211f9072c91572ac33f9448ecb11b332179e96dbcecc78e4a0b481a838954b3d182b3c8b3ad091cb33fa580fb94efce950fd9b1773fb3c8457b7ef74a92a3dee7abab669b32710b6dce71fcf3215a894135d211d30e68dd17adaff4c021890d45e03cac92a8af9ca283186fc0b89c9049a8df3d13621fd67774984117cd5e4a5c01967061c96a63266e29bed04fca5f15c21975f418bda03acafeabb483d2421f97d957cd1b77fd7345ea067c25f077f36c3c3c84c87dbc243dd4a9afd3f07c247b31606959c11e7b0d3fb209e953c6cde0c3c593d77c681e3439606609309d3abe9ee6e13d9da87673920d49c0843c964b07fd6f1a7ac147baddeba26deb165f2c083291f2382b3f9cc359873513a612c2d236298f3a3b61dacf1015c7d89455abab1c2c0c8796726e057d0440b874e981d58d2efde2dab382d90adf7435314291bcd98a62e476339118a098538bf527094b685ca1e17b82cc3ee29cbc8bfda415b51f8e009eec55c999590ab14857ba22c75aff9e16a8645e55e57669b32125762dbc55e5dee09fd5bb21f0ef3e132826946ab30c4645df98febb09839a46188877c8ae3fb48a62bc3c0902f60398fae390b52a401d8e78e92c4028e372e801d5a670108a196598ed502cf03e9783deafd944ccb86f8607a2c9db12b0aae161c4e639948814677b9a6bbf26396da5a151418d56658475a40ea8a6ba5536be991170ad04edbf29a21ca3d3bcc467bfd804dac5cd5cd64f1d411c11808854d194cf5dddf64bafa9a53182be8021f99063fa7f82b4d6057c1fbca8f9e57d78c3106f6757cdfaac08b277738299aeaafd58d2f8951a979a49c2844f1447962c5e0720006809a3cca4bb17152ba3a7ffad679d8361fc459ed8f7add42ce25f7529da7dfb8b0808bad9e809ef517a56385820ff27a4ec19be145c0ecd05c494ce25bed38d3fad3407b4045195f1ec640cdb7beaaa5ac7071ccc2812b10c3a9bf349893790336dc9ecc0119158fd08b573bc80e102b9d2306080ea213e67fa5e78f38565203b0e371b95f42161aa1aed1fb0b38b3aea4252285f226a362033088b8d4d8aa91ea8de6307bb9e0524ccaacd2a1ad55e056582a9d35786b653a7bd409c3b0975342f8e7b514c4cf315fae44f12c26884f1b562b3cdddee91e8b7c0bf344ef2e160b0427e8bffa1c9e2ca79aa0f0e286cc66238cbe3b3805325e084b50a2951058a8752b2c9d695edd6596b3c3f20d95639f733ef3e8f8a373ae38c4c455912a9af7e73ec01470d1ad87d9ad46ebbaffb1a78ead36e5cb104bed5bf977ae9ddc8b207d09fe1b574bf55594089e52f0a3be9d18ebf8a70434422ae6851b0f1310a285b55f36285c17bbbcd82e3bd7c50928fd18472411e7776df66bbd69932be9d68afa110f05695533f573861a12a19dfd337547ceb2ee2ec7b2db52328493b43d91a06dc8b1b6e73491646a17660ee3fc36eb66cdbe0e7ee2e083f82deffc1457e8f8ef842c0a7b3b6824f312f3c045e31ec8f1472f4162815d6a5c5b0d7a8a22979d9da2f58499dc82225766085908047d644b8228a98487447f12833208ec571b421527e0067540fea58448d0ef426d2e75d91d01ae2a76e6eae4cd10e8eb74c8596dd94600248b75ced1ca04fd8955e7583fffbcdfff70045f65de4ce12f7c91524e385d5d033ae6d80acf05de272e359a21a52660488f6fb85ae91153f72358dae336aa1957ee7ca9e15c94e74a3067dfa3eeb1069fe5e1b32acbe3b67eb9a888c5e5a5afdc8f1259f1407886a5389725dc57cff23ab17d4155e2074b7598d173f08814cc4d4d8df3a90af12e3860ae036d3049dcc7aadd519802abe0111ad9d4b767e7d49e4e6d37bfc13bff28b17aef00fd2640f1fbe150b42b6845c3f5c79081508a455b042f2e666893c0292f48b9228fc998e69d0d0ada2b3eb2eaf3916394c73c08fbd151f051b33187e843b045e04a9f4c6cb0bcd3ae47f967438466162aeee2d1e08a242bdb10f4983706cbf4964bb7301faf0780c115ba3314955a0e40fefad87d2b179fff56c1d2ad969f1d118a71638f62423128ac641537cfa361c7be0e843eae26227b4df6a7b7969797cdcb2f4e8c0527416e37edbf814117a59fb85e83b427bf8ff91585e368264856beabb1b6fbc9ea0cd1a0de5411c6b5a023f8ae1ae7904686e0a7d2aa0913b0bc6c988d480e7834130eb81d01d1be160d39968c609883820c8d70c8b4080e3221f9c94e5e4194ba2ba052ed25d6b2ac8cfe06677c73e66e676ac6cd0643f66b0e5f343eb90c0ddf8161ebfb47febbcfb582d446b0cd78017722403922af20def73153d6bbebdb554a1e40af45dfd13b9fc90d551a87d4d5afe5a2073e4b624c575d5a2f44523df58186e88b7fbbcea368978bd0500da1d25ee7ca6ec33791f9a59168a87f5fc1ab2923325fad2ac9d9b544f191e7a38e08c67af99ba78366457d7ec96c39fb25980af08c35e11c7ff0047014cc53da01d4f80c72347714689957a55c975ef3b986246e46f7b55ff978968f1c08b5f0e1a1f4dbd67e05834661d6464a59f7aa5748a16ff1fbcace62ed94f317b1e4378a22156fa29f6731389dbafcea9c2b457a36add77026466db196f8079e792bed54edac6b18d9925d6dd889e4cef8a12ef028c3497111439e156a5b9773008c069a00888c521933a8acbe3de6cbb10d5baac99a7acd214b3d88f5965e1827740a5912140b5a40d7f759c03b9df04d4616682589db4ee8cb3412f3cea8e8a08a49816c5be91aa9b5ae0388c6f86024b7ee1aacac8a267d59b6c8f48e6dcd71a350b0b2fcdd54ba48f0da0eb9ffe43dfd975f61b70e7361df2be97c706b609a4dc42050731be5246ce8e77486502745eb03e282960ec6a6480c6e77da559f34158a0b59867b2f19a54cfe168921007f98173313c9a040ecb6d426a8289455cf97a5d17ac4ee6698b26165f9bb5f22663dea5ecc904c5d6221a949dd3d725b6d5052040930c35d538e6db60855a3b85475f4d760be4c4a6dea59120efc8193e8e0327576086b1c1c1b564fd1d7f424bb0e043aad0f41a954ebf1bfb9f8"}, {0x22, 0x15, "776808c584b367f97f168aa3e6bf42056dc12d84d09050a9542cc19f215203e7a1ac982903cd47e562a7707eb90a9a3f11f12fef91ceedc3492c7a95c026e143895c7fa5fbd13d8d9a99192c79d8c655ffc5d26c0f475915b1ac427741daca9ba5ec8bb9a1d75ca764e03b8c500b122078528dd54169607c8addd906140842fe1e94d635357cb8dadc436e25b35b7bb2e723271ffa8dc33ce76f1c1aa426f1018ecbbc3ddc6a502448b432"}, {0x5, 0x18, "be56d80381d4768942a1839909b96109d9297777ba13b288e64c9771ac6d455696cb3c95f031bae85546db8a93377a16e6fa66e6ea7d43e4c5efa509f2c58662292a8d509ed6553c7bb4984ca2c2db04ca369ce245de9fb69fc83a66dade7be0e812cffae1fefab8332072b7165a8f0a8fe4a407d23357409cf8957fc84668635a1fa5d2157c65235bc5877aedfb83939dc7472345bbfa45437e1014b2139f97a234c93d44a463c65fb0e3a8cd7e938a84ab2db8fc690b00"/195}, {0x18, 0x15, "1186238f79b5e3709e72c3c88b8ec73189efdbef68b18dd9d864bcf671f0cb418bdc84622dca8d3aa79bb25547190161ecf3412cfbb8c50374a84699b18f2060180a532fbc9ff54b4d6c9cf88a0b9b0e0e86b46f2b1f3f08b793b592ba072b7e6491f3da6817c9149b152ef7f6ea9542e0e5be3546eac26a26ee6ef7158bf1055d13e4c352496c36d7666c3981cb90ded640a6ce9581d6b4a16f44893112d17323cd1d7cdfb33fb8"}, {0xe}]}}}}}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$cgroup2(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, 0x0)
request_key(&(0x7f00000000c0)='logon\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0xfffffffffffffff9)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYRESHEX], &(0x7f0000000100)='GPL\x00'}, 0x90)
r1 = socket(0x10, 0x803, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000900000095"], 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10)
r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NL80211_CMD_REGISTER_BEACONS(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x28, r4, 0x7, 0x0, 0x0, {{0x2}, {@val={0x8, 0x2}, @void, @val={0xc, 0x99, {0x1}}}}}, 0x28}}, 0x0)
syz_emit_ethernet(0x200000, 0x0, 0x0)
sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x242, 0x0)
write$binfmt_script(r5, &(0x7f0000000240)={'#! ', './file0'}, 0xb)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000000000000000000000000001095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
epoll_create1(0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x50, r6, 0x0)
ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x10000, 0x0, 0x8, 0xffffffffffffffff, 0xe})

5.730909887s ago: executing program 0:
syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @broadcast, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, '\x00', 0x8, 0x0, 0x0, @empty, @mcast2, {[@routing={0x0, 0x0, 0x0, 0x0, 0xff00}]}}}}}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
write$binfmt_aout(r1, &(0x7f00000010c0)=ANY=[], 0x1a3)
write$binfmt_misc(r1, &(0x7f0000000040)=ANY=[], 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})

5.486966504s ago: executing program 3:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000004d850d5ccc58858a34ab90000000000000000000000010000050000000010000000"], &(0x7f00000005c0)=""/160, 0x4a, 0xa0, 0x2}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4b4", &(0x7f0000000380), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000dc2d38981e95723dadae485904c0ec08ba281dc8d8b94b0a73", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x43, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd31, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f00000005c0)={[{@shortname_winnt}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@utf8no}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_lower}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@nonumtail}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8no}], [{@subj_user={'subj_user', 0x3d, '\\$*[)*:\'\\'}}]}, 0x6, 0x2d3, &(0x7f0000000a40)="$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")
ftruncate(0xffffffffffffffff, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000040000000000000007000000185200000900009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000940)=ANY=[@ANYRES8], 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2506000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008185000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='skip_task_reaping\x00'}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0})

5.441899061s ago: executing program 0:
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000240)='./file0\x00', 0x2000084c, &(0x7f0000000700)=ANY=[], 0x81, 0x14f5, &(0x7f0000001580)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='./file0/../file0/file0\x00', 0x0, 0x2809c11, 0x0)
mount$bind(&(0x7f00000006c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0xadc51, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0/../file0/file0\x00', 0x0, 0x2885013, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f000000c1c0)={0x2020}, 0x2020)

5.233838903s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x5004, 0x7, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000000)={r0, &(0x7f0000000200), &(0x7f0000001540)=""/166}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000001300)={r0, &(0x7f0000000200), &(0x7f00000000c0)=""/109}, 0x20)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, <r2=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000007d2700000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='track_foreign_dirty\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='track_foreign_dirty\x00', r5}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r6, &(0x7f0000000180), 0x40001)

4.428573586s ago: executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000580)=[{&(0x7f0000000640)=""/102396, 0x18ffc}], 0x1, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x1000, &(0x7f0000000240)=""/4096}, 0x80)
syz_emit_ethernet(0x46, &(0x7f0000000740)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @loopback}, "1400000023000000"}}}}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map, r1}, 0x10)
r2 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)

4.33137848s ago: executing program 0:
madvise(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x1)
madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1)

4.20042397s ago: executing program 0:
futex(&(0x7f0000000000), 0x5, 0x0, 0x0, &(0x7f0000000300), 0xc1000004)

4.030023517s ago: executing program 1:
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000000c0)={0x68, 0x29, 0x0, {0x0, [{{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}, {{}, 0x0, 0x0, 0x7, './file0'}]}}, 0x68)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x0, 0x0)
pipe2$9p(&(0x7f0000001900)={<r2=>0xffffffffffffffff}, 0x0)
recvmmsg(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}})

3.981844634s ago: executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x18}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)

3.788979383s ago: executing program 2:
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRES8, @ANYRES16], 0x1, 0x1e5, &(0x7f0000000400)="$eJzs20tu00Acx/HfJGkSQ4HyXCCkILGADUmaikqsWs7BqmrTqsIFhNkkQsJcAM7AObgMB4AFO1YY+ZGm9aM1E9y0zfez8Xh+/dvjuu6MolgAFtamHsrIqBnuPGivfLltStU1qx4YgMoFyfZPYMOxqgJwXtR/p3uSFYA/n/EAOCs/X0jfJf349WFb9eyqPsz9SV5rZfNP0v1Gkpu2nPT64qv0eFJvrmTrG/E2zq/mHv/Jo8n5l3VN13VDK7qpW8aXifKdw/p7VmsgAAAWjVH3tLwr1QvSePLOrgqmlrT7LTurTzW1u+8OB6fka4V5K8q722/cnRPOAiBPrdTzX6wePX/9wrwR5avJXttukAAq4Y3GLbnu8J03Cif5qDF+teX+U8OxqirTMJUdOb/RTPUEHyUd9mzaHjnQsR7n6O+543VmH7yJP6VROnLKlNeUF720GMZGNlqSNNtNMb5V+fJn5V7XbI0NlfrhTs69sG60zuiP/3hj3v+ZAFSt9/7gbc8bjZ/uH2ztDfeGrwf9/vP1Z2ur64NetLLvnby+B3BxTSd9Hfk2EAAAAAAAAAAAAAAAuEju6G64Sb+2CwAAAOAS+m/vDDVU+LrVvK8RAAAAAAAAAAAAAAAAAIDL5m8AAAD//3E6Bko=")
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x159080, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_mount_image$jfs(&(0x7f0000005e00), &(0x7f0000005e40)='./file0\x00', 0x2000000, &(0x7f0000000140)=ANY=[], 0x0, 0x5e5c, &(0x7f000000bcc0)="$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")
chdir(&(0x7f0000001180)='./bus\x00')
chdir(&(0x7f0000000100)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000000080)=""/43, 0x2b)

