last executing test programs:

3m25.764329176s ago: executing program 32 (id=181):
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f00000000c0)={0xa, 0x4e20, 0x0, @dev, 0x3}, 0x1c, 0x0}, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={0x800100, 0xffffffff, 0x1e, 0xffffffff, 0xa, 0x101})
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2m15.713794154s ago: executing program 2 (id=601):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @local, 0x1}, 0x1c)
rt_sigqueueinfo(r0, 0x22, &(0x7f0000000300)={0x15, 0x8, 0x5})
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
syz_open_pts(r4, 0x141601)
syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040d0479001904"], 0x7)
ioctl$sock_TIOCINQ(0xffffffffffffffff, 0x541b, 0x0)
close(0x3)
sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0)
r5 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r5, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
syz_emit_vhci(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES8, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m14.362019675s ago: executing program 2 (id=607):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0b00000007000000010001000900000001"], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

2m14.244853027s ago: executing program 2 (id=609):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000066ddf51e12dbc3668d465860e30fc2e9ea3f6d99f1760744459c3b09ff2cfe4d5109d236b4fd2358763673ba22e51a5e04cb9eaf1df350bdb9e7a57489865d9fef04971baa1b562965bf5947a7a529a1a161e3123eda81ca7021"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")

2m11.760453276s ago: executing program 2 (id=623):
r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$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")
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x80)
chdir(0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$HIDIOCGUSAGE(0xffffffffffffffff, 0xd01c4813, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="3731982c6525b157e14244883e7194cccb6f35e7da28f9f867fdb7562954bdd852d90fe7eb46a931b7197f925a0f7129ae61d64894e609e4c62c918c94027263cf38cc3e3b4a3b2eedead2976341b415", @ANYBLOB="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"/312, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r0, @ANYRES64=r1, @ANYBLOB="c0dd326b825326b4ead2e2c4133006cadd65190444b37dc11727acecbeb870445fb008be08a9a03546f0274146164ceae57313603528e464e93c959cb3455beecde1077dc9c4e05748d800479c46041dfb246401b58b4a80ed7d5c10630a6fff5177c188d6c3c5bd8952dc1e37abd7683208f58ec53b66fa7ac8f54fd65739ebc634da17da39e8b0ca4ada", @ANYBLOB="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", @ANYRES16, @ANYRES8], 0x10, 0x1c4, &(0x7f0000000440)="$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")
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)

2m10.193519981s ago: executing program 2 (id=635):
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xf, 0x4, 0x4, 0x3}, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, 0x0, 0x2, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f00000001c0), 0x12)
write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2b, 'pids'}]}, 0x6)

2m8.235696832s ago: executing program 3 (id=652):
open(0x0, 0x7ad23, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0xffffffdd}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000"], 0x4c}}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000010000108000000000000000002000000", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

2m8.147282074s ago: executing program 3 (id=655):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa1000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000005c0)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
open(0x0, 0x0, 0x2)

2m5.83990466s ago: executing program 3 (id=667):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x8, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
sendmsg$unix(r1, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0)

2m5.8098546s ago: executing program 3 (id=668):
r0 = syz_mount_image$ext4(&(0x7f0000000280)='ext4\x00', &(0x7f0000000740)='./file0\x00', 0x10042, &(0x7f00000000c0)={[{@nouid32}, {@delalloc}]}, 0xfe, 0x26f, &(0x7f0000001c80)="$eJzs3T9oJFUcB/Df7B/jJotGbQTxD4iIBkLsBJvYKAQkBBFBhYiIlSRCTLDLWtlYaK0SEGyC2BktxSbYKIJV1BS55uAuXHHhirtij9nZDZtkw132b9j5fGDZN3nvzXs7yfdNWJiZAHJrOiLmI6IYETMRUY6IpL3BM9lrurm5VdldjqjX37yRNNpl25lWv6mIqEXEyxGlVt3GzrsHt/Zef/7L9fJzP+y8UxnW52t3eLD/xtF3i1/8vPDSxl//XFtMYj6qzbr2z9FPSYeflZKIRwcx2CWRlEY9A+7H0mc//Zvm/rGIeLaR/3IUmpH9au2B38vx4rfn9f36+t9PDHOuQP/V6+X0HFirA7lTiIhqJIXZiMjKhcLsbPY//H/FycLHq2ufzny0ur7yYaMauKyqF2ma7L/268QvU6fyf7WY5R8YX9WI/beWtv9Py0fFUc8GGJj2b9ufzN7S/M+8v/lCyD/kjvxDfsk/5Jf8wxjoMrvyD/nVS/4fHNCcgOFw/ofx83CrUG4Vah3byT/kl/zDmPq+01WnJ8k/5Fd7/gGAfKlPjPoKZGBURr3+AAAAAAAAAAAAAAAAAAAAZ21Vdpdbr2GN+cc3EYevRkSp0/jF5gPHs7uNT95M0mbHkqxbT957uscd9OjHvl19Xemq10NX+jV+d/58ajD7/fzk5rkHZ3MlopY2niuVzv79JT0/8P6Re9SXP+hxgAs6fVfAV94e7vin3dke7fgLexG/pevPXHP9SQ/Q8e+/EI833juvP9X2Wyx36ZPbPe4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAobkbAAD//2SKbDc=")
r1 = creat(&(0x7f0000000140)='./bus\x00', 0x80)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./bus\x00', 0x0, 0x63d014, 0x0)
r2 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r2, 0x0)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="3731982c6525b157e14244883e7194cccb6f35e7da28f9f867fdb7562954bdd852d90fe7eb46a931b7197f925a0f7129ae61d64894e609e4c62c918c94027263cf38cc3e3b4a3b2eedead2976341b415", @ANYBLOB="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"/312, @ANYRES64=r1, @ANYRESOCT=r1, @ANYRESOCT=r1, @ANYRESHEX, @ANYRESOCT=r0, @ANYRES64=r1, @ANYBLOB="c0dd326b825326b4ead2e2c4133006cadd65190444b37dc11727acecbeb870445fb008be08a9a03546f0274146164ceae57313603528e464e93c959cb3455beecde1077dc9c4e05748d800479c46041dfb246401b58b4a80ed7d5c10630a6fff5177c188d6c3c5bd8952dc1e37abd7683208f58ec53b66fa7ac8f54fd65739ebc634da17da39e8b0ca4ada", @ANYBLOB="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", @ANYRES16, @ANYRES8], 0x10, 0x1c4, &(0x7f0000000440)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)

2m5.554362674s ago: executing program 3 (id=669):
bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0xb, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2m4.675605108s ago: executing program 2 (id=672):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000200000000000000000000000850000004100000095000000000000004be98911ed5a3cf4451d51e400827eef4df9eb3fd52b8f0a456c3a6cfd127868ad3fe3f9a9b946c97f9fc091e4c3f4b0a0d7ed298717a480c48868562f04005972b6a5265519fee4cb1b8b93f0b164770fd40c7a8060ce72beff7cda177e28a1a97b2c8c56a3f15b2f7a9b7ae2cf52d08555d3c3315e95095217bff8c9441a45fd00000000000000979ed4e35d21d13d428af521c553b9420385390207dc1634aee0244045e5c380e6090329d37b29a56c16d5c7bee160b91246bd2c205047bd92581165c774b1fd46072c161f1d33e6d5c1a5db7a714e3ed5468408f279bd9f98ec3c5ffd79cd37810f03000000b65d147fa05253a600adfb03775847b220369339529d434f3190c81c3dd501a780cfaaaa916c8a33ee4b52d18e160428893f33d206d3a7195e7f69c831099bdc940000aa2c2e61509bf6c58b100000000000000000000000005e3210346531c1eb14fbec6eb35d6f3e3853512c6bf186bd8b75d17aeeaa07"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10)
close(r2)

2m4.58739768s ago: executing program 33 (id=672):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)
r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, 0x0, 0x25, 0x0, @void}, 0x10)
close(r2)

2m3.110094093s ago: executing program 3 (id=683):
unshare(0x20400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x5, 0xd, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10f0, r0, 0x1000000}, 0x38)

2m2.553462882s ago: executing program 34 (id=683):
unshare(0x20400)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x5, 0xd, 0x42, 0x40, 0xc0, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x10f0, r0, 0x1000000}, 0x38)

1m49.241526193s ago: executing program 1 (id=771):
syz_open_dev$sndctrl(&(0x7f0000001a00), 0x1, 0x400a80)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = openat$random(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
preadv(r1, &(0x7f0000001440)=[{&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/36, 0x24}], 0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
preadv(r4, &(0x7f0000000340)=[{&(0x7f0000000080)=""/122, 0x7a}], 0x1, 0x0, 0x0)

1m46.301478489s ago: executing program 1 (id=790):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18)
syz_clone(0x1802000, 0x0, 0x0, 0x0, 0x0, 0x0)

1m46.072271062s ago: executing program 1 (id=794):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
umount2(0x0, 0x1)

1m45.930720835s ago: executing program 1 (id=798):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], 0x1, 0x176, &(0x7f00000005c0)="$eJzskj9O80AQxd/azp/vKxBIVGmIRAShgDgOIEQDZeipqIgcEyIcIHEkSJTCCKEUFIiSE+QaSFyABnGA1CkiamS09thacwXmV+TtvJ3ZHU/23Ot6OQDf85GNQwAIoGNBA7EiIp2R80z6QfpEee+Ud0T+PWnBGwwvGq7r9Ir7RSylDABfoZdY3sGdhll41Od8ZMvFqWwpCALpNQGZDjVHB9BVcgoGsAxAR5DkGABksA6g0u9cV7zBcLPdabSclnNpWbVdc9s0d6zKWdt1zOhXKFfEw5C6AUDO65+ynwHwQEn/kUYordG+UGuzygzLq+laTamNVeD1hLbtHC3kCI6xhjyAG18obik8xUD4SXUI6BRUDaW/6K58uLFlX7nNMQREXDaBkZxRnSKTBJYa1Pb8uO0xaYm0Tjohnf56WvGTMcL/7ZGisg9kcdvo93tVOaRolXhW4lmLvjoweeuLlv64Nw0MwzAMwzAMwzB/nZ8AAAD//4Q2eIA=")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'})
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_emit_ethernet(0x0, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$int_out(0xffffffffffffffff, 0x0, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
mount$bind(0x0, 0x0, 0xfffffffffffffffc, 0x1c500c, 0x0)
syz_open_procfs(0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0xb}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4e23, 0xfffc, 0x4e20, 0x3, 0xa, 0x80, 0x30}, {0x100000000, 0x2, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x6, 0x2, 0xb6c8}, {0xfd29, 0xfffffffffffffffe, 0x0, 0x9}, 0xd6, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@mcast1, 0x200000, 0x33}, 0x0, @in=@loopback, 0x3502, 0x0, 0x0, 0x7, 0x0, 0x4, 0xffffffff}}, 0xe8)
prlimit64(0x0, 0xe, 0x0, 0x0)
chdir(&(0x7f0000000040)='.\x00')
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x10000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffe0)

1m42.465072769s ago: executing program 1 (id=831):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10)

1m42.363384811s ago: executing program 1 (id=834):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0)

1m28.387871122s ago: executing program 0 (id=950):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000200000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000002008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r1}, 0x18)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

1m28.376412142s ago: executing program 0 (id=951):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
io_destroy(0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x2d)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x58}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

1m27.370486518s ago: executing program 0 (id=956):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000040)={r2}, 0xc)

1m27.302592019s ago: executing program 0 (id=957):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
personality(0x500006)

1m27.208281341s ago: executing program 35 (id=834):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa001)
ioctl$USBDEVFS_DROP_PRIVILEGES(r0, 0x4004551e, 0x0)

1m27.098400183s ago: executing program 0 (id=960):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r0}, 0x10)
umount2(0x0, 0x1)

1m27.021577044s ago: executing program 0 (id=963):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_SUBMITURB(r0, 0x4004550c, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)

1m11.935788812s ago: executing program 36 (id=963):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00'}, 0x10)
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
ioctl$USBDEVFS_SUBMITURB(r0, 0x4004550c, 0x0)
rt_sigprocmask(0x0, 0x0, 0x0, 0x0)

51.960475388s ago: executing program 9 (id=1225):
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x6, 0x0, 0x1}}, 0x40)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xc)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x2, 0xfffffffd, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000500)={0x3, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10)
sendto$inet(r3, &(0x7f0000000040)='\f\x00', 0xffeb, 0x0, &(0x7f0000000340), 0x10)
ioctl$sock_inet_SIOCSARP(r2, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @empty}, {}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}})

51.690715033s ago: executing program 9 (id=1231):
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x3, 0x7)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e26, 0xfffffffc, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/diskstats\x00', 0x0, 0x0)

51.610296444s ago: executing program 9 (id=1232):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5}, 0x50)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
readv(r1, &(0x7f0000000200)=[{&(0x7f0000000140)=""/58, 0x3a}], 0x1)

51.399861997s ago: executing program 9 (id=1236):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x90}, [@ldst={0x3, 0x0, 0xb}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket(0x840000000002, 0x3, 0x100)
connect$inet(r2, 0x0, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={0x0, r3}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
getsockopt$inet_int(r2, 0x0, 0x7, 0x0, &(0x7f0000000040))
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r7, 0x5423, &(0x7f0000000000)=0x1b)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000380)="fd97a6", 0x0}, 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x6c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x0, 0xb, 0x0, &(0x7f0000000140)="e0274239ed0d0800000000", 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r0, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x280008a, &(0x7f0000000240)=ANY=[@ANYBLOB='shortname=lower,shortname=win95,rodir,iocharset=default,uni_xlate=0,nonumtail=1,utf8=0,flush,rodir,shortname=win95,shortname=winnt,shortname=win95,showexec,uni_xlate=0,utf8=0,utf8=0,uni_xlate=0,shortname=mixed,\x00'], 0x97, 0x2ad, &(0x7f00000007c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x4)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)

49.873470242s ago: executing program 9 (id=1250):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000000, 0xe, 0x14, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

49.3516906s ago: executing program 9 (id=1261):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
r4 = eventfd2(0x0, 0x0)
io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}])
io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r4}])

49.181795302s ago: executing program 37 (id=1261):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r1}, 0x10)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r3=>0x0)
r4 = eventfd2(0x0, 0x0)
io_submit(r3, 0x1, &(0x7f00000006c0)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}])
io_getevents(r3, 0x2, 0x2, &(0x7f0000001340)=[{}, {}], 0x0)
io_submit(r3, 0x1, &(0x7f0000000140)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x3, r4}])

