last executing test programs:

1m1.842179539s ago: executing program 1:
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2)
getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14}]}}]}, 0x44}}, 0x0)

1m0.943391361s ago: executing program 1:
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
utimes(0x0, 0x0)

1m0.461588421s ago: executing program 1:
syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000000)='./file0\x00', 0xa00a14, &(0x7f0000000080)=ANY=[], 0x1, 0x322, &(0x7f0000000580)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0)
syncfs(r1)
write$vga_arbiter(r0, 0x0, 0xb)

59.515581708s ago: executing program 1:
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
write$FUSE_INIT(r3, &(0x7f00000012c0)={0x50}, 0x50)
dup3(r0, 0xffffffffffffffff, 0x0)

58.638394666s ago: executing program 1:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000800000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f00000055c0), 0x400023c, 0x0, 0x0)

48.010491351s ago: executing program 2:
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@four_active_logs}, {@fastboot}, {@test_dummy_encryption}, {@fsync_mode_strict}, {@disable_ext_identify}, {@acl}]}, 0x1, 0x1059a, &(0x7f0000020c40)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

44.199580604s ago: executing program 2:
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000140)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000340)={@private1={0xfc, 0x1, '\x00', 0xfe}}, 0x14)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x4e, &(0x7f0000000140)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "a7a096", 0x2, 0x3a, 0x0, @local, @mcast2, {[], @mld={0x0, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {0x0, 0x0, 0xd952}}, {{@in6=@mcast1}}}, 0xe8)
setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00])

40.001805918s ago: executing program 2:
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[], 0x1, 0x5ab, &(0x7f0000000f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2885800, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0xffffffb5)

37.050549744s ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000040)={0xcc, 0x0, 0x80})

35.576279713s ago: executing program 2:
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xcc, 0x1e, 0xf4, 0x20, 0xb89, 0x7, 0xef64, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xfd, 0x3f, 0x9}}]}}]}}, 0x0)
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x541b, 0x0)

31.529197142s ago: executing program 2:
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
syz_emit_vhci(&(0x7f0000004980)=ANY=[@ANYBLOB="040f0400004320"], 0x7)
memfd_create(0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x4030582b, 0x0)

28.153397979s ago: executing program 1:
syz_mount_image$iso9660(&(0x7f0000002900), &(0x7f0000000000)='./file1\x00', 0x8c48, &(0x7f0000000240)=ANY=[], 0x1, 0x5ab, &(0x7f0000000f80)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000280)='./file0\x00', &(0x7f0000000000)='./file0/../file0/file0\x00', 0x0, 0x2879c03, 0x0)
mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x2885800, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mounts\x00')
read$FUSE(r0, &(0x7f0000000600)={0x2020}, 0xffffffb5)

7.212740685s ago: executing program 0:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000001c0), 0x1, 0x76a, &(0x7f0000000fc0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', '', [], 0xa, "7870008225c3c6e6af20a86d4ee9405d7ee911c42a1d6809fb79efa14b19b31751add5316e2f5f96070fb48904e0e85e9019f44cc898647a212b32bc6cf845e8248e3df9c170f2b942"}, 0x4d)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0)
r1 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r1, 0x10d, 0xfd, 0x0, &(0x7f0000000000))

6.381005643s ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x20)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)="13", 0x1}], 0x1}}], 0x1, 0x0)

5.754123211s ago: executing program 0:
prlimit64(0x0, 0x6, &(0x7f0000000040), 0x0)
r0 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0)
syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}})
io_uring_enter(r0, 0x5b43, 0x0, 0x0, 0x0, 0x0)

5.246366327s ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$bt_hci(r0, 0x84, 0x66, &(0x7f0000000500)=""/4067, &(0x7f00000004c0)=0xfe3)

5.065875593s ago: executing program 3:
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'xfrm0\x00', <r0=>0x0})
r1 = open$dir(&(0x7f0000000040)='./file0\x00', 0x200, 0x79e2e8265af311ac)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xf, 0x0, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x1, &(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2, @ANYRES32=r3, @ANYRESHEX, @ANYBLOB="1396fbf1df20432542418a3b15183f7ae7a80a4821f9989fe11ab41c7398d8ed9fb9353ccdf65fc9af524fdc1ea3464efb898fb24e9473f2aef80d9c82994b0ce6", @ANYRES8=r0, @ANYRESOCT=r1, @ANYRESOCT, @ANYRES64], 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r5 = fanotify_init(0x0, 0x0)
fanotify_mark(r5, 0x11, 0x40000020, r4, &(0x7f0000000140)='./file0\x00')

4.441876874s ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x2c}}, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, 0x0, 0x1000, 0x103)
open$dir(0x0, 0x0, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20040006})

4.394524688s ago: executing program 4:
fsetxattr$security_ima(0xffffffffffffffff, 0x0, 0x0, 0xd, 0x0)
close(0xffffffffffffffff)
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4)
sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)=""/88, 0x58}, {&(0x7f0000000800)=""/240, 0xf0}, {&(0x7f00000000c0)=""/173, 0xad}, {&(0x7f0000002140)=""/4104, 0x1008}, {&(0x7f0000000240)=""/174, 0xae}, {&(0x7f00000006c0)=""/55, 0x37}, {&(0x7f0000000180)=""/186, 0xba}, {&(0x7f0000000000)=""/26, 0x1a}], 0x8}}], 0x1, 0x0, 0x0)

4.021115529s ago: executing program 3:
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000c07850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001140)='ext4_allocate_inode\x00', r0}, 0x10)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x1001, 0x7}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={0x0, r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000400)='ext4_allocate_inode\x00', r4}, 0x10)
close(r1)
close(r5)

3.841257398s ago: executing program 4:
semget$private(0x0, 0x6, 0x0)
semop(0x0, &(0x7f0000000040)=[{0x0, 0xffe0}], 0x1)
semop(0x0, &(0x7f00000001c0)=[{0x0, 0x8000}], 0x1)
semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0xfff8}, {}], 0x2, &(0x7f0000000080))

2.649059799s ago: executing program 3:
getsockname(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_EXIT_ON_EMULATION_FAILURE(r1, 0x4068aea3, &(0x7f0000000040)={0xcc, 0x0, 0x80})

2.609754819s ago: executing program 0:
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x8000, &(0x7f0000000180)=ANY=[], 0x6, 0x2be, &(0x7f0000000300)="$eJzs3EtrE1EUwPHT9JWmtMlCFAXpQTe6GdroWgzSghiw1EZ8gDBtJxoyJiUTKhGxduVW/BAuSpfdFbRfoBt3unHjrhvBhV2IkcyjjzSl1Sadtvn/oMxt7j2ZcyeTcO6QyfqDd8/zWcfImmWJRFU6REQ2RBISkUCHv4247R7Z7o1c7f/55eK9h4/upNLp0QnVsdTktaSqDg59fPGqzx+20itriSfrP5Lf186unV//M/ks52jO0UKxrKZOFb+VzSnb0pmckzdUx23LdCzNFRyr5PUXvf6sXZydrahZmBmIzZYsx1GzUNG8VdFyUculippPzVxBDcPQgZhgP5nFiQkz9Z/B001OBi1SKqXMThHp29WTWQwlIQAAEKr6+j9SK+mbV/8vXVot999fHvTr/5WeRvX/9a/ec+2o/6Mi0vL6f3dF1F4OVf/jhKjV/zH//etaeLw07Dao/wEAAAAAAAAAAAAAAAAAAAAAOAk2qtV4tVqNB9vgr1dEoiIS/B92nmgNXv/2tnXjXtegiP12LjOX8bb+gFURscWSYYnLb/d88NXawb2AWpOQT/a8Hz8/l+l0e1JZybnxIxKXRH18tTp2Oz06op6d8d0S2x6flLicaRyfbBjfI1cub4s3JC6fp6Uotsy45/VW/OsR1Vt303Xxfe44AAAAAABOA0M3NVy/G8Ze/V785vq64fUBb3093HB93iUXusKdOwAAAAAA7cKpvMybtm2VTl0jmOFBo4LvMoSSc7DzgwxekGNweCMHSrW+MSQith5278Flo73GyHiTZhr511Pi3PsPv5p3nG8sR/eZacsa3Uf3CQQAAADgqGwV/cEjN8NNCAAAAAAAAAAAAAAAAAAAAAAAAAAAAACANnQUPycW9hwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA4+JvAAAA//9JOg68")
r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0)
r1 = open(&(0x7f0000000400)='./bus\x00', 0x16543e, 0x0)
ftruncate(r1, 0x7fff)
r2 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0)
fcntl$setstatus(r2, 0x4, 0x4400)
dup3(r2, r0, 0x0)
io_setup(0x6, &(0x7f0000000240)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0xf04aef, 0x3d8, 0x4, 0x0, 0x0, r0, 0x0}])

2.282578091s ago: executing program 4:
r0 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r1}, 0x10)
mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[], 0x2c}}, 0x0)
socket$inet6_udplite(0xa, 0x2, 0x88)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480), 0x4)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x103)
open$dir(&(0x7f0000000100)='./file0\x00', 0x8802, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x420000, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x20040006})
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000000700)={0x0, 0xfffffffffffffffd, 0x5})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000d76a3fdec18fc6b80000001811000000", @ANYRESOCT=r0, @ANYRES64=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r3, 0x0, 0x0, 0x0, 0x0, 0x20000}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB="2c726f6f746d6f64653d3030303030303030303030284621e02840bc9ef00a30303030303065725f69643d000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_i', @ANYBLOB])
read$FUSE(r5, &(0x7f0000002300)={0x2020}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000001200)={0x50}, 0x50)