3.118025945s ago: executing program 1:
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(0xffffffffffffffff, 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002"], 0x0, 0x4e}, 0x20)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013070000000000000000e0000001000000000000000000000000fc00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000072c42572f64a264410b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbc18c8582fc7800000000000000000000000050019000000000028001a"], 0x120}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0xa8aaaafffeaaaa1e}}, 0x1c)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000400)=ANY=[@ANYBLOB="1401"], 0x114}], 0x1}, 0x0)

3.01990657s ago: executing program 1:
openat$tun(0xffffffffffffff9c, &(0x7f0000000cc0), 0x1c1341, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = semget$private(0x0, 0x5, 0x0)
semop(r1, &(0x7f0000000180)=[{0x0, 0xffff}, {0x1, 0xffff, 0x1800}], 0x2)
semop(r1, &(0x7f00000000c0)=[{0x0, 0xff}], 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x14e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_print_times', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x400)
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
r8 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r8, 0x40045532, &(0x7f0000000580))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r8, 0x40045542, &(0x7f0000000000)=0x1)
syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000e40)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r9}, 0x10)
syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
r10 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r10, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x25)
write(r2, &(0x7f0000000040)="240000001a005f0214f9f507000909000a00000000000000000000000800020000000000", 0x24)

2.660455095s ago: executing program 3:
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0)
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6)
write$bt_hci(r0, &(0x7f0000000100)={0x1, @le_add_to_accept_list={{0x2011, 0x7}, {0x0, @fixed}}}, 0xb)

2.616034501s ago: executing program 2:
socket$inet_mptcp(0x2, 0x1, 0x106)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=@ipv6_newrule={0x40, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_DST={0x14, 0x1, @mcast2}, @FIB_RULE_POLICY=@FRA_FWMARK={0x8}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0xffffffff}]}, 0x40}}, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1d, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
sendmsg$NL80211_CMD_ABORT_SCAN(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0)
socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x3}, 0x6)
r1 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

2.587406036s ago: executing program 1:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x1}, 0x48)
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000140)={'dvmrp0\x00'})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="850020000000000018", @ANYRES32, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1})
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x0, 0xfff, 0x5}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x4d}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001e80)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180), 0x4)
close(0xffffffffffffffff)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000200)="fa82", 0xff0f}], 0x1, 0x0, 0x0, 0x500}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000de00000000000000ea04850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='mm_page_alloc\x00', r5}, 0x10)
r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8)
write$cgroup_int(r7, &(0x7f00000001c0), 0xfffffdef)

2.291997381s ago: executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7b0, 0x0)

2.150533423s ago: executing program 3:
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, <r2=>0x0}, &(0x7f0000000280)=0x5)
setreuid(0x0, r2)
stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0})
r4 = geteuid()
mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@default_permissions}, {@allow_other}, {@max_read={'max_read', 0x3d, 0xdc2f}}, {@allow_other}, {@blksize}, {@allow_other}, {@default_permissions}, {@default_permissions}, {@blksize={'blksize', 0x3d, 0x1200}}, {@blksize={'blksize', 0x3d, 0xc00}}], [{@permit_directio}, {@flag='rw'}, {@fowner_gt={'fowner>', r4}}]}})
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000406e05fe000013000000010902240021000000000902"], 0x0)

2.047376998s ago: executing program 4:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280))
linkat(0xffffffffffffff9c, 0x0, 0xffffffffffffffff, 0x0, 0x1400)

1.915267358s ago: executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SCAN_SUPP_RATES={0xc, 0x7d, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x4}, @NL80211_BAND_5GHZ={0x4}]}]}, 0x28}}, 0x0)

1.740487405s ago: executing program 2:
unshare(0x2000400)
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
listen(r0, 0x0)
poll(&(0x7f0000000100)=[{r0}], 0x1, 0x0)

1.720412768s ago: executing program 4:
socket$inet(0x2, 0x0, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
close(r0)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000100)=[{&(0x7f00000000c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)

1.624452703s ago: executing program 2:
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000040)={{@my=0x1}, @host, 0x0, 0x0, 0x7})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000080)={{@hyper}, @hyper, 0x0, 0x0, 0x7})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000000)={{@host}, 0x101})

1.51482075s ago: executing program 2:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a000090400000103010100092100080001220300090581", @ANYRES64], 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x4}, 0x48)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000680)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000000000000030000000300000000200000000000000000004d850d5ccc58858a34ab90000000000000000000000010000050000000010000000"], &(0x7f00000005c0)=""/160, 0x4a, 0xa0, 0x2}, 0x20)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0)="c8f41c288d409ef0e169a340295f36d4b4", &(0x7f0000000380), 0x5, r1}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000dc2d38981e95723dadae485904c0ec08ba281dc8d8b94b0a73", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x43, 0x0, 0x41100, 0x45, '\x00', 0x0, 0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd31, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f00000005c0)={[{@shortname_winnt}, {@uni_xlate}, {@uni_xlateno}, {@numtail}, {@uni_xlate}, {@rodir}, {@uni_xlateno}, {@utf8no}, {@fat=@check_strict}, {@shortname_mixed}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@fat=@codepage={'codepage', 0x3d, '866'}}, {@shortname_lower}, {@shortname_lower}, {@utf8}, {@shortname_lower}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp857'}}, {@uni_xlate}, {@nonumtail}, {@shortname_win95}, {@rodir}, {@shortname_mixed}, {@shortname_winnt}, {@utf8no}, {@utf8no}], [{@subj_user={'subj_user', 0x3d, '\\$*[)*:\'\\'}}]}, 0x6, 0x2d3, &(0x7f0000000a40)="$eJzs3b1rJGUYAPBnNrMfarFbWInggBZWx+Vamw1yB2Iqjy1OCw3eHUh2ES4Q8QPXq8TOxtK/QBD8Q2zsLAVbwc4IgZGZncl+ZNhsJBvx8vsVyZuZ55n3ed+ZJNPkyQcvTw4fZvH46Re/Ra+XRGvYjThJYhCtqH0VS4bfBgDwf3aS5/FnPtNw+tdv1uT2tlgXALA9F/z+r6TlxwdFxE/XVxsAsB33H7z79t7+/t13sqwX9yZfH4+SiCg+z87vPY6PYhyP4nb04zSifFFoR/m2UAzv5Xk+TbPCIF6bTI9HRebk/Z+r6+/9EVHm70Y/BuWhs7eNMv+t/bu72cxC/rSo4/lq/mGRfyf68eJZ8lL+nYb8GHXi9VcX6r8V/fjlw/g4xvGwLGKe/+Vulr2Zf/fX5+8V5RX5yfR41C3j5vKdevLpNd8jAAAAAAAAAAAAAAAAAAAAAACePbeq3jndKPv3FIeq/js7p8UX7chqg+X+PLP8pL7QvD9QtPI8n+bxfd1f53aWZXkVOM9P46W0aiwIAAAAAAAAAAAAAAAAAAAAN9zRp58dHozHj55cyaDuBpBGxN/3I/7tdYYLR16J9cHdas6D8bhVDZdj0sUjsVPHJBFryygWcUXbctHguXM1V4MffmzMKlZ0lEbTqd7Fk7ab57rk4JP2bB8bY+qn6/Agad7D7lnxveLGxeqN60Tz7O1YOdKp7+dqcP0obracTuOp/qW3pfNCOZiuiYlk3ffFG78vLSeJleBO2XGjMb1dDZp2Y/ZsbPQ8R2+Wfv5nRaJbBwAAAAAAAAAAAAAAAAAAbNX8r38bTj5dm9rKu1srCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACu1fz//28ySJeTN8jqxJOj/2ptAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3Bz/BAAA//8a6VGq")
ftruncate(0xffffffffffffffff, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000040000000000000007000000185200000900009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x9}, 0x0, 0x0, 0x0, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_create(0x0, &(0x7f0000000100)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000140)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r3 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
close_range(r3, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000940)=ANY=[@ANYRES8], 0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2506000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008185000000710000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000480)='skip_task_reaping\x00'}, 0x10)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000002c0)={0x2c, &(0x7f0000000500)=ANY=[], 0x0, 0x0, 0x0, 0x0})

1.400556037s ago: executing program 4:
syz_mount_image$hfs(&(0x7f0000000480), &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000100)={[{@uid}, {}, {@iocharset={'iocharset', 0x3d, 'cp874'}}, {@codepage={'codepage', 0x3d, 'iso8859-15'}}, {}]}, 0x11, 0x2f4, &(0x7f00000004c0)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

1.364943912s ago: executing program 1:
r0 = io_uring_setup(0x354a, &(0x7f0000000080))
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c)
setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x9}, 0x10)
sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./bus\x00', 0x1000840, &(0x7f0000000400)={[{@fat=@uid}, {@uni_xlate}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@shortname_win95}, {@uni_xlateno}, {@fat=@debug}, {@shortname_lower}, {@numtail}, {@numtail}, {@numtail}, {@shortname_mixed}]}, 0x3, 0x350, &(0x7f0000000c00)="$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")
close_range(r0, 0xffffffffffffffff, 0x0)

1.176782081s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10)
socket$inet6_udp(0xa, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000292100003b000000000000000000010013537f279e70d0ccce5feedb852a3d48faf937d5070e10e8a4785e393e18db7fe7d521b1e48bcc3cae5290302063"], 0x18}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xffdd)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r5, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
setsockopt$sock_int(r5, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4)
sendto$inet6(r5, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r5, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0)

17.539448ms ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
clock_settime(0x0, &(0x7f0000000300)={0x77359400})
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x10)
socketpair$unix(0x1, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b703000000000000850000000400000018110000", @ANYRES32=r4], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0)
r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(0xffffffffffffffff, 0x40182103, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000540)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={0x0, r7}, 0x10)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040)={0x2000}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r8, 0x0, 0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000700))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000200))
timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000500)=<r9=>0x0)
timer_settime(r9, 0x0, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)
r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@u, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