4.361195411s ago: executing program 4 (id=1593):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x10404, &(0x7f0000000340)={[{@init_itable_val}, {@test_dummy_encryption}, {@noinit_itable}, {@nodelalloc}, {@errors_remount}, {@quota}]}, 0x3, 0x43c, &(0x7f0000001080)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {@in6=@loopback, 0x4d4, 0x3c}, @in=@dev, {0xfffffffffffffffd, 0x400000000000000}, {0x0, 0x200000000, 0xfffffffffffffff4, 0x100000}, {0x0, 0x5bf}, 0x1, 0x0, 0x2, 0x4}}, 0xf0}, 0x1, 0x0, 0x0, 0x20000011}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f0000000040)=@framed={{0xd5, 0xa, 0x0, 0x0, 0x0, 0x63, 0x11, 0x34}, [@initr0]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x80)

2.115729337s ago: executing program 8 (id=1618):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x14, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.966795769s ago: executing program 8 (id=1621):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7b}]}, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x6, 0xa}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000500)='workqueue_queue_work\x00', r1}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071107100000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)

1.955806179s ago: executing program 5 (id=1622):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.843088661s ago: executing program 4 (id=1625):
open(0x0, 0x7ad23, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0xffffffdd}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800000000000000000200", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

1.784148232s ago: executing program 8 (id=1626):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)

1.717141433s ago: executing program 5 (id=1628):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1803000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7020000140000e0b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
pipe2$9p(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r2, &(0x7f0000000180)=ANY=[], 0x15)
r3 = dup(r2)
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}})

1.501932116s ago: executing program 8 (id=1630):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x18)
pipe2(&(0x7f0000000240)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x4000)
readv(r1, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1)
writev(r2, &(0x7f0000000200)=[{&(0x7f0000000100)="19", 0x3a4e1e905c56cdb7}], 0x1)

1.326579439s ago: executing program 4 (id=1632):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000c14, &(0x7f0000000440), 0xff, 0x247, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0xfffffffffffffffe)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x4040001)
recvmsg$unix(0xffffffffffffffff, &(0x7f00000038c0)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000140)=[{0x0}, {0x0}, {0x0, 0x2d}, {0x0}, {0x0}, {0x0}, {0x0, 0xfffffc36}, {0x0}, {0x0}], 0x9}, 0x41)
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f0000000000)='./file0\x00', 0x1018000, &(0x7f00000003c0)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16, @ANYRESOCT, @ANYRES32, @ANYRESDEC], 0x1, 0x2f2, &(0x7f0000000b00)="$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")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x14, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x94)
fdatasync(r1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x40ef, 0x0)

1.300896589s ago: executing program 5 (id=1634):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10)
setitimer(0x0, &(0x7f0000000580)={{0x0, 0xea60}, {0x77359400}}, 0x0)
r1 = signalfd(0xffffffffffffffff, &(0x7f00000001c0), 0x8)
mkdir(&(0x7f0000000140)='./control\x00', 0x5)
close(r1)
fcntl$setstatus(r1, 0x4, 0x2c00)
r2 = gettid()
fcntl$setown(r1, 0x8, r2)
fcntl$setsig(0xffffffffffffffff, 0xa, 0xe)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
rt_sigtimedwait(&(0x7f0000000040)={[0xffffffffffff7ff8]}, 0x0, 0x0, 0x8)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000180)='./control\x00', 0xa4000960)
rmdir(&(0x7f0000000100)='./control\x00')

917.303646ms ago: executing program 4 (id=1637):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

840.451907ms ago: executing program 7 (id=1638):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

743.922518ms ago: executing program 6 (id=1640):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)

714.598419ms ago: executing program 7 (id=1641):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x10}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

696.203939ms ago: executing program 6 (id=1642):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000009400000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
close(r2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

680.338329ms ago: executing program 4 (id=1643):
open(0x0, 0x7ad23, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
socket$inet6_tcp(0xa, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x2404c8c0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xd, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41000, 0x39, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x200008, 0x5, 0x20000}, 0xffffffdd}, 0x94)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r0], 0x4c}}, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="280000001000010800000000000000000200", @ANYRES32=0x0, @ANYBLOB="b40200000000000008001b"], 0x28}}, 0x0)

571.955621ms ago: executing program 7 (id=1644):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan0\x00', 0x200})
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x14, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

571.707411ms ago: executing program 6 (id=1645):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000400000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x3, 0x25, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000001100)={0x0, <r1=>0x0}, 0x8)
r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4)
bpf$LINK_DETACH(0x22, &(0x7f0000000080)=r2, 0x4)

571.443461ms ago: executing program 8 (id=1646):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000007f1600850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
semop(0x0, 0x0, 0x0)

454.547083ms ago: executing program 4 (id=1647):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000580)='./file1\x00', 0x800040, &(0x7f0000000340), 0x1, 0x597, &(0x7f0000001140)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0)
read(r0, &(0x7f0000000400)=""/4096, 0x1000)

437.083003ms ago: executing program 6 (id=1648):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r0}, 0x18)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10)

374.672834ms ago: executing program 8 (id=1649):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x20)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_procs(r6, &(0x7f0000000380)='cgroup.procs\x00', 0x2, 0x0)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r9 = openat$cgroup_ro(r8, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000200)=0x1, 0x12)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000006100)='cmdline\x00')
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
close(r10)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0}, 0x94)
write$cgroup_int(r9, &(0x7f00000000c0), 0x12)
write$cgroup_pid(r7, &(0x7f0000000040), 0x12)
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_inet_SIOCSIFADDR(r0, 0x891a, &(0x7f0000000000)={'lo\x00', {0x2, 0x0, @broadcast}})

374.293244ms ago: executing program 7 (id=1650):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x10000}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

374.008324ms ago: executing program 5 (id=1651):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, &(0x7f0000000040), &(0x7f0000000280)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

174.970407ms ago: executing program 5 (id=1652):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="b4050000200080066110000000000000c6000000000000009500d800000000009f33ef60916e55893f1eeb0b2ae13d922e6235592ce847e2566c43d72918a897323fd0723043c47c896ce0bce66a245ad9d6817fd98cd824498949714ffaac8a6f77ef0000ca5d82054d54d53cd2b6db714e75d9bdae214fa68a0557eb2c5ca683a4b6fcfcff0bffffffffffd47042eaebfa6fa26fa7a347c7faa8e700458c60897d4a6148a1c11428427c40de60beacf871ab5c2ff88a02084e5b5271e45f00003826fb8579c1fb01d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0c20cdbe7009a6fe7cc78762f1d4dcdbca64920db9a50f86c21632f7a4bd344e0bd74ff05d37ef68e3b9db863c758ffffffffabe90ac5d08dd9d4e0359c41cf3626e1230bc1cd4c02c460ceb44276e9bd94d1c2e6d17dc5c2edf332a62f5fe68fbbbbfcfd00000000000fbf940e6652d357474ed5f816f66ac3027460ae66317f83cdd7a7eb2a7003d1a6cf5478533584961c329fcf5a43e05c92bfef0dcd28000000003f2915a3039c9a78f63b8ec7e60a0000fed7d67c440e23d130e51eea1e085bebabe7059de9cbfc5117c024185a062acb6b8eec31c21b3af8b9eedb4660ed2deb7acf2a33a376a5cb7d4266d5b0be14488d14b473502486ad8dd600000000000000000000c7766ea7c581782c0d90f42a85303835fc291c25d29e6bead5d7360f2e1929d7736ebc8558c4506407d3046022bdf25485bd5442169e9b4c1278343581b7a06f65e8ea6b042c4fd08381e5000000000000006398d6480000001a723b91030000006480304c66b217aea0156ce9eef911fe5b7370f79987303ecb3aabc53c60014a0101ab766754f596b41da9534d12b8306a1b36cf3b03f0d790879f523eabfbee83d8bd472ef69660cf6ec897106c51e54a17497f384c4956b41f3843e7c878b1e11316d8ddae1c6c3b85aaf7a9fcaf8f5d6186c42542d68ba72682c938d3c0a2e6e10eed71b1d31c9f300b41745329bf34495c63e43fb896e4903fb0fae54a8f0fe3b48a5b29d279070647e65097c8ecf32a15080000000000000001007ba4a70a084bd994ac5e00000000000000000000000000351a30cd97f83d72631d0fe92efa974a53f4dc1eb9a86df632a6d463688123f64d42a919"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)

171.955697ms ago: executing program 6 (id=1653):
bpf$MAP_CREATE(0x0, &(0x7f0000002080)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc)

145.198348ms ago: executing program 7 (id=1654):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x10}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000023b7007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

45.662259ms ago: executing program 6 (id=1655):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xa, 0x4, 0x6, 0x23, 0x0, 0x1, 0x3}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1}, 0x48)
bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x15, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)

45.147449ms ago: executing program 5 (id=1656):
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x28, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x5da0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x3, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000081000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x28, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

0s ago: executing program 7 (id=1657):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10)
bpf$PROG_BIND_MAP(0xa, 0x0, 0x0)

kernel console output (not intermixed with test programs):