1.988246702s ago: executing program 3:
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x2000480, &(0x7f00000001c0), 0x1, 0x76a, &(0x7f0000000fc0)="$eJzs3d9rW1UcAPDvTdt17aatIOh8KghaGEvtrJuCDxMfRHAw0Ge3kGZlNm1Gk461FNwQwRdBxQdBX/bsj/nmqz9e9b/wQTamdsOJD1K5adJla9KlW5MI+XzgNOfce9Nzvjn3nnuSe0kC6FsT6Z9MxKGI+CiJGKstTyJiqJobjDixud3t9bV8mpLY2Hjzj6S6za31tXw0PCd1oFZ4MiJ+fD/icGZ7veWV1flcsVhYqpWnKgvnp8orq0fOLeTmCnOFxWPTMzNHj79w/NjexfrXL6sHr3/82rPfnPjnvSeufvhTEifiYG1dYxx7ZSImaq/JUPoS3uXVva6sx5JeN4AHkh6aA5tHeRyKsRio5loY6WbLAIBOeTciNgCAPpM4/wNAn6l/DnBrfS1fT739RKK7brwSEfs3469f39xcM1i7Zre/eh109FZy15WRJCLG96D+iYj44ru3v0pTdOg6JEAzly5HxJnxie3jf7LtnoXdeq6NbSbuKRv/oHu+T+c/Lzab/2W25j/RZP4z3OTYfRD3P/4z1/agmpbS+d/LDfe23W6Iv2Z8oFZ6pDrnG0rOnisW0rHt0YiYjKHhtDy9Qx2TN/+92Wpd4/zvz0/e+TKtP328s0Xm2uDw3c+ZzVVyDxNzoxuXI54abBZ/stX/SYv576k263j9pQ8+b7UujT+Nt562x99ZG1cinmna/3fuaEt2vD9xqro7TNV3iia+/fWz0Vb1N/Z/mtL66+8FuiHt/9Gd4x9PGu/XLO++jp+vjP3Qat3942++/+9L3qrm99WWXcxVKkvTEfuSN7YvP3rnufVyffs0/smnmx//O+3/6XvCM23GP3j9968fPP7OSuOf3VX/7z5z9fb8QKv62+v/mWpusraknfGv3QY+zGsHAAAAAAAAAAAAAAAAAAAAAAAAAO3KRMTBSDLZrXwmk81u/ob34zGaKZbKlcNnS8uLs1H9rezxGMrUv+pyrOH7UKdr34dfLx+9p/x8RDwWEZ8Oj1TL2XypONvr4AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg5kCL3/9P/Tbc69YBAB2zv9cNAAC6zvkfAPrP7s7/Ix1rBwDQPd7/A0D/cf4HgP7j/A8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECHnTp5Mk0bf6+v5dPy7IWV5fnShSOzhfJ8dmE5n82Xls5n50qluWIhmy8ttPxHlzYfiqXS+ZlYXL44VSmUK1PlldXTC6Xlxcrpcwu5ucLpwlDXIgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9pVXVudzxWJhSUZGRmYr0zhKjPRugAIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4n/svAAD//9EyKso=")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000580)={'#! ', '', [], 0xa, "7870008225c3c6e6af20a86d4ee9405d7ee911c42a1d6809fb79efa14b19b31751add5316e2f5f96070fb48904e0e85e9019f44cc898647a212b32bc6cf845e8248e3df9c170f2b942"}, 0x4d)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x10012, r0, 0x0)
r1 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r1, 0x10d, 0xfd, 0x0, &(0x7f0000000000))

1.343417418s ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x4, &(0x7f0000000780)={[{@abort}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@nodiscard}, {@nogrpid}, {@norecovery}]}, 0x11, 0x46e, &(0x7f0000000300)="$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")

897.732651ms ago: executing program 4:
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x20)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000002540)=[{{0x0, 0x0, &(0x7f0000002800)=[{&(0x7f0000000240)="13", 0x1}], 0x1}}], 0x1, 0x0)

544.294818ms ago: executing program 3:
io_setup(0x401, &(0x7f00000004c0)=<r0=>0x0)
r1 = timerfd_create(0x0, 0x0)
io_submit(r0, 0x4, &(0x7f0000000240)=[&(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x58}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000840)="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", 0x1000, 0x5, 0x0, 0x2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000080)="e982ab1a", 0x4, 0x3f, 0x0, 0x2}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000100)="8d5deea6fee55c0e6cadc87aee0e7011ca6e4cf4c17c01c7a8c4508a7330886f33a7e25d082ead6f7ac99aa662b61987570a1171057bcb2888d411fd2a7c869847f830bc98437fffc84873e7d0e65c0cf7014748eb920ba5d50be661aa42b1f3b0229def38997ba0d41d835e54c48d409f68f35737d979ed8dbba9c1adf39482c65c71a761820277d3353104e000557663842307b0fad32da6daac31aec673e0c2524d537efac90fae0e1302765b0e39e908ec667e57bb05fe336e063a9270cc9465e4064dc3857cda0fa1941d39f57054c2", 0xd2, 0xffffffff, 0x0, 0x2}])
timer_create(0x0, &(0x7f0000000200), &(0x7f0000000040))
timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0)
timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=<r2=>0x0)
timer_settime(r2, 0x0, &(0x7f0000000940)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0)

56.027648ms ago: executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$packet(0x11, 0x0, 0x300)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'syz_tun\x00'})
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @empty, @local}, &(0x7f0000000280)=0xc)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000))
sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0xffe8)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000100), 0xfffffd9d)
sendfile(r0, r2, 0x0, 0x8000002b)

0s ago: executing program 0:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000002000000000000000001801000020786c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000550000000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000440)='tlb_flush\x00', r0}, 0x10)
socket$key(0xf, 0x3, 0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000a14000/0x3000)=nil, 0x3000)

kernel console output (not intermixed with test programs):