0s ago: executing program 4:
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3e, &(0x7f00000000c0)=0x2007, 0x4)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="784a83361222"}, 0x10)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts.
2024/06/12 02:08:30 fuzzer started
2024/06/12 02:08:30 dialing manager at 10.128.0.163:30016
[   53.895098][ T3504] cgroup: Unknown subsys name 'net'
[   54.043893][ T3504] cgroup: Unknown subsys name 'rlimit'
2024/06/12 02:08:31 starting 5 executor processes
[   55.313457][ T3506] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   56.526457][ T3537] chnl_net:caif_netlink_parms(): no params data found
[   56.561869][ T3523] chnl_net:caif_netlink_parms(): no params data found
[   56.604719][ T3524] chnl_net:caif_netlink_parms(): no params data found
[   56.680452][ T3525] chnl_net:caif_netlink_parms(): no params data found
[   56.736816][ T3537] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.743999][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.752570][ T3537] device bridge_slave_0 entered promiscuous mode
[   56.764635][ T3528] chnl_net:caif_netlink_parms(): no params data found
[   56.799229][ T3537] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.806332][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.814468][ T3537] device bridge_slave_1 entered promiscuous mode
[   56.840198][ T3523] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.847504][ T3523] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.855433][ T3523] device bridge_slave_0 entered promiscuous mode
[   56.882124][ T3524] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.889597][ T3524] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.897581][ T3524] device bridge_slave_0 entered promiscuous mode
[   56.904973][ T3523] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.912213][ T3523] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.920353][ T3523] device bridge_slave_1 entered promiscuous mode
[   56.945253][ T3537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.955103][ T3524] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.962769][ T3524] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.970836][ T3524] device bridge_slave_1 entered promiscuous mode
[   56.997844][ T3537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.026865][ T3523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.036025][ T3525] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.043698][ T3525] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.051758][ T3525] device bridge_slave_0 entered promiscuous mode
[   57.095655][ T3523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.105035][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.112259][ T3525] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.120335][ T3525] device bridge_slave_1 entered promiscuous mode
[   57.129933][ T3537] team0: Port device team_slave_0 added
[   57.145027][ T3524] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.178129][ T3537] team0: Port device team_slave_1 added
[   57.191972][ T3524] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.203615][ T3525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.213491][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.221227][ T3528] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.230471][ T3528] device bridge_slave_0 entered promiscuous mode
[   57.248152][ T3523] team0: Port device team_slave_0 added
[   57.264046][ T3525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.273483][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.281335][ T3528] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.289327][ T3528] device bridge_slave_1 entered promiscuous mode
[   57.305876][ T3523] team0: Port device team_slave_1 added
[   57.334933][ T3537] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.342157][ T3537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.368884][ T3537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.391087][ T3524] team0: Port device team_slave_0 added
[   57.413615][ T3537] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.420880][ T3537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.447236][ T3537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.469406][ T3524] team0: Port device team_slave_1 added
[   57.475502][ T3523] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.483218][ T3523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.509586][ T3523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.523397][ T3525] team0: Port device team_slave_0 added
[   57.531749][ T3528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.561051][ T3523] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.568364][ T3523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.594705][ T3523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.608106][ T3525] team0: Port device team_slave_1 added
[   57.615369][ T3528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.671016][ T3528] team0: Port device team_slave_0 added
[   57.679669][ T3528] team0: Port device team_slave_1 added
[   57.685838][ T3524] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.692961][ T3524] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.718971][ T3524] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.731419][ T3524] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.738711][ T3524] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.764644][ T3524] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.809659][ T3525] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.816947][ T3525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.843103][ T3525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.858507][ T3537] device hsr_slave_0 entered promiscuous mode
[   57.865242][ T3537] device hsr_slave_1 entered promiscuous mode
[   57.881017][ T3528] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.888215][ T3528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.914657][ T3528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.927756][ T3528] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.934797][ T3528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.960750][ T3528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.972708][ T3525] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.979825][ T3525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   58.006439][ T3525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   58.055725][ T3523] device hsr_slave_0 entered promiscuous mode
[   58.062853][ T3523] device hsr_slave_1 entered promiscuous mode
[   58.069593][ T3523] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.077602][ T3523] Cannot create hsr debugfs directory
[   58.095254][ T3524] device hsr_slave_0 entered promiscuous mode
[   58.102573][ T3524] device hsr_slave_1 entered promiscuous mode
[   58.109633][ T3524] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.117505][ T3524] Cannot create hsr debugfs directory
[   58.177800][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[   58.184406][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[   58.191291][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   58.197537][   T13] Bluetooth: hci3: command 0x0409 tx timeout
[   58.216545][ T3525] device hsr_slave_0 entered promiscuous mode
[   58.223568][ T3525] device hsr_slave_1 entered promiscuous mode
[   58.230497][ T3525] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.238486][ T3525] Cannot create hsr debugfs directory
[   58.246783][   T21] Bluetooth: hci1: command 0x0409 tx timeout
[   58.284931][ T3528] device hsr_slave_0 entered promiscuous mode
[   58.292002][ T3528] device hsr_slave_1 entered promiscuous mode
[   58.298895][ T3528] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   58.306469][ T3528] Cannot create hsr debugfs directory
[   58.584028][ T3524] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   58.595445][ T3524] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   58.605539][ T3524] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   58.614970][ T3524] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   58.671579][ T3537] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   58.680793][ T3537] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   58.693409][ T3537] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   58.703104][ T3537] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   58.762379][ T3523] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   58.774621][ T3523] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   58.789447][ T3523] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   58.800795][ T3523] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   58.858409][ T3524] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.884709][ T3528] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   58.910419][ T3528] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   58.921982][ T3528] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   58.932156][ T3528] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   58.951040][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   58.962397][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   58.974502][ T3524] 8021q: adding VLAN 0 to HW filter on device team0
[   59.033739][ T3525] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   59.044884][ T3525] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   59.057957][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.070459][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.079226][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.086402][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.095005][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.104056][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.113022][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.120128][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.142227][ T3525] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   59.152471][ T3525] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   59.162471][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.171043][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.180258][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.196497][ T3537] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.224989][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.234217][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.243376][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.252470][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.261360][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.288970][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.298024][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.307550][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.315889][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.324650][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.332501][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.343667][ T3524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.357209][ T3537] 8021q: adding VLAN 0 to HW filter on device team0
[   59.410872][ T3523] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.440430][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.450084][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.460453][ T1068] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.467592][ T1068] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.475577][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.484981][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.493664][ T1068] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.500792][ T1068] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.508852][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.525182][ T3523] 8021q: adding VLAN 0 to HW filter on device team0
[   59.541600][ T3528] 8021q: adding VLAN 0 to HW filter on device bond0
[   59.553708][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.563010][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.578457][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.586533][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.608403][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.622343][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.631028][ T3572] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.638136][ T3572] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.645972][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.655024][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.663613][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.670713][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.679129][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   59.688048][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   59.711599][ T3528] 8021q: adding VLAN 0 to HW filter on device team0
[   59.740077][ T3537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   59.754792][ T3537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   59.768782][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   59.778494][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   59.786332][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   59.794311][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   59.802620][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   59.811886][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   59.820702][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   59.829476][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   59.838350][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   59.847063][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   59.855682][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   59.864433][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   59.895700][ T3524] 8021q: adding VLAN 0 to HW filter on device batadv0
[   59.917917][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   59.925824][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   59.935845][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   59.945577][ T1066] bridge0: port 1(bridge_slave_0) entered blocking state
[   59.952714][ T1066] bridge0: port 1(bridge_slave_0) entered forwarding state
[   59.961158][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   59.970292][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   59.979513][ T1066] bridge0: port 2(bridge_slave_1) entered blocking state
[   59.986657][ T1066] bridge0: port 2(bridge_slave_1) entered forwarding state
[   59.994626][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.003865][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.013022][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.022007][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.030935][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.038555][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.045998][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.054784][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.063490][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.072201][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.080863][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.090144][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.106105][ T3523] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   60.121187][ T3523] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.147259][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.155403][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.165313][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.175328][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.184480][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.193651][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.202932][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.211937][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.221405][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.237042][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.245475][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.255326][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.256940][ T3572] Bluetooth: hci3: command 0x041b tx timeout
[   60.264861][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.278770][ T3568] Bluetooth: hci4: command 0x041b tx timeout
[   60.286410][ T3525] 8021q: adding VLAN 0 to HW filter on device bond0
[   60.307586][ T3572] Bluetooth: hci2: command 0x041b tx timeout
[   60.316319][ T3528] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   60.324016][ T3572] Bluetooth: hci0: command 0x041b tx timeout
[   60.338372][ T3579] Bluetooth: hci1: command 0x041b tx timeout
[   60.364408][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.394406][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.411913][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.419531][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.431198][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   60.439369][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   60.453909][ T3537] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.465414][ T3525] 8021q: adding VLAN 0 to HW filter on device team0
[   60.477513][ T3524] device veth0_vlan entered promiscuous mode
[   60.513777][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.522975][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.561136][ T3524] device veth1_vlan entered promiscuous mode
[   60.577225][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   60.585330][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.595316][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   60.604511][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   60.613930][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   60.622719][ T3579] bridge0: port 1(bridge_slave_0) entered blocking state
[   60.629819][ T3579] bridge0: port 1(bridge_slave_0) entered forwarding state
[   60.637634][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.645076][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.674981][ T3528] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.690211][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   60.699155][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   60.709313][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   60.718099][ T3572] bridge0: port 2(bridge_slave_1) entered blocking state
[   60.725156][ T3572] bridge0: port 2(bridge_slave_1) entered forwarding state
[   60.733395][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   60.742435][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   60.750216][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   60.757762][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   60.784748][ T3523] 8021q: adding VLAN 0 to HW filter on device batadv0
[   60.799680][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   60.814260][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   60.826445][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   60.840962][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   60.849976][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   60.858766][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   60.867319][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   60.875603][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   60.884673][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   60.893683][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   60.902808][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   60.919207][ T3537] device veth0_vlan entered promiscuous mode