xt4_clear_blocks:883: inode #13: comm syz.2.296: attempt to clear invalid blocks 2 len 1
[  115.905404][ T5139] EXT4-fs (loop2): Remounting filesystem read-only
[  115.914989][ T5139] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  115.956721][ T5139] EXT4-fs (loop2): Remounting filesystem read-only
[  115.965979][ T5139] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.296: invalid indirect mapped block 1819239214 (level 0)
[  115.999955][ T5139] EXT4-fs (loop2): Remounting filesystem read-only
[  116.018969][ T5139] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.296: invalid indirect mapped block 1819239214 (level 1)
[  116.058264][ T5139] EXT4-fs (loop2): Remounting filesystem read-only
[  116.078942][ T5139] EXT4-fs (loop2): 1 truncate cleaned up
[  116.098494][ T5139] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback.
[  117.305815][ T5099] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.360420][ T5099] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.400146][ T5099] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.420041][ T5099] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  117.710375][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  117.768916][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  117.821744][ T4745] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  117.908744][ T4745] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  117.961463][ T4745] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  117.995953][ T4745] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.396063][ T4855] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.439478][ T4855] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.483180][ T5205] syz.2.322[5205] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.483331][ T5205] syz.2.322[5205] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  118.512467][  T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.551235][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  118.680320][  T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.696410][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  118.819452][ T5217] loop3: detected capacity change from 0 to 256
[  118.898260][ T5217] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  119.046424][ T5217] FAT-fs (loop3): Directory bread(block 64) failed
[  119.119464][ T5217] FAT-fs (loop3): Directory bread(block 65) failed
[  119.145534][ T5217] FAT-fs (loop3): Directory bread(block 66) failed
[  119.186056][ T5217] FAT-fs (loop3): Directory bread(block 67) failed
[  119.246817][ T5217] FAT-fs (loop3): Directory bread(block 68) failed
[  119.263027][ T5217] FAT-fs (loop3): Directory bread(block 69) failed
[  119.307255][ T5217] FAT-fs (loop3): Directory bread(block 70) failed
[  119.350837][ T5238] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  119.360357][ T5238] IPv6: NLM_F_CREATE should be set when creating new route
[  119.375611][ T5217] FAT-fs (loop3): Directory bread(block 71) failed
[  119.427123][ T5217] FAT-fs (loop3): Directory bread(block 72) failed
[  119.456381][ T5217] FAT-fs (loop3): Directory bread(block 73) failed
[  120.051761][ T5276] loop0: detected capacity change from 0 to 1024
[  120.134158][ T5276] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  120.156820][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state
[  120.165892][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state
[  120.190268][ T5276] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  120.250369][ T5276] JBD2: no valid journal superblock found
[  120.256613][ T5276] EXT4-fs (loop0): error loading journal
[  121.665755][ T5238] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  121.711949][ T5238] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  122.158847][ T5238] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.172972][ T5238] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.183934][ T5238] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.196008][ T5238] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  122.277024][ T5306] loop0: detected capacity change from 0 to 8
[  122.414067][ T5306] squashfs: Unknown parameter '€ыјЁJ›ДЈ^јЫЄ]5dнгСўыиHЯ`™КЭ8	$%gkX*[8дюл‚гqм—*'
[  122.534127][ T5310] loop2: detected capacity change from 0 to 512
[  124.531726][ T5310] EXT4-fs (loop2): Test dummy encryption mode enabled
[  124.571109][ T5310] EXT4-fs (loop2): inline encryption not supported
[  124.603191][ T5310] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  125.048793][ T5310] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  125.314536][ T5310] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2825: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  125.525841][ T5310] EXT4-fs (loop2): 1 truncate cleaned up
[  125.569070][ T5310] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,grpjquota=,quota,test_dummy_encryption=v1,nodioread_nolock,inlinecrypt,min_batch_time=0x0000000000000009,sysvgroups,commit=0x00,errors=continue. Quota mode: writeback.
[  127.804951][ T5366] loop1: detected capacity change from 0 to 1024
[  127.889936][ T5372] loop2: detected capacity change from 0 to 256
[  127.987683][ T5366] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  128.021786][ T5366] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  128.038463][ T5372] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  128.145344][ T5372] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  128.181525][ T5366] JBD2: no valid journal superblock found
[  128.189285][ T5366] EXT4-fs (loop1): error loading journal
[  128.220768][ T5372] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  128.356585][ T5385] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  128.394364][ T5385] loop5: detected capacity change from 0 to 256
[  129.197074][ T5385] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  129.240153][ T5381] exFAT-fs (loop5): error, invalid access to FAT free cluster (entry 0x00000008)
[  129.255110][ T5381] exFAT-fs (loop5): Filesystem has been set read-only
[  130.782303][   T25] audit: type=1326 audit(1750815794.226:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff287be7929 code=0x7ffc0000
[  130.942077][   T25] audit: type=1326 audit(1750815794.276:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7ff287be7929 code=0x7ffc0000
[  131.018999][ T5409] loop1: detected capacity change from 0 to 1024
[  131.123140][ T5409] hfsplus: invalid gid specified
[  131.146829][ T5409] hfsplus: unable to parse mount options
[  131.150839][   T25] audit: type=1326 audit(1750815794.276:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff287be7929 code=0x7ffc0000
[  131.185909][ T4207] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  131.298312][   T25] audit: type=1326 audit(1750815794.316:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff287be7929 code=0x7ffc0000
[  131.356169][   T25] audit: type=1326 audit(1750815794.316:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff287be7929 code=0x7ffc0000
[  131.463555][ T5434] loop2: detected capacity change from 0 to 1024
[  131.490566][   T25] audit: type=1326 audit(1750815794.356:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5405 comm="syz.2.382" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff287be7929 code=0x7ffc0000
[  131.570511][ T4207] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.576724][ T5434] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  131.673009][ T4207] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  131.729198][ T5434] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  131.827053][ T5434] JBD2: no valid journal superblock found
[  131.843560][ T5443] loop0: detected capacity change from 0 to 1024
[  131.900340][ T5434] EXT4-fs (loop2): error loading journal
[  131.913254][ T4207] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  132.111119][ T4207] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  132.196317][ T5443] EXT4-fs (loop0): Ignoring removed oldalloc option
[  132.627662][ T5443] EXT4-fs (loop0): Ignoring removed orlov option
[  132.648117][ T4207] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.684584][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.695509][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  132.740559][ T4207] usb 6-1: Product: syz
[  132.820204][ T4207] usb 6-1: Manufacturer: syz
[  132.827403][ T4207] usb 6-1: SerialNumber: syz
[  132.864983][ T5443] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001044,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,nojournal_checksum,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  133.051120][ T4207] cdc_ncm 6-1:1.0: CDC Union missing and no IAD found
[  133.058758][ T4207] cdc_ncm 6-1:1.0: bind() failure
[  133.379778][ T5415] loop5: detected capacity change from 0 to 2048
[  133.448177][ T5487] loop1: detected capacity change from 0 to 1024
[  133.500650][ T5415]  loop5: p1 p3 < > p4 < p5 >
[  133.506406][ T5487] EXT4-fs (loop1): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  133.526953][ T5415] loop5: p1 start 3405774849 is beyond EOD, truncated
[  133.579820][ T5487] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  133.594014][ T5415] loop5: p5 start 3405774849 is beyond EOD, truncated
[  133.643663][ T5496] x_tables: ip_tables: NFQUEUE.3 target: invalid size 8 (kernel) != (user) 0
[  133.659292][ T5487] JBD2: no valid journal superblock found
[  133.681068][ T5487] EXT4-fs (loop1): error loading journal
[  133.730350][ T4323] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  133.789491][ T4211] usb 6-1: USB disconnect, device number 2
[  133.973976][ T5507] loop3: detected capacity change from 0 to 1024
[  134.167264][ T5507] EXT4-fs (loop3): Ignoring removed oldalloc option
[  134.202302][ T5507] EXT4-fs (loop3): Ignoring removed orlov option
[  134.280521][ T4323] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.930332][ T5507] EXT4-fs (loop3): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001044,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,nojournal_checksum,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  134.978645][ T4323] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  134.994041][ T4323] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  135.009409][ T4323] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.051823][ T4323] usb 3-1: config 0 descriptor??
[  135.329763][ T5536] loop5: detected capacity change from 0 to 1024
[  135.395595][ T5536] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  135.441715][ T5536] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  135.525474][ T5536] JBD2: no valid journal superblock found
[  135.544509][ T5536] EXT4-fs (loop5): error loading journal
[  135.793430][ T5552] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  135.833686][ T5552] loop3: detected capacity change from 0 to 256
[  135.980754][ T4323] usbhid 3-1:0.0: can't add hid device: -71
[  136.064788][ T5552] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  136.157347][ T5552] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  136.168187][ T5552] exFAT-fs (loop3): Filesystem has been set read-only
[  136.242927][ T4323] usbhid: probe of 3-1:0.0 failed with error -71
[  136.480285][ T4323] usb 3-1: USB disconnect, device number 4
[  136.663566][ T5562] loop5: detected capacity change from 0 to 1024
[  136.921546][ T5562] EXT4-fs (loop5): Ignoring removed oldalloc option
[  136.985003][ T5562] EXT4-fs (loop5): Ignoring removed orlov option
[  137.712438][ T5562] EXT4-fs (loop5): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001044,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,nojournal_checksum,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  138.054081][ T5591] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  138.089586][ T5591] loop3: detected capacity change from 0 to 256
[  138.770486][ T5591] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  138.816937][ T5590] exFAT-fs (loop3): error, invalid access to FAT free cluster (entry 0x00000008)
[  138.822099][ T5596] loop5: detected capacity change from 0 to 512
[  138.829687][ T5590] exFAT-fs (loop3): Filesystem has been set read-only
[  139.056438][ T5596] EXT4-fs (loop5): Quota format mount options ignored when QUOTA feature is enabled
[  139.200420][ T5573] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.209465][ T5573] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.264697][ T5596] EXT4-fs (loop5): 1 orphan inode deleted
[  139.327449][ T5596] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,jqfmt=vfsv0,resgid=0x0000000000000000,sysvgroups,delalloc,quota,. Quota mode: writeback.
[  139.351287][ T5607] loop0: detected capacity change from 0 to 256
[  139.355818][ T5596] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.408898][ T5607] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  141.490352][   T13] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  141.780592][   T13] usb 6-1: Using ep0 maxpacket: 32
[  141.920721][   T13] usb 6-1: config 1 has an invalid interface number: 3 but max is 0
[  141.922047][ T4208] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  141.930779][   T13] usb 6-1: config 1 has no interface number 0
[  141.949280][   T13] usb 6-1: config 1 interface 3 has no altsetting 0
[  141.977097][ T5573] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  142.037477][ T5573] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  142.121696][   T13] usb 6-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce
[  142.143371][   T13] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.158666][   T13] usb 6-1: Product: syz
[  142.164887][   T13] usb 6-1: Manufacturer: syz
[  142.172681][   T13] usb 6-1: SerialNumber: syz
[  142.305582][ T4208] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  142.319007][ T4208] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  142.344858][ T4208] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  142.360297][ T4208] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.371536][ T4208] usb 2-1: config 0 descriptor??
[  142.483105][   T13] usb 6-1: USB disconnect, device number 3
[  142.536511][ T5573] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.551367][ T5573] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.561601][ T5573] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.574786][ T5573] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  142.701994][ T5620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'.
[  143.376980][ T5680] loop5: detected capacity change from 0 to 512
[  143.433431][ T5678] loop0: detected capacity change from 0 to 1024
[  143.583946][ T5678] EXT4-fs (loop0): Ignoring removed oldalloc option
[  143.600249][ T5678] EXT4-fs (loop0): Ignoring removed orlov option
[  143.682986][ T5691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.482'.
[  144.048880][ T5678] EXT4-fs (loop0): mounted filesystem without journal. Opts: stripe=0x0000000000000002,journal_dev=0x0000000000001044,oldalloc,noquota,data_err=ignore,barrier=0x0000000000000002,delalloc,errors=continue,orlov,nojournal_checksum,quota,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback.
[  144.230734][ T5680] EXT4-fs (loop5): 1 orphan inode deleted
[  144.273572][ T5680] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  144.340752][ T5680] ext4 filesystem being mounted at /29/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.648077][ T4323] usb 2-1: USB disconnect, device number 8
[  144.836233][ T5727] loop0: detected capacity change from 0 to 1024
[  144.904270][ T5727] EXT4-fs (loop0): Ignoring removed bh option
[  144.920589][ T5727] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  145.017162][ T5727] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,delalloc,errors=remount-ro,norecovery,debug_want_extra_isize=0x0000000000000080,bh,mblk_io_submit,usrquota,noauto_da_alloc,. Quota mode: writeback.
[  145.780566][ T4323] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[  146.211287][ T4323] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  146.244690][ T4323] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  146.276128][ T4323] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  146.487872][   T13] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  146.530378][ T4323] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  146.550190][ T4323] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.567733][ T4323] usb 1-1: Product: syz
[  146.573274][ T4323] usb 1-1: Manufacturer: syz
[  146.579101][ T4323] usb 1-1: SerialNumber: syz
[  146.651427][ T4323] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  146.715271][ T4323] cdc_ncm 1-1:1.0: bind() failure
[  146.899179][   T25] audit: type=1326 audit(1750815810.296:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  147.444347][   T25] audit: type=1326 audit(1750815810.296:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  147.497119][ T5742] loop0: detected capacity change from 0 to 2048
[  147.506794][   T25] audit: type=1326 audit(1750815810.296:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  147.585540][   T25] audit: type=1326 audit(1750815810.306:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  147.636315][ T5742]  loop0: p1 p3 < > p4 < p5 >
[  147.677106][ T5742] loop0: p1 start 3405774849 is beyond EOD, truncated
[  147.714441][   T25] audit: type=1326 audit(1750815810.306:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  147.739766][ T5742] loop0: p5 start 3405774849 is beyond EOD, truncated
[  147.800520][   T25] audit: type=1326 audit(1750815810.306:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  147.826919][   T13] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  147.856174][   T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.887457][   T13] usb 3-1: Product: syz
[  147.917418][   T13] usb 3-1: Manufacturer: syz
[  147.934496][   T13] usb 3-1: SerialNumber: syz
[  147.942873][   T25] audit: type=1326 audit(1750815810.306:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  148.008461][ T1108] usb 1-1: USB disconnect, device number 5
[  148.058378][   T25] audit: type=1326 audit(1750815810.306:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  148.130286][   T25] audit: type=1326 audit(1750815810.306:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  148.197664][   T25] audit: type=1326 audit(1750815810.306:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5767 comm="syz.5.506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  148.796729][ T5813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.517'.
[  149.396579][ T5824] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  149.413230][ T5824] loop0: detected capacity change from 0 to 256
[  149.545909][ T5824] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  149.665974][ T5824] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008)
[  149.679848][ T5824] exFAT-fs (loop0): Filesystem has been set read-only
[  150.049220][   T13] cdc_ncm 3-1:1.0: bind() failure
[  150.070392][   T13] cdc_ncm: probe of 3-1:1.1 failed with error -71
[  150.090314][   T13] cdc_mbim: probe of 3-1:1.1 failed with error -71
[  150.110246][   T13] usbtest: probe of 3-1:1.1 failed with error -71
[  150.129350][   T13] usb 3-1: USB disconnect, device number 5
[  151.254498][ T5845] loop2: detected capacity change from 0 to 1024
[  151.316943][ T5845] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  151.368723][ T5845] EXT4-fs (loop2): Ignoring removed bh option
[  151.390175][ T5845] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  151.696966][ T5845] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,block_validity,data_err=ignore,max_dir_size_kb=0x0000000000000004,data_err=ignore,grpquota,mblk_io_submit,nodiscard,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  152.514726][ T5912] loop3: detected capacity change from 0 to 128