rt 6081 - 0
[ 1291.469209][T11515] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1291.478430][T11515] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1291.487550][T11515] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1292.100769][T11721] loop0: detected capacity change from 0 to 32768
[ 1292.133321][T11721] BTRFS: device /dev/loop0 (7:0) using temp-fsid cc2f4c19-4d9a-4b28-9aac-5119b70aa991
[ 1292.143678][T11721] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (11721)
[ 1292.186064][T11721] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1292.196657][T11721] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1292.207826][T11721] BTRFS info (device loop0): using free-space-tree
[ 1293.310005][T11330] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1293.595198][ T6267] hsr_slave_0: left promiscuous mode
[ 1293.656592][ T6267] hsr_slave_1: left promiscuous mode
[ 1293.670190][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1293.678108][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1293.702274][ T6267] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1293.710003][ T6267] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1294.046271][ T6267] veth1_macvtap: left promiscuous mode
[ 1294.053334][ T6267] veth0_macvtap: left promiscuous mode
[ 1294.059085][ T6267] veth1_vlan: left promiscuous mode
[ 1294.064665][ T6267] veth0_vlan: left promiscuous mode
[ 1294.181990][T11752] loop1: detected capacity change from 0 to 64
[ 1294.665419][ T6267] pimreg (unregistering): left allmulticast mode
[ 1294.761556][T11060] BTRFS info (device loop0): last unmount of filesystem cc2f4c19-4d9a-4b28-9aac-5119b70aa991
[ 1295.506328][ T6267] team0 (unregistering): Port device team_slave_1 removed
[ 1295.596685][ T6267] team0 (unregistering): Port device team_slave_0 removed
[ 1296.875804][T11592] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1297.204359][T11592] 8021q: adding VLAN 0 to HW filter on device team0
[ 1297.388812][ T5130] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1297.396683][ T5130] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1297.521082][ T5130] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1297.528917][ T5130] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1299.224279][T11777] loop1: detected capacity change from 0 to 40427
[ 1299.249895][T11777] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[ 1299.258029][T11777] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[ 1299.421518][T11777] F2FS-fs (loop1): Found nat_bits in checkpoint
[ 1299.770041][T11777] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[ 1299.778050][T11777] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[ 1301.328527][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1301.798332][T11592] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1302.258449][T11592] veth0_vlan: entered promiscuous mode
[ 1302.622380][T11592] veth1_vlan: entered promiscuous mode
[ 1303.224152][T11592] veth0_macvtap: entered promiscuous mode
[ 1303.400151][T11592] veth1_macvtap: entered promiscuous mode
[ 1303.602406][T11807] loop0: detected capacity change from 0 to 32768
[ 1303.632500][T11807] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (11807)
[ 1303.674205][T11807] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1303.684875][T11807] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1303.697015][T11807] BTRFS info (device loop0): using free-space-tree
[ 1303.781281][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1303.792239][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1303.802469][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1303.813245][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1303.823373][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1303.836395][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1303.847100][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1303.861520][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1303.878799][T11592] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1304.224722][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1304.237874][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1304.248621][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1304.259409][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1304.269693][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1304.280447][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1304.290630][T11592] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1304.301436][T11592] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1304.316802][T11592] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1304.504429][T11592] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.514610][T11592] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.523776][T11592] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1304.532928][T11592] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1306.929341][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1307.707374][ T5130] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1307.715613][ T5130] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1307.857699][ T6267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1307.866225][ T6267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1309.931605][T11861] loop0: detected capacity change from 0 to 32768
[ 1309.974400][T11861] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (11861)
[ 1310.188334][T11862] loop1: detected capacity change from 0 to 64
[ 1310.199967][T11861] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1310.211321][T11861] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1310.222097][T11861] BTRFS info (device loop0): using free-space-tree
[ 1312.133992][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1312.378399][T11888] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1314.385358][T11891] loop0: detected capacity change from 0 to 4096
[ 1314.494042][T11900] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1315.995082][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1317.431313][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1317.440063][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1317.564900][ T9319] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1317.573022][ T9319] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1318.099082][T11909] loop1: detected capacity change from 0 to 32768
[ 1318.126913][T11909] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (11909)
[ 1318.322162][T11909] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1318.332826][T11909] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[ 1318.344320][T11909] BTRFS info (device loop1): using free-space-tree
[ 1318.591879][ T5060] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 1319.066722][ T5060] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1319.076319][ T5060] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1319.553936][ T5060] usb 3-1: config 0 descriptor??
[ 1319.790511][ T5060] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1321.378436][ T5060] usb 3-1: USB disconnect, device number 19
[ 1322.568971][ T9683] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1323.026261][T11946] pimreg: entered allmulticast mode
[ 1323.644932][T11948] loop0: detected capacity change from 0 to 32768
[ 1323.667210][T11946] loop2: detected capacity change from 0 to 64
[ 1323.732838][T11948] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (11948)
[ 1323.848698][T11948] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1323.859212][T11948] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1323.869766][T11948] BTRFS info (device loop0): using free-space-tree
[ 1324.163382][T11950] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1325.952791][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1326.076265][T11975] loop3: detected capacity change from 0 to 40427
[ 1326.094732][T11975] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[ 1326.102835][T11975] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[ 1326.176725][T11975] F2FS-fs (loop3): Found nat_bits in checkpoint
[ 1326.483366][T11975] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[ 1326.490716][T11975] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[ 1326.519270][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1327.068721][ T9680] Bluetooth: hci5: command 0x0406 tx timeout
[ 1330.174046][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[ 1330.180724][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[ 1334.377406][T12006] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1334.983125][ T9335] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1335.003321][ T9335] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1335.013707][ T9335] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1335.053678][ T9335] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1335.076782][ T9335] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 1335.096929][ T9335] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1335.268495][ T5130] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[ 1335.603205][T12017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1335.714778][ T5130] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1335.725149][ T5130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1335.912337][ T5130] usb 2-1: config 0 descriptor??
[ 1336.030525][ T5130] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1336.110517][T12016] loop3: detected capacity change from 0 to 32768
[ 1336.137648][T12016] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (12016)
[ 1336.161129][T12016] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1336.172137][T12016] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[ 1336.183570][T12016] BTRFS info (device loop3): using free-space-tree
[ 1336.676420][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1337.229692][ T9335] Bluetooth: hci0: command tx timeout
[ 1337.665141][ T5130] usb 2-1: USB disconnect, device number 14
[ 1338.149257][T12011] chnl_net:caif_netlink_parms(): no params data found
[ 1338.635884][T11592] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1339.321929][ T9335] Bluetooth: hci0: command tx timeout
[ 1340.018934][T12011] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1340.026824][T12011] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1340.034703][T12011] bridge_slave_0: entered allmulticast mode
[ 1340.049358][T12011] bridge_slave_0: entered promiscuous mode
[ 1340.175786][T12011] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1340.192540][T12011] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1340.200352][T12011] bridge_slave_1: entered allmulticast mode
[ 1340.209520][T12011] bridge_slave_1: entered promiscuous mode
[ 1340.927649][T12011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1341.053278][T12011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1341.403961][ T9335] Bluetooth: hci0: command tx timeout
[ 1341.728916][T12068] loop1: detected capacity change from 0 to 32768
[ 1341.799875][T12068] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12068)
[ 1341.830242][T12011] team0: Port device team_slave_0 added
[ 1341.878609][T12068] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1341.889342][T12068] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[ 1341.900667][T12068] BTRFS info (device loop1): using free-space-tree
[ 1341.907122][T12011] team0: Port device team_slave_1 added
[ 1342.260942][T12011] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1342.268814][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1342.295299][T12011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1342.492178][T12011] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1342.499390][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1342.526067][T12011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1342.997379][T12087] loop2: detected capacity change from 0 to 512
[ 1343.528539][ T9335] Bluetooth: hci0: command tx timeout
[ 1343.533202][T12087] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature
[ 1343.732438][T12087] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[ 1344.004295][T12087] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1344.155154][T12011] hsr_slave_0: entered promiscuous mode
[ 1344.523976][T12011] hsr_slave_1: entered promiscuous mode
[ 1344.762327][T12011] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1344.770229][T12011] Cannot create hsr debugfs directory
[ 1345.236296][T12098] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1345.372276][T12101] netlink: 'syz-executor.2': attribute type 30 has an invalid length.
[ 1346.501052][ T9683] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1346.570410][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1346.587391][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1347.103817][T12011] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.313271][T12011] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.564168][T12011] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.808147][T12011] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1347.871550][T11515] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1348.423706][ T9329] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[ 1348.525099][T12011] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1348.605881][T12011] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1348.708306][T12011] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1348.773877][T12011] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1348.863419][ T9329] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[ 1348.873039][ T9329] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1348.947354][ T9329] usb 4-1: config 0 descriptor??
[ 1349.021455][ T9329] gspca_main: STV06xx-2.14.0 probing 046d:0870
[ 1350.191545][T12128] loop1: detected capacity change from 0 to 32768
[ 1350.253471][T12128] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12128)
[ 1350.906035][T12131] loop0: detected capacity change from 0 to 40427
[ 1350.925011][T12131] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[ 1350.941218][T12131] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[ 1350.969278][ T9329] usb 4-1: USB disconnect, device number 17
[ 1350.990726][T12128] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1351.001233][T12128] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[ 1351.012490][T12128] BTRFS info (device loop1): using free-space-tree
[ 1351.095663][T12131] F2FS-fs (loop0): Found nat_bits in checkpoint
[ 1351.336687][T12011] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1351.455793][T12131] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[ 1351.464584][T12131] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[ 1351.516739][T12011] 8021q: adding VLAN 0 to HW filter on device team0
[ 1352.026937][ T5060] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1352.034928][ T5060] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1352.640021][ T5060] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1352.647845][ T5060] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1353.983305][ T9683] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1355.628734][T12175] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1356.953496][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1357.043581][T12011] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1357.175101][ T3169] bridge_slave_1: left allmulticast mode
[ 1357.189572][ T3169] bridge_slave_1: left promiscuous mode
[ 1357.196421][ T3169] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1357.290092][ T3169] bridge_slave_0: left allmulticast mode
[ 1357.296231][ T3169] bridge_slave_0: left promiscuous mode
[ 1357.302974][ T3169] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1358.180008][ T3169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1358.314739][ T3169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1358.366874][ T3169] bond0 (unregistering): Released all slaves
[ 1359.060063][T12196] loop0: detected capacity change from 0 to 512
[ 1359.399050][ T3169] hsr_slave_0: left promiscuous mode
[ 1359.446299][ T3169] hsr_slave_1: left promiscuous mode
[ 1359.446278][T12196] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1359.446730][T12196] ext4 filesystem being mounted at /root/syzkaller-testdir69124125/syzkaller.802sMv/38/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1359.526128][ T3169] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1359.542779][ T3169] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1359.564487][ T3169] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1359.572317][ T3169] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1359.592312][T12196] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[ 1359.702438][ T3169] veth1_macvtap: left promiscuous mode
[ 1359.708217][ T3169] veth0_macvtap: left promiscuous mode