[   60.939157][ T3524] device veth0_macvtap entered promiscuous mode
[   60.947454][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   60.956333][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   60.966522][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   60.975534][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   60.984838][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   60.994069][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.004613][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.015520][ T3525] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   61.030290][ T3524] device veth1_macvtap entered promiscuous mode
[   61.088300][ T3537] device veth1_vlan entered promiscuous mode
[   61.115052][ T3528] device veth0_vlan entered promiscuous mode
[   61.141852][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.150391][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.159439][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.168355][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.176989][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.188410][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.196254][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.225773][ T3528] device veth1_vlan entered promiscuous mode
[   61.243353][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   61.255870][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.266418][ T3572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.282942][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.306785][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   61.315567][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.324921][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.334149][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   61.342209][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   61.354390][ T3537] device veth0_macvtap entered promiscuous mode
[   61.366476][ T3524] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.378461][ T3524] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.387534][ T3524] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.396357][ T3524] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.405436][ T3524] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.422759][ T3525] 8021q: adding VLAN 0 to HW filter on device batadv0
[   61.432107][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.441302][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.450241][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.460337][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.472147][ T3537] device veth1_macvtap entered promiscuous mode
[   61.506898][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.515138][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   61.556161][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.564748][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.573553][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   61.582722][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   61.593511][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.613065][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.625112][ T3537] batman_adv: batadv0: Interface activated: batadv_slave_0
[   61.638428][ T3523] device veth0_vlan entered promiscuous mode
[   61.655314][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   61.665595][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   61.674287][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   61.683494][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   61.692786][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   61.701799][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   61.713047][ T3528] device veth0_macvtap entered promiscuous mode
[   61.723798][ T3537] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   61.734447][ T3537] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.750511][ T3537] batman_adv: batadv0: Interface activated: batadv_slave_1
[   61.762447][ T3537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.775369][ T3537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.787041][ T3537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.795771][ T3537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.818961][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   61.827450][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   61.836004][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   61.852698][ T3528] device veth1_macvtap entered promiscuous mode
[   61.864108][ T3523] device veth1_vlan entered promiscuous mode
[   61.909402][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   61.918925][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   61.944948][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.956171][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.966310][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   61.980118][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   61.991286][ T3528] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.001161][ T3525] device veth0_vlan entered promiscuous mode
[   62.014712][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   62.022765][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   62.031241][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.040217][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.065804][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.077070][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.087973][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.102307][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.112859][ T3528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.124068][ T3528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.135343][ T3528] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.146969][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.154893][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.164054][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.173028][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.182436][ T1066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.194329][ T3523] device veth0_macvtap entered promiscuous mode
[   62.209280][ T3528] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.218973][ T3528] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.228313][ T3528] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.237980][ T3528] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.292763][ T3525] device veth1_vlan entered promiscuous mode
[   62.311123][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.315875][ T3523] device veth1_macvtap entered promiscuous mode
[   62.325655][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.333805][ T1068] Bluetooth: hci4: command 0x040f tx timeout
[   62.338568][ T1066] Bluetooth: hci2: command 0x040f tx timeout
[   62.351371][ T1066] Bluetooth: hci3: command 0x040f tx timeout
[   62.392907][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   62.401264][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   62.410275][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.418206][ T1066] Bluetooth: hci1: command 0x040f tx timeout
[   62.419717][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   62.424474][ T1066] Bluetooth: hci0: command 0x040f tx timeout
[   62.433593][ T3568] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   62.478516][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.486524][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.488084][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.511342][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.521359][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.532507][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.542747][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   62.553267][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.564785][ T3523] batman_adv: batadv0: Interface activated: batadv_slave_0
[   62.581921][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.597822][ T3525] device veth0_macvtap entered promiscuous mode
[   62.603546][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   62.608846][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.619497][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   62.633069][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   62.642206][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   62.651755][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   62.660561][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   62.676994][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.695709][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.735061][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.753389][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.763790][ T3523] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   62.775674][ T3523] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   62.789739][ T3523] batman_adv: batadv0: Interface activated: batadv_slave_1
[   62.833245][ T3523] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.844688][ T3523] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.862412][ T3523] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.871877][ T3523] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.903173][ T3607] loop0: detected capacity change from 0 to 512
[   62.909776][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   62.910590][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   62.932526][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   62.959987][ T3525] device veth1_macvtap entered promiscuous mode
[   62.987884][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   62.995987][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.026015][ T3573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.037611][ T3607] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   63.045450][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.051381][ T3607] ext4 filesystem being mounted at /root/syzkaller-testdir2211247245/syzkaller.Fnjdzh/2/file0 supports timestamps until 2038 (0x7fffffff)
[   63.079975][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.117527][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   63.125834][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.138189][ T3607] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz-executor.0: corrupted inode contents
[   63.139537][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.163889][ T3607] EXT4-fs error (device loop0): ext4_dirty_inode:5993: inode #2: comm syz-executor.0: mark_inode_dirty error
[   63.164591][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.185358][ T3607] EXT4-fs error (device loop0): ext4_do_update_inode:5160: inode #2: comm syz-executor.0: corrupted inode contents
[   63.187122][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.205400][ T3607] EXT4-fs error (device loop0): __ext4_ext_dirty:183: inode #2: comm syz-executor.0: mark_inode_dirty error
[   63.213204][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.230648][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.241629][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.253046][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.266464][ T3525] batman_adv: batadv0: Interface activated: batadv_slave_0
[   63.283030][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.296239][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.313343][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.326182][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.336882][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.348487][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.358786][ T3525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   63.370040][ T3525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.382920][ T3525] batman_adv: batadv0: Interface activated: batadv_slave_1
[   63.442488][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.463249][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.483050][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.504124][ T1068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.549611][ T3525] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   63.562089][ T3525] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   63.598973][ T3525] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   63.616360][ T3525] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.653322][  T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.670544][  T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.785547][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.806422][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.847173][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.902082][ T3579] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.108281][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.126451][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.178269][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.214145][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.230372][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.248286][ T3612] loop0: detected capacity change from 0 to 32768
[   64.258631][   T21] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.313992][ T3612] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (3612)
[   64.418162][ T3530] Bluetooth: hci3: command 0x0419 tx timeout
[   64.434036][ T3530] Bluetooth: hci2: command 0x0419 tx timeout
[   64.463301][ T3530] Bluetooth: hci4: command 0x0419 tx timeout
[   64.473786][ T3612] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   64.493058][ T3530] Bluetooth: hci1: command 0x0419 tx timeout
[   64.515411][ T3640] loop1: detected capacity change from 0 to 512
[   64.530164][ T3612] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   64.565023][ T3612] BTRFS info (device loop0): use zstd compression, level 3
[   64.577273][ T3530] Bluetooth: hci0: command 0x0419 tx timeout
[   64.599125][ T3640] =======================================================
[   64.599125][ T3640] WARNING: The mand mount option has been deprecated and
[   64.599125][ T3640]          and is ignored by this kernel. Remove the mand
[   64.599125][ T3640]          option from the mount to silence this warning.
[   64.599125][ T3640] =======================================================
[   64.652241][ T3612] BTRFS info (device loop0): using free space tree
[   64.718276][ T3612] BTRFS info (device loop0): has skinny extents
[   64.878123][ T3635] loop4: detected capacity change from 0 to 4096
[   64.987025][ T3640] EXT4-fs (loop1): Test dummy encryption mode enabled
[   65.008186][ T3635] NILFS (loop4): invalid segment: Checksum error in segment payload
[   65.020583][ T3635] NILFS (loop4): trying rollback from an earlier position
[   65.026716][ T3640] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   65.100176][ T3640] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #17: comm syz-executor.1: iget: bogus i_mode (0)
[   65.113750][ T3635] NILFS (loop4): recovery complete
[   65.120491][ T3640] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 17 (err -117)
[   65.151062][ T3640] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[   65.183624][ T3612] BTRFS info (device loop0): enabling ssd optimizations
[   65.193691][ T3681] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.389428][ T3640] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[   65.639625][ T3699] syz-executor.3 sent an empty control message without MSG_MORE.
[   65.709180][ T3701] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[   66.726971][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   67.027696][ T3747] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[   67.855696][ T3743] loop0: detected capacity change from 0 to 32768
[   67.906194][ T3761] syz-executor.4 uses obsolete (PF_INET,SOCK_PACKET)
[   67.948794][ T3743] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (3743)
[   67.984808][ T3743] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[   68.002726][ T3763] loop2: detected capacity change from 0 to 512
[   68.051502][ T3743] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   68.076896][ T3743] BTRFS info (device loop0): use zstd compression, level 3
[   68.089421][ T3743] BTRFS info (device loop0): using free space tree
[   68.110854][ T3743] BTRFS info (device loop0): has skinny extents
[   68.148943][ T3763] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   68.206007][ T3763] ext4 filesystem being mounted at /root/syzkaller-testdir45710234/syzkaller.5ruqs5/10/file0 supports timestamps until 2038 (0x7fffffff)
[   68.400944][ T3743] BTRFS info (device loop0): enabling ssd optimizations
[   68.452578][ T3763] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz-executor.2: corrupted inode contents
[   68.518326][ T3763] EXT4-fs error (device loop2): ext4_dirty_inode:5993: inode #2: comm syz-executor.2: mark_inode_dirty error
[   68.531311][ T3763] EXT4-fs error (device loop2): ext4_do_update_inode:5160: inode #2: comm syz-executor.2: corrupted inode contents
[   68.551288][ T3799] loop1: detected capacity change from 0 to 512
[   68.585591][ T3763] EXT4-fs error (device loop2): __ext4_ext_dirty:183: inode #2: comm syz-executor.2: mark_inode_dirty error
[   68.591221][ T3799] EXT4-fs (loop1): Test dummy encryption mode enabled
[   68.606772][ T3799] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option
[   68.687571][ T3799] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #17: comm syz-executor.1: iget: bogus i_mode (0)
[   68.765392][ T3799] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 17 (err -117)
[   68.793744][ T3799] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[   69.167576][ T3807] loop4: detected capacity change from 0 to 4096
[   69.197261][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   69.207783][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!!
[   69.298489][ T3799] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[   69.313227][ T3799] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm syz-executor.1: bg 0: block 7: invalid block bitmap
[   69.398326][ T3807] NILFS (loop4): invalid segment: Checksum error in segment payload
[   69.408217][ T3807] NILFS (loop4): trying rollback from an earlier position
[   69.448010][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!!
[   69.657512][ T3807] NILFS (loop4): recovery complete
[   69.684413][ T3828] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.835657][ T3823] loop1: detected capacity change from 0 to 4096
[   69.910672][ T3823] ntfs: (device loop1): parse_options(): Invalid umask option argument: 017777777777˜‹777777ls=iso8859-3
[   70.613816][ T3846] loop3: detected capacity change from 0 to 512
[   70.703381][ T3846] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   70.755609][ T3846] ext4 filesystem being mounted at /root/syzkaller-testdir423064776/syzkaller.6mkQYi/11/file0 supports timestamps until 2038 (0x7fffffff)