[  152.566503][ T5917] netlink: 'syz.5.551': attribute type 12 has an invalid length.
[  152.581851][ T5912] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  152.666635][ T5912] FAT-fs (loop3): FAT read failed (blocknr 234)
[  152.734689][ T5912] FAT-fs (loop3): FAT read failed (blocknr 234)
[  154.647329][ T5968] loop3: detected capacity change from 0 to 2048
[  155.575814][ T5968] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  155.614584][ T5968] UDF-fs: Scanning with blocksize 512 failed
[  155.700806][ T5968] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  156.313244][   T25] kauditd_printk_skb: 25 callbacks suppressed
[  156.313259][   T25] audit: type=1800 audit(1750815819.756:43): pid=5968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.567" name="file1" dev="loop3" ino=838 res=0 errno=0
[  157.588280][ T6048] loop2: detected capacity change from 0 to 512
[  157.663650][ T6048] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  157.763829][ T6048] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec019, mo2=0002]
[  157.781551][ T6048] System zones: 1-12
[  157.824377][ T6048] EXT4-fs (loop2): 1 truncate cleaned up
[  157.852070][ T6048] EXT4-fs (loop2): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,jqfmt=vfsold,debug,nombcache,quota,nolazytime,,errors=continue. Quota mode: writeback.
[  159.657662][ T6113] loop2: detected capacity change from 0 to 1024
[  159.979703][ T4323] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  160.751020][ T6113] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  160.838405][ T6113] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  160.963717][ T6113] JBD2: no valid journal superblock found
[  160.992066][ T6113] EXT4-fs (loop2): error loading journal
[  161.900285][ T4323] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  161.922916][ T4323] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  162.075207][ T6158] loop2: detected capacity change from 0 to 128
[  162.146421][ T6164] netlink: 'syz.0.626': attribute type 12 has an invalid length.
[  162.163131][ T4323] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  162.221738][ T6158] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none.
[  162.236796][ T6158] ext4 filesystem being mounted at /117/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.247925][ T4323] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.268693][ T6158] EXT4-fs error (device loop2): ext4_validate_block_bitmap:420: comm syz.2.623: bg 0: bad block bitmap checksum
[  163.297908][ T4280] udevd[4280]: incorrect jbd checksum on /dev/loop2
[  163.452703][ T4323] usb 4-1: Product: syz
[  163.458183][ T4323] usb 4-1: Manufacturer: syz
[  163.463387][ T4323] usb 4-1: SerialNumber: syz
[  163.474136][ T4323] usb 4-1: config 0 descriptor??
[  163.500267][ T4323] usb 4-1: can't set config #0, error -71
[  163.511348][ T4323] usb 4-1: USB disconnect, device number 3
[  163.579245][ T4176] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /117/file0: bad entry in directory: rec_len % 4 != 0 - offset=1012, inode=3161602094, rec_len=30958, size=1024 fake=0
[  163.725256][ T4176] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /117/file0/lost+found: directory fails checksum at offset 0
[  163.798510][ T4176] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /117/file0/lost+found: directory fails checksum at offset 1024
[  163.854787][ T4176] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /117/file0/lost+found: directory fails checksum at offset 2048
[  163.875697][ T6206] netlink: 'syz.0.639': attribute type 12 has an invalid length.
[  163.878732][ T4176] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /117/file0/lost+found: directory fails checksum at offset 3072
[  163.944560][ T4176] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /117/file0/lost+found: directory fails checksum at offset 4096
[  163.999151][ T4176] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /117/file0/lost+found: directory fails checksum at offset 5120
[  164.055606][ T4176] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /117/file0/lost+found: directory fails checksum at offset 6144
[  164.085297][ T4176] EXT4-fs error (device loop2): ext4_readdir:223: inode #11: comm syz-executor: path /117/file0/lost+found: directory fails checksum at offset 7168
[  167.766611][ T6279] bridge0: port 2(bridge_slave_1) entered disabled state
[  167.774966][ T6279] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.973614][ T6291] loop3: detected capacity change from 0 to 128
[  168.064346][ T6291] EXT4-fs (loop3): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none.
[  168.086560][ T6291] ext4 filesystem being mounted at /152/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.139409][ T6291] EXT4-fs error (device loop3): ext4_validate_block_bitmap:420: comm syz.3.668: bg 0: bad block bitmap checksum
[  168.144898][ T4280] udevd[4280]: incorrect jbd checksum on /dev/loop3
[  168.213079][ T4172] EXT4-fs error (device loop3): ext4_readdir:263: inode #2: block 4: comm syz-executor: path /152/file0: bad entry in directory: rec_len % 4 != 0 - offset=1012, inode=3161602094, rec_len=30958, size=1024 fake=0
[  168.242295][ T4172] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /152/file0/lost+found: directory fails checksum at offset 0
[  168.259666][ T4172] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /152/file0/lost+found: directory fails checksum at offset 1024
[  168.264746][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  168.285955][ T4172] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /152/file0/lost+found: directory fails checksum at offset 2048
[  168.308593][ T4172] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /152/file0/lost+found: directory fails checksum at offset 3072
[  168.327681][ T4172] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /152/file0/lost+found: directory fails checksum at offset 4096
[  168.352071][ T4172] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /152/file0/lost+found: directory fails checksum at offset 5120
[  168.353170][ T6279] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  168.379186][ T4172] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /152/file0/lost+found: directory fails checksum at offset 6144
[  168.397703][ T4172] EXT4-fs error (device loop3): ext4_readdir:223: inode #11: comm syz-executor: path /152/file0/lost+found: directory fails checksum at offset 7168
[  168.772206][ T6279] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.784955][ T6279] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.795997][ T6279] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  168.807099][ T6279] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  169.681467][ T6313] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  169.710846][ T6313] loop0: detected capacity change from 0 to 256
[  169.875931][ T6313] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  169.963211][ T6313] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008)
[  169.973262][ T6313] exFAT-fs (loop0): Filesystem has been set read-only
[  171.547227][ T6317] chnl_net:caif_netlink_parms(): no params data found
[  172.133145][ T6365] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  172.188671][ T6365] loop0: detected capacity change from 0 to 256
[  172.289684][ T6365] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  172.532173][ T6365] exFAT-fs (loop0): error, invalid access to FAT free cluster (entry 0x00000008)
[  172.542916][ T6365] exFAT-fs (loop0): Filesystem has been set read-only
[  172.587867][ T4323] Bluetooth: hci1: command 0x0409 tx timeout
[  173.997159][ T4211] Bluetooth: hci3: command 0x0409 tx timeout
[  174.270284][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state
[  174.320206][ T6317] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.385804][ T6317] device bridge_slave_0 entered promiscuous mode
[  174.470419][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state
[  174.491110][ T6317] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.499661][ T6317] device bridge_slave_1 entered promiscuous mode
[  174.600293][ T4207] Bluetooth: hci1: command 0x041b tx timeout
[  174.623434][ T6317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  174.665195][ T6350] chnl_net:caif_netlink_parms(): no params data found
[  174.710797][ T6317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  174.766409][ T4855] device hsr_slave_0 left promiscuous mode
[  174.777418][ T4855] device hsr_slave_1 left promiscuous mode
[  174.796193][ T4855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  174.814818][ T4855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  174.844705][ T4855] device bridge_slave_1 left promiscuous mode
[  174.860345][ T4855] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.881547][ T4855] device bridge_slave_0 left promiscuous mode
[  174.903480][ T4855] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.294977][ T4855] team0 (unregistering): Port device team_slave_1 removed
[  175.357000][ T4855] team0 (unregistering): Port device team_slave_0 removed
[  175.369996][ T6452] loop1: detected capacity change from 0 to 1024
[  175.414223][ T4855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.456201][ T4855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.460997][ T6452] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  175.676802][ T4855] bond0 (unregistering): Released all slaves
[  175.730572][   T13] Bluetooth: hci2: command 0x0406 tx timeout
[  175.744448][   T13] Bluetooth: hci4: command 0x0406 tx timeout
[  175.841109][ T6464] netlink: 'syz.1.721': attribute type 12 has an invalid length.
[  175.862645][ T6317] team0: Port device team_slave_0 added
[  175.897820][ T6317] team0: Port device team_slave_1 added
[  176.026172][ T6350] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.049880][ T6350] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.057607][   T13] Bluetooth: hci3: command 0x041b tx timeout
[  176.073480][ T6350] device bridge_slave_0 entered promiscuous mode
[  176.108366][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.123800][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.156183][ T6317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.169680][ T6350] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.181293][ T6350] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.191208][ T6350] device bridge_slave_1 entered promiscuous mode
[  176.200851][ T6317] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.209601][ T6317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  176.251334][ T6317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.340319][ T6350] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.380354][ T6350] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.544512][ T6317] device hsr_slave_0 entered promiscuous mode
[  176.569183][ T6317] device hsr_slave_1 entered promiscuous mode
[  176.569706][ T6498] loop0: detected capacity change from 0 to 2048
[  176.612856][ T6350] team0: Port device team_slave_0 added
[  176.664797][ T6498] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  176.715287][ T6498] UDF-fs: Scanning with blocksize 512 failed
[  176.819775][ T4211] Bluetooth: hci1: command 0x040f tx timeout
[  176.836307][ T6498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.861292][ T6350] team0: Port device team_slave_1 added
[  177.050684][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.078342][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.386428][ T6350] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.461075][ T6350] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.469229][ T6350] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.504266][ T6350] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  177.725919][ T6350] device hsr_slave_0 entered promiscuous mode
[  177.754196][ T6350] device hsr_slave_1 entered promiscuous mode
[  177.800451][ T6350] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  177.809432][ T6350] Cannot create hsr debugfs directory
[  178.017637][ T6535] loop0: detected capacity change from 0 to 2048
[  178.035432][ T6317] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  178.082190][ T6317] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  178.120497][ T4207] Bluetooth: hci3: command 0x040f tx timeout
[  178.132707][ T6317] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  178.142221][ T6535] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  178.160950][ T6535] UDF-fs: Scanning with blocksize 512 failed
[  178.194758][ T6317] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  178.204292][ T6535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.410825][ T6350] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  178.450676][ T6350] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  178.511742][ T6350] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  178.535396][ T6317] 8021q: adding VLAN 0 to HW filter on device bond0
[  178.561708][ T6350] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  178.587874][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  178.618701][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  178.673578][ T6317] 8021q: adding VLAN 0 to HW filter on device team0
[  178.733812][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  178.790967][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  178.821468][   T25] audit: type=1800 audit(1750815842.266:44): pid=6535 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.740" name="file1" dev="loop0" ino=838 res=0 errno=0
[  178.827557][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  178.843827][ T4213] Bluetooth: hci1: command 0x0419 tx timeout
[  178.851733][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  178.948763][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  178.983002][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  179.018372][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  179.047019][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  179.055027][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  179.116446][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  179.156073][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  179.234979][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  179.261645][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  179.306510][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  179.361437][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  179.377622][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  179.429618][ T6317] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  179.474032][ T6317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  179.524895][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  179.586065][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  179.638097][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  179.738757][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  179.829244][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  179.922751][ T6350] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.022762][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  180.046613][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  180.091448][ T6350] 8021q: adding VLAN 0 to HW filter on device team0
[  180.130486][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.151074][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.200582][ T4213] Bluetooth: hci3: command 0x0419 tx timeout
[  180.201765][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.215147][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.331448][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.368872][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  180.391546][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.414606][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.422715][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.467686][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  180.509003][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  180.576936][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  180.598124][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  180.638751][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  180.680938][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  180.720861][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.729443][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.760804][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  180.789916][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  180.831722][ T6317] 8021q: adding VLAN 0 to HW filter on device batadv0
[  180.879143][ T6350] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  180.920862][ T6350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  180.961639][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  180.971125][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  181.000646][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  181.466072][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.491000][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.526878][ T6350] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.603865][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  181.631794][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  181.711545][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  181.742939][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  181.781079][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  181.818383][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  181.852940][ T6317] device veth0_vlan entered promiscuous mode
[  181.911520][ T6317] device veth1_vlan entered promiscuous mode
[  182.018317][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  182.051352][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  182.101052][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  182.135391][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  182.162204][ T6317] device veth0_macvtap entered promiscuous mode
[  182.197480][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  182.240690][ T6317] device veth1_macvtap entered promiscuous mode
[  182.349171][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_0
[  182.391871][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  182.439531][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  182.575414][ T6317] batman_adv: batadv0: Interface activated: batadv_slave_1
[  182.687134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  182.761454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  183.113431][ T6317] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  183.136021][ T6317] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  183.160312][ T6317] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  183.200130][ T6317] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  183.244496][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  183.285583][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  183.315822][ T6676] loop0: detected capacity change from 0 to 512
[  183.384660][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.397817][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.418528][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.434034][ T6676] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  183.456575][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.476338][ T6350] device veth0_vlan entered promiscuous mode
[  183.501372][ T6676] EXT4-fs (loop0): 1 truncate cleaned up
[  183.517461][ T6676] EXT4-fs (loop0): mounted filesystem without journal. Opts: resuid=0x0000000000000000,max_dir_size_kb=0x00000000000001ff,stripe=0x0000000000000000,noblock_validity,,errors=continue. Quota mode: none.
[  183.729860][ T6350] device veth1_vlan entered promiscuous mode
[  184.358533][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  184.547140][ T6350] device veth0_macvtap entered promiscuous mode