[ 1359.714295][ T3169] veth1_vlan: left promiscuous mode
[ 1359.719844][ T3169] veth0_vlan: left promiscuous mode
[ 1360.445145][T12202] loop1: detected capacity change from 0 to 32768
[ 1360.591987][T12202] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12202)
[ 1360.804199][T11060] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1360.834224][T12206] loop3: detected capacity change from 0 to 512
[ 1361.030649][T12206] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature
[ 1361.203261][T12206] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117)
[ 1361.246587][T12207] loop2: detected capacity change from 0 to 40427
[ 1361.260025][T12207] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[ 1361.268131][T12207] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1361.319297][T12206] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1361.326563][T12202] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1361.344226][T12202] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[ 1361.355710][T12202] BTRFS info (device loop1): using free-space-tree
[ 1361.408369][T12207] F2FS-fs (loop2): Found nat_bits in checkpoint
[ 1361.691041][ T3169] team0 (unregistering): Port device team_slave_1 removed
[ 1361.782546][T12207] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1361.791991][T12207] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1361.847229][ T3169] team0 (unregistering): Port device team_slave_0 removed
[ 1362.629915][T12228] netlink: 'syz-executor.3': attribute type 30 has an invalid length.
[ 1364.807106][ T9683] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1365.516274][T12011] veth0_vlan: entered promiscuous mode
[ 1365.610329][T12011] veth1_vlan: entered promiscuous mode
[ 1365.738679][T11592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1366.090490][T12011] veth0_macvtap: entered promiscuous mode
[ 1366.218503][T12011] veth1_macvtap: entered promiscuous mode
[ 1366.387378][T12246] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1366.488619][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1366.501459][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1366.513876][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1366.524972][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1366.535232][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1366.546061][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1366.556250][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1366.566963][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1366.589462][T12011] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1366.988761][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1366.999742][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.023299][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1367.034660][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.045037][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1367.060607][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.071416][T12011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1367.082480][T12011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1367.099234][T12011] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1367.385725][T12011] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1367.395242][T12011] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1367.404545][T12011] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1367.413720][T12011] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1367.799299][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1369.434987][T12277] loop1: detected capacity change from 0 to 512
[ 1369.675883][T12277] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #15: comm syz-executor.1: casefold flag without casefold feature
[ 1369.803541][T12277] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[ 1369.952071][T12277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1370.564127][T12295] netlink: 'syz-executor.1': attribute type 30 has an invalid length.
[ 1371.494637][T12296] loop2: detected capacity change from 0 to 32768
[ 1371.522180][T12296] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12296)
[ 1371.555845][ T9683] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1371.680169][T12296] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1371.691226][T12296] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[ 1371.702772][T12296] BTRFS info (device loop2): using free-space-tree
[ 1374.966177][T12331] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1375.016899][T11515] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1375.345351][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1375.646648][   T29] audit: type=1326 audit(1717820801.009:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12339 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x0
[ 1377.179710][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1377.187943][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1377.520027][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1377.530823][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1378.474736][T12361] loop1: detected capacity change from 0 to 256
[ 1378.616856][T12365] loop3: detected capacity change from 0 to 512
[ 1378.707211][T12363] pimreg: entered allmulticast mode
[ 1378.863807][T12365] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #15: comm syz-executor.3: casefold flag without casefold feature
[ 1378.921250][T12365] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 15 (err -117)
[ 1378.938462][T12363] loop4: detected capacity change from 0 to 64
[ 1379.029507][T12365] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1379.444930][T12376] netlink: 'syz-executor.3': attribute type 30 has an invalid length.
[ 1380.807377][T12385] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1381.009824][T12383] loop1: detected capacity change from 0 to 32768
[ 1381.029576][T12383] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12383)
[ 1381.324996][T12383] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1381.325268][T12383] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[ 1381.327709][T12383] BTRFS info (device loop1): using free-space-tree
[ 1382.756087][T12405] loop4: detected capacity change from 0 to 8
[ 1382.813862][ T9683] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1383.097573][T11592] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1383.372636][ T9680] Bluetooth: hci4: command 0x0406 tx timeout
[ 1383.642312][   T29] audit: type=1326 audit(1717820809.019:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12406 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08f07cf69 code=0x0
[ 1383.664953][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1383.785671][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1385.820925][T12428] loop1: detected capacity change from 0 to 256
[ 1386.115025][T12434] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1386.344885][T12436] pimreg: entered allmulticast mode
[ 1386.428974][T12436] loop3: detected capacity change from 0 to 64
[ 1387.347727][T12442] loop0: detected capacity change from 0 to 32768
[ 1387.406791][T12442] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12442)
[ 1387.542563][T12442] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1387.553171][T12442] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1387.564027][T12442] BTRFS info (device loop0): using free-space-tree
[ 1387.777003][T12446] loop4: detected capacity change from 0 to 512
[ 1388.169064][T12446] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #15: comm syz-executor.4: casefold flag without casefold feature
[ 1388.183419][T12446] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 15 (err -117)
[ 1388.323966][T12446] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1389.385995][T12472] netlink: 'syz-executor.4': attribute type 30 has an invalid length.
[ 1390.260361][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1390.476124][T12473] loop3: detected capacity change from 0 to 8
[ 1391.273601][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1391.549051][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[ 1391.556385][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[ 1391.667475][   T29] audit: type=1326 audit(1717820816.999:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12478 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08f07cf69 code=0x0
[ 1392.844580][T12011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1394.028640][T12495] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1394.332515][ T9336] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 1394.405405][T12500] loop4: detected capacity change from 0 to 256
[ 1394.792170][ T9336] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1394.803585][ T9336] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1394.813239][ T9336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1394.951292][ T9336] usb 3-1: config 0 descriptor??
[ 1395.017213][T12507] loop1: detected capacity change from 0 to 64
[ 1395.042885][T12509] can0: slcan on ptm1.
[ 1395.809924][T12511] loop3: detected capacity change from 0 to 32768
[ 1395.847863][ T9336] keytouch 0003:0926:3333.0008: fixing up Keytouch IEC report descriptor
[ 1395.918791][T12511] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (12511)
[ 1395.983055][ T9336] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0008/input/input5
[ 1396.025496][T12511] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1396.036246][T12511] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[ 1396.047081][T12511] BTRFS info (device loop3): using free-space-tree
[ 1396.151218][T12501] can0 (unregistered): slcan off ptm1.
[ 1396.189564][ T9336] keytouch 0003:0926:3333.0008: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[ 1397.312146][ T5060] usb 3-1: USB disconnect, device number 20
[ 1398.262444][T12539] loop0: detected capacity change from 0 to 8
[ 1398.398028][T11592] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1398.732544][ T9680] Bluetooth: hci3: command 0x0406 tx timeout
[ 1398.763257][T12543] loop2: detected capacity change from 0 to 512
[ 1399.004659][T12543] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #15: comm syz-executor.2: casefold flag without casefold feature
[ 1399.090121][T12543] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 15 (err -117)
[ 1399.186400][T12543] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1399.604392][   T29] audit: type=1326 audit(1717820824.919:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12546 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3327cf69 code=0x0
[ 1399.643050][T12551] netlink: 'syz-executor.2': attribute type 30 has an invalid length.
[ 1402.060409][T12564] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1402.633865][T11515] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1402.890043][T12569] loop4: detected capacity change from 0 to 8
[ 1403.093424][T12572] loop1: detected capacity change from 0 to 64
[ 1403.393535][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1404.242353][T12579] loop0: detected capacity change from 0 to 32768
[ 1404.275604][T12579] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12579)
[ 1404.422472][T12581] can0: slcan on ptm0.
[ 1404.545890][T12579] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1404.556705][T12579] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1404.568218][T12579] BTRFS info (device loop0): using free-space-tree
[ 1404.941839][ T6196] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1405.007358][   T29] audit: type=1326 audit(1717820830.369:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12601 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3327cf69 code=0x0
[ 1405.029851][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1405.059270][T12575] can0 (unregistered): slcan off ptm0.
[ 1406.360707][ T6196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1406.372298][ T6196] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1406.383018][ T6196] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1406.410444][ T6196] usb 5-1: config 0 descriptor??
[ 1407.202838][ T6196] keytouch 0003:0926:3333.0009: fixing up Keytouch IEC report descriptor
[ 1407.259716][ T6196] input: HID 0926:3333 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0926:3333.0009/input/input6
[ 1407.528985][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1407.618791][ T6196] keytouch 0003:0926:3333.0009: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.4-1/input0
[ 1407.675496][T12609] loop1: detected capacity change from 0 to 8
[ 1408.120258][ T6196] usb 5-1: USB disconnect, device number 13
[ 1410.247436][T12626] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1410.446214][ T5130] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[ 1410.892535][ T5130] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1410.903842][ T5130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1410.915160][ T5130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1410.925266][ T5130] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1411.106487][ T5130] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1411.140050][ T5130] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1411.154774][ T5130] usb 2-1: Manufacturer: syz
[ 1411.219067][ T5130] usb 2-1: config 0 descriptor??
[ 1411.834111][T12642] loop4: detected capacity change from 0 to 8
[ 1411.933189][T12646] loop2: detected capacity change from 0 to 64
[ 1412.179447][T12630] tap0: tun_chr_ioctl cmd 1074025672
[ 1412.185616][T12630] tap0: ignored: set checksum disabled
[ 1412.346340][T12648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1412.357389][T12648] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1412.461373][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1412.565339][T12630] overlayfs: failed to resolve './file0': -2
[ 1413.519396][   T29] audit: type=1326 audit(1717820838.839:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12656 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1413.965642][ T5130] usbhid 2-1:0.0: can't add hid device: -71
[ 1413.972616][ T5130] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 1414.537760][ T5130] usb 2-1: USB disconnect, device number 15
[ 1414.607547][T12661] loop4: detected capacity change from 0 to 8
[ 1415.493864][T12664] loop0: detected capacity change from 0 to 32768
[ 1415.558336][T12664] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12664)
[ 1415.656073][T12664] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1415.666752][T12664] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1415.678096][T12664] BTRFS info (device loop0): using free-space-tree
[ 1417.665663][T12667] loop1: detected capacity change from 0 to 4096
[ 1418.121484][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1418.453859][T12693] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1418.483046][T12667] ntfs3: loop1: Failed to read $AttrDef (-4).
[ 1419.787384][T12711] loop3: detected capacity change from 0 to 64
[ 1420.346930][T12712] loop4: detected capacity change from 0 to 8
[ 1421.396299][ T5130] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 1421.616710][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1421.857197][ T5130] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1421.869250][ T5130] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1421.892924][ T5130] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1422.004999][ T5130] usb 3-1: config 0 descriptor??
[ 1422.163098][   T29] audit: type=1326 audit(1717820847.519:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12726 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x0
[ 1422.277360][ T6196] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1422.550191][ T5130] keytouch 0003:0926:3333.000A: fixing up Keytouch IEC report descriptor
[ 1422.979762][ T5130] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.000A/input/input7
[ 1423.205767][ T5130] keytouch 0003:0926:3333.000A: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[ 1423.262583][ T6196] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1423.273802][ T6196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1423.285146][ T6196] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1423.297029][ T6196] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1423.473167][ T6196] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1423.483723][ T6196] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1423.492256][ T6196] usb 5-1: Manufacturer: syz
[ 1423.543686][ T6196] usb 5-1: config 0 descriptor??
[ 1423.772348][ T9670] usb 3-1: USB disconnect, device number 21
[ 1424.310634][T12724] tap0: tun_chr_ioctl cmd 1074025672
[ 1424.316887][T12724] tap0: ignored: set checksum disabled
[ 1424.458414][T12724] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1424.469086][T12724] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1424.660124][T12724] overlayfs: failed to resolve './file0': -2