[   70.803914][ T3846] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz-executor.3: corrupted inode contents
[   70.837824][ T3846] EXT4-fs error (device loop3): ext4_dirty_inode:5993: inode #2: comm syz-executor.3: mark_inode_dirty error
[   70.852764][ T3846] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz-executor.3: corrupted inode contents
[   70.894303][ T3846] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz-executor.3: mark_inode_dirty error
[   70.947009][ T3851] tipc: Started in network mode
[   70.952166][ T3851] tipc: Node identity f0, cluster identity 4711
[   71.010472][ T3851] tipc: Node number set to 240
[   71.290399][ T1383] ieee802154 phy0 wpan0: encryption failed: -22
[   71.297436][ T1383] ieee802154 phy1 wpan1: encryption failed: -22
[   71.339161][ T3861] loop3: detected capacity change from 0 to 512
[   71.383236][ T3861] EXT4-fs (loop3): Test dummy encryption mode enabled
[   71.479350][ T3861] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[   71.524777][ T3861] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz-executor.3: iget: bogus i_mode (0)
[   71.606140][ T3861] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 17 (err -117)
[   71.668546][ T3861] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,barrier,barrier,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[   71.774257][ T3861] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz-executor.3: bg 0: block 7: invalid block bitmap
[   71.924447][ T3866] loop3: detected capacity change from 0 to 16
[   71.935900][ T3866] MTD: Attempt to mount non-MTD device "/dev/loop3"
[   72.305372][ T3879] IPv6: sit1: Disabled Multicast RS
[   72.513439][ T3863] loop0: detected capacity change from 0 to 32768
[   72.579294][ T3863] XFS: noikeep mount option is deprecated.
[   72.657022][ T3863] XFS (loop0): Mounting V5 Filesystem
[   72.903859][ T3863] XFS (loop0): Ending clean mount
[   72.925761][ T3863] XFS (loop0): Quotacheck needed: Please wait.
[   72.929060][ T3881] loop4: detected capacity change from 0 to 32768
[   72.953975][ T3883] loop2: detected capacity change from 0 to 32768
[   72.974001][ T3893] loop3: detected capacity change from 0 to 512
[   73.003705][ T3863] XFS (loop0): Quotacheck: Done.
[   73.010053][ T3883] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (3883)
[   73.031793][ T3881] XFS (loop4): Mounting V5 Filesystem
[   73.060941][ T3883] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   73.089247][ T3524] XFS (loop0): Unmounting Filesystem
[   73.107028][ T3883] BTRFS info (device loop2): setting nodatacow, compression disabled
[   73.115239][ T3883] BTRFS info (device loop2): turning on flush-on-commit
[   73.123225][ T3883] BTRFS info (device loop2): enabling auto defrag
[   73.131052][ T3883] BTRFS info (device loop2): max_inline at 0
[   73.138510][ T3883] BTRFS info (device loop2): using free space tree
[   73.145370][ T3883] BTRFS info (device loop2): has skinny extents
[   73.225414][ T3893] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   73.245590][ T3893] ext4 filesystem being mounted at /root/syzkaller-testdir423064776/syzkaller.6mkQYi/14/file0 supports timestamps until 2038 (0x7fffffff)
[   73.334464][ T3893] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz-executor.3: corrupted inode contents
[   73.347576][ T3881] XFS (loop4): Ending clean mount
[   73.383581][ T3881] XFS (loop4): Quotacheck needed: Please wait.
[   73.414931][ T3893] EXT4-fs error (device loop3): ext4_dirty_inode:5993: inode #2: comm syz-executor.3: mark_inode_dirty error
[   73.435261][ T3893] EXT4-fs error (device loop3): ext4_do_update_inode:5160: inode #2: comm syz-executor.3: corrupted inode contents
[   73.459668][ T3893] EXT4-fs error (device loop3): __ext4_ext_dirty:183: inode #2: comm syz-executor.3: mark_inode_dirty error
[   73.471980][ T3881] XFS (loop4): Quotacheck: Done.
[   73.502643][ T3883] BTRFS info (device loop2): enabling ssd optimizations
[   73.685293][ T3523] XFS (loop4): Unmounting Filesystem
[   73.750522][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   74.317751][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   74.400736][ T3949] IPv6: sit1: Disabled Multicast RS
[   74.710740][ T3955] loop0: detected capacity change from 0 to 128
[   74.806388][ T3952] loop4: detected capacity change from 0 to 4096
[   74.923801][ T3952] ntfs3: loop4: Different NTFS' sector size (2048) and media sector size (512)
[   75.303867][ T3966] loop3: detected capacity change from 0 to 256
[   75.560061][ T3968] trusted_key: encrypted_key: keyword 'ÿÿÿÿõ$]&@Ú' not recognized
[   75.624460][ T3968] netlink: 154020 bytes leftover after parsing attributes in process `syz-executor.0'.
[   75.636624][ T3968] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[   75.646203][ T3968] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   76.705478][ T3976] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   76.743002][ T3976] vhci_hcd: invalid port number 20
[   76.793973][ T3976] vhci_hcd: invalid port number 20
[   76.877319][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   77.255587][ T3989] loop4: detected capacity change from 0 to 2048
[   77.391746][ T3989] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   77.692529][ T3998] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   78.005430][ T3973] loop2: detected capacity change from 0 to 32768
[   78.083393][ T3973] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (3973)
[   78.207860][ T3973] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   78.233055][ T3973] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   78.270186][ T3973] BTRFS info (device loop2): use zstd compression, level 3
[   78.300678][ T3973] BTRFS info (device loop2): using free space tree
[   78.351613][ T3973] BTRFS info (device loop2): has skinny extents
[   78.379310][ T4004] loop1: detected capacity change from 0 to 4096
[   78.428783][ T3981] loop0: detected capacity change from 0 to 40427
[   78.455388][ T4004] ntfs: (device loop1): parse_options(): Invalid umask option argument: 017777777777˜‹777777ls=iso8859-3
[   78.499092][ T3981] F2FS-fs (loop0): invalid crc value
[   78.525590][ T3981] F2FS-fs (loop0): Found nat_bits in checkpoint
[   78.702826][ T3981] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   78.715789][ T3973] BTRFS info (device loop2): enabling ssd optimizations
[   78.841169][ T4035] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   78.862212][ T4035] vhci_hcd: invalid port number 20
[   78.891957][ T3524] attempt to access beyond end of device
[   78.891957][ T3524] loop0: rw=2049, want=45104, limit=40427
[   78.906494][ T4035] vhci_hcd: invalid port number 20
[   79.057323][ T4001] loop4: detected capacity change from 0 to 32768
[   79.132783][ T4001] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz-executor.4 (4001)
[   79.183942][ T3541] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by udevd (3541)
[   79.543077][ T4058] syz-executor.4 (pid 4058) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   79.639182][ T4061] IPv6: sit1: Disabled Multicast RS
[   79.735800][ T4058] loop4: detected capacity change from 0 to 2048
[   79.917632][ T4069] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   79.925078][ T4069] vhci_hcd: invalid port number 20
[   79.966733][ T4069] vhci_hcd: invalid port number 20
[   80.298898][ T4081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[   80.320239][ T4081] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'.
[   80.408588][ T4080] trusted_key: encrypted_key: keyword 'ÿÿÿÿõ$]&@Ú' not recognized
[   80.430292][ T4053] loop3: detected capacity change from 0 to 32768
[   80.450337][ T4080] netlink: 154020 bytes leftover after parsing attributes in process `syz-executor.1'.
[   80.493635][ T4080] openvswitch: netlink: ufid size 48894 bytes exceeds the range (1, 16)
[   80.503847][ T4080] openvswitch: netlink: Flow get message rejected, Key attribute missing.
[   80.528113][ T4053] XFS: noikeep mount option is deprecated.
[   80.538547][ T4086] overlayfs: missing 'lowerdir'
[   80.562976][ T4089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   80.649077][ T4053] XFS (loop3): Mounting V5 Filesystem
[   80.744244][ T4065] loop2: detected capacity change from 0 to 40427
[   80.774375][   T26] audit: type=1800 audit(1718158137.340:2): pid=4100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1959 res=0 errno=0
[   80.830197][ T4065] F2FS-fs (loop2): invalid crc value
[   80.856877][ T4053] XFS (loop3): Ending clean mount
[   80.869382][ T4053] XFS (loop3): Quotacheck needed: Please wait.
[   80.873399][ T4065] F2FS-fs (loop2): Found nat_bits in checkpoint
[   80.895588][   T26] audit: type=1804 audit(1718158137.380:3): pid=4100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4032354414/syzkaller.HXRsbG/31/file0" dev="sda1" ino=1959 res=1 errno=0
[   80.920699][    C0] vkms_vblank_simulate: vblank timer overrun
[   80.934561][ T4053] XFS (loop3): Quotacheck: Done.
[   80.980389][ T4100] syz-executor.1 (4100) used greatest stack depth: 19320 bytes left
[   81.056009][ T3537] XFS (loop3): Unmounting Filesystem
[   81.153426][ T4065] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   81.338097][ T3528] attempt to access beyond end of device
[   81.338097][ T3528] loop2: rw=2049, want=45104, limit=40427
[   81.469120][ T4121] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[   81.530168][ T1301] cfg80211: failed to load regulatory.db
[   81.842095][ T4129] overlayfs: missing 'lowerdir'
[   81.958525][ T4109] loop4: detected capacity change from 0 to 32768
[   82.068656][   T26] audit: type=1800 audit(1718158138.640:4): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1966 res=0 errno=0
[   82.128125][   T26] audit: type=1804 audit(1718158138.670:5): pid=4142 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4032354414/syzkaller.HXRsbG/34/file0" dev="sda1" ino=1966 res=1 errno=0
[   82.134257][ T4109] XFS (loop4): Mounting V5 Filesystem
[   82.449459][ T4109] XFS (loop4): Ending clean mount
[   82.473261][ T4109] XFS (loop4): Quotacheck needed: Please wait.
[   82.507099][ T4160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'.
[   82.587151][ T4162] sctp: [Deprecated]: syz-executor.3 (pid 4162) Use of int in maxseg socket option.
[   82.587151][ T4162] Use struct sctp_assoc_value instead
[   82.597968][ T4139] loop0: detected capacity change from 0 to 32768
[   82.622072][ T4109] XFS (loop4): Quotacheck: Done.
[   82.667947][ T4139] XFS: noikeep mount option is deprecated.
[   82.774362][ T4139] XFS (loop0): Mounting V5 Filesystem
[   82.936901][ T3523] XFS (loop4): Unmounting Filesystem
[   82.964161][   T26] audit: type=1800 audit(1718158139.530:6): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=1964 res=0 errno=0
[   82.972564][ T4185] sp0: Synchronizing with TNC
[   83.014066][ T4186] sp0: Found TNC
[   83.050358][ T4139] XFS (loop0): Ending clean mount
[   83.055415][   T26] audit: type=1804 audit(1718158139.560:7): pid=4183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir423064776/syzkaller.6mkQYi/33/file0" dev="sda1" ino=1964 res=1 errno=0
[   83.132645][ T4139] XFS (loop0): Quotacheck needed: Please wait.
[   83.235912][ T4139] XFS (loop0): Quotacheck: Done.
[   83.424298][ T3524] XFS (loop0): Unmounting Filesystem
[   83.451071][ T4158] loop2: detected capacity change from 0 to 32768
[   83.525538][ T4158] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4158)
[   83.576809][ T4158] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[   83.614071][ T4158] BTRFS info (device loop2): using free space tree
[   83.666787][ T4158] BTRFS info (device loop2): has skinny extents
[   84.776097][ T4188] loop3: detected capacity change from 0 to 32768
[   84.959396][ T4158] BTRFS info (device loop2): enabling ssd optimizations
[   85.232862][ T4208] loop4: detected capacity change from 0 to 32768
[   85.324510][ T4190] loop1: detected capacity change from 0 to 32768
[   85.353991][ T4208] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4208)
[   85.419151][ T4190] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (4190)
[   85.905175][ T4223] loop0: detected capacity change from 0 to 512
[   85.909781][ T4208] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[   85.957214][ T4208] BTRFS info (device loop4): force clearing of disk cache
[   85.964478][ T4208] BTRFS info (device loop4): use zlib compression, level 3
[   86.002617][ T4190] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[   86.030395][ T4223] EXT4-fs (loop0): Invalid want_extra_isize 43
[   86.036769][ T4190] BTRFS info (device loop1): using free space tree
[   86.043429][ T4190] BTRFS info (device loop1): has skinny extents
[   86.078027][ T4208] BTRFS info (device loop4): using free space tree
[   86.084581][ T4208] BTRFS info (device loop4): has skinny extents
[   86.423771][ T4208] BTRFS info (device loop4): enabling ssd optimizations
[   86.477719][ T4208] BTRFS info (device loop4): clearing free space tree
[   86.509919][ T4190] BTRFS error (device loop1): open_ctree failed
[   86.528455][ T4208] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   86.546298][ T4208] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   86.614591][ T4208] BTRFS info (device loop4): creating free space tree
[   86.633959][ T4208] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   86.643970][ T4208] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   86.722290][ T4208] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use)
[   87.460338][ T4286] loop2: detected capacity change from 0 to 256
[   88.572361][ T4267] loop0: detected capacity change from 0 to 32768
[   88.774295][ T4303] loop2: detected capacity change from 0 to 512
[   88.832210][ T4267] XFS (loop0): Mounting V5 Filesystem
[   88.864588][ T4303] EXT4-fs (loop2): Invalid want_extra_isize 43
[   89.080532][ T4267] XFS (loop0): Ending clean mount
[   89.120142][ T4267] XFS (loop0): Quotacheck needed: Please wait.
[   89.189729][ T4267] XFS (loop0): Quotacheck: Done.
[   89.248572][ T4278] loop4: detected capacity change from 0 to 32768
[   89.264411][ T4301] loop1: detected capacity change from 0 to 32768
[   89.339198][ T4278] XFS: noikeep mount option is deprecated.
[   89.438113][ T4329] overlayfs: missing 'lowerdir'
[   89.455852][ T4278] XFS (loop4): Mounting V5 Filesystem
[   89.501099][ T3524] XFS (loop0): Unmounting Filesystem
[   89.564015][ T4301] XFS (loop1): Mounting V5 Filesystem
[   89.599093][ T4307] loop3: detected capacity change from 0 to 32768
[   89.674607][ T4278] XFS (loop4): Ending clean mount
[   89.679336][ T4301] XFS (loop1): Ending clean mount
[   89.718770][   T26] audit: type=1804 audit(1718158146.290:8): pid=4301 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4032354414/syzkaller.HXRsbG/46/file0/bus" dev="loop1" ino=1289 res=1 errno=0
[   89.720352][ T4278] XFS (loop4): Quotacheck needed: Please wait.
[   89.767733][ T4342] sctp: [Deprecated]: syz-executor.2 (pid 4342) Use of int in maxseg socket option.
[   89.767733][ T4342] Use struct sctp_assoc_value instead
[   89.821263][ T4307] XFS (loop3): Mounting V5 Filesystem
[   89.826707][ T3525] XFS (loop1): Unmounting Filesystem
[   89.887622][ T4278] XFS (loop4): Quotacheck: Done.
[   90.130311][ T4307] XFS (loop3): Ending clean mount
[   90.199210][ T4350] loop2: detected capacity change from 0 to 40427
[   90.210746][ T4350] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   90.218990][ T4350] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   90.260899][ T3523] XFS (loop4): Unmounting Filesystem
[   90.272974][ T4350] F2FS-fs (loop2): Found nat_bits in checkpoint
[   90.315551][ T4350] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   90.350736][ T4350] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   90.358090][ T4350] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   90.367341][ T3537] XFS (loop3): Unmounting Filesystem
[   90.512271][ T4350] attempt to access beyond end of device
[   90.512271][ T4350] loop2: rw=2049, want=45112, limit=40427
[   90.598592][ T4360] attempt to access beyond end of device
[   90.598592][ T4360] loop2: rw=2049, want=40976, limit=40427
[   90.820630][ T4272] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   90.854781][ T4365] ieee802154 phy0 wpan0: encryption failed: -22
[   91.051561][ T4371] loop3: detected capacity change from 0 to 256
[   91.367936][ T4272] usb 1-1: New USB device found, idVendor=05ac, idProduct=0253, bcdDevice=65.5a
[   91.368046][ T4272] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.373215][ T4272] usb 1-1: config 0 descriptor??
[   91.718832][ T4272] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[   92.316910][ T2947] bcm5974 1-1:0.0: could not read from device
[   92.385202][ T4272] usb 1-1: USB disconnect, device number 2
[   92.455130][ T3517] udevd[3517]: Error opening device "/dev/input/event4": No such file or directory
[   92.455256][ T3517] udevd[3517]: Unable to EVIOCGABS device "/dev/input/event4"
[   92.455359][ T3517] udevd[3517]: Unable to EVIOCGABS device "/dev/input/event4"
[   92.455449][ T3517] udevd[3517]: Unable to EVIOCGABS device "/dev/input/event4"
[   92.455549][ T3517] udevd[3517]: Unable to EVIOCGABS device "/dev/input/event4"
[   92.634408][ T4384] loop2: detected capacity change from 0 to 512
[   92.716830][ T4384] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[   92.716953][ T4384] ext4 filesystem being mounted at /root/syzkaller-testdir45710234/syzkaller.5ruqs5/37/file1 supports timestamps until 2038 (0x7fffffff)
[   92.820617][   T26] audit: type=1326 audit(1718158149.390:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   92.847957][   T26] audit: type=1326 audit(1718158149.390:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   92.848011][   T26] audit: type=1326 audit(1718158149.390:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   92.848051][   T26] audit: type=1326 audit(1718158149.390:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   92.983069][   T26] audit: type=1326 audit(1718158149.550:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   93.006154][   T26] audit: type=1326 audit(1718158149.550:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   93.024364][ T4376] loop4: detected capacity change from 0 to 32768
[   93.067413][ T4376] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4376)
[   93.111276][   T26] audit: type=1326 audit(1718158149.680:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   93.111473][   T26] audit: type=1326 audit(1718158149.680:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   93.111612][   T26] audit: type=1326 audit(1718158149.680:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4383 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1063c1eea9 code=0x7ffc0000
[   93.192009][ T4382] loop3: detected capacity change from 0 to 32768
[   93.213923][ T4376] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[   93.286823][ T4376] BTRFS info (device loop4): using free space tree
[   93.286849][ T4376] BTRFS info (device loop4): has skinny extents
[   93.410711][ T4382] XFS (loop3): Mounting V5 Filesystem
[   93.584426][ T4376] BTRFS info (device loop4): enabling ssd optimizations
[   93.588219][ T4382] XFS (loop3): Ending clean mount
[   94.790013][ T3537] XFS (loop3): Unmounting Filesystem
[   95.012172][ T4376] BTRFS warning (device loop4): failed to trim 1 device(s), last error -512