[  184.606537][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  184.625884][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.647154][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.663817][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  184.820607][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  184.831145][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  184.886159][ T6350] device veth1_macvtap entered promiscuous mode
[  184.938090][  T454] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  184.971528][  T454] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  184.972731][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  184.990671][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.003691][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.017286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  185.032730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  185.043009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  185.060792][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  185.085803][ T6350] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.109106][ T6350] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.123006][ T6350] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.148497][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  185.160401][ T4209] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  185.163406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  185.220657][ T6350] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.248876][ T6350] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.271291][ T6350] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.285981][ T6350] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.493850][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.570674][ T4209] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.593106][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.610443][ T4209] usb 1-1: New USB device found, idVendor=06cd, idProduct=010b, bcdDevice=d5.1b
[  185.650214][ T4209] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.710947][ T4209] usb 1-1: config 0 descriptor??
[  185.718898][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  185.748111][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.769086][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.783135][ T4209] keyspan 1-1:0.0: Keyspan - (without firmware) converter detected
[  185.795718][ T4855] device hsr_slave_0 left promiscuous mode
[  185.827933][ T4209] usb 1-1: Direct firmware load for keyspan/usa19qi.fw failed with error -2
[  185.838201][ T4855] device hsr_slave_1 left promiscuous mode
[  185.841539][ T4209] usb 1-1: Falling back to sysfs fallback for: keyspan/usa19qi.fw
[  185.863166][ T4855] batman_adv: batadv0: Removing interface: batadv_slave_0
[  185.891249][ T4855] batman_adv: batadv0: Removing interface: batadv_slave_1
[  185.919763][ T4855] device bridge_slave_1 left promiscuous mode
[  185.940592][ T4855] bridge0: port 2(bridge_slave_1) entered disabled state
[  185.972808][ T4855] device bridge_slave_0 left promiscuous mode
[  186.000291][ T4855] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.314519][ T4855] team0 (unregistering): Port device team_slave_1 removed
[  186.396368][ T4855] team0 (unregistering): Port device team_slave_0 removed
[  186.430247][ T4855] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  186.478120][ T4855] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  187.381969][ T4855] bond0 (unregistering): Released all slaves
[  187.499009][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  187.918369][ T6782] loop1: detected capacity change from 0 to 8
[  188.183648][ T6782] squashfs: Unknown parameter '€ыјЁJ›ДЈ^јЫЄ]5dнгСўыиHЯ`™КЭ8	$%gkX*[8дюл‚гqм—*'
[  189.337598][ T6813] netem: change failed
[  189.463745][ T6818] netlink: 'syz.7.808': attribute type 12 has an invalid length.
[  189.747498][ T6834] loop6: detected capacity change from 0 to 1024
[  189.861050][ T6834] EXT4-fs (loop6): Ignoring removed orlov option
[  189.908800][ T6834] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  190.064999][ T6834] EXT4-fs (loop6): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  190.767044][ T6870] loop0: detected capacity change from 0 to 2048
[  190.817544][ T6874] loop6: detected capacity change from 0 to 512
[  190.905472][ T6870] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  190.937804][ T6874] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  190.964853][ T6874] EXT4-fs (loop6): 1 truncate cleaned up
[  190.971671][ T6874] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,. Quota mode: none.
[  191.464671][ T6896] loop0: detected capacity change from 0 to 1024
[  191.521559][ T6896] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  191.568861][ T6896] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  191.597596][ T6896] JBD2: no valid journal superblock found
[  191.612610][ T6896] EXT4-fs (loop0): error loading journal
[  192.266280][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!!
[  192.373052][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!!
[  192.382745][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #102!!!
[  192.395643][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  192.407263][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  192.417045][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  192.431344][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  192.442058][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  192.452308][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  192.462637][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #182!!!
[  194.076300][ T6941] loop7: detected capacity change from 0 to 1024
[  194.129712][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.138728][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.172877][ T6941] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  194.238561][ T6941] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  194.314748][ T6941] JBD2: no valid journal superblock found
[  194.350358][ T6941] EXT4-fs (loop7): error loading journal
[  194.367204][ T6956] loop6: detected capacity change from 0 to 512
[  194.507805][ T6956] EXT4-fs (loop6): mounted filesystem without journal. Opts: discard,nodelalloc,,errors=continue. Quota mode: writeback.
[  194.614038][ T6956] ext4 filesystem being mounted at /27/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  194.661820][ T6964] loop7: detected capacity change from 0 to 1024
[  194.890004][ T6964] attempt to access beyond end of device
[  194.890004][ T6964] loop7: rw=0, want=5780, limit=1024
[  194.912954][ T6964] attempt to access beyond end of device
[  194.912954][ T6964] loop7: rw=0, want=5780, limit=1024
[  194.937735][ T6972] loop6: detected capacity change from 0 to 512
[  195.013951][ T6972] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  195.089540][ T6972] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  195.160449][ T6972] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  195.174822][ T6972] EXT4-fs (loop6): 1 truncate cleaned up
[  195.181027][ T6972] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback.
[  195.241795][ T6982] loop0: detected capacity change from 0 to 128
[  195.698943][ T6982] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none.
[  196.002471][ T6982] ext4 filesystem being mounted at /187/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.456517][ T7008] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  196.474369][ T7008] Error parsing options; rc = [-22]
[  197.703295][ T7058] loop0: detected capacity change from 0 to 512
[  197.739490][ T7058] EXT4-fs (loop0): Unrecognized mount option "smackfsroot=/dev/kvM" or missing value
[  197.960832][ T4207] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  198.220622][ T4207] usb 7-1: Using ep0 maxpacket: 32
[  198.314303][ T7081] loop0: detected capacity change from 0 to 256
[  198.340896][ T4207] usb 7-1: config 1 has an invalid interface number: 3 but max is 0
[  198.360547][ T4207] usb 7-1: config 1 has no interface number 0
[  198.379550][ T7081] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  198.380644][ T4207] usb 7-1: config 1 interface 3 has no altsetting 0
[  198.570479][ T4207] usb 7-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce
[  198.612351][ T4207] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.634455][ T4207] usb 7-1: Product: syz
[  198.639203][ T4207] usb 7-1: Manufacturer: syz
[  198.676313][ T4207] usb 7-1: SerialNumber: syz
[  198.976503][ T4207] usb 7-1: USB disconnect, device number 2
[  199.629042][ T7138] loop7: detected capacity change from 0 to 512
[  199.699384][ T7138] EXT4-fs (loop7): Ignoring removed nobh option
[  199.741999][ T7138] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  199.885707][ T7138] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.892: invalid indirect mapped block 256 (level 2)
[  199.947392][ T7138] EXT4-fs (loop7): 2 truncates cleaned up
[  200.010209][ T7138] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,nojournal_checksum,dioread_nolock,bsdgroups,,errors=continue. Quota mode: writeback.
[  200.306475][ T7138] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.892: bg 0: block 5: invalid block bitmap
[  200.357567][ T7138] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 176 with error 28
[  200.450956][ T7138] EXT4-fs (loop7): This should not happen!! Data will be lost
[  200.450956][ T7138] 
[  200.534603][ T7138] EXT4-fs (loop7): Total free blocks count 0
[  200.556977][ T7138] EXT4-fs (loop7): Free/Dirty block details
[  200.586011][ T7138] EXT4-fs (loop7): free_blocks=0
[  200.602773][ T7138] EXT4-fs (loop7): dirty_blocks=180
[  200.640889][ T7138] EXT4-fs (loop7): Block reservation details
[  200.679132][ T7138] EXT4-fs (loop7): i_reserved_data_blocks=180
[  200.912980][ T7181] loop7: detected capacity change from 0 to 128
[  201.062302][ T7181] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none.
[  201.187379][ T7181] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  201.237715][ T7188] loop0: detected capacity change from 0 to 1024
[  201.278484][   T25] audit: type=1800 audit(1750815864.716:45): pid=7181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.902" name="bus" dev="loop7" ino=12 res=0 errno=0
[  201.454189][ T7188] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodiscard,bsddf,acl,min_batch_time=0x0000000000000006,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nodelalloc,auto_da_alloc,discard,,errors=continue. Quota mode: none.
[  203.020769][ T7232] loop7: detected capacity change from 0 to 128
[  203.138759][ T7232] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouid32,delalloc,,errors=continue. Quota mode: none.
[  203.203387][ T7239] loop6: detected capacity change from 0 to 1024
[  203.214500][ T7232] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.246822][   T25] audit: type=1800 audit(1750815866.686:46): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.922" name="bus" dev="loop7" ino=12 res=0 errno=0
[  204.077393][ T7265] loop6: detected capacity change from 0 to 2048
[  204.109204][ T7274] tmpfs: Unknown parameter '§џџџџџџџ'
[  204.221984][ T7265] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  204.241813][ T7265] UDF-fs: Scanning with blocksize 512 failed
[  204.306529][ T7265] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  204.808643][   T25] audit: type=1800 audit(1750815868.246:47): pid=7265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.933" name="file1" dev="loop6" ino=838 res=0 errno=0
[  205.302881][ T7319] loop6: detected capacity change from 0 to 512
[  205.414419][ T7319] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option
[  205.466742][ T7319] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -2
[  205.476076][ T7319] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -2
[  205.486449][ T7319] EXT4-fs (loop6): 1 truncate cleaned up
[  205.492709][ T7319] EXT4-fs (loop6): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback.
[  206.259781][ T7347] fuse: Bad value for 'rootmode'
[  206.352642][ T7347] loop6: detected capacity change from 0 to 512
[  206.401366][ T7347] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  206.436996][ T7347] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13
[  206.473217][ T7347] EXT4-fs error (device loop6): ext4_clear_blocks:883: inode #13: comm syz.6.954: attempt to clear invalid blocks 2 len 1
[  206.495771][ T7347] EXT4-fs (loop6): Remounting filesystem read-only
[  206.518567][ T7347] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  206.630330][ T7347] EXT4-fs (loop6): Remounting filesystem read-only
[  206.637051][ T7347] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.954: invalid indirect mapped block 1819239214 (level 0)
[  206.690437][ T7347] EXT4-fs (loop6): Remounting filesystem read-only
[  206.707948][ T7347] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #13: comm syz.6.954: invalid indirect mapped block 1819239214 (level 1)
[  206.769283][ T7347] EXT4-fs (loop6): Remounting filesystem read-only
[  206.798271][ T7347] EXT4-fs (loop6): 1 truncate cleaned up
[  206.807913][ T7347] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,init_itable=0x0000000000000004,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=... Quota mode: writeback.
[  207.552474][ T7347] EXT4-fs (loop6): Quota file not on filesystem root. Journaled quota will not work
[  207.801426][ T7385] loop7: detected capacity change from 0 to 1024
[  207.846825][ T7375] chnl_net:caif_netlink_parms(): no params data found
[  207.961077][ T7375] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.998698][ T7375] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.009236][ T7375] device bridge_slave_0 entered promiscuous mode
[  208.021634][ T7375] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.029088][ T7375] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.051331][ T7375] device bridge_slave_1 entered promiscuous mode
[  208.078850][ T7375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.096386][ T7375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.142910][ T7375] team0: Port device team_slave_0 added
[  208.154920][ T7375] team0: Port device team_slave_1 added
[  208.211593][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.238559][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.266132][ T7375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.291559][ T7375] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.299099][ T7375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.334723][ T7375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.424511][ T7375] device hsr_slave_0 entered promiscuous mode
[  208.451756][ T7375] device hsr_slave_1 entered promiscuous mode
[  208.468832][ T7375] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.487740][ T7375] Cannot create hsr debugfs directory
[  208.603641][ T7412] loop7: detected capacity change from 0 to 512
[  208.646926][ T7412] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  208.667073][ T7412] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2
[  208.678775][ T7412] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2
[  208.690286][ T7412] EXT4-fs (loop7): 1 truncate cleaned up
[  208.696228][ T7412] EXT4-fs (loop7): mounted filesystem without journal. Opts: nomblk_io_submit,usrjquota="errors=continue,noload,noquota,grpjquota="errors=continue,block_validity,jqfmt=vfsv1,delalloc,,errors=continue. Quota mode: writeback.
[  208.758859][ T7375] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  208.781340][ T7375] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  208.791859][ T7375] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  208.828180][ T7375] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  208.884089][ T7421] loop7: detected capacity change from 0 to 8
[  208.934892][ T7421] squashfs: Unknown parameter '€ыјЁJ›ДЈ^јЫЄ]5dнгСўыиHЯ`™КЭ8	$%gkX*[8дюл‚гqм—*'
[  209.048541][ T7375] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.204744][ T7375] 8021q: adding VLAN 0 to HW filter on device team0
[  209.231423][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  209.252740][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  209.270031][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  209.314223][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  209.334847][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.341993][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.376943][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  209.398986][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  209.423861][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.431102][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.476374][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  209.520810][ T7375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  209.554716][ T7375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  209.672062][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  209.730413][ T5119] Bluetooth: hci5: command 0x0409 tx timeout
[  209.847048][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  210.040940][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  210.234782][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  210.366435][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  210.397909][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  210.455672][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  210.474857][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  210.498501][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  210.528452][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  210.633142][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  210.654490][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.035407][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  211.170565][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  211.294015][ T7375] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.802262][ T5648] Bluetooth: hci5: command 0x041b tx timeout
[  211.872764][ T7487] netlink: 4 bytes leftover after parsing attributes in process `syz.5.995'.
[  211.900399][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  211.919591][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  211.954436][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  211.988320][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  212.018979][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  212.045284][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  212.073069][ T7375] device veth0_vlan entered promiscuous mode
[  212.099842][ T7375] device veth1_vlan entered promiscuous mode
[  212.182151][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  212.211124][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  212.235930][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  212.267786][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  212.293630][ T7375] device veth0_macvtap entered promiscuous mode
[  212.334321][ T7375] device veth1_macvtap entered promiscuous mode
[  212.428398][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.465354][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.497907][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  212.520303][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.556019][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_0
[  212.624215][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  212.641103][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  212.664098][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  212.714151][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  212.771099][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.796343][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.803528][ T7533] loop6: detected capacity change from 0 to 8