[ 1425.157207][T12739] loop0: detected capacity change from 0 to 32768
[ 1425.184705][T12739] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12739)
[ 1425.261144][T12739] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1425.281809][T12739] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1425.295587][T12739] BTRFS info (device loop0): using free-space-tree
[ 1425.883254][ T6196] usbhid 5-1:0.0: can't add hid device: -71
[ 1425.892592][ T6196] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[ 1425.937620][ T6196] usb 5-1: USB disconnect, device number 14
[ 1426.413478][T12741] loop2: detected capacity change from 0 to 4096
[ 1426.549255][T12759] random: crng reseeded on system resumption
[ 1426.908755][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1427.242185][T12763] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1437.584827][T12772] loop4: detected capacity change from 0 to 8
[ 1438.169292][   T29] audit: type=1326 audit(1717820863.459:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12775 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x0
[ 1439.912736][ T9336] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[ 1440.362761][ T9336] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1440.374081][ T9336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1440.385462][ T9336] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1440.395807][ T9336] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1440.526998][T12793] loop2: detected capacity change from 0 to 32768
[ 1440.627302][T12793] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12793)
[ 1440.633204][ T9336] usb 1-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1440.651979][ T9336] usb 1-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1440.660375][ T9336] usb 1-1: Manufacturer: syz
[ 1440.758731][ T9336] usb 1-1: config 0 descriptor??
[ 1440.767184][T12793] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1440.777931][T12793] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[ 1440.789247][T12793] BTRFS info (device loop2): using free-space-tree
[ 1441.693737][T12790] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1441.703971][T12790] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1441.775628][T12816] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1441.907578][T12790] overlayfs: failed to resolve './file0': -2
[ 1443.172712][ T9336] usbhid 1-1:0.0: can't add hid device: -71
[ 1443.179412][ T9336] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 1443.244550][T11515] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1443.283126][ T9336] usb 1-1: USB disconnect, device number 7
[ 1443.730668][T12824] loop4: detected capacity change from 0 to 4096
[ 1444.212345][T12827] random: crng reseeded on system resumption
[ 1444.433737][   T29] audit: type=1326 audit(1717820869.639:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12828 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4b3327cf69 code=0x0
[ 1445.510329][T12833] loop2: detected capacity change from 0 to 64
[ 1446.620854][T12841] loop1: detected capacity change from 0 to 8
[ 1448.940454][T12854] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1449.507273][T12857] loop0: detected capacity change from 0 to 32768
[ 1449.522274][T12857] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (12857)
[ 1450.180147][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1450.373757][T12864] loop2: detected capacity change from 0 to 32768
[ 1450.424304][T12857] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1450.434952][T12857] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1450.446453][T12857] BTRFS info (device loop0): using free-space-tree
[ 1450.449206][T12864] BTRFS: device /dev/loop2 (7:2) using temp-fsid 16c9e104-d156-4f09-ad0e-d4bea00653cf
[ 1450.471398][T12864] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (12864)
[ 1450.544552][T12864] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1450.555255][T12864] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[ 1450.574949][T12864] BTRFS info (device loop2): using free-space-tree
[ 1453.006129][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[ 1453.012977][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[ 1453.272277][   T29] audit: type=1326 audit(1717820878.559:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12905 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x0
[ 1453.438387][T11515] BTRFS info (device loop2): last unmount of filesystem 16c9e104-d156-4f09-ad0e-d4bea00653cf
[ 1453.462584][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1454.383393][T12913] random: crng reseeded on system resumption
[ 1457.241052][   T29] audit: type=1800 audit(1717820882.089:57): pid=12922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1948 res=0 errno=0
[ 1458.581871][T12934] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1458.805004][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1458.900319][T12931] loop0: detected capacity change from 0 to 4096
[ 1460.139889][T12947] loop4: detected capacity change from 0 to 32768
[ 1460.172182][T12932] Bluetooth: hci0: command 0x0406 tx timeout
[ 1460.178757][T12947] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (12947)
[ 1460.232241][T12947] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1460.242861][T12947] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[ 1460.256623][T12947] BTRFS info (device loop4): using free-space-tree
[ 1461.098161][T12954] loop1: detected capacity change from 0 to 32768
[ 1461.125864][T12954] BTRFS: device /dev/loop1 (7:1) using temp-fsid ee7ccfff-81ef-4ccf-94eb-5985e87a8036
[ 1461.135830][T12954] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12954)
[ 1461.353916][T12954] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1461.364668][T12954] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[ 1461.376196][T12954] BTRFS info (device loop1): using free-space-tree
[ 1462.800124][   T29] audit: type=1326 audit(1717820888.069:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12983 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe08f07cf69 code=0x0
[ 1464.630358][T12011] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1466.514372][   T29] audit: type=1326 audit(1717820891.819:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13002 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1469.872330][ T9683] BTRFS info (device loop1): last unmount of filesystem ee7ccfff-81ef-4ccf-94eb-5985e87a8036
[ 1470.677273][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1472.745811][T13026] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1473.259033][   T29] audit: type=1800 audit(1717820898.329:60): pid=13020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="file2" dev="sda1" ino=1942 res=0 errno=0
[ 1473.712148][T13031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1474.002602][   T29] audit: type=1800 audit(1717820899.329:61): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1961 res=0 errno=0
[ 1474.549244][T13033] loop3: detected capacity change from 0 to 32768
[ 1474.608668][T13033] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13033)
[ 1474.642890][T13033] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1474.654075][T13033] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[ 1474.664818][T13033] BTRFS info (device loop3): using free-space-tree
[ 1475.055061][T13029] loop4: detected capacity change from 0 to 4096
[ 1475.102297][   T29] audit: type=1326 audit(1717820900.439:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13035 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1477.419819][T11592] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1477.802709][   T29] audit: type=1326 audit(1717820903.199:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13063 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ab6a7cf69 code=0x0
[ 1484.616361][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1484.655094][T13085] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1484.733264][T13092] 9pnet_fd: Insufficient options for proto=fd
[ 1485.198135][   T29] audit: type=1326 audit(1717820910.479:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13095 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1486.246162][T13104] loop3: detected capacity change from 0 to 32768
[ 1486.291182][T13104] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13104)
[ 1486.321718][T13104] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1486.333000][T13104] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[ 1486.343642][T13104] BTRFS info (device loop3): using free-space-tree
[ 1488.615793][T13104] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1488.616828][T13104] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1489.001209][T13104] BTRFS error (device loop3): open_ctree failed
[ 1489.002774][   T29] audit: type=1800 audit(1717820913.779:65): pid=13106 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file2" dev="sda1" ino=1939 res=0 errno=0
[ 1489.332389][   T29] audit: type=1326 audit(1717820914.689:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13126 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1493.048606][T13143] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1493.557987][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1493.685264][T13145] loop1: detected capacity change from 0 to 8
[ 1493.962620][T13150] 9pnet_fd: Insufficient options for proto=fd
[ 1493.962660][T12932] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1494.014628][T12932] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1494.032843][T12932] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1494.061051][T12932] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1494.141987][T12932] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[ 1494.178010][T12932] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1494.515086][   T29] audit: type=1326 audit(1717820919.759:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13153 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ab6a7cf69 code=0x0
[ 1496.256679][ T9335] Bluetooth: hci1: command tx timeout
[ 1496.379796][T13164] loop0: detected capacity change from 0 to 2048
[ 1496.486978][ T6031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1496.709829][ T6031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1497.324262][T13173] loop2: detected capacity change from 0 to 32768
[ 1497.343050][T13164] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1497.869033][T13173] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (13173)
[ 1497.934383][T13173] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1497.944961][T13173] BTRFS info (device loop2): using sha256 (sha256-generic) checksum algorithm
[ 1497.956390][T13173] BTRFS info (device loop2): using free-space-tree
[ 1498.122231][ T6031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1498.367642][ T9335] Bluetooth: hci1: command tx timeout
[ 1498.425129][   T29] audit: type=1800 audit(1717820923.609:68): pid=13167 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file2" dev="sda1" ino=1959 res=0 errno=0
[ 1498.595330][ T6031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1498.720091][T13151] chnl_net:caif_netlink_parms(): no params data found
[ 1500.192247][ T6031] bridge_slave_1: left allmulticast mode
[ 1500.198163][ T6031] bridge_slave_1: left promiscuous mode
[ 1500.212219][ T6031] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1500.315556][ T6031] bridge_slave_0: left allmulticast mode
[ 1500.321452][ T6031] bridge_slave_0: left promiscuous mode
[ 1500.328300][ T6031] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1500.412233][ T9335] Bluetooth: hci1: command tx timeout
[ 1500.516673][T11060] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1501.288407][ T6031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1501.406998][T11515] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1501.593804][ T6031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1501.817120][ T6031] bond0 (unregistering): Released all slaves
[ 1502.359067][T13205] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1502.512202][ T9335] Bluetooth: hci1: command tx timeout
[ 1503.316875][T13208] loop0: detected capacity change from 0 to 4096
[ 1503.393075][T13208] ntfs3: loop0: Different NTFS sector size (4096) and media sector size (512).
[ 1503.412383][ T6031] hsr_slave_0: left promiscuous mode
[ 1503.417783][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1503.503930][ T6031] hsr_slave_1: left promiscuous mode
[ 1503.563810][T13216] 9pnet_fd: Insufficient options for proto=fd
[ 1503.583689][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1503.591371][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1503.681355][ T6031] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1503.689755][ T6031] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1503.852450][ T6031] veth1_macvtap: left promiscuous mode
[ 1503.858224][ T6031] veth0_macvtap: left promiscuous mode
[ 1503.864498][ T6031] veth1_vlan: left promiscuous mode
[ 1503.870107][ T6031] veth0_vlan: left promiscuous mode
[ 1503.872657][T13208] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[ 1504.233005][   T29] audit: type=1326 audit(1717820929.559:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13219 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x0
[ 1504.544195][ T6031] pimreg (unregistering): left allmulticast mode
[ 1505.675026][ T6031] team0 (unregistering): Port device team_slave_1 removed
[ 1505.756644][ T6031] team0 (unregistering): Port device team_slave_0 removed
[ 1506.312074][T13228] loop0: detected capacity change from 0 to 8
[ 1506.563020][T13151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1506.570821][T13151] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1506.586896][T13151] bridge_slave_0: entered allmulticast mode
[ 1506.596065][T13151] bridge_slave_0: entered promiscuous mode
[ 1506.747401][T13151] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1506.755446][T13151] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1506.763923][T13151] bridge_slave_1: entered allmulticast mode
[ 1506.773092][T13151] bridge_slave_1: entered promiscuous mode
[ 1507.165839][T13151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1507.264507][T13151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1507.824394][T13151] team0: Port device team_slave_0 added
[ 1508.050563][T13151] team0: Port device team_slave_1 added
[ 1508.466209][T13151] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1508.475139][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1508.503068][T13151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1508.670352][T13249] loop0: detected capacity change from 0 to 32768
[ 1508.689062][T13249] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13249)
[ 1508.744146][T13151] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1508.751312][T13151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1508.777791][T13151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1508.790237][T13249] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1508.800903][T13249] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1508.812643][T13249] BTRFS info (device loop0): using free-space-tree
[ 1508.914550][ T5130] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[ 1509.155079][T13151] hsr_slave_0: entered promiscuous mode
[ 1509.191020][T13151] hsr_slave_1: entered promiscuous mode
[ 1509.207382][T13151] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1509.215680][T13151] Cannot create hsr debugfs directory
[ 1509.329170][ T5130] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1509.340583][ T5130] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 1509.354541][ T5130] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1509.452936][ T5130] usb 2-1: config 0 descriptor??
[ 1509.529027][T13273] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1509.615101][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1509.987182][ T5130] keytouch 0003:0926:3333.000B: fixing up Keytouch IEC report descriptor
[ 1510.115230][ T5130] input: HID 0926:3333 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0926:3333.000B/input/input8
[ 1510.398803][ T5130] keytouch 0003:0926:3333.000B: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.1-1/input0
[ 1510.898058][ T5130] usb 2-1: USB disconnect, device number 16
[ 1511.356207][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1511.673563][T13289] 9pnet_fd: Insufficient options for proto=fd
[ 1512.122805][T13151] netdevsim netdevsim3 netdevsim0: renamed from eth0
[ 1512.201955][T13151] netdevsim netdevsim3 netdevsim1: renamed from eth1
[ 1512.405537][T13151] netdevsim netdevsim3 netdevsim2: renamed from eth2
[ 1512.483655][   T29] audit: type=1326 audit(1717820937.809:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13292 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ab6a7cf69 code=0x0