[   95.059785][ T4391] loop0: detected capacity change from 0 to 40427
[   95.442164][ T4391] F2FS-fs (loop0): Found nat_bits in checkpoint
[   95.705532][ T4442] loop1: detected capacity change from 0 to 2048
[   95.717072][ T4391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   95.773387][ T4442] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   96.285233][   T26] kauditd_printk_skb: 34 callbacks suppressed
[   96.285274][   T26] audit: type=1800 audit(1718158152.720:52): pid=4450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0
[   96.899865][ T3524] attempt to access beyond end of device
[   96.899865][ T3524] loop0: rw=2049, want=45104, limit=40427
[   97.030057][ T4445] loop2: detected capacity change from 0 to 32768
[   97.082117][ T4445] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4445)
[   97.115461][ T4456] loop3: detected capacity change from 0 to 4096
[   97.177749][ T4445] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   97.195039][ T4456] NILFS (loop3): invalid segment: Checksum error in segment payload
[   97.203999][ T4445] BTRFS info (device loop2): force clearing of disk cache
[   97.217706][ T4456] NILFS (loop3): trying rollback from an earlier position
[   97.246636][ T4445] BTRFS info (device loop2): use zlib compression, level 3
[   97.253982][ T4445] BTRFS info (device loop2): using free space tree
[   97.279762][ T4445] BTRFS info (device loop2): has skinny extents
[   97.304671][ T4456] NILFS (loop3): recovery complete
[   97.307112][ T4463] loop4: detected capacity change from 0 to 2048
[   97.343593][ T4467] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.423117][ T4471] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.440414][ T4456] overlayfs: upper fs does not support tmpfile.
[   97.450735][ T4456] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   97.459158][ T4456] overlayfs: failed to set xattr on upper
[   97.465833][ T4456] overlayfs: ...falling back to index=off,metacopy=off.
[   97.474041][ T4463] attempt to access beyond end of device
[   97.474041][ T4463] loop4: rw=0, want=15393162788902, limit=2048
[   97.616141][ T4463] attempt to access beyond end of device
[   97.616141][ T4463] loop4: rw=0, want=15393162788902, limit=2048
[   97.704737][ T4445] BTRFS info (device loop2): enabling ssd optimizations
[   97.714004][ T4445] BTRFS info (device loop2): clearing free space tree
[   97.724002][ T4445] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   97.735050][ T4445] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   97.781179][ T4445] BTRFS info (device loop2): creating free space tree
[   97.794130][ T4445] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   97.806274][ T4445] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   98.212130][ T4494] loop4: detected capacity change from 0 to 40427
[   98.327767][ T4494] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[   98.335684][ T4494] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[   98.399440][ T4494] F2FS-fs (loop4): Found nat_bits in checkpoint
[   98.445520][ T4494] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   98.465808][ T4494] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[   98.473044][ T4494] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   98.477483][ T4509] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[   98.563942][   T26] audit: type=1800 audit(1718158155.130:53): pid=4515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1961 res=0 errno=0
[   98.576269][ T4494] attempt to access beyond end of device
[   98.576269][ T4494] loop4: rw=2049, want=45112, limit=40427
[   98.639785][ T4516] netlink: 'syz-executor.1': attribute type 17 has an invalid length.
[   98.692641][ T4520] attempt to access beyond end of device
[   98.692641][ T4520] loop4: rw=2049, want=40976, limit=40427
[   98.783878][ T4516] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready
[   98.796281][ T4521] loop0: detected capacity change from 0 to 1024
[   98.899815][ T4521] hfsplus: unable to parse mount options
[   98.984826][ T4521] loop0: detected capacity change from 0 to 256
[   99.053753][    T7] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   99.326927][    T7] usb 2-1: Using ep0 maxpacket: 8
[   99.423308][ T4528] loop2: detected capacity change from 0 to 4096
[   99.556902][ T4528] NILFS (loop2): invalid segment: Checksum error in segment payload
[   99.585979][ T4528] NILFS (loop2): trying rollback from an earlier position
[   99.661307][ T4528] NILFS (loop2): recovery complete
[   99.701733][ T4534] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.704864][ T4530] loop4: detected capacity change from 0 to 32768
[   99.768067][ T4530] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[   99.776675][ T4530] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[   99.786237][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[   99.808362][    T7] usb 2-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00
[   99.813786][ T4528] overlayfs: upper fs does not support tmpfile.
[   99.818740][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.842938][    T7] usb 2-1: config 0 descriptor??
[   99.849007][ T4530] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[   99.853526][ T4528] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   99.900377][    T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[   99.911095][    T7] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[   99.919157][    T7] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[   99.958699][ T4528] overlayfs: failed to set xattr on upper
[   99.964470][ T4528] overlayfs: ...falling back to index=off,metacopy=off.
[  100.023531][    T7] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 104ms
[  100.039081][    T7] gfs2: fsid=syz:syz.0: jid=0: Done
[  100.055194][ T4530] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  100.126208][ T4530] ODEBUG: Out of memory. ODEBUG disabled
[  100.220275][   T23] usb 2-1: USB disconnect, device number 2
[  100.438702][ T4530] syz-executor.4 (4530): drop_caches: 2
[  100.697874][ T4536] loop3: detected capacity change from 0 to 32768
[  100.753241][ T4540] loop2: detected capacity change from 0 to 2048
[  100.786819][ T4536] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (4536)
[  100.832871][ T4540] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  100.909107][ T4536] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  100.980641][ T4536] BTRFS info (device loop3): force clearing of disk cache
[  101.014324][ T4536] BTRFS info (device loop3): use zlib compression, level 3
[  101.031162][ T4542] kvm: MONITOR instruction emulated as NOP!
[  101.042659][ T4536] BTRFS info (device loop3): using free space tree
[  101.063462][ T4536] BTRFS info (device loop3): has skinny extents
[  101.115380][ T4551] loop4: detected capacity change from 0 to 1024
[  101.251815][ T4564] loop1: detected capacity change from 0 to 1024
[  101.300132][ T4536] BTRFS info (device loop3): enabling ssd optimizations
[  101.332497][ T4551] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  101.336495][ T4564] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  101.358782][ T4536] BTRFS info (device loop3): clearing free space tree
[  101.375653][ T4551] EXT4-fs warning (device loop4): empty_inline_dir:1825: bad inline directory (dir #12) - no `..'
[  101.382475][ T4536] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  101.396998][ T4536] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  101.421722][ T4536] BTRFS info (device loop3): creating free space tree
[  101.442926][ T4536] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  101.476248][ T4536] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  101.774856][ T4581] loop2: detected capacity change from 0 to 256
[  102.092793][ T4581] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395d6c4b, utbl_chksum : 0xe619d30d)
[  103.127468][ T4581] loop_set_status: loop2 () has still dirty pages (nrpages=3)
[  103.336985][ T4595] loop0: detected capacity change from 0 to 8192
[  103.410664][ T4595] REISERFS warning (device loop0): jmacd-7 reiserfs_fill_super: resize option for remount only
[  103.754321][ T4612] loop2: detected capacity change from 0 to 32768
[  103.787708][ T4612] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (4612)
[  103.985810][ T4607] loop3: detected capacity change from 0 to 8192
[  104.381170][ T4607] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  104.518700][ T4612] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  104.528673][ T4612] BTRFS info (device loop2): force zlib compression, level 3
[  104.536096][ T4612] BTRFS info (device loop2): use zlib compression, level 3
[  104.544022][ T4612] BTRFS info (device loop2): enabling ssd optimizations
[  104.551079][ T4612] BTRFS info (device loop2): using free space tree
[  104.557654][ T4612] BTRFS info (device loop2): has skinny extents
[  104.567931][   T26] audit: type=1804 audit(1718158161.130:54): pid=4624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir423064776/syzkaller.6mkQYi/45/file2/bus" dev="loop3" ino=1048600 res=1 errno=0
[  104.637825][   T26] audit: type=1804 audit(1718158161.210:55): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir423064776/syzkaller.6mkQYi/45/file2/bus" dev="loop3" ino=1048600 res=1 errno=0
[  104.705559][   T26] audit: type=1800 audit(1718158161.230:56): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048600 res=0 errno=0
[  106.025087][ T3517] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by udevd (3517)
[  106.135131][ T4623] loop4: detected capacity change from 0 to 32768
[  106.156914][ T4659] loop3: detected capacity change from 0 to 256
[  106.180731][ T4655] loop0: detected capacity change from 0 to 4096
[  106.187826][ T4661] loop1: detected capacity change from 0 to 512
[  106.233376][ T4623] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (4623)
[  106.255377][ T4659] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395d6c4b, utbl_chksum : 0xe619d30d)
[  106.273828][ T4655] ntfs3: loop0: try to read out of volume at offset 0x5c00
[  106.283076][ T4655] ntfs3: loop0: Failed to load $Volume.
[  106.328357][ T4623] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  106.344610][ T4623] BTRFS info (device loop4): force clearing of disk cache
[  106.357300][ T4623] BTRFS info (device loop4): use zlib compression, level 3
[  106.374858][ T4659] loop_set_status: loop3 () has still dirty pages (nrpages=3)
[  106.376976][ T4623] BTRFS info (device loop4): using free space tree
[  106.399491][ T4623] BTRFS info (device loop4): has skinny extents
[  106.690795][ T4686] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  106.796292][ T4694] loop2: detected capacity change from 0 to 128
[  106.887095][ T4697] loop0: detected capacity change from 0 to 8192
[  106.907731][ T4623] BTRFS info (device loop4): enabling ssd optimizations
[  106.937658][ T4694] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  106.959916][ T4707] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  106.988076][ T4697] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  106.997956][ T4623] BTRFS info (device loop4): clearing free space tree
[  107.004153][   T26] audit: type=1804 audit(1718158163.570:57): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2211247245/syzkaller.Fnjdzh/52/file2/bus" dev="loop0" ino=1048611 res=1 errno=0
[  107.005394][ T4623] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.042290][ T4694] ext4 filesystem being mounted at /root/syzkaller-testdir45710234/syzkaller.5ruqs5/50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  107.079904][ T4623] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.112169][ T4623] BTRFS info (device loop4): creating free space tree
[  107.133958][   T26] audit: type=1804 audit(1718158163.600:58): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2211247245/syzkaller.Fnjdzh/52/file2/bus" dev="loop0" ino=1048611 res=1 errno=0
[  107.137295][ T4623] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  107.291765][   T26] audit: type=1800 audit(1718158163.600:59): pid=4697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048611 res=0 errno=0
[  107.330244][ T4713] loop2: detected capacity change from 0 to 256
[  107.335813][ T4709] loop3: detected capacity change from 0 to 4096
[  107.346965][ T4623] BTRFS info (device loop4): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  107.410333][ T4717] loop1: detected capacity change from 0 to 1024
[  107.461337][ T4709] NILFS (loop3): invalid segment: Checksum error in segment payload
[  107.514119][ T4713] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x395d6c4b, utbl_chksum : 0xe619d30d)
[  107.531534][ T4709] NILFS (loop3): trying rollback from an earlier position
[  107.554684][ T4717] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  107.605493][ T4709] NILFS (loop3): recovery complete
[  107.677078][ T4717] EXT4-fs warning (device loop1): empty_inline_dir:1825: bad inline directory (dir #12) - no `..'
[  107.704674][ T4724] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.838914][ T4709] overlayfs: upper fs does not support tmpfile.
[  107.858945][ T4709] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  107.865944][ T4709] overlayfs: failed to set xattr on upper
[  107.877367][ T4713] loop_set_status: loop2 () has still dirty pages (nrpages=3)
[  107.895385][ T4709] overlayfs: ...falling back to index=off,metacopy=off.
[  108.135849][ T4731] loop4: detected capacity change from 0 to 4096
[  108.144911][ T4736] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  108.225617][ T4743] loop2: detected capacity change from 0 to 128
[  108.240358][ T4731] ntfs3: loop4: try to read out of volume at offset 0x5c00
[  108.282714][ T4731] ntfs3: loop4: Failed to load $Volume.
[  108.305333][ T4748] overlayfs: failed to resolve './file1': -2
[  108.361535][ T4743] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  108.434923][ T4743] ext4 filesystem being mounted at /root/syzkaller-testdir45710234/syzkaller.5ruqs5/53/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  108.591703][ T4757] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  108.733402][ T4765] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  108.808263][ T4761] loop4: detected capacity change from 0 to 4096
[  108.817648][ T4770] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  108.882176][ T4761] NILFS (loop4): invalid segment: Checksum error in segment payload
[  108.902746][ T4761] NILFS (loop4): trying rollback from an earlier position
[  108.955626][ T4776] loop0: detected capacity change from 0 to 8
[  108.980942][ T4761] NILFS (loop4): recovery complete
[  109.013683][ T4780] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  109.079031][ T4761] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  109.252811][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.270926][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.286972][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.296949][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.304390][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.336421][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.377020][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.384507][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.403665][ T4801] loop0: detected capacity change from 0 to 2048
[  109.416658][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.447113][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.454562][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.469260][ T4801] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  109.472741][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.506262][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.518687][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.532000][ T4801] EXT4-fs (loop0): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,norecovery,auto_da_alloc,mblk_io_submit,grpquota,barrier=0x0000000000000000,grpjquota=,bsddf,. Quota mode: writeback.
[  109.534858][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.590565][ T4801] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz-executor.0: bg 0: block 234: padding at end of block bitmap is not set
[  109.612880][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.643881][ T4818] overlayfs: failed to resolve './file1': -2
[  109.692779][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.721506][ T4801] EXT4-fs (loop0): Remounting filesystem read-only
[  109.725027][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.765598][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.773605][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.782471][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.790600][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.792259][ T4801] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6184: Corrupt filesystem
[  109.802969][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.825852][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.834547][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.842352][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.851046][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.858590][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.866004][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.873466][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.882194][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.889705][    T7] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  109.927592][    T7] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  110.175196][ T4828] loop0: detected capacity change from 0 to 8
[  110.216832][ T4728] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  110.289179][ T4830] loop4: detected capacity change from 0 to 4096
[  110.432675][ T4830] NILFS (loop4): invalid segment: Checksum error in segment payload
[  110.476815][ T4830] NILFS (loop4): trying rollback from an earlier position
[  110.533701][ T4830] NILFS (loop4): recovery complete
[  110.617006][ T4728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  110.658276][ T4835] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  110.689339][ T4834] loop0: detected capacity change from 0 to 32768
[  110.697260][ T4728] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  110.724648][ T4728] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  110.746024][ T4728] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.754259][ T4830] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  110.766348][ T4834] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  110.776656][ T4834] BTRFS info (device loop0): force zlib compression, level 3
[  110.783369][ T4728] usb 3-1: config 0 descriptor??
[  110.784062][ T4834] BTRFS info (device loop0): use zlib compression, level 3
[  110.796452][ T4834] BTRFS info (device loop0): enabling ssd optimizations
[  110.803551][ T4834] BTRFS info (device loop0): using free space tree
[  110.810198][ T4834] BTRFS info (device loop0): has skinny extents
[  111.366437][ T4877] loop0: detected capacity change from 0 to 512
[  111.422766][ T4882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  111.451410][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  111.451614][ T4879] loop3: detected capacity change from 0 to 128