[  212.837694][ T7375] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.854025][ T7533] squashfs: Unknown parameter '€ыјЁJ›ДЈ^јЫЄ]5dнгСўыиHЯ`™КЭ8	$%gkX*[8дюл‚гqм—*'
[  212.863999][ T7375] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.891743][ T7375] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.914027][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.938828][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  213.356937][ T7375] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  213.390160][ T7375] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  213.404639][ T7375] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  213.450672][ T7375] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  213.671311][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.679642][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.788831][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  213.799579][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  213.850258][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  213.880226][ T5647] Bluetooth: hci5: command 0x040f tx timeout
[  213.915384][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  215.789932][ T7583] loop8: detected capacity change from 0 to 1024
[  215.874447][ T7583] EXT4-fs (loop8): Ignoring removed orlov option
[  215.915097][ T7591] loop7: detected capacity change from 0 to 8
[  215.916761][ T7583] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  215.961625][   T21] Bluetooth: hci5: command 0x0419 tx timeout
[  216.011647][ T7591] squashfs: Unknown parameter '€ыјЁJ›ДЈ^јЫЄ]5dнгСўыиHЯ`™КЭ8	$%gkX*[8дюл‚гqм—*'
[  216.069030][ T7583] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  216.603518][   T21] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  217.240302][   T21] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  217.261411][   T21] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  217.823947][   T21] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  217.845820][   T21] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.899256][   T21] usb 7-1: Product: syz
[  217.909409][   T21] usb 7-1: Manufacturer: syz
[  217.929686][   T21] usb 7-1: SerialNumber: syz
[  217.942523][   T21] usb 7-1: config 0 descriptor??
[  217.960843][ T7597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  217.981576][ T7597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  218.158635][ T7646] loop8: detected capacity change from 0 to 1024
[  218.204699][ T7646] EXT4-fs (loop8): Ignoring removed orlov option
[  218.218000][ T7597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  218.237663][ T7597] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  218.244950][ T7646] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  218.352704][ T7646] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  218.773612][ T7672] APIC base relocation is unsupported by KVM
[  218.879974][ T7679] loop7: detected capacity change from 0 to 256
[  218.915986][ T7679] exFAT-fs (loop7): invalid fs_name
[  218.936017][ T7679] exFAT-fs (loop7): failed to read boot sector
[  218.969317][ T7679] exFAT-fs (loop7): failed to recognize exfat type
[  219.169490][ T7686] loop8: detected capacity change from 0 to 512
[  219.268012][ T7686] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,bsddf,. Quota mode: writeback.
[  219.282801][   T21] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  219.315332][ T7686] ext4 filesystem being mounted at /9/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  219.348780][   T21] dm9601 7-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[  219.427778][ T7686] EXT4-fs error (device loop8): ext4_empty_dir:3136: inode #12: comm syz.8.1046: invalid size
[  219.460322][   T21] usb 7-1: USB disconnect, device number 3
[  219.483926][ T7686] EXT4-fs (loop8): Remounting filesystem read-only
[  219.491371][   T21] dm9601 7-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet
[  220.145422][ T7718] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[  220.173093][ T7718] loop8: detected capacity change from 0 to 256
[  220.352968][ T7718] exFAT-fs (loop8): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d)
[  220.468838][ T7718] exFAT-fs (loop8): error, invalid access to FAT free cluster (entry 0x00000008)
[  220.478186][ T7718] exFAT-fs (loop8): Filesystem has been set read-only
[  221.057370][ T7736] tmpfs: Unknown parameter '§џџџџџџџ'
[  221.646525][ T5647] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  222.006709][ T7779] tmpfs: Unknown parameter '§џџџџџџџ'
[  222.032521][ T5647] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  222.054860][ T5647] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  222.320606][ T5647] usb 7-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  222.359575][ T7797] loop7: detected capacity change from 0 to 512
[  222.360137][ T5647] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.411697][ T7797] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  222.452195][ T5647] usb 7-1: Product: syz
[  222.456486][ T5647] usb 7-1: Manufacturer: syz
[  222.477408][ T5647] usb 7-1: SerialNumber: syz
[  222.508451][ T5647] usb 7-1: config 0 descriptor??
[  222.528315][ T7797] EXT4-fs (loop7): 1 truncate cleaned up
[  222.540389][ T7797] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  222.540492][ T7748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  222.560985][ T7748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  222.650049][ T7794] EXT4-fs error (device loop7): ext4_generic_delete_entry:2729: inode #2: block 13: comm syz.7.1074: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  222.736357][ T7786] chnl_net:caif_netlink_parms(): no params data found
[  222.796242][ T7748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  222.822542][ T7748] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  222.829850][ T7794] EXT4-fs (loop7): Remounting filesystem read-only
[  222.859898][ T7794] EXT4-fs error (device loop7) in ext4_delete_entry:2800: Corrupt filesystem
[  222.911439][ T7786] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.917053][ T7794] EXT4-fs (loop7): Remounting filesystem read-only
[  222.930334][ T7786] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.941687][ T7794] EXT4-fs warning (device loop7): ext4_rename_delete:3792: inode #2: comm syz.7.1074: Deleting old file: nlink 4, error=-117
[  222.970889][ T7786] device bridge_slave_0 entered promiscuous mode
[  222.994527][ T7786] bridge0: port 2(bridge_slave_1) entered blocking state
[  223.075371][ T7786] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.101668][ T7786] device bridge_slave_1 entered promiscuous mode
[  223.210720][ T7786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.239694][ T7786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.678661][ T7845] tmpfs: Unknown parameter '§џџџџџџџ'
[  223.697723][ T7827] bridge0: port 2(bridge_slave_1) entered disabled state
[  223.705675][ T7827] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.850457][ T5647] dm9601 7-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  224.289801][ T4207] Bluetooth: hci6: command 0x0409 tx timeout
[  224.808383][ T7827] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.858069][ T7827] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  225.196108][ T7827] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.206293][ T7827] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.217544][ T7827] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.234148][ T7827] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  225.385186][ T5647] dm9601 7-1:0.0 eth13: register 'dm9601' at usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet, 6e:f1:98:9e:dd:08
[  225.406557][ T7786] team0: Port device team_slave_0 added
[  225.465186][ T5647] usb 7-1: USB disconnect, device number 4
[  225.478473][ T5647] dm9601 7-1:0.0 eth13: unregister 'dm9601' usb-dummy_hcd.6-1, Davicom DM96xx USB 10/100 Ethernet
[  225.548800][ T7870] device syzkaller0 entered promiscuous mode
[  225.561694][ T7786] team0: Port device team_slave_1 added
[  225.735770][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.771797][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.990319][ T7786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.361166][ T4267] Bluetooth: hci6: command 0x041b tx timeout
[  227.003696][ T7786] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.070863][ T7888] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1092'.
[  227.086372][ T7786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.178700][ T7786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.312255][ T7786] device hsr_slave_0 entered promiscuous mode
[  227.333899][ T7786] device hsr_slave_1 entered promiscuous mode
[  227.416840][ T7786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.443618][ T7786] Cannot create hsr debugfs directory
[  227.876228][ T7786] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  227.898679][ T7786] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  227.935982][ T7786] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  227.975049][ T7786] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  228.260974][ T7786] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.301578][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  228.316064][ T7970] loop6: detected capacity change from 0 to 512
[  228.326213][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  228.347910][ T7786] 8021q: adding VLAN 0 to HW filter on device team0
[  228.419251][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  228.481241][ T7970] EXT4-fs error (device loop6): ext4_free_branches:1030: inode #11: comm syz.6.1117: invalid indirect mapped block 256 (level 2)
[  228.498937][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  228.518982][ T7970] EXT4-fs (loop6): 2 truncates cleaned up
[  228.535265][ T7970] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  228.538297][ T4267] Bluetooth: hci6: command 0x040f tx timeout
[  228.563587][  T454] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.570771][  T454] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.578620][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  228.588844][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  228.597486][  T454] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.604647][  T454] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.623218][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  228.655172][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  228.676748][ T7986] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  228.737085][ T7786] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  228.771507][ T7786] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  228.791867][ T7970] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1117'.
[  228.827567][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  228.840893][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  228.859340][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  228.884644][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  228.902802][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  228.938909][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  228.948493][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  228.958806][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  228.968974][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  228.984736][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  229.003188][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  229.278771][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  229.291634][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.321620][ T7786] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.928476][ T8038] loop8: detected capacity change from 0 to 1024
[  230.256537][ T8038] EXT4-fs (loop8): Ignoring removed orlov option
[  230.533727][ T8038] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  230.569339][ T8039] loop6: detected capacity change from 0 to 1024
[  230.692784][ T4213] Bluetooth: hci6: command 0x0419 tx timeout
[  230.732389][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  230.751507][  T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.781248][ T8038] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  230.878166][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  230.902042][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  230.911439][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  230.919363][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  230.943698][ T8039] hfsplus: xattr searching failed
[  230.955471][ T7786] device veth0_vlan entered promiscuous mode
[  230.970505][ T8038] EXT4-fs (loop8): Online defrag not supported with bigalloc
[  230.978900][ T7786] device veth1_vlan entered promiscuous mode
[  231.065487][ T7786] device veth0_macvtap entered promiscuous mode
[  231.081317][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  231.095991][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  231.105243][ T8057] hfsplus: xattr searching failed
[  231.116186][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  231.143985][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  231.194711][ T7786] device veth1_macvtap entered promiscuous mode
[  231.208579][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  231.231743][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.287275][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.334079][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.336027][ T8067] loop8: detected capacity change from 0 to 1024
[  231.359684][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.387062][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.407820][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.423334][ T4855] hfsplus: b-tree write err: -5, ino 3
[  231.438072][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  231.459477][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  231.482460][ T8067] attempt to access beyond end of device
[  231.482460][ T8067] loop8: rw=0, want=5780, limit=1024
[  231.496073][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.537132][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.547786][ T7786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.608048][ T7786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.664284][ T7786] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.707895][ T7786] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.808738][ T7786] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.824128][ T7786] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.850244][ T7786] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.902913][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  231.939611][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  232.130802][  T454] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.154485][  T454] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.242264][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  232.418169][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.445131][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.457603][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  234.191389][ T8150] loop6: detected capacity change from 0 to 512
[  234.489023][ T8150] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  234.831405][ T8150] EXT4-fs (loop6): 1 truncate cleaned up
[  234.840449][ T8150] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  234.986008][ T8166] loop7: detected capacity change from 0 to 512
[  234.996044][ T8168] loop9: detected capacity change from 0 to 8
[  235.027743][ T8170] tmpfs: Unknown parameter '§џџџџџџџ'
[  235.114980][ T8168] squashfs: Unknown parameter '€ыјЁJ›ДЈ^јЫЄ]5dнгСўыиHЯ`™КЭ8	$%gkX*[8дюл‚гqм—*'
[  235.178836][ T8166] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  235.403901][ T8166] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  237.338240][ T8206] loop7: detected capacity change from 0 to 512
[  237.685023][ T8206] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  238.050375][ T8206] EXT4-fs (loop7): 1 truncate cleaned up
[  238.138215][ T8206] EXT4-fs (loop7): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  238.358161][ T8232] loop6: detected capacity change from 0 to 1024
[  238.420314][ T8232] EXT4-fs (loop6): Ignoring removed mblk_io_submit option
[  238.581186][ T8232] EXT4-fs (loop6): mounted filesystem without journal. Opts: nodioread_nolock,mblk_io_submit,,errors=continue. Quota mode: none.
[  239.038122][ T8249] loop8: detected capacity change from 0 to 256
[  239.343197][ T5648] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  239.357411][ T8249] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  239.640298][ T5648] usb 10-1: Using ep0 maxpacket: 16
[  239.736009][ T8268] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  239.743315][ T8268] IPv6: NLM_F_CREATE should be set when creating new route
[  239.778848][ T8263] loop7: detected capacity change from 0 to 8192
[  239.786164][ T5648] usb 10-1: config 0 has no interfaces?
[  239.865337][ T8279] loop8: detected capacity change from 0 to 512
[  239.880482][ T5648] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  239.898821][ T5648] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  239.942470][ T5648] usb 10-1: SerialNumber: syz
[  240.008736][ T5648] usb 10-1: config 0 descriptor??
[  240.458121][ T8279] EXT4-fs (loop8): Invalid log block size: 7
[  240.768667][ T4208] usb 10-1: USB disconnect, device number 2
[  240.798707][ T8296] loop6: detected capacity change from 0 to 128
[  240.830439][ T8279] loop8: detected capacity change from 0 to 1024
[  240.841760][ T8296] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  240.858297][ T8296] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  241.977684][ T8319] loop7: detected capacity change from 0 to 164
[  242.225125][ T8319] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  242.244191][ T8319] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  242.263710][ T8319] Symlink component flag not implemented
[  242.269480][ T8319] Symlink component flag not implemented
[  242.289008][   T25] audit: type=1326 audit(1750815905.726:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  242.299916][ T8319] Symlink component flag not implemented (7)
[  242.350264][ T8319] Symlink component flag not implemented (116)
[  242.379617][   T25] audit: type=1326 audit(1750815905.726:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  242.578194][   T25] audit: type=1326 audit(1750815905.816:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  242.607973][   T25] audit: type=1326 audit(1750815905.816:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  242.928404][ T8348] loop9: detected capacity change from 0 to 256
[  243.198733][   T25] audit: type=1326 audit(1750815905.816:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  243.221402][   T25] audit: type=1326 audit(1750815905.816:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  243.245490][   T25] audit: type=1326 audit(1750815905.816:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  243.299621][   T25] audit: type=1326 audit(1750815905.816:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  243.377260][   T25] audit: type=1326 audit(1750815905.816:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  243.409482][   T25] audit: type=1326 audit(1750815905.816:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8331 comm="syz.5.1234" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f078472b929 code=0x7ffc0000
[  243.887649][ T8376] loop8: detected capacity change from 0 to 128