[ 1512.543608][T13151] netdevsim netdevsim3 netdevsim3: renamed from eth3
[ 1513.517976][T13300] loop2: detected capacity change from 0 to 8
[ 1514.456575][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[ 1514.465350][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[ 1514.995768][T13151] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1515.460463][T13151] 8021q: adding VLAN 0 to HW filter on device team0
[ 1515.561741][T13313] loop1: detected capacity change from 0 to 32768
[ 1515.575555][T13313] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (13313)
[ 1515.612385][ T6196] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1515.620154][ T6196] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1515.652896][ T6196] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1515.660626][ T6196] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1515.739665][T13313] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1515.750356][T13313] BTRFS info (device loop1): using sha256 (sha256-generic) checksum algorithm
[ 1515.763623][T13313] BTRFS info (device loop1): using free-space-tree
[ 1516.583796][ T9683] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1517.577233][T13345] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT
[ 1518.533155][T13151] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1519.299484][T13151] veth0_vlan: entered promiscuous mode
[ 1519.358838][T13151] veth1_vlan: entered promiscuous mode
[ 1519.404292][T13353] syz-executor.1 (13353): drop_caches: 2
[ 1519.590552][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1519.698776][T13358] 9pnet_fd: Insufficient options for proto=fd
[ 1519.754224][T13151] veth0_macvtap: entered promiscuous mode
[ 1519.829150][T13151] veth1_macvtap: entered promiscuous mode
[ 1520.067993][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1520.078933][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.089374][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1520.102614][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.113890][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1520.135274][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.145593][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1520.156364][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.171223][T13151] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1520.415211][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1520.429272][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.439462][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1520.450233][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.460348][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1520.471110][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.481332][T13151] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1520.484682][   T29] audit: type=1326 audit(1717820945.789:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13359 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x0
[ 1520.494350][T13151] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1520.533031][T13151] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1521.379113][T13151] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.388604][T13151] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.397745][T13151] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1521.406969][T13151] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1522.820856][T13373] loop4: detected capacity change from 0 to 32768
[ 1522.844759][T13373] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13373)
[ 1522.909286][T13373] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1522.919942][T13373] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[ 1522.931465][T13373] BTRFS info (device loop4): using free-space-tree
[ 1523.828318][T12011] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1525.510052][T13408] syz-executor.2 (13408): drop_caches: 2
[ 1525.827969][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1525.956762][T13418] 9pnet_fd: Insufficient options for proto=fd
[ 1526.257967][   T29] audit: type=1326 audit(1717820951.609:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13419 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1529.257192][T13439] loop4: detected capacity change from 0 to 32768
[ 1529.275513][T13439] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13439)
[ 1529.426849][T13439] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1529.437570][T13439] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[ 1529.449335][T13439] BTRFS info (device loop4): using free-space-tree
[ 1530.003491][ T8997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1530.012455][ T8997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1530.190624][T12011] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1530.292454][ T3169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1530.300615][ T3169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1531.682054][T13471] loop3: detected capacity change from 0 to 32768
[ 1531.721372][T13471] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13471)
[ 1531.761320][T13471] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1531.778862][T13471] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[ 1531.790423][T13471] BTRFS info (device loop3): using free-space-tree
[ 1533.067226][   T29] audit: type=1326 audit(1717820958.389:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13495 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1533.785116][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[ 1533.927164][T13501] 9pnet_fd: Insufficient options for proto=fd
[ 1533.953403][T13478] syz-executor.4 (13478): drop_caches: 2
[ 1534.060772][T13151] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1535.721237][T13511] loop0: detected capacity change from 0 to 32768
[ 1535.737681][T13511] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (13511)
[ 1535.900395][T13511] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1535.911144][T13511] BTRFS info (device loop0): using sha256 (sha256-generic) checksum algorithm
[ 1535.922919][T13511] BTRFS info (device loop0): using free-space-tree
[ 1536.323615][T13514] loop2: detected capacity change from 0 to 8
[ 1536.913917][T11060] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1539.265581][   T29] audit: type=1326 audit(1717820964.619:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13553 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1541.250172][T13566] loop3: detected capacity change from 0 to 32768
[ 1541.295097][T13566] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13566)
[ 1541.447892][T13566] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1541.458637][T13566] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[ 1541.470194][T13566] BTRFS info (device loop3): using free-space-tree
[ 1542.404547][T13151] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1543.703735][   T29] audit: type=1326 audit(1717820969.029:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13603 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1546.231849][T13628] loop4: detected capacity change from 0 to 32768
[ 1546.267326][T13628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (13628)
[ 1546.331834][T13628] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1546.342388][T13628] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[ 1546.353657][T13628] BTRFS info (device loop4): using free-space-tree
[ 1547.379090][T12011] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1548.906135][   T29] audit: type=1326 audit(1717820974.239:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13662 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f147447cf69 code=0x0
[ 1552.575090][T13682] loop3: detected capacity change from 0 to 32768
[ 1552.592868][T13682] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (13682)
[ 1552.633662][T13682] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1552.644202][T13682] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[ 1552.655557][T13682] BTRFS info (device loop3): using free-space-tree
[ 1553.447752][T13151] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1554.993492][   T29] audit: type=1326 audit(1717820980.339:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13713 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ab6a7cf69 code=0x0
[ 1556.072473][T13717] loop0: detected capacity change from 0 to 128
[ 1556.231754][T13717] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (39871!=39978)
[ 1556.384853][T13717] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none.
[ 1556.555152][T13717] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D.
[ 1556.571487][T13717] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0
[ 1556.841356][T13726] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D.
[ 1556.862209][T13726] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0
[ 1556.975613][T13717] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:405: inode #2: comm syz-executor.0: No space for directory leaf checksum. Please run e2fsck -D.
[ 1556.991847][T13717] EXT4-fs error (device loop0): __ext4_find_entry:1695: inode #2: comm syz-executor.0: checksumming directory block 0
[ 1557.503483][T11060] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1559.276326][ T5128] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[ 1559.592183][T13744] random: crng reseeded on system resumption
[ 1559.802407][ T5128] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 64, changing to 10
[ 1559.814982][ T5128] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1559.829155][ T5128] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1559.839239][ T5128] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1559.903341][T13741] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[ 1560.758495][T13750] loop1: detected capacity change from 0 to 128
[ 1560.771176][T13750] zonefs (loop1) ERROR: Not a zoned block device
[ 1562.295904][  T780] usb 2-1: USB disconnect, device number 17
[ 1564.160320][T13759] loop4: detected capacity change from 0 to 4096
[ 1568.471073][T13773] loop4: detected capacity change from 0 to 1024
[ 1568.972695][T13773] hfsplus: failed to load root directory
[ 1570.335702][ T9335] Bluetooth: hci0: command 0x0406 tx timeout
[ 1571.001991][  T780] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[ 1571.281860][  T780] usb 5-1: Using ep0 maxpacket: 8
[ 1571.422379][  T780] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1571.672799][  T780] usb 5-1: New USB device found, idVendor=8086, idProduct=0b03, bcdDevice=f4.28
[ 1571.682122][  T780] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1571.690283][  T780] usb 5-1: Product: syz
[ 1571.694692][  T780] usb 5-1: Manufacturer: syz
[ 1571.699420][  T780] usb 5-1: SerialNumber: syz
[ 1571.742598][  T780] usb 5-1: config 0 descriptor??
[ 1572.034499][  T780] usb 5-1: Found UVC 0.00 device syz (8086:0b03)
[ 1572.041698][  T780] usb 5-1: No valid video chain found.
[ 1572.207627][  T780] usb 5-1: USB disconnect, device number 15
[ 1575.924039][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[ 1575.930568][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[ 1585.402296][ T5128] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1585.476089][ T9670] IPVS: starting estimator thread 0...
[ 1585.572193][T13821] IPVS: using max 240 ests per chain, 12000 per kthread
[ 1585.834753][ T5128] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping
[ 1585.849212][ T5128] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1585.863582][ T5128] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1585.872876][ T5128] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1585.955653][ T5128] usb 5-1: config 0 descriptor??
[ 1585.973950][T13817] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1586.026707][ T5128] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[ 1586.152181][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1586.729475][T13831] syz-executor.2[13831] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1586.731906][T13831] syz-executor.2[13831] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[ 1588.304112][ T9670] usb 5-1: USB disconnect, device number 16
[ 1588.873198][T13865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1590.993017][T13890] tipc: Started in network mode
[ 1590.998405][T13890] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[ 1591.007785][T13890] tipc: Enabled bearer <eth:geneve1>, priority 10
[ 1591.613518][T13896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1591.652080][ T5128] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 1591.676971][  T780] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1591.970608][  T780] usb 5-1: Using ep0 maxpacket: 8
[ 1592.052837][ T5128] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1592.062669][ T5128] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1592.112951][  T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[ 1592.124931][  T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1592.135319][  T780] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1592.145505][  T780] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[ 1592.155924][  T780] usb 5-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[ 1592.165403][  T780] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1592.177606][ T5128] usb 4-1: config 0 descriptor??
[ 1592.188228][ T6196] tipc: Node number set to 15444650
[ 1592.237057][ T5128] cp210x 4-1:0.0: cp210x converter detected
[ 1592.257129][  T780] usb 5-1: config 0 descriptor??
[ 1592.463951][T13893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1592.473860][T13893] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1592.583112][ T5128] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -32
[ 1592.591107][ T5128] cp210x 4-1:0.0: querying part number failed
[ 1592.605976][ T5060] usb 5-1: USB disconnect, device number 17
[ 1592.652261][ T5128] usb 4-1: cp210x converter now attached to ttyUSB0
[ 1592.718874][ T5128] usb 4-1: USB disconnect, device number 18
[ 1592.774030][ T5128] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1592.784858][ T5128] cp210x 4-1:0.0: device disconnected
[ 1594.101874][T13929] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1596.417809][T13968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1598.787609][T14002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[ 1601.692999][T12932] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1601.755533][T12932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1601.779079][T12932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1601.793405][T12932] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1601.807012][T12932] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1601.823378][T12932] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1603.442158][ T3098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1603.674342][ T3098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1603.810031][T14017] chnl_net:caif_netlink_parms(): no params data found
[ 1603.928461][ T3098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1604.013139][T12932] Bluetooth: hci3: command tx timeout
[ 1604.102030][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1604.261332][ T3098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1604.878285][ T3098] bridge_slave_1: left allmulticast mode
[ 1604.889241][ T3098] bridge_slave_1: left promiscuous mode
[ 1604.896417][ T3098] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1605.056551][ T3098] bridge_slave_0: left allmulticast mode
[ 1605.062625][ T3098] bridge_slave_0: left promiscuous mode
[ 1605.069195][ T3098] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1605.923036][ T3098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1606.032635][ T3098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1606.092418][T12932] Bluetooth: hci3: command tx timeout
[ 1606.142373][ T3098] bond0 (unregistering): Released all slaves
[ 1606.288061][T14048] netlink: 1652 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1607.125208][T14070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1607.293486][ T3098] hsr_slave_0: left promiscuous mode
[ 1607.324355][ T3098] hsr_slave_1: left promiscuous mode
[ 1607.378932][ T3098] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1607.388554][ T3098] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1607.448235][ T3098] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1607.456050][ T3098] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1607.586956][ T3098] veth1_macvtap: left promiscuous mode
[ 1607.593590][ T3098] veth0_macvtap: left promiscuous mode
[ 1607.599495][ T3098] veth1_vlan: left promiscuous mode
[ 1607.605312][ T3098] veth0_vlan: left promiscuous mode
[ 1608.184359][T12932] Bluetooth: hci3: command tx timeout
[ 1608.220034][ T3098] pimreg (unregistering): left allmulticast mode