[  111.473580][ T4882] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  111.486977][ T4728] usb 3-1: string descriptor 0 read error: -22
[  111.498758][ T4877] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.516914][ T4877] ext4 filesystem being mounted at /root/syzkaller-testdir2211247245/syzkaller.Fnjdzh/70/bus supports timestamps until 2038 (0x7fffffff)
[  111.667916][ T4879] VFS: Found a Xenix FS (block size = 1024) on device loop3
[  111.759779][ T4728] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0002/input/input6
[  111.887730][ T4728] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  111.990924][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.012349][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.028144][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.035920][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.043919][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.051950][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.060008][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.068512][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.076131][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.084326][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.196466][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.217169][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.224616][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.239522][ T4897] loop4: detected capacity change from 0 to 4096
[  112.246092][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.255920][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.263451][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.276037][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.286308][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.300589][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.311478][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.330342][ T4897] NILFS (loop4): invalid segment: Checksum error in segment payload
[  112.339051][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.346471][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.354002][ T4897] NILFS (loop4): trying rollback from an earlier position
[  112.369478][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.389247][ T4897] NILFS (loop4): recovery complete
[  112.394581][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.411324][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.419251][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.422591][ T4898] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  112.427357][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.445645][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.454071][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.486248][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.496927][ T4897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  112.516701][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.528503][ T4728] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  112.547889][ T4050] usb 3-1: USB disconnect, device number 2
[  112.557661][ T4728] hid-generic 0000:0000:0000.0003: hidraw1: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  112.782376][ T4904] x_tables: unsorted entry at hook 2
[  112.838996][ T4909] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  113.253138][ T4922] loop4: detected capacity change from 0 to 4096
[  113.271498][ T4930] loop1: detected capacity change from 0 to 4096
[  113.337448][ T4930] NILFS (loop1): invalid segment: Checksum error in segment payload
[  113.337911][ T4922] ntfs3: Unknown parameter 'nohhdden'
[  113.386308][ T4930] NILFS (loop1): trying rollback from an earlier position
[  113.421944][ T4935] loop2: detected capacity change from 0 to 1024
[  113.509154][ T4930] NILFS (loop1): recovery complete
[  113.526166][ T4937] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  113.537681][   T26] audit: type=1804 audit(1718158170.090:60): pid=4922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2623023326/syzkaller.oUgyWe/51/file0" dev="sda1" ino=1968 res=1 errno=0
[  113.632140][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  113.729035][ T4919] loop0: detected capacity change from 0 to 40427
[  113.801907][ T4919] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  113.827819][ T4919] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  113.838892][ T4939] device veth0_vlan left promiscuous mode
[  113.897836][ T4919] F2FS-fs (loop0): invalid crc value
[  113.968909][ T4919] F2FS-fs (loop0): Found nat_bits in checkpoint
[  114.203201][ T4919] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  114.206058][ T4962] loop4: detected capacity change from 0 to 64
[  114.219325][ T4960] kAFS: unparsable volume name
[  114.227352][ T4919] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  115.551806][ T4988] loop1: detected capacity change from 0 to 256
[  115.640291][ T4993] loop3: detected capacity change from 0 to 512
[  115.648785][ T4988] exfat: Deprecated parameter 'utf8'
[  115.654191][ T4988] exfat: Deprecated parameter 'utf8'
[  115.694495][ T4988] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  115.753544][ T4993] EXT4-fs (loop3): orphan cleanup on readonly fs
[  115.778999][ T4993] EXT4-fs warning (device loop3): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  115.874017][ T4993] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  115.947487][ T4993] EXT4-fs error (device loop3): ext4_ext_check_inode:501: inode #13: comm syz-executor.3: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  116.016875][ T4993] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz-executor.3: couldn't read orphan inode 13 (err -117)
[  116.040517][ T4993] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  117.236572][    C1] sched: RT throttling activated
[  117.321696][ T5024] cifs: Unknown parameter ''
[  117.422430][ T5035] loop0: detected capacity change from 0 to 256
[  117.495518][ T5039] bridge0: port 3(syz_tun) entered blocking state
[  117.517080][ T5039] bridge0: port 3(syz_tun) entered disabled state
[  117.545849][ T5039] device syz_tun entered promiscuous mode
[  117.588168][ T5039] bridge0: port 3(syz_tun) entered blocking state
[  117.595232][ T5039] bridge0: port 3(syz_tun) entered forwarding state
[  117.612738][ T5044] loop1: detected capacity change from 0 to 512
[  117.629423][ T4662] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  117.721813][ T5042] loop2: detected capacity change from 0 to 8192
[  117.759014][ T5044] EXT4-fs (loop1): orphan cleanup on readonly fs
[  117.769536][ T5044] EXT4-fs warning (device loop1): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  117.802695][ T5042] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  117.809111][ T5044] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  117.837005][ T5042] REISERFS (device loop2): using ordered data mode
[  117.843943][ T5042] reiserfs: using flush barriers
[  117.845105][ T5044] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #13: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  117.880573][ T5042] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  117.896966][ T4662] usb 5-1: Using ep0 maxpacket: 32
[  117.942696][ T5044] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz-executor.1: couldn't read orphan inode 13 (err -117)
[  117.965981][ T5044] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  117.969125][ T5042] REISERFS (device loop2): checking transaction log (loop2)
[  118.016812][ T4662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  118.041209][ T4662] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  118.146640][ T4662] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  118.170236][ T4662] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.207475][ T4662] usb 5-1: config 0 descriptor??
[  118.257474][ T5029] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  118.317906][ T4662] hub 5-1:0.0: USB hub found
[  118.354050][ T5072] loop0: detected capacity change from 0 to 256
[  118.405138][ T5042] REISERFS (device loop2): Using tea hash to sort names
[  118.418273][ T5042] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  118.591535][ T5029] loop4: detected capacity change from 0 to 256
[  118.654058][ T5074] bridge0: port 3(syz_tun) entered blocking state
[  118.708471][ T5074] bridge0: port 3(syz_tun) entered disabled state
[  118.781070][ T5074] device syz_tun entered promiscuous mode
[  118.846411][ T5074] bridge0: port 3(syz_tun) entered blocking state
[  118.853033][ T5074] bridge0: port 3(syz_tun) entered forwarding state
[  119.076816][ T5089] loop0: detected capacity change from 0 to 256
[  119.149454][ T5089] exfat: Deprecated parameter 'utf8'
[  119.154863][ T5089] exfat: Deprecated parameter 'utf8'
[  119.216759][ T4662] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  119.240556][ T5089] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  119.272858][ T5096] loop1: detected capacity change from 0 to 4096
[  119.317969][ T5096] ntfs3: Unknown parameter 'nohhdden'
[  119.324279][ T5100] block nbd3: server does not support multiple connections per device.
[  119.337940][ T5099] block nbd3: shutting down sockets
[  119.488591][   T26] audit: type=1804 audit(1718158176.060:61): pid=5096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4032354414/syzkaller.HXRsbG/101/file0" dev="sda1" ino=1948 res=1 errno=0
[  119.563210][ T5110] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'.
[  119.904769][ T5130] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  120.066842][ T4662] usbhid 5-1:0.0: can't add hid device: -71
[  120.073130][ T4662] usbhid: probe of 5-1:0.0 failed with error -71
[  120.126844][ T5147] bridge0: port 3(syz_tun) entered blocking state
[  120.133369][ T5147] bridge0: port 3(syz_tun) entered disabled state
[  120.147700][ T4662] usb 5-1: USB disconnect, device number 2
[  120.229242][ T5147] device syz_tun entered promiscuous mode
[  120.235426][ T5147] bridge0: port 3(syz_tun) entered blocking state
[  120.242012][ T5147] bridge0: port 3(syz_tun) entered forwarding state
[  120.721397][ T5168] loop3: detected capacity change from 0 to 32768
[  120.781593][ T5168] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  120.790139][ T5168] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  120.816463][ T5168] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  120.820293][ T5188] loop0: detected capacity change from 0 to 7
[  120.837055][ T4050] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  120.848433][ T4662] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  120.855249][ T4662] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  120.924097][ T4662] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 68ms
[  120.932978][ T2962] Dev loop0: unable to read RDB block 7
[  120.939581][ T2962]  loop0: AHDI p3 p4
[  120.943780][ T4662] gfs2: fsid=syz:syz.0: jid=0: Done
[  120.949477][ T2962] loop0: partition table partially beyond EOD, truncated
[  120.956752][ T5168] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  120.968207][ T2962] loop0: p3 start 6514546 is beyond EOD, truncated
[  121.023182][ T5188] Dev loop0: unable to read RDB block 7
[  121.030254][ T5188]  loop0: AHDI p3 p4
[  121.041006][ T5188] loop0: partition table partially beyond EOD, truncated
[  121.074987][ T5188] loop0: p3 start 6514546 is beyond EOD, truncated
[  121.142713][ T4050] usb 2-1: Using ep0 maxpacket: 32
[  121.207330][ T5168] syz-executor.3 (5168): drop_caches: 2
[  121.215316][ T5168] syz-executor.3 (5168): drop_caches: 2
[  121.267732][ T4050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  121.374001][ T4050] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  121.414873][ T5206] netlink: 'syz-executor.4': attribute type 33 has an invalid length.
[  121.447123][ T4050] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  121.508110][ T4050] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.544014][ T4050] usb 2-1: config 0 descriptor??
[  121.577015][ T5171] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  121.620495][ T5216] loop4: detected capacity change from 0 to 512
[  121.649228][ T4050] hub 2-1:0.0: USB hub found
[  121.673296][ T5216] EXT4-fs (loop4): orphan cleanup on readonly fs
[  121.743109][ T5216] EXT4-fs warning (device loop4): ext4_enable_quotas:6431: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  121.754442][ T5217] loop2: detected capacity change from 0 to 256
[  121.780100][ T5216] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  121.817439][ T5216] EXT4-fs error (device loop4): ext4_ext_check_inode:501: inode #13: comm syz-executor.4: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  121.887865][ T5171] loop1: detected capacity change from 0 to 256
[  121.897150][ T5216] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz-executor.4: couldn't read orphan inode 13 (err -117)
[  121.917305][ T5217] FAT-fs (loop2): Directory bread(block 64) failed
[  121.923888][ T5217] FAT-fs (loop2): Directory bread(block 65) failed
[  121.952954][ T5217] FAT-fs (loop2): Directory bread(block 66) failed
[  121.984019][ T5217] FAT-fs (loop2): Directory bread(block 67) failed
[  122.007864][ T5217] FAT-fs (loop2): Directory bread(block 68) failed
[  122.024040][ T5217] FAT-fs (loop2): Directory bread(block 69) failed
[  122.059128][ T5216] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  122.085019][ T5217] FAT-fs (loop2): Directory bread(block 70) failed
[  122.124577][ T5217] FAT-fs (loop2): Directory bread(block 71) failed
[  122.148892][ T5217] FAT-fs (loop2): Directory bread(block 72) failed
[  122.157245][ T5217] FAT-fs (loop2): Directory bread(block 73) failed
[  122.182892][    C0] IPv4: Oversized IP packet from 172.20.20.40
[  122.288872][ T5232] loop0: detected capacity change from 0 to 64
[  122.542766][ T5236] loop0: detected capacity change from 0 to 2048
[  122.590216][ T5236] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=18576, location=18576
[  122.605468][ T5240] x_tables: ip_tables: tcp match: only valid for protocol 6
[  122.651486][ T5236] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.672663][ T5240] loop2: detected capacity change from 0 to 16
[  122.676898][ T4050] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  122.718611][ T5240] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  122.751271][ T5240] cramfs: empty filesystem
[  122.909050][ T5232] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  122.927360][ T5250] loop3: detected capacity change from 0 to 512
[  122.935201][    C0] vxcan0: j1939_xtp_rx_dat: no tx connection found
[  122.942383][    C0] vxcan0: j1939_xtp_rx_dat: no rx connection found
[  122.949476][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  122.957431][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  122.965451][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  122.973407][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  122.981560][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  122.989519][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  122.997524][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  123.005433][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  123.013454][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  123.021397][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  123.029406][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  123.037348][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  123.045325][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  123.053255][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  123.061258][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  123.069315][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  123.077361][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  123.085272][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  123.093264][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  123.101209][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  123.109229][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  123.117172][    C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  123.181757][ T5250] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpid,grpquota,,errors=continue. Quota mode: writeback.
[  123.236984][ T5250] ext4 filesystem being mounted at /root/syzkaller-testdir423064776/syzkaller.6mkQYi/101/file0 supports timestamps until 2038 (0x7fffffff)
[  123.583070][ T4050] usbhid 2-1:0.0: can't add hid device: -71
[  123.590639][ T4050] usbhid: probe of 2-1:0.0 failed with error -71
[  123.629374][   T26] audit: type=1326 audit(1718158180.200:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5277 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdccf915ea9 code=0x0
[  123.657695][ T4050] usb 2-1: USB disconnect, device number 3
[  123.738130][ T5287] loop0: detected capacity change from 0 to 7
[  123.759222][ T5289] loop3: detected capacity change from 0 to 16
[  123.781081][ T2962] Dev loop0: unable to read RDB block 7
[  123.789029][ T2962]  loop0: AHDI p3 p4
[  123.797496][ T2962] loop0: partition table partially beyond EOD, truncated
[  123.806330][ T2962] loop0: p3 start 6514546 is beyond EOD, truncated
[  123.815583][ T5294] loop4: detected capacity change from 0 to 64
[  123.827995][ T5289] erofs: Unknown parameter ''
[  123.836102][ T5287] Dev loop0: unable to read RDB block 7
[  123.842270][ T5287]  loop0: AHDI p3 p4
[  123.852447][ T5287] loop0: partition table partially beyond EOD, truncated
[  123.870476][ T5287] loop0: p3 start 6514546 is beyond EOD, truncated
[  123.893904][ T2962] Dev loop0: unable to read RDB block 7
[  123.904349][ T2962]  loop0: AHDI p3 p4
[  123.921588][ T2962] loop0: partition table partially beyond EOD, truncated
[  123.941471][ T2962] loop0: p3 start 6514546 is beyond EOD, truncated
[  124.035444][ T5307] loop0: detected capacity change from 0 to 256
[  124.053762][ T5308] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  124.103480][ T5307] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  124.227447][ T3707] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  124.966796][ T3707] usb 4-1: Using ep0 maxpacket: 32
[  125.096859][ T3707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  125.159504][ T3707] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  125.185558][ T3707] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  125.196908][ T3707] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.218496][ T3707] usb 4-1: config 0 descriptor??
[  125.237899][ T5301] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  125.262684][ T3707] hub 4-1:0.0: USB hub found
[  125.304390][ T3567] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.480160][ T5301] loop3: detected capacity change from 0 to 256
[  125.485970][ T3567] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.540358][ T5347] tipc: Started in network mode
[  125.549466][ T5347] tipc: Node identity fe800000000000000000000000000018, cluster identity 4711
[  125.589089][ T5347] tipc: Enabled bearer <udp:syz0>, priority 10
[  125.625663][ T3567] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.636304][ T5356] loop2: detected capacity change from 0 to 64
[  125.767726][ T3567] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  125.894575][ T5356] overlayfs: upper fs needs to support d_type.
[  125.956760][ T3707] hub 4-1:0.0: config failed, can't read hub descriptor (err -22)