[  243.888870][ T7786] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  243.903775][ T7786] FAT-fs (loop9): Filesystem has been set read-only
[  243.911261][ T7786] FAT-fs (loop9): error, corrupted directory (invalid entries)
[  244.017663][ T8376] EXT4-fs (loop8): mounted filesystem without journal. Opts: sysvgroups,inode_readahead_blks=0x0000000000000001,,errors=continue. Quota mode: none.
[  244.052516][ T8376] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  244.275772][ T8397] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  244.275848][ T8397] IPv6: NLM_F_CREATE should be set when creating new route
[  244.276589][ T8397] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1255'.
[  244.431719][  T454] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.538724][  T454] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.646935][  T454] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.399747][  T454] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  247.559078][ T8460] loop6: detected capacity change from 0 to 512
[  248.011486][ T8460] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  248.054152][ T8460] ext4 filesystem being mounted at /132/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.314399][ T8439] chnl_net:caif_netlink_parms(): no params data found
[  248.557542][ T8489] tmpfs: Unknown parameter '§џџџџџџџ'
[  248.693795][ T8439] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.717979][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.728626][ T8439] device bridge_slave_0 entered promiscuous mode
[  248.760788][ T4323] Bluetooth: hci6: command 0x0409 tx timeout
[  248.777878][ T8439] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.792223][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.803182][ T8439] device bridge_slave_1 entered promiscuous mode
[  248.819016][ T8508] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1293'.
[  248.917175][ T8439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.933032][ T8439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.937502][ T8516] loop6: detected capacity change from 0 to 512
[  249.124467][ T8516] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  249.194158][ T8516] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  249.753711][ T8439] team0: Port device team_slave_0 added
[  249.969138][ T8538] tmpfs: Unknown parameter '§џџџџџџџ'
[  250.073145][  T454] device hsr_slave_0 left promiscuous mode
[  250.096585][  T454] device hsr_slave_1 left promiscuous mode
[  250.130914][  T454] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  250.140284][  T454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  250.159637][  T454] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  250.218680][  T454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  250.252167][  T454] device bridge_slave_1 left promiscuous mode
[  250.274659][  T454] bridge0: port 2(bridge_slave_1) entered disabled state
[  250.290332][  T454] device bridge_slave_0 left promiscuous mode
[  250.296805][  T454] bridge0: port 1(bridge_slave_0) entered disabled state
[  250.353132][  T454] device veth1_macvtap left promiscuous mode
[  250.359358][  T454] device veth0_macvtap left promiscuous mode
[  250.374198][  T454] device veth1_vlan left promiscuous mode
[  250.384675][  T454] device veth0_vlan left promiscuous mode
[  250.454608][ T4209] usb 1-1: ezusb_ihex_firmware_download - request "keyspan/usa19qi.fw" failed
[  250.472702][ T4209] usb 1-1: failed to load firmware "keyspan/usa19qi.fw"
[  250.488349][ T4209] keyspan: probe of 1-1:0.0 failed with error -2
[  251.068160][ T4209] usb 1-1: USB disconnect, device number 6
[  251.115537][ T5648] Bluetooth: hci6: command 0x041b tx timeout
[  251.123452][ T8571] loop8: detected capacity change from 0 to 512
[  251.293916][ T8571] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  251.325716][ T8571] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  251.448864][ T8580] tmpfs: Unknown parameter '§џџџџџџџ'
[  251.547802][  T454] team0 (unregistering): Port device team_slave_1 removed
[  251.572704][  T454] team0 (unregistering): Port device team_slave_0 removed
[  251.587338][  T454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  251.627834][  T454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  251.856963][  T454] bond0 (unregistering): Released all slaves
[  252.037115][ T8439] team0: Port device team_slave_1 added
[  252.253055][ T8558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1305'.
[  252.352812][ T8606] tmpfs: Unknown parameter '§џџџџџџџ'
[  252.550707][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_0
[  252.557680][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.718013][ T8616] loop7: detected capacity change from 0 to 512
[  252.729412][ T8439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  252.767328][ T8439] batman_adv: batadv0: Adding interface: batadv_slave_1
[  252.821056][ T8439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  252.855078][ T8616] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  252.866422][ T8616] ext4 filesystem being mounted at /114/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.880288][ T8439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.086381][ T8439] device hsr_slave_0 entered promiscuous mode
[  253.121249][ T8439] device hsr_slave_1 entered promiscuous mode
[  253.144056][ T8439] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  253.156129][ T8439] Cannot create hsr debugfs directory
[  253.171318][ T5647] Bluetooth: hci6: command 0x040f tx timeout
[  253.179694][ T8630] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1335'.
[  253.331170][ T8646] tmpfs: Unknown parameter '§џџџџџџџ'
[  253.380431][ T1108] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  253.638513][ T1108] usb 9-1: Using ep0 maxpacket: 32
[  253.770832][ T8670] capability: warning: `syz.6.1348' uses 32-bit capabilities (legacy support in use)
[  253.840487][ T1108] usb 9-1: unable to get BOS descriptor or descriptor too short
[  253.913777][ T8672] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  253.935271][ T8673] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1349'.
[  253.944930][ T1108] usb 9-1: config 1 has an invalid interface number: 233 but max is 0
[  253.953264][ T1108] usb 9-1: config 1 has no interface number 0
[  253.959787][ T1108] usb 9-1: config 1 interface 233 has no altsetting 0
[  253.963838][ T8675] tmpfs: Unknown parameter '§џџџџџџџ'
[  254.170823][ T1108] usb 9-1: New USB device found, idVendor=0cf3, idProduct=7010, bcdDevice=5e.48
[  254.188466][ T1108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.197998][ T1108] usb 9-1: Product: syz
[  254.202489][ T1108] usb 9-1: Manufacturer: syz
[  254.207208][ T1108] usb 9-1: SerialNumber: syz
[  254.418533][ T8439] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  254.442242][ T8439] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  254.471345][ T8439] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  254.489331][ T8439] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  254.591534][ T1108] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  254.636167][ T1108] usb 9-1: USB disconnect, device number 2
[  255.250346][ T5647] Bluetooth: hci6: command 0x0419 tx timeout
[  255.261003][ T8704] loop8: detected capacity change from 0 to 512
[  255.417642][ T8704] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  255.504416][ T8711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  255.514444][ T8704] EXT4-fs (loop8): 1 truncate cleaned up
[  255.542374][ T8704] EXT4-fs (loop8): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000004,debug_want_extra_isize=0x0000000000000066,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback.
[  255.562947][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  255.563028][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  255.784070][ T8439] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.848895][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  256.200838][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  256.263638][ T8439] 8021q: adding VLAN 0 to HW filter on device team0
[  256.409930][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  256.443404][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  256.501273][ T4234] bridge0: port 1(bridge_slave_0) entered blocking state
[  256.508364][ T4234] bridge0: port 1(bridge_slave_0) entered forwarding state
[  256.580673][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  256.609874][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  256.663480][ T4234] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.670741][ T4234] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.695960][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  256.865264][ T8752] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1371'.
[  256.889193][ T4234] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  256.940936][   T26] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  257.352009][   T26] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  257.506740][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  257.523354][   T26] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.567066][   T26] usb 7-1: config 0 descriptor??
[  257.626413][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  257.646235][   T26] cp210x 7-1:0.0: cp210x converter detected
[  257.696430][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  257.707157][ T8764] loop7: detected capacity change from 0 to 128
[  257.750517][ T1263] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  257.791361][ T8764] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  257.809890][ T8764] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  257.822530][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  257.852906][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  257.903470][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  257.952942][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  258.018157][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  258.027337][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  258.060332][   T26] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32
[  258.110907][   T26] cp210x 7-1:0.0: failed to get vendor val 0x3711 size 2: 0
[  258.118476][   T26] cp210x 7-1:0.0: GPIO initialisation failed: -5
[  258.408901][   T26] usb 7-1: cp210x converter now attached to ttyUSB0
[  258.572651][ T8774] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  258.909442][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  258.919287][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  258.949599][ T8439] 8021q: adding VLAN 0 to HW filter on device batadv0
[  259.585520][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  259.600688][ T8812] loop8: detected capacity change from 0 to 1024
[  259.613978][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  259.641640][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  259.654651][ T8812] EXT4-fs (loop8): Ignoring removed orlov option
[  259.688324][   T26] usb 7-1: USB disconnect, device number 5
[  259.703223][ T8812] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  259.711739][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  259.723315][   T26] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  259.761434][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  259.771027][   T26] cp210x 7-1:0.0: device disconnected
[  259.837096][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  259.848433][ T8439] device veth0_vlan entered promiscuous mode
[  259.855942][ T8812] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  259.946157][ T8439] device veth1_vlan entered promiscuous mode
[  260.046792][ T8837] tmpfs: Unknown parameter '§џџџџџџџ'
[  260.111622][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  260.131192][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  260.141768][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  260.157386][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  260.168050][ T8439] device veth0_macvtap entered promiscuous mode
[  260.242858][ T8439] device veth1_macvtap entered promiscuous mode
[  260.325907][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.346082][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.360039][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.396131][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.647535][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.706881][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  260.736237][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  260.755517][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  260.764960][ T4265] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  260.803236][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.813644][ T8862] loop8: detected capacity change from 0 to 1024
[  260.864825][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.880266][ T8862] EXT4-fs (loop8): Ignoring removed orlov option
[  260.902940][ T8862] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  260.916600][ T8439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.959496][ T8439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.976111][ T8439] batman_adv: batadv0: Interface activated: batadv_slave_1
[  260.998377][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  261.007024][ T8862] EXT4-fs (loop8): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  261.051343][ T8874] tmpfs: Unknown parameter '§џџџџџџџ'
[  261.061060][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  261.072955][ T8439] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.105224][ T8439] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.187252][ T8439] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.250223][ T8439] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  262.211909][ T8913] loop7: detected capacity change from 0 to 1024
[  262.276518][ T8913] EXT4-fs (loop7): Ignoring removed orlov option
[  262.358889][ T8913] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option
[  262.516667][ T8913] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none.
[  262.583093][ T8925] tmpfs: Unknown parameter '§џџџџџџџ'
[  262.682927][ T4480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.745247][ T4480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.763117][ T4479] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  262.810300][ T4479] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  262.834959][ T8937] loop8: detected capacity change from 0 to 512
[  262.884824][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  262.898949][ T4480] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  262.985941][ T8937] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  263.017784][ T8937] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.099972][ T8943] 9pnet: Insufficient options for proto=fd
[  264.508727][ T8977] tmpfs: Unknown parameter '§џџџџџџџ'
[  264.746612][ T8994] 9pnet: Insufficient options for proto=fd
[  265.099173][ T9016] tmpfs: Unknown parameter '§џџџџџџџ'
[  266.438413][ T9054] tmpfs: Unknown parameter '§џџџџџџџ'
[  267.435954][ T9077] loop4: detected capacity change from 0 to 512
[  267.764029][  T454] device hsr_slave_0 left promiscuous mode
[  267.791817][  T454] device hsr_slave_1 left promiscuous mode
[  267.836270][  T454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  267.872204][  T454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.086064][  T454] device bridge_slave_1 left promiscuous mode
[  268.106343][  T454] bridge0: port 2(bridge_slave_1) entered disabled state
[  268.266466][  T454] device bridge_slave_0 left promiscuous mode
[  268.312270][ T9077] EXT4-fs (loop4): Test dummy encryption mode enabled
[  268.330038][  T454] bridge0: port 1(bridge_slave_0) entered disabled state
[  268.342715][ T9077] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  268.430941][  T454] device hsr_slave_0 left promiscuous mode
[  268.444558][  T454] device hsr_slave_1 left promiscuous mode
[  268.511420][ T9077] EXT4-fs (loop4): 1 truncate cleaned up
[  268.517111][ T9077] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,test_dummy_encryption,noinit_itable,nodelalloc,errors=remount-ro,quota,. Quota mode: writeback.
[  268.537611][  T454] batman_adv: batadv0: Removing interface: batadv_slave_0
[  268.565951][  T454] batman_adv: batadv0: Removing interface: batadv_slave_1
[  268.777234][  T454] device bridge_slave_1 left promiscuous mode
[  268.784913][  T454] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.237004][  T454] device bridge_slave_0 left promiscuous mode
[  269.259028][  T454] bridge0: port 1(bridge_slave_0) entered disabled state
[  270.062514][  T454] team0 (unregistering): Port device team_slave_1 removed
[  270.078708][  T454] team0 (unregistering): Port device team_slave_0 removed
[  270.094077][  T454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.124493][  T454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.317051][  T454] bond0 (unregistering): Released all slaves
[  270.610333][ T4209] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  270.681546][  T454] team0 (unregistering): Port device team_slave_1 removed
[  270.698370][  T454] team0 (unregistering): Port device team_slave_0 removed
[  270.715149][  T454] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  270.732352][  T454] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  270.817701][  T454] bond0 (unregistering): Released all slaves
[  271.104554][ T4209] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  271.124481][ T4209] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.149369][ T4209] usb 5-1: config 0 descriptor??
[  271.204479][ T4209] cp210x 5-1:0.0: cp210x converter detected
[  271.790802][ T4209] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  272.111337][ T9207] tmpfs: Unknown parameter '§џџџџџџџ'
[  272.142687][ T4209] usb 5-1: cp210x converter now attached to ttyUSB0
[  272.672633][ T4209] usb 5-1: USB disconnect, device number 3
[  272.692455][ T9227] loop8: detected capacity change from 0 to 164
[  272.702792][ T4209] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  272.763002][ T4209] cp210x 5-1:0.0: device disconnected
[  273.753220][ T9227] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  273.825977][ T9227] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  274.192639][ T9227] rock: directory entry would overflow storage
[  274.382003][ T9227] rock: sig=0x4f50, size=4, remaining=3
[  274.580499][ T9227] iso9660: Corrupted directory entry in block 4 of inode 1792
[  274.796978][ T9262] tmpfs: Unknown parameter '§џџџџџџџ'
[  275.626097][ T9283] loop4: detected capacity change from 0 to 128
[  275.740575][ T9283] EXT4-fs (loop4): Ignoring removed nobh option
[  275.928401][ T9283] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,usrjquota=,,errors=continue. Quota mode: none.
[  275.968385][ T9283] ext4 filesystem being mounted at /16/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  276.230063][    C0] hrtimer: interrupt took 37801 ns
[  277.953595][ T9324] tmpfs: Unknown parameter '§џџџџџџџ'
[  278.944743][ T9351] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  278.952014][ T9351] IPv6: NLM_F_CREATE should be set when creating new route
[  280.031453][ T9377] loop7: detected capacity change from 0 to 16
[  280.150902][ T9377] erofs: (device loop7): mounted with root inode @ nid 36.
[  284.546927][ T9433] loop7: detected capacity change from 0 to 512
[  284.814637][ T9433] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  284.854166][ T9433] ext4 filesystem being mounted at /156/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  285.170446][ T4209] Bluetooth: hci0: command 0x0406 tx timeout
[  285.385889][ T9476] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6