[ 1608.854243][ T3098] team0 (unregistering): Port device team_slave_1 removed
[ 1608.933425][ T3098] team0 (unregistering): Port device team_slave_0 removed
[ 1609.673608][T14017] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1609.681322][T14017] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1609.689429][T14017] bridge_slave_0: entered allmulticast mode
[ 1609.704754][T14017] bridge_slave_0: entered promiscuous mode
[ 1609.805574][T14017] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1609.813395][T14017] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1609.821123][T14017] bridge_slave_1: entered allmulticast mode
[ 1609.830142][T14017] bridge_slave_1: entered promiscuous mode
[ 1610.209054][T14017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1610.252056][T12932] Bluetooth: hci3: command tx timeout
[ 1610.327423][T14017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1610.593562][T14017] team0: Port device team_slave_0 added
[ 1610.651841][T14017] team0: Port device team_slave_1 added
[ 1610.968238][T14017] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1610.976987][T14017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1611.003739][T14017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1611.212931][T14017] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1611.220100][T14017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1611.249914][T14017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1611.951100][T14017] hsr_slave_0: entered promiscuous mode
[ 1611.993476][T14017] hsr_slave_1: entered promiscuous mode
[ 1612.021728][T14017] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1612.029580][T14017] Cannot create hsr debugfs directory
[ 1612.764261][T14120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1613.264798][T14121] netlink: 1652 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1614.802315][T14017] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1614.903336][T14017] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1615.000518][T14017] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1615.158466][T14017] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1615.210913][T14141] loop3: detected capacity change from 0 to 512
[ 1615.355551][T14141] EXT4-fs (loop3): Encoding requested by superblock is unknown
[ 1615.878429][T14141] loop3: detected capacity change from 0 to 2048
[ 1616.130193][T14141] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1616.143545][T14141] ext4 filesystem being mounted at /root/syzkaller-testdir1816489149/syzkaller.QYU56K/39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1616.640682][T14017] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1616.714792][T13151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1616.977909][T14017] 8021q: adding VLAN 0 to HW filter on device team0
[ 1617.041288][ T9329] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1617.048899][ T9329] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1617.192949][ T9329] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1617.200640][ T9329] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1617.566162][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[ 1617.618300][T14017] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1618.893017][ T9335] Bluetooth: hci1: command 0x0406 tx timeout
[ 1619.490755][T14176] loop4: detected capacity change from 0 to 2048
[ 1619.739410][T14176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1619.852215][T14017] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1619.882774][T14176] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1216: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1620.276262][T12011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1620.533951][T14017] veth0_vlan: entered promiscuous mode
[ 1620.670422][T14017] veth1_vlan: entered promiscuous mode
[ 1621.105887][T14017] veth0_macvtap: entered promiscuous mode
[ 1621.118950][T14199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[ 1621.218577][T14017] veth1_macvtap: entered promiscuous mode
[ 1621.431899][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1621.442770][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1621.452966][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1621.463948][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1621.479412][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1621.491664][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1621.501825][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1621.512623][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1621.527671][T14017] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1621.666841][T14204] Driver unsupported XDP return value 0 on prog  (id 229) dev N/A, expect packet loss!
[ 1621.839091][   T29] audit: type=1326 audit(1717821047.199:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x7ffc0000
[ 1621.859381][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1621.862586][   T29] audit: type=1326 audit(1717821047.199:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x7ffc0000
[ 1621.874253][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1621.898315][   T29] audit: type=1326 audit(1717821047.229:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7fc58de7cf69 code=0x7ffc0000
[ 1621.898549][   T29] audit: type=1326 audit(1717821047.229:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x7ffc0000
[ 1621.898784][   T29] audit: type=1326 audit(1717821047.229:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14205 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc58de7cf69 code=0x7ffc0000
[ 1621.993480][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1622.004319][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1622.015444][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1622.026222][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1622.036344][T14017] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1622.047203][T14017] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1622.062260][T14017] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1622.152205][T14017] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.161351][T14017] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.170860][T14017] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.182443][T14017] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1622.558353][T14211] loop1: detected capacity change from 0 to 128
[ 1622.662002][T14211] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[ 1626.189094][T14255] loop0: detected capacity change from 0 to 736
[ 1626.405967][T14258] loop3: detected capacity change from 0 to 8
[ 1626.529026][T14258] SQUASHFS error: lzo decompression failed, data probably corrupt
[ 1626.537634][T14258] SQUASHFS error: Failed to read block 0x28d: -5
[ 1626.544349][T14258] SQUASHFS error: Unable to read metadata cache entry [28b]
[ 1626.551965][T14258] SQUASHFS error: Unable to read inode 0x11f
[ 1627.134178][T14258] loop3: detected capacity change from 0 to 2048
[ 1627.283572][T14258] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1628.163337][T13012] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1628.364315][T13012] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1628.569721][T13012] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1628.781179][T13012] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1629.225392][T13012] bridge_slave_1: left allmulticast mode
[ 1629.225496][T13012] bridge_slave_1: left promiscuous mode
[ 1629.226502][T13012] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1629.273857][T13012] bridge_slave_0: left allmulticast mode
[ 1629.273953][T13012] bridge_slave_0: left promiscuous mode
[ 1629.274801][T13012] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1630.143250][T13012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1630.222041][T13012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1630.238909][T13012] bond0 (unregistering): Released all slaves
[ 1632.076715][T13012] hsr_slave_0: left promiscuous mode
[ 1632.136700][T13012] hsr_slave_1: left promiscuous mode
[ 1632.146398][T13012] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1632.146616][T13012] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1632.150383][T13012] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1632.150525][T13012] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1632.170000][T13012] veth1_macvtap: left promiscuous mode
[ 1632.170133][T13012] veth0_macvtap: left promiscuous mode
[ 1632.170412][T13012] veth1_vlan: left promiscuous mode
[ 1632.170712][T13012] veth0_vlan: left promiscuous mode
[ 1632.731197][T13012] pimreg (unregistering): left allmulticast mode
[ 1633.095796][T12932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1633.098155][T12932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1633.100374][T12932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1633.109028][T12932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1633.118082][T12932] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[ 1633.120152][T12932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1633.234599][T13012] team0 (unregistering): Port device team_slave_1 removed
[ 1633.308297][T13012] team0 (unregistering): Port device team_slave_0 removed
[ 1634.152268][ T5128] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1634.152364][ T5128] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1634.439776][ T5128] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1634.439873][ T5128] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1635.321680][T12932] Bluetooth: hci4: command tx timeout
[ 1635.892537][T14296] chnl_net:caif_netlink_parms(): no params data found
[ 1637.327776][ T1221] ieee802154 phy0 wpan0: encryption failed: -22
[ 1637.328028][ T1221] ieee802154 phy1 wpan1: encryption failed: -22
[ 1637.403118][T12932] Bluetooth: hci4: command tx timeout
[ 1637.471806][ T5128] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1638.312208][ T5128] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[ 1638.312389][ T5128] usb 5-1: config 1 has no interface number 1
[ 1638.312554][ T5128] usb 5-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[ 1638.312724][ T5128] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[ 1638.335506][T14296] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1638.336035][T14296] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1638.336553][T14296] bridge_slave_0: entered allmulticast mode
[ 1638.339385][T14296] bridge_slave_0: entered promiscuous mode
[ 1638.390762][T14296] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1638.391312][T14296] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1638.392048][T14296] bridge_slave_1: entered allmulticast mode
[ 1638.394764][T14296] bridge_slave_1: entered promiscuous mode
[ 1638.473972][ T5128] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1638.474128][ T5128] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1638.474262][ T5128] usb 5-1: Product: syz
[ 1638.474360][ T5128] usb 5-1: Manufacturer: syz
[ 1638.474463][ T5128] usb 5-1: SerialNumber: syz
[ 1638.740157][T14296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1638.789754][T14296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1638.843145][ T5128] usb 5-1: found format II with max.bitrate = 0, frame size=0
[ 1638.843286][ T5128] usb 5-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[ 1639.029900][ T5128] usb 5-1: USB disconnect, device number 18
[ 1639.043304][T14296] team0: Port device team_slave_0 added
[ 1639.219819][T13879] udevd[13879]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 1639.650935][T14296] team0: Port device team_slave_1 added
[ 1639.743865][T12932] Bluetooth: hci4: command tx timeout
[ 1640.833366][T14296] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1640.833441][T14296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1640.833582][T14296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1640.881801][T14296] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1640.881945][T14296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1640.882105][T14296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1641.772076][T12932] Bluetooth: hci4: command tx timeout
[ 1642.003738][T14296] hsr_slave_0: entered promiscuous mode
[ 1642.637330][T14296] hsr_slave_1: entered promiscuous mode
[ 1643.264300][T14328] loop2: detected capacity change from 0 to 736
[ 1644.731128][T14337] overlayfs: missing 'lowerdir'
[ 1645.513711][T14340] loop3: detected capacity change from 0 to 128
[ 1646.102897][   T29] audit: type=1800 audit(1717821071.299:83): pid=14340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048689 res=0 errno=0
[ 1646.125151][   T29] audit: type=1804 audit(1717821071.379:84): pid=14340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1816489149/syzkaller.QYU56K/53/file0/bus" dev="loop3" ino=1048689 res=1 errno=0
[ 1646.851877][T14296] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 1646.937844][T14296] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 1647.053847][T14296] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 1647.203984][T14296] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 1647.393739][ T3169] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1647.702470][ T3169] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1647.745857][T14349] loop3: detected capacity change from 0 to 2048
[ 1647.854816][T14349] ext4: Unknown parameter 'euid'
[ 1647.974812][ T3169] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1648.359876][ T3169] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1649.434759][ T3169] bridge_slave_1: left allmulticast mode
[ 1649.440752][ T3169] bridge_slave_1: left promiscuous mode
[ 1649.447754][ T3169] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1649.621252][ T3169] bridge_slave_0: left allmulticast mode
[ 1649.627279][ T3169] bridge_slave_0: left promiscuous mode
[ 1649.638778][ T3169] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1650.770597][ T3169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1650.956680][ T3169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1651.053408][ T3169] bond0 (unregistering): Released all slaves
[ 1651.653554][T14296] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1651.831336][T14296] 8021q: adding VLAN 0 to HW filter on device team0
[ 1652.020913][  T780] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1652.028754][  T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1652.196627][ T3169] hsr_slave_0: left promiscuous mode
[ 1652.228650][ T3169] hsr_slave_1: left promiscuous mode
[ 1652.262038][ T3169] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1652.269726][ T3169] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1652.334428][ T3169] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1652.342232][ T3169] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1652.468027][ T3169] veth1_macvtap: left promiscuous mode
[ 1652.473987][ T3169] veth0_macvtap: left promiscuous mode
[ 1652.479850][ T3169] veth1_vlan: left promiscuous mode
[ 1652.486030][ T3169] veth0_vlan: left promiscuous mode
[ 1652.777210][ T9335] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1652.830528][ T9335] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1652.840132][ T9335] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1652.855273][ T9335] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1652.866879][ T9335] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[ 1652.887744][ T9335] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1653.601064][ T3169] team0 (unregistering): Port device team_slave_1 removed
[ 1653.667069][ T3169] team0 (unregistering): Port device team_slave_0 removed
[ 1654.123733][  T780] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1654.131492][  T780] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1654.992949][ T9335] Bluetooth: hci3: command tx timeout
[ 1656.232717][ T9335] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1656.262751][ T9335] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1656.292379][ T9335] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1656.323619][ T9335] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1656.336214][ T9335] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[ 1656.352588][ T9335] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1657.023635][T14397] loop3: detected capacity change from 0 to 128
[ 1657.055060][T12932] Bluetooth: hci3: command tx timeout
[ 1657.233349][   T29] audit: type=1800 audit(1717821082.619:85): pid=14397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048690 res=0 errno=0
[ 1657.272174][T14367] chnl_net:caif_netlink_parms(): no params data found
[ 1657.403817][   T29] audit: type=1804 audit(1717821082.699:86): pid=14397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1816489149/syzkaller.QYU56K/61/file0/bus" dev="loop3" ino=1048690 res=1 errno=0