[  125.988031][ T5356] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  125.995145][ T5356] overlayfs: failed to set xattr on upper
[  126.015361][ T5352] chnl_net:caif_netlink_parms(): no params data found
[  126.107544][ T5356] overlayfs: ...falling back to index=off,metacopy=off.
[  126.354274][ T5377] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  126.402803][ T5352] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.446931][ T5352] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.486914][ T5352] device bridge_slave_0 entered promiscuous mode
[  126.589118][ T3572] tipc: Node number set to 4269801496
[  126.634114][ T5352] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.653198][ T5352] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.700925][ T5352] device bridge_slave_1 entered promiscuous mode
[  126.797405][ T3707] usbhid 4-1:0.0: can't add hid device: -71
[  126.803511][ T3707] usbhid: probe of 4-1:0.0 failed with error -71
[  126.805454][ T5352] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.869701][ T3707] usb 4-1: USB disconnect, device number 2
[  126.888374][ T3528] Trying to free block not in datazone
[  126.894922][ T3528] Trying to free block not in datazone
[  126.920488][ T3528] Trying to free block not in datazone
[  126.934498][ T3528] Trying to free block not in datazone
[  126.940871][ T3528] Trying to free block not in datazone
[  126.948789][ T3528] minix_free_block (loop2:6): bit already cleared
[  126.962742][ T5352] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.977567][ T3528] Trying to free block not in datazone
[  126.983070][ T3528] Trying to free block not in datazone
[  127.096467][ T5352] team0: Port device team_slave_0 added
[  127.223860][ T5352] team0: Port device team_slave_1 added
[  127.345698][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.366888][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.403484][ T5352] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  127.420085][ T5352] batman_adv: batadv0: Adding interface: batadv_slave_1
[  127.427884][ T5352] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  127.458968][ T5352] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  127.474992][ T5414] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  127.487076][ T5414] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.496522][ T5414] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.537998][ T5414] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.545237][ T5414] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.552820][ T5414] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.559968][ T5414] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.571186][ T5414] bond0: (slave bridge0): Enslaving as an active interface with an up link
[  127.600541][ T4050] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  127.687305][ T4728] Bluetooth: hci1: command 0x0409 tx timeout
[  127.764407][ T5352] device hsr_slave_0 entered promiscuous mode
[  127.811616][ T5352] device hsr_slave_1 entered promiscuous mode
[  127.827593][ T5352] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  127.852216][ T5352] Cannot create hsr debugfs directory
[  128.007234][ T4050] usb 4-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[  128.026366][ T4050] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  128.049883][ T4050] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  128.063739][ T5438] loop4: detected capacity change from 0 to 64
[  128.093894][ T4050] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[  128.113657][ T4050] usb 4-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice=13.00
[  128.136234][ T4050] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.165482][ T5445] loop1: detected capacity change from 0 to 256
[  128.174139][ T4050] usb 4-1: config 0 descriptor??
[  128.316609][ T5445] FAT-fs (loop1): Directory bread(block 64) failed
[  128.336819][ T4728] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  128.355618][ T5445] FAT-fs (loop1): Directory bread(block 65) failed
[  128.363069][ T5445] FAT-fs (loop1): Directory bread(block 66) failed
[  128.378120][ T5445] FAT-fs (loop1): Directory bread(block 67) failed
[  128.386174][ T5445] FAT-fs (loop1): Directory bread(block 68) failed
[  128.415667][ T5445] FAT-fs (loop1): Directory bread(block 69) failed
[  128.454744][ T4050] usb 4-1: USB disconnect, device number 3
[  128.475066][ T5445] FAT-fs (loop1): Directory bread(block 70) failed
[  128.516829][ T5445] FAT-fs (loop1): Directory bread(block 71) failed
[  128.524080][ T5445] FAT-fs (loop1): Directory bread(block 72) failed
[  128.546805][ T5445] FAT-fs (loop1): Directory bread(block 73) failed
[  129.272270][ T4728] usb 3-1: Using ep0 maxpacket: 32
[  234.486513][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  234.493598][    C0] rcu: 	1-...!: (1 GPs behind) idle=47b/1/0x4000000000000000 softirq=13132/13134 fqs=0 
[  234.504894][    C0] 	(detected by 0, t=10506 jiffies, g=16045, q=73)
[  234.511529][    C0] Sending NMI from CPU 0 to CPUs 1:
[  234.516760][    C1] NMI backtrace for cpu 1
[  234.516783][    C1] CPU: 1 PID: 3567 Comm: kworker/u4:4 Not tainted 5.15.160-syzkaller #0
[  234.516800][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  234.516816][    C1] Workqueue: netns cleanup_net
[  234.516924][    C1] RIP: 0010:lock_release+0x601/0x9a0
[  234.516949][    C1] Code: 4c 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 a3 53 67 00 48 c7 84 24 90 00 00 00 00 00 00 00 9c 8f 84 24 90 00 00 00 <42> 80 3c 3b 00 74 08 4c 89 f7 e8 00 53 67 00 f6 84 24 91 00 00 00
[  234.516962][    C1] RSP: 0018:ffffc90000dd0b80 EFLAGS: 00000046
[  234.516976][    C1] RAX: 0000000000000001 RBX: 1ffff920001ba182 RCX: ffffc90000dd0c03
[  234.516989][    C1] RDX: 0000000000000005 RSI: ffffffff8a8b3c20 RDI: ffffffff8ad8f6c0
[  234.517000][    C1] RBP: ffffc90000dd0cb0 R08: dffffc0000000000 R09: fffffbfff1bc8cce
[  234.517013][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff920001ba17c
[  234.517025][    C1] R13: 0000000000000046 R14: ffffc90000dd0c10 R15: dffffc0000000000
[  234.517037][    C1] FS:  0000000000000000(0000) GS:ffff8880b9b00000(0000) knlGS:0000000000000000
[  234.517052][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  234.517064][    C1] CR2: 00007fb4b794898c CR3: 00000000616e2000 CR4: 00000000003506e0
[  234.517078][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  234.517088][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  234.517099][    C1] Call Trace:
[  234.517105][    C1]  <NMI>
[  234.517112][    C1]  ? nmi_cpu_backtrace+0x39f/0x4a0
[  234.517154][    C1]  ? read_lock_is_recursive+0x10/0x10
[  234.517172][    C1]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  234.517191][    C1]  ? unknown_nmi_error+0xd0/0xd0
[  234.517256][    C1]  ? nmi_cpu_backtrace_handler+0x8/0x10
[  234.517289][    C1]  ? nmi_handle+0xf7/0x370
[  234.517308][    C1]  ? lock_release+0x601/0x9a0
[  234.517323][    C1]  ? default_do_nmi+0x62/0x150
[  234.517372][    C1]  ? exc_nmi+0xa8/0x100
[  234.517388][    C1]  ? end_repeat_nmi+0x16/0x31
[  234.517424][    C1]  ? lock_release+0x601/0x9a0
[  234.517440][    C1]  ? lock_release+0x601/0x9a0
[  234.517456][    C1]  ? lock_release+0x601/0x9a0
[  234.517472][    C1]  </NMI>
[  234.517477][    C1]  <IRQ>
[  234.517483][    C1]  ? advance_sched+0x68b/0x940
[  234.517515][    C1]  ? rcu_lock_release+0x5/0x20
[  234.517531][    C1]  ? __netif_schedule+0xc0/0x310
[  234.517552][    C1]  ? __lock_acquire+0x1ff0/0x1ff0
[  234.517571][    C1]  ? do_raw_spin_unlock+0x137/0x8b0
[  234.517593][    C1]  advance_sched+0x7d4/0x940
[  234.517616][    C1]  ? taprio_free_sched_cb+0x1a0/0x1a0
[  234.517635][    C1]  __hrtimer_run_queues+0x598/0xcf0
[  234.517661][    C1]  ? hrtimer_interrupt+0x980/0x980
[  234.517677][    C1]  ? ktime_get_update_offsets_now+0x407/0x420
[  234.517699][    C1]  hrtimer_interrupt+0x392/0x980
[  234.517726][    C1]  __sysvec_apic_timer_interrupt+0x139/0x470
[  234.517754][    C1]  sysvec_apic_timer_interrupt+0x8c/0xb0
[  234.517774][    C1]  </IRQ>
[  234.517778][    C1]  <TASK>
[  234.517783][    C1]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  234.517801][    C1] RIP: 0010:seqcount_lockdep_reader_access+0x1dc/0x220
[  234.517820][    C1] Code: 00 4d 85 ed 75 16 e8 43 b1 10 00 eb 15 e8 3c b1 10 00 e8 27 42 ae 08 4d 85 ed 74 ea e8 2d b1 10 00 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 66 43 c7 44 3c 09 00 00 43 c6 44 3c 0b 00
[  234.517832][    C1] RSP: 0018:ffffc90003f97460 EFLAGS: 00000293
[  234.517846][    C1] RAX: ffffffff816fab93 RBX: 0000000000000000 RCX: ffff88801ae75940
[  234.517858][    C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  234.517867][    C1] RBP: ffffc90003f97508 R08: ffffffff816fab69 R09: fffffbfff1f7f01d
[  234.517880][    C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  234.517891][    C1] R13: 0000000000000200 R14: 0000000000000046 R15: 1ffff920007f2e8c
[  234.517905][    C1]  ? seqcount_lockdep_reader_access+0x1a9/0x220
[  234.517922][    C1]  ? seqcount_lockdep_reader_access+0x1d3/0x220
[  234.517943][    C1]  ? ktime_get_real_ts64+0x460/0x460
[  234.517965][    C1]  ktime_get_coarse_real_ts64+0x36/0x120
[  234.517985][    C1]  current_time+0x87/0x2f0
[  234.518003][    C1]  ? atime_needs_update+0x7b0/0x7b0
[  234.518020][    C1]  ? do_raw_spin_unlock+0x137/0x8b0
[  234.518040][    C1]  simple_recursive_removal+0x27c/0x850
[  234.518061][    C1]  ? debugfs_remove+0x60/0x60
[  234.518096][    C1]  debugfs_remove+0x45/0x60
[  234.518113][    C1]  ieee80211_debugfs_remove_netdev+0x4d/0xa0
[  234.518153][    C1]  ieee80211_uninit+0x24/0xa0
[  234.518178][    C1]  ? trace_drv_return_void+0x1d0/0x1d0
[  234.518193][    C1]  unregister_netdevice_many+0x12bb/0x18f0
[  234.518220][    C1]  ? alloc_netdev_mqs+0xc10/0xc10
[  234.518240][    C1]  ? mutex_unlock+0x10/0x10
[  234.518256][    C1]  ? unregister_netdevice_queue+0x258/0x350
[  234.518276][    C1]  ? list_netdevice+0x450/0x450
[  234.518296][    C1]  ? ieee80211_txq_teardown_flows+0x196/0x280
[  234.518316][    C1]  ieee80211_remove_interfaces+0x4f0/0x820
[  234.518332][    C1]  ? ieee80211_unregister_hw+0x4d/0x220
[  234.518356][    C1]  ? ieee80211_do_stop+0x1ce0/0x1ce0
[  234.518379][    C1]  ieee80211_unregister_hw+0x55/0x220
[  234.518399][    C1]  mac80211_hwsim_del_radio+0x2bb/0x4a0
[  234.518450][    C1]  ? rhashtable_remove_fast+0xab0/0xab0
[  234.518473][    C1]  hwsim_exit_net+0x5b8/0x660
[  234.518494][    C1]  ? hwsim_init_net+0x80/0x80
[  234.518514][    C1]  ? __ip_vs_dev_cleanup_batch+0x235/0x250
[  234.518550][    C1]  cleanup_net+0x6ce/0xb60
[  234.518571][    C1]  ? ops_free_list+0x340/0x340
[  234.518594][    C1]  process_one_work+0x8a1/0x10c0
[  234.518620][    C1]  ? worker_detach_from_pool+0x260/0x260
[  234.518640][    C1]  ? _raw_spin_lock_irqsave+0x120/0x120
[  234.518660][    C1]  ? kthread_data+0x4e/0xc0
[  234.518676][    C1]  ? wq_worker_running+0x97/0x170
[  234.518694][    C1]  worker_thread+0xaca/0x1280
[  234.518724][    C1]  kthread+0x3f6/0x4f0
[  234.518739][    C1]  ? rcu_lock_release+0x20/0x20
[  234.518756][    C1]  ? kthread_blkcg+0xd0/0xd0
[  234.518773][    C1]  ret_from_fork+0x1f/0x30
[  234.518804][    C1]  </TASK>
[  234.519748][    C0] rcu: rcu_preempt kthread starved for 10506 jiffies! g16045 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  235.105162][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  235.115133][    C0] rcu: RCU grace-period kthread stack dump:
[  235.121017][    C0] task:rcu_preempt     state:R  running task     stack:26712 pid:   15 ppid:     2 flags:0x00004000
[  235.131803][    C0] Call Trace:
[  235.135082][    C0]  <TASK>
[  235.138034][    C0]  __schedule+0x12c4/0x45b0
[  235.142549][    C0]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  235.148455][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  235.154402][    C0]  ? __mod_timer+0xa8e/0xeb0
[  235.159007][    C0]  ? release_firmware_map_entry+0x190/0x190
[  235.164908][    C0]  ? mod_timer_pending+0x20/0x20
[  235.169862][    C0]  ? lockdep_softirqs_off+0x420/0x420
[  235.175252][    C0]  schedule+0x11b/0x1f0
[  235.179424][    C0]  schedule_timeout+0x1b9/0x300
[  235.184283][    C0]  ? console_conditional_schedule+0x40/0x40
[  235.190205][    C0]  ? update_process_times+0x200/0x200
[  235.195593][    C0]  ? prepare_to_swait_event+0x321/0x340
[  235.201151][    C0]  rcu_gp_fqs_loop+0x2bf/0x1080
[  235.206020][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  235.211230][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  235.216441][    C0]  ? rcu_gp_init+0xdae/0x1140
[  235.221128][    C0]  ? rcu_gp_init+0x1140/0x1140
[  235.225908][    C0]  ? finish_swait+0xc5/0x1d0
[  235.230505][    C0]  rcu_gp_kthread+0xa4/0x360
[  235.235107][    C0]  ? _raw_spin_unlock+0x40/0x40
[  235.239972][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  235.245092][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  235.251003][    C0]  ? __kthread_parkme+0x15c/0x1c0
[  235.256058][    C0]  kthread+0x3f6/0x4f0
[  235.260141][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  235.265269][    C0]  ? kthread_blkcg+0xd0/0xd0
[  235.269870][    C0]  ret_from_fork+0x1f/0x30
[  235.274315][    C0]  </TASK>
[  235.277337][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  235.283782][    C0] NMI backtrace for cpu 0
[  235.288224][    C0] CPU: 0 PID: 5457 Comm: syz-executor.3 Not tainted 5.15.160-syzkaller #0
[  235.296727][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  235.306871][    C0] Call Trace:
[  235.310149][    C0]  <IRQ>
[  235.312999][    C0]  dump_stack_lvl+0x1e3/0x2d0
[  235.317684][    C0]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  235.323327][    C0]  ? panic+0x860/0x860
[  235.327592][    C0]  nmi_cpu_backtrace+0x46a/0x4a0
[  235.332655][    C0]  ? __wake_up_klogd+0xd5/0x100
[  235.337549][    C0]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  235.343739][    C0]  ? _printk+0xd1/0x120
[  235.347929][    C0]  ? cpu_online+0x1f/0x40
[  235.352275][    C0]  ? panic+0x860/0x860
[  235.356365][    C0]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  235.362542][    C0]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  235.368540][    C0]  rcu_check_gp_kthread_starvation+0x1d2/0x240
[  235.374713][    C0]  print_other_cpu_stall+0x137a/0x14d0
[  235.380194][    C0]  ? print_cpu_stall+0x600/0x600
[  235.385137][    C0]  ? __lock_acquire+0x1ff0/0x1ff0
[  235.390173][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  235.395399][    C0]  rcu_sched_clock_irq+0xa38/0x1150
[  235.400636][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  235.405523][    C0]  ? hrtimer_run_queues+0x163/0x450
[  235.410740][    C0]  ? account_process_tick+0x232/0x3a0
[  235.416131][    C0]  update_process_times+0x196/0x200
[  235.421864][    C0]  tick_sched_timer+0x386/0x550
[  235.426724][    C0]  ? tick_setup_sched_timer+0x2d0/0x2d0
[  235.432279][    C0]  __hrtimer_run_queues+0x55b/0xcf0
[  235.437506][    C0]  ? hrtimer_interrupt+0x980/0x980
[  235.442625][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  235.448708][    C0]  hrtimer_interrupt+0x392/0x980
[  235.453684][    C0]  __sysvec_apic_timer_interrupt+0x139/0x470
[  235.459679][    C0]  sysvec_apic_timer_interrupt+0x8c/0xb0
[  235.465324][    C0]  </IRQ>
[  235.468256][    C0]  <TASK>
[  235.471185][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  235.477169][    C0] RIP: 0010:smp_call_function_many_cond+0xa93/0xd90
[  235.483762][    C0] Code: 04 03 84 c0 0f 85 84 00 00 00 45 8b 7d 00 44 89 fe 83 e6 01 31 ff e8 4c cf 0b 00 41 83 e7 01 75 07 e8 e1 cb 0b 00 eb 41 f3 90 <48> b8 00 00 00 00 00 fc ff df 0f b6 04 03 84 c0 75 11 41 f7 45 00
[  235.503379][    C0] RSP: 0018:ffffc90003377220 EFLAGS: 00000246
[  235.509452][    C0] RAX: ffffffff81749104 RBX: 1ffff110173680b9 RCX: 0000000000040000
[  235.517440][    C0] RDX: ffffc9000a251000 RSI: 000000000003ffff RDI: 0000000000040000
[  235.525610][    C0] RBP: ffffc90003377360 R08: ffffffff817490d4 R09: fffffbfff1f7f01a
[  235.533642][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000001
[  235.541629][    C0] R13: ffff8880b9b405c8 R14: ffff8880b9a3b3c0 R15: 0000000000000001
[  235.549620][    C0]  ? smp_call_function_many_cond+0xa84/0xd90
[  235.555616][    C0]  ? smp_call_function_many_cond+0xab4/0xd90
[  235.561618][    C0]  ? flush_tlb_all+0x20/0x20
[  235.566250][    C0]  ? smp_call_function_many+0x30/0x30
[  235.571639][    C0]  ? do_raw_spin_lock+0x14a/0x370
[  235.576681][    C0]  ? do_raw_spin_unlock+0x137/0x8b0
[  235.581888][    C0]  ? flush_tlb_all+0x20/0x20
[  235.586569][    C0]  on_each_cpu_cond_mask+0x3b/0x80
[  235.591690][    C0]  __purge_vmap_area_lazy+0x294/0x1740
[  235.597163][    C0]  ? cpumask_next+0xc3/0xf0
[  235.601680][    C0]  ? purge_fragmented_blocks_allcpus+0x855/0x950
[  235.608016][    C0]  ? purge_fragmented_blocks_allcpus+0x8da/0x950
[  235.614354][    C0]  ? _vm_unmap_aliases+0x441/0x4e0
[  235.619498][    C0]  ? purge_fragmented_blocks_allcpus+0x950/0x950
[  235.625934][    C0]  _vm_unmap_aliases+0x453/0x4e0
[  235.631074][    C0]  change_page_attr_set_clr+0x308/0x1050
[  235.636751][    C0]  ? __set_memory_prot+0x100/0x100
[  235.641892][    C0]  ? find_vm_area+0xf9/0x130
[  235.646585][    C0]  ? __lock_acquire+0x1ff0/0x1ff0
[  235.651618][    C0]  ? do_raw_spin_lock+0x14a/0x370
[  235.656657][    C0]  set_memory_ro+0xa1/0xe0
[  235.661086][    C0]  ? set_memory_nx+0x130/0x130
[  235.665859][    C0]  ? _raw_spin_unlock+0x24/0x40
[  235.670719][    C0]  bpf_int_jit_compile+0xbf57/0xc6e0
[  235.676062][    C0]  ? emit_bpf_dispatcher+0xd90/0xd90
[  235.681462][    C0]  ? ktime_get_with_offset+0x101/0x320
[  235.686923][    C0]  ? seqcount_lockdep_reader_access+0x153/0x220
[  235.693182][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  235.698414][    C0]  ? ktime_get_real_ts64+0x460/0x460
[  235.703730][    C0]  bpf_prog_select_runtime+0x6e2/0x9b0
[  235.709200][    C0]  ? memset+0x1f/0x40
[  235.713196][    C0]  ? bpf_obj_name_cpy+0x186/0x1d0
[  235.718245][    C0]  bpf_prog_load+0x131c/0x1b60
[  235.723030][    C0]  ? map_freeze+0x360/0x360
[  235.727540][    C0]  ? __might_fault+0xb8/0x110
[  235.732246][    C0]  ? __might_fault+0xb4/0x110
[  235.736931][    C0]  ? bpf_lsm_bpf+0x5/0x10
[  235.741270][    C0]  ? security_bpf+0x7d/0xa0
[  235.745823][    C0]  __sys_bpf+0x343/0x670
[  235.750078][    C0]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[  235.755491][    C0]  __x64_sys_bpf+0x78/0x90
[  235.759940][    C0]  do_syscall_64+0x3b/0xb0
[  235.764371][    C0]  ? clear_bhb_loop+0x15/0x70
[  235.769063][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  235.774982][    C0] RIP: 0033:0x7f9e01fbeea9
[  235.779425][    C0] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  235.799053][    C0] RSP: 002b:00007f9e00b380c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  235.807476][    C0] RAX: ffffffffffffffda RBX: 00007f9e020f5f80 RCX: 00007f9e01fbeea9
[  235.815454][    C0] RDX: 000000000000002e RSI: 0000000020000080 RDI: 0000000000000005
[  235.823464][    C0] RBP: 00007f9e0202dff4 R08: 0000000000000000 R09: 0000000000000000
[  235.831444][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  235.839417][    C0] R13: 000000000000000b R14: 00007f9e020f5f80 R15: 00007ffd1480b9e8
[  235.847414][    C0]  </TASK>