[  286.360155][ T1108] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  287.130614][ T1108] usb 9-1: Using ep0 maxpacket: 8
[  287.185811][ T9513] loop6: detected capacity change from 0 to 256
[  287.310538][   T25] kauditd_printk_skb: 4 callbacks suppressed
[  287.310551][   T25] audit: type=1800 audit(1750815950.756:62): pid=9513 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1588" name="file0" dev="loop6" ino=1048649 res=0 errno=0
[  287.709524][ T1108] usb 9-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  287.873804][ T1108] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.904168][ T1108] usb 9-1: Product: syz
[  287.914274][ T1108] usb 9-1: Manufacturer: syz
[  287.933181][ T1108] usb 9-1: SerialNumber: syz
[  287.949895][ T1108] usb 9-1: config 0 descriptor??
[  289.462231][ T1108] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  289.480773][ T1108] gspca_sunplus: reg_w_riv err -71
[  289.485968][ T1108] sunplus: probe of 9-1:0.0 failed with error -71
[  289.514374][ T1108] usb 9-1: USB disconnect, device number 3
[  289.687047][ T9545] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  289.699756][ T9545] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1598'.
[  290.766902][   T25] audit: type=1326 audit(1750815954.206:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  290.868905][   T25] audit: type=1326 audit(1750815954.236:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  290.940510][ T9581] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1610'.
[  291.014554][ T9588] loop4: detected capacity change from 0 to 512
[  291.039449][   T25] audit: type=1326 audit(1750815954.236:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  291.125647][ T9588] EXT4-fs (loop4): Test dummy encryption mode enabled
[  291.150236][ T9588] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  291.150455][   T25] audit: type=1326 audit(1750815954.236:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  291.274821][ T9588] EXT4-fs (loop4): 1 truncate cleaned up
[  291.286302][ T9588] EXT4-fs (loop4): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,test_dummy_encryption,noinit_itable,nodelalloc,errors=remount-ro,quota,. Quota mode: writeback.
[  291.288528][   T25] audit: type=1326 audit(1750815954.236:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  291.329459][   T25] audit: type=1326 audit(1750815954.236:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  291.561191][   T25] audit: type=1326 audit(1750815954.236:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  291.591770][   T25] audit: type=1326 audit(1750815954.236:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  291.614245][   T25] audit: type=1326 audit(1750815954.236:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9570 comm="syz.8.1606" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  292.127901][ T9639] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  292.212051][ T9639] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'.
[  292.494143][ T9659] loop4: detected capacity change from 0 to 128
[  292.544194][ T9659] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  292.565028][ T9659] ext4 filesystem being mounted at /34/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.143672][ T9692] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  293.198005][ T9692] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1643'.
[  293.259872][   T25] kauditd_printk_skb: 7 callbacks suppressed
[  293.259885][   T25] audit: type=1326 audit(1750815956.696:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.8.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  293.388724][   T25] audit: type=1326 audit(1750815956.736:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.8.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  293.439830][ T9705] loop4: detected capacity change from 0 to 1024
[  293.480308][ T4209] Bluetooth: hci1: command 0x0406 tx timeout
[  293.555421][   T25] audit: type=1326 audit(1750815956.736:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9698 comm="syz.8.1646" exe="/root/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f009a97a929 code=0x7ffc0000
[  293.743414][ T9705] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  398.760078][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  398.767096][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P9/1:b..l P3547/1:b..l P454/1:b..l
[  398.777392][    C0] 	(detected by 0, t=10503 jiffies, g=30973, q=190)
[  398.783974][    C0] task:kworker/u4:3    state:R  running task     stack:21736 pid:  454 ppid:     2 flags:0x00004000
[  398.795663][    C0] Workqueue: netns cleanup_net
[  398.800464][    C0] Call Trace:
[  398.803734][    C0]  <TASK>
[  398.806660][    C0]  __schedule+0x11b8/0x43b0
[  398.811165][    C0]  ? mark_lock+0x94/0x320
[  398.815497][    C0]  ? mark_lock+0x94/0x320
[  398.819824][    C0]  ? mark_lock+0x94/0x320
[  398.824157][    C0]  ? release_firmware_map_entry+0x190/0x190
[  398.830050][    C0]  ? mark_lock+0x94/0x320
[  398.834373][    C0]  ? preempt_schedule_irq+0xa6/0x150
[  398.839655][    C0]  preempt_schedule_irq+0xb1/0x150
[  398.844759][    C0]  ? __cond_resched+0xb0/0xb0
[  398.849435][    C0]  ? rcu_is_watching+0x11/0xa0
[  398.854200][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x200
[  398.859998][    C0]  irqentry_exit+0x63/0x70
[  398.864407][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  398.870393][    C0] RIP: 0010:lock_acquire+0x1f2/0x3f0
[  398.875680][    C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
[  398.895298][    C0] RSP: 0018:ffffc900034af900 EFLAGS: 00000206
[  398.901360][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: d064a458f9ce8000
[  398.909332][    C0] RDX: 0000000000000000 RSI: ffffffff8a0b2460 RDI: ffffffff8a59a740
[  398.917296][    C0] RBP: ffffc900034afa20 R08: dffffc0000000000 R09: fffffbfff1ff3619
[  398.925261][    C0] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffffffff8c11bfa0
[  398.933224][    C0] R13: 1ffff92000695f2c R14: 0000000000000246 R15: dffffc0000000000
[  398.941208][    C0]  ? rcu_lock_release+0x5/0x20
[  398.945967][    C0]  ? read_lock_is_recursive+0x10/0x10
[  398.951335][    C0]  ? __lock_acquire+0x7c60/0x7c60
[  398.956359][    C0]  ? lock_acquire+0x224/0x3f0
[  398.961041][    C0]  rcu_lock_acquire+0x2a/0x30
[  398.965712][    C0]  ? rcu_lock_acquire+0x5/0x30
[  398.970475][    C0]  inet_twsk_purge+0x119/0x810
[  398.975246][    C0]  ? __inet_twsk_schedule+0x130/0x130
[  398.980616][    C0]  ? iput+0x706/0x8a0
[  398.984598][    C0]  ? dccp_v4_exit_net+0x80/0x80
[  398.989447][    C0]  cleanup_net+0x77b/0xb80
[  398.993859][    C0]  ? ops_free_list+0x330/0x330
[  398.998620][    C0]  ? preempt_schedule_thunk+0x16/0x18
[  399.003997][    C0]  process_one_work+0x863/0x1000
[  399.008941][    C0]  ? worker_detach_from_pool+0x240/0x240
[  399.014568][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  399.019852][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  399.024876][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  399.030248][    C0]  ? wq_worker_running+0x97/0x170
[  399.035274][    C0]  worker_thread+0xaa8/0x12a0
[  399.039952][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  399.045164][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  399.050365][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  399.056267][    C0]  kthread+0x436/0x520
[  399.060333][    C0]  ? rcu_lock_release+0x20/0x20
[  399.065235][    C0]  ? kthread_blkcg+0xd0/0xd0
[  399.069826][    C0]  ret_from_fork+0x1f/0x30
[  399.074252][    C0]  </TASK>
[  399.077270][    C0] task:udevd           state:R  running task     stack:23168 pid: 3547 ppid:     1 flags:0x00004002
[  399.088039][    C0] Call Trace:
[  399.091314][    C0]  <TASK>
[  399.094245][    C0]  __schedule+0x11b8/0x43b0
[  399.098747][    C0]  ? __wake_up_sync+0x114/0x180
[  399.103599][    C0]  ? try_to_wake_up+0x6cf/0x1050
[  399.108541][    C0]  ? ep_poll_callback+0x5b6/0x9f0
[  399.113562][    C0]  ? release_firmware_map_entry+0x190/0x190
[  399.119452][    C0]  ? __lock_acquire+0x7c60/0x7c60
[  399.124482][    C0]  ? preempt_schedule+0xa7/0xb0
[  399.131684][    C0]  preempt_schedule_common+0x82/0xd0
[  399.136978][    C0]  preempt_schedule+0xa7/0xb0
[  399.141652][    C0]  ? schedule_preempt_disabled+0x20/0x20
[  399.147284][    C0]  ? lock_chain_count+0x20/0x20
[  399.152138][    C0]  preempt_schedule_thunk+0x16/0x18
[  399.157342][    C0]  _raw_spin_unlock_irqrestore+0xf6/0x100
[  399.163068][    C0]  ? _raw_spin_unlock+0x40/0x40
[  399.167915][    C0]  ? __wake_up_common+0x2a4/0x4e0
[  399.172941][    C0]  __wake_up_sync_key+0x11b/0x180
[  399.177965][    C0]  ? __wake_up_locked_key_bookmark+0x20/0x20
[  399.183939][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  399.189845][    C0]  sock_def_readable+0x136/0x250
[  399.194782][    C0]  netlink_sendskb+0x97/0x130
[  399.199460][    C0]  netlink_sendmsg+0x8ab/0xbc0
[  399.204223][    C0]  ? netlink_getsockopt+0x560/0x560
[  399.209418][    C0]  ? aa_sock_msg_perm+0x94/0x150
[  399.214355][    C0]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  399.219636][    C0]  ? security_socket_sendmsg+0x7c/0xa0
[  399.225088][    C0]  ? netlink_getsockopt+0x560/0x560
[  399.230295][    C0]  ____sys_sendmsg+0x5a2/0x8c0
[  399.235064][    C0]  ? memset+0x1e/0x40
[  399.239042][    C0]  ? __sys_sendmsg_sock+0x30/0x30
[  399.244071][    C0]  ? import_iovec+0x6f/0xa0
[  399.248568][    C0]  ___sys_sendmsg+0x1f0/0x260
[  399.253248][    C0]  ? __sys_sendmsg+0x250/0x250
[  399.258036][    C0]  ? __context_tracking_exit+0x4c/0x80
[  399.263491][    C0]  ? __fdget+0x150/0x210
[  399.267729][    C0]  __se_sys_sendmsg+0x190/0x250
[  399.272581][    C0]  ? __x64_sys_sendmsg+0x80/0x80
[  399.277511][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  399.283500][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  399.288696][    C0]  do_syscall_64+0x4c/0xa0
[  399.293103][    C0]  ? clear_bhb_loop+0x30/0x80
[  399.297772][    C0]  ? clear_bhb_loop+0x30/0x80
[  399.302452][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  399.308344][    C0] RIP: 0033:0x7eff189da407
[  399.312752][    C0] RSP: 002b:00007fffba619cf0 EFLAGS: 00000202 ORIG_RAX: 000000000000002e
[  399.321162][    C0] RAX: ffffffffffffffda RBX: 00007eff188ec880 RCX: 00007eff189da407
[  399.329128][    C0] RDX: 0000000000000000 RSI: 00007fffba619d50 RDI: 0000000000000004
[  399.337102][    C0] RBP: 000056048e1dff60 R08: 0000000000000000 R09: 0000000000000000
[  399.345063][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00000000000000b4
[  399.353025][    C0] R13: 000056048e1cb9e0 R14: 0000000000000000 R15: 0000000000000000
[  399.361005][    C0]  </TASK>
[  399.364019][    C0] task:kworker/u4:0    state:R  running task     stack:23008 pid:    9 ppid:     2 flags:0x00004000
[  399.374856][    C0] Workqueue: bat_events batadv_nc_worker
[  399.380495][    C0] Call Trace:
[  399.383767][    C0]  <TASK>
[  399.386693][    C0]  __schedule+0x11b8/0x43b0
[  399.391203][    C0]  ? mark_lock+0x94/0x320
[  399.395536][    C0]  ? mark_lock+0x94/0x320
[  399.399866][    C0]  ? release_firmware_map_entry+0x190/0x190
[  399.405757][    C0]  ? preempt_schedule_irq+0xa6/0x150
[  399.411041][    C0]  preempt_schedule_irq+0xb1/0x150
[  399.416145][    C0]  ? __cond_resched+0xb0/0xb0
[  399.420815][    C0]  ? rcu_is_watching+0x11/0xa0
[  399.425577][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x200
[  399.431374][    C0]  irqentry_exit+0x63/0x70
[  399.435786][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  399.441757][    C0] RIP: 0010:lock_acquire+0x1f2/0x3f0
[  399.447041][    C0] Code: 00 9c 8f 84 24 80 00 00 00 f6 84 24 81 00 00 00 02 0f 85 f6 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 44 3d 00 00 00 00 00 66 43 c7 44 3d 09 00 00 43 c6 44 3d 0b
[  399.467600][    C0] RSP: 0018:ffffc90000ce7aa0 EFLAGS: 00000206
[  399.473675][    C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: d94eb87831685f00
[  399.481643][    C0] RDX: 0000000000000000 RSI: ffffffff8a0b2460 RDI: ffffffff8a59a740
[  399.489611][    C0] RBP: ffffc90000ce7bc0 R08: dffffc0000000000 R09: fffffbfff1ff3619
[  399.497578][    C0] R10: fffffbfff1ff3619 R11: 1ffffffff1ff3618 R12: ffffffff8c11bfa0
[  399.505545][    C0] R13: 1ffff9200019cf60 R14: 0000000000000246 R15: dffffc0000000000
[  399.513533][    C0]  ? rcu_lock_release+0x5/0x20
[  399.518295][    C0]  ? read_lock_is_recursive+0x10/0x10
[  399.523671][    C0]  ? __lock_acquire+0x7c60/0x7c60
[  399.528691][    C0]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  399.534676][    C0]  rcu_lock_acquire+0x2a/0x30
[  399.539354][    C0]  ? rcu_lock_acquire+0x5/0x30
[  399.544109][    C0]  batadv_nc_worker+0xc9/0x5c0
[  399.548870][    C0]  process_one_work+0x863/0x1000
[  399.553814][    C0]  ? worker_detach_from_pool+0x240/0x240
[  399.559438][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  399.564723][    C0]  ? _raw_spin_lock_irq+0xab/0xe0
[  399.569743][    C0]  ? _raw_spin_lock_irqsave+0xf0/0xf0
[  399.575111][    C0]  ? wq_worker_running+0x97/0x170
[  399.580132][    C0]  worker_thread+0xaa8/0x12a0
[  399.584831][    C0]  kthread+0x436/0x520
[  399.588894][    C0]  ? rcu_lock_release+0x20/0x20
[  399.593739][    C0]  ? kthread_blkcg+0xd0/0xd0
[  399.598333][    C0]  ret_from_fork+0x1f/0x30
[  399.602757][    C0]  </TASK>
[  399.605768][    C0] rcu: rcu_preempt kthread starved for 10586 jiffies! g30973 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  399.616953][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  399.626914][    C0] rcu: RCU grace-period kthread stack dump:
[  399.632786][    C0] task:rcu_preempt     state:R  running task     stack:28032 pid:   15 ppid:     2 flags:0x00004000
[  399.643556][    C0] Call Trace:
[  399.646825][    C0]  <TASK>
[  399.649748][    C0]  __schedule+0x11b8/0x43b0
[  399.654264][    C0]  ? _raw_spin_lock_irqsave+0x7f/0xf0
[  399.659638][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x100
[  399.665526][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  399.671416][    C0]  ? _raw_spin_unlock+0x40/0x40
[  399.676261][    C0]  ? rcu_is_watching+0x11/0xa0
[  399.681017][    C0]  ? release_firmware_map_entry+0x190/0x190
[  399.686917][    C0]  schedule+0x11b/0x1e0
[  399.691066][    C0]  schedule_timeout+0x15c/0x280
[  399.695909][    C0]  ? console_conditional_schedule+0x40/0x40
[  399.701796][    C0]  ? update_process_times+0x200/0x200
[  399.707167][    C0]  ? prepare_to_swait_event+0x331/0x350
[  399.712710][    C0]  rcu_gp_fqs_loop+0x29e/0x11b0
[  399.717556][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  399.722753][    C0]  ? rcu_gp_init+0xd58/0x10e0
[  399.727426][    C0]  ? rcu_gp_init+0x10e0/0x10e0
[  399.732189][    C0]  ? _raw_spin_unlock_irq+0x1f/0x40
[  399.737382][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  399.742576][    C0]  rcu_gp_kthread+0x98/0x350
[  399.747163][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  399.752268][    C0]  ? _raw_spin_unlock_irqrestore+0xaa/0x100
[  399.758159][    C0]  ? __kthread_parkme+0x157/0x1b0
[  399.763186][    C0]  kthread+0x436/0x520
[  399.767246][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  399.772349][    C0]  ? kthread_blkcg+0xd0/0xd0
[  399.776931][    C0]  ret_from_fork+0x1f/0x30
[  399.781352][    C0]  </TASK>
[  399.784363][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  399.790680][    C0] Sending NMI from CPU 0 to CPUs 1:
[  399.795884][    C1] NMI backtrace for cpu 1
[  399.795893][    C1] CPU: 1 PID: 9707 Comm: syz.8.1649 Not tainted 5.15.185-syzkaller #0
[  399.795907][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  399.795915][    C1] RIP: 0010:kasan_check_range+0xd/0x290
[  399.795934][    C1] Code: c3 0f 0b b8 ea ff ff ff c3 0f 0b b8 ea ff ff ff c3 00 00 cc cc 00 00 cc cc 00 00 cc cc b0 01 48 85 f6 0f 84 a4 01 00 00 41 57 <41> 56 53 49 89 f8 49 01 f0 0f 82 57 02 00 00 49 89 f8 49 c1 e8 2f
[  399.795946][    C1] RSP: 0018:ffffc90000dd0e08 EFLAGS: 00000002
[  399.795958][    C1] RAX: ffffffff814a4d01 RBX: ffff888079b79dc0 RCX: ffffffff814a4d5d
[  399.795969][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: ffff88801a99ca00
[  399.795979][    C1] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000002
[  399.795987][    C1] R10: 0000000000000001 R11: 0000000000010000 R12: 1ffff1100f36f4dd
[  399.795996][    C1] R13: ffff888079b7a6e8 R14: ffff88801a99ca00 R15: 0000000000000011
[  399.796007][    C1] FS:  00007f00987e26c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  399.796019][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  399.796029][    C1] CR2: 00007eff17f7e000 CR3: 0000000060836000 CR4: 00000000003506e0
[  399.796042][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  399.796050][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  399.796064][    C1] Call Trace:
[  399.796068][    C1]  <IRQ>
[  399.796073][    C1]  __send_signal+0x5d/0xdb0
[  399.796089][    C1]  ? send_signal+0x3e/0x880
[  399.796107][    C1]  group_send_sig_info+0x1c6/0x220
[  399.796124][    C1]  do_bpf_send_signal+0x7b/0x150
[  399.796139][    C1]  irq_work_run_list+0x1bb/0x330
[  399.796156][    C1]  ? irq_work_run+0xe0/0xe0
[  399.796171][    C1]  ? kvm_sched_clock_read+0x14/0x40
[  399.796188][    C1]  irq_work_run+0x63/0xe0
[  399.796203][    C1]  __sysvec_irq_work+0x98/0x240
[  399.796218][    C1]  sysvec_irq_work+0x98/0xc0
[  399.796233][    C1]  </IRQ>
[  399.796236][    C1]  <TASK>
[  399.796241][    C1]  asm_sysvec_irq_work+0x16/0x20
[  399.796254][    C1] RIP: 0010:native_apic_msr_write+0x35/0x50
[  399.796271][    C1] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 89 f6 31 d2 e9 9f 6c c8 02 66 2e 0f 1f 84 00 00 00 00 00
[  399.796282][    C1] RSP: 0018:ffffc90002eefcb0 EFLAGS: 00000246
[  399.796293][    C1] RAX: 00000000000000f6 RBX: ffffffff8bbafa10 RCX: 000000000000083f
[  399.796302][    C1] RDX: 0000000000000000 RSI: 00000000000000f6 RDI: 000000000000083f
[  399.796310][    C1] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed10172267a7
[  399.796320][    C1] R10: ffffed10172267a7 R11: 1ffff110172267a6 R12: ffff8880b9133b01
[  399.796330][    C1] R13: dffffc0000000000 R14: dffffc0000000000 R15: 0000000000000020
[  399.796347][    C1]  arch_irq_work_raise+0x82/0xd0
[  399.796362][    C1]  irq_work_queue+0x95/0x140
[  399.796377][    C1]  bpf_send_signal_common+0x2b2/0x420
[  399.796392][    C1]  ? rcu_lock_release+0x20/0x20
[  399.796405][    C1]  ? __cant_sleep+0x210/0x210
[  399.796419][    C1]  ? __context_tracking_exit+0x4c/0x80
[  399.796436][    C1]  bpf_send_signal+0x15/0x20
[  399.796451][    C1]  bpf_prog_7ba5217f62dcd359+0x38/0xd80
[  399.796465][    C1]  bpf_trace_run2+0x15b/0x2d0
[  399.796478][    C1]  ? bpf_trace_run1+0x2d0/0x2d0
[  399.796489][    C1]  ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[  399.796507][    C1]  ? lock_chain_count+0x20/0x20
[  399.796523][    C1]  __bpf_trace_sys_enter+0x60/0x70
[  399.796540][    C1]  trace_sys_enter+0x65/0x80
[  399.796554][    C1]  syscall_trace_enter+0x115/0x180
[  399.796570][    C1]  do_syscall_64+0x24/0xa0
[  399.796583][    C1]  ? clear_bhb_loop+0x30/0x80
[  399.796595][    C1]  ? clear_bhb_loop+0x30/0x80
[  399.796608][    C1]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  399.796625][    C1] RIP: 0033:0x7f009a916b19
[  399.796642][    C1] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25
[  399.796653][    C1] RSP: 002b:00007f00987e1b40 EFLAGS: 00000246 ORIG_RAX: 000000000000000f
[  399.796666][    C1] RAX: ffffffffffffffda RBX: 00007f009aba1fa8 RCX: 00007f009a916b19
[  399.796677][    C1] RDX: 00007f00987e1b40 RSI: 00007f00987e1c70 RDI: 0000000000000011
[  399.796686][    C1] RBP: 00007f009aba1fa0 R08: 0000000000000000 R09: 0000000000000000
[  399.796695][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f009aba1fac
[  399.796704][    C1] R13: 0000000000000000 R14: 00007ffe991c3120 R15: 00007ffe991c3208
[  399.796720][    C1]  </TASK>