[ 1657.455715][T14296] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1658.086348][T14296] veth0_vlan: entered promiscuous mode
[ 1658.219029][T14387] chnl_net:caif_netlink_parms(): no params data found
[ 1658.252795][T14296] veth1_vlan: entered promiscuous mode
[ 1658.509990][T12932] Bluetooth: hci5: command tx timeout
[ 1658.930639][T14296] veth0_macvtap: entered promiscuous mode
[ 1659.076898][T14296] veth1_macvtap: entered promiscuous mode
[ 1659.139371][T12932] Bluetooth: hci3: command tx timeout
[ 1659.546202][T14417] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 1659.569475][T14367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1659.580567][T14367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1659.588437][T14367] bridge_slave_0: entered allmulticast mode
[ 1659.597558][T14367] bridge_slave_0: entered promiscuous mode
[ 1659.655419][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1659.668241][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1659.678994][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1659.689803][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1659.702063][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1659.712810][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1659.727608][T14296] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1659.764716][T14367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1659.777416][T14367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1659.785440][T14367] bridge_slave_1: entered allmulticast mode
[ 1659.794562][T14367] bridge_slave_1: entered promiscuous mode
[ 1660.267919][T14367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1660.306753][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1660.317668][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1660.327935][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1660.342386][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1660.352557][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1660.363240][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1660.377772][T14296] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1660.513449][T14367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1660.572999][T12932] Bluetooth: hci5: command tx timeout
[ 1660.623013][T14296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1660.633589][T14296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1660.643122][T14296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1660.654006][T14296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1660.803616][T14387] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1660.811324][T14387] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1660.819150][T14387] bridge_slave_0: entered allmulticast mode
[ 1660.828278][T14387] bridge_slave_0: entered promiscuous mode
[ 1661.063249][T14367] team0: Port device team_slave_0 added
[ 1661.077143][T14387] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1661.085553][T14387] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1661.093401][T14387] bridge_slave_1: entered allmulticast mode
[ 1661.107337][T14387] bridge_slave_1: entered promiscuous mode
[ 1661.168627][T14367] team0: Port device team_slave_1 added
[ 1661.223246][T12932] Bluetooth: hci3: command tx timeout
[ 1661.487300][T14387] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1661.809578][T14367] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1661.819958][T14367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1661.847377][T14367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1661.870052][T14387] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1662.045398][T14428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[ 1662.321042][T14367] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1662.330166][T14367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1662.357247][T14367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1662.441442][T14387] team0: Port device team_slave_0 added
[ 1662.507067][T14387] team0: Port device team_slave_1 added
[ 1662.668476][T12932] Bluetooth: hci5: command tx timeout
[ 1662.750119][T14387] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1662.758140][T14387] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1662.784618][T14387] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1663.066465][T14433] loop3: detected capacity change from 0 to 2048
[ 1663.099665][T14387] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1663.107877][T14387] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1663.134266][T14387] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1663.254627][T14367] hsr_slave_0: entered promiscuous mode
[ 1663.288145][T14433]  loop3: p1 < > p4
[ 1663.329789][T14367] hsr_slave_1: entered promiscuous mode
[ 1663.358244][T14367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1663.366248][T14367] Cannot create hsr debugfs directory
[ 1663.367728][T14433] loop3: p4 size 8388608 extends beyond EOD, truncated
[ 1664.034327][T14387] hsr_slave_0: entered promiscuous mode
[ 1664.098288][T14387] hsr_slave_1: entered promiscuous mode
[ 1664.136689][T14387] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 1664.144717][T14387] Cannot create hsr debugfs directory
[ 1664.682085][T14449] loop4: detected capacity change from 0 to 512
[ 1664.705749][T14449] EXT4-fs: Ignoring removed oldalloc option
[ 1664.731783][T12932] Bluetooth: hci5: command tx timeout
[ 1664.883419][T14449] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15
[ 1665.042349][T14449] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 1665.056273][T14449] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15
[ 1665.249923][T14449] EXT4-fs (loop4): 1 orphan inode deleted
[ 1665.256242][T14449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1666.072588][T12011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1666.392892][T14387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1666.657924][T14387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1666.766927][T14471] loop4: detected capacity change from 0 to 128
[ 1666.911425][T14387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1666.981261][   T29] audit: type=1800 audit(1717821092.319:87): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1048691 res=0 errno=0
[ 1667.114824][   T29] audit: type=1804 audit(1717821092.429:88): pid=14471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2655899794/syzkaller.uZGI6S/114/file0/bus" dev="loop4" ino=1048691 res=1 errno=0
[ 1667.260483][T14387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1667.482361][   T29] audit: type=1326 audit(1717821092.799:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14480 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f67eba7cf69 code=0x0
[ 1668.026990][T14367] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1668.106694][T14387] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 1668.163101][T14367] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1668.244035][T14387] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 1668.292115][T14487] loop4: detected capacity change from 0 to 2048
[ 1668.305452][T14367] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1668.367323][T14387] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 1668.417774][ T3211] bridge_slave_1: left allmulticast mode
[ 1668.423795][ T3211] bridge_slave_1: left promiscuous mode
[ 1668.430291][ T3211] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1668.492397][ T3211] bridge_slave_0: left allmulticast mode
[ 1668.498276][ T3211] bridge_slave_0: left promiscuous mode
[ 1668.505073][ T3211] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1668.555533][ T3211] tipc: Resetting bearer <eth:geneve1>
[ 1668.568151][T14487] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1668.893455][T12011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1669.076336][ T3211] tipc: Disabling bearer <eth:geneve1>
[ 1669.340089][ T3211] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1669.413481][ T3211] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1669.456987][ T3211] bond0 (unregistering): (slave macvlan2): Releasing backup interface
[ 1669.512277][ T3211] team0: left allmulticast mode
[ 1669.517476][ T3211] team_slave_0: left allmulticast mode
[ 1669.523377][ T3211] team_slave_1: left allmulticast mode
[ 1669.529152][ T3211] team_slave_0: left promiscuous mode
[ 1669.534885][ T3211] team_slave_1: left promiscuous mode
[ 1669.563803][ T3211] bond0 (unregistering): Released all slaves
[ 1669.606095][T14367] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1669.700068][T14387] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 1669.824022][ T3211] tipc: Left network mode
[ 1670.458065][   T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1670.466779][   T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1670.682757][ T3211] hsr_slave_0: left promiscuous mode
[ 1670.731219][ T3211] hsr_slave_1: left promiscuous mode
[ 1670.783553][ T3211] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1670.791282][ T3211] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1670.831310][ T3211] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1670.839482][ T3211] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1670.886933][ T3211] veth1_macvtap: left promiscuous mode
[ 1670.894072][ T3211] veth0_macvtap: left promiscuous mode
[ 1670.899993][ T3211] veth1_vlan: left promiscuous mode
[ 1670.905728][ T3211] veth0_vlan: left promiscuous mode
[ 1670.998760][T14508] loop4: detected capacity change from 0 to 2048
[ 1671.153350][T14508]  loop4: p1 < > p4
[ 1671.182934][T14508] loop4: p4 size 8388608 extends beyond EOD, truncated
[ 1671.384343][ T3211] pimreg (unregistering): left allmulticast mode
[ 1671.907487][ T3211] team0 (unregistering): Port device team_slave_1 removed
[ 1671.936391][ T3211] team0 (unregistering): Port device team_slave_0 removed
[ 1672.556095][ T6031] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1672.564781][ T6031] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1673.342036][T14367] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1673.534523][T14367] 8021q: adding VLAN 0 to HW filter on device team0
[ 1673.656362][T14387] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1673.788328][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1673.796152][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1673.828260][T14530] loop4: detected capacity change from 0 to 512
[ 1673.894096][T14530] EXT4-fs: Ignoring removed oldalloc option
[ 1673.929361][T14387] 8021q: adding VLAN 0 to HW filter on device team0
[ 1673.962498][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1673.970176][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1674.078593][T14530] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15
[ 1674.252941][T14530] EXT4-fs error (device loop4): ext4_xattr_inode_iget:436: comm syz-executor.4: Parent and EA inode have the same ino 15
[ 1674.303766][   T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1674.311658][   T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1674.329224][   T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1674.337082][   T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1674.359613][T14530] EXT4-fs (loop4): 1 orphan inode deleted
[ 1674.366888][T14530] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1674.648807][T14367] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1674.721126][T14387] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 1674.731999][T14387] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1675.257253][T14544] loop3: detected capacity change from 0 to 128
[ 1675.293066][T12011] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1675.690154][   T29] audit: type=1800 audit(1717821100.989:90): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=1048695 res=0 errno=0
[ 1675.713686][   T29] audit: type=1804 audit(1717821101.029:91): pid=14544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1816489149/syzkaller.QYU56K/73/file0/bus" dev="loop3" ino=1048695 res=1 errno=0
[ 1676.145445][T14550] loop0: detected capacity change from 0 to 2048
[ 1676.384922][T14550] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1676.807874][T14296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1677.394570][T14367] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1677.565009][T14387] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1678.236868][T14367] veth0_vlan: entered promiscuous mode
[ 1678.374176][T14387] veth0_vlan: entered promiscuous mode
[ 1678.415892][T14367] veth1_vlan: entered promiscuous mode
[ 1678.593664][T14387] veth1_vlan: entered promiscuous mode
[ 1678.893708][T14367] veth0_macvtap: entered promiscuous mode
[ 1679.040641][T14367] veth1_macvtap: entered promiscuous mode
[ 1679.289512][T14387] veth0_macvtap: entered promiscuous mode
[ 1679.476660][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1679.487507][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.497733][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1679.508504][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.518647][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1679.529516][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.550493][T14367] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1679.569716][T14387] veth1_macvtap: entered promiscuous mode
[ 1679.667032][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1679.677984][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.689538][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1679.701952][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.712935][T14367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1679.723727][T14367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.744078][T14367] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1679.834138][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1679.849131][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.863912][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1679.876103][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.886317][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1679.897122][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.907262][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[ 1679.917952][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1679.933101][T14387] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1680.073544][T14367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.082833][T14367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.093207][T14367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.102401][T14367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.188857][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1680.199803][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.211408][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1680.222621][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.232744][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1680.243500][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.257938][T14387] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[ 1680.270286][T14387] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[ 1680.285373][T14387] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1680.436346][T14595] loop0: detected capacity change from 0 to 128
[ 1680.686617][   T29] audit: type=1800 audit(1717821105.999:92): pid=14595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=1048696 res=0 errno=0
[ 1680.709487][   T29] audit: type=1804 audit(1717821106.029:93): pid=14595 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1295555243/syzkaller.a3VOqT/5/file0/bus" dev="loop0" ino=1048696 res=1 errno=0
[ 1680.810998][T14387] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.822266][T14387] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.831323][T14387] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1680.841123][T14387] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1681.064995][T14603] fuse: Bad value for 'fd'
[ 1681.237685][T14604] loop3: detected capacity change from 0 to 2048
[ 1681.530142][T14604] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1681.977138][T13151] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1682.054395][T14617] loop0: detected capacity change from 0 to 512
[ 1682.192043][T14617] EXT4-fs (loop0): blocks per group (255) and clusters per group (8192) inconsistent
[ 1683.330291][T14635] =====================================================
[ 1683.337697][T14635] BUG: KMSAN: uninit-value in strnchr+0x90/0xd0
[ 1683.344156][T14635]  strnchr+0x90/0xd0
[ 1683.348340][T14635]  bpf_bprintf_prepare+0x1c2/0x23c0
[ 1683.353771][T14635]  bpf_trace_printk+0xec/0x3e0
[ 1683.358727][T14635]  ___bpf_prog_run+0x13fe/0xe0f0
[ 1683.363822][T14635]  __bpf_prog_run32+0xb2/0xe0
[ 1683.368665][T14635]  bpf_trace_run2+0x116/0x300
[ 1683.373482][T14635]  __bpf_trace_tlb_flush+0x2c/0x40
[ 1683.378761][T14635]  switch_mm_irqs_off+0x9d2/0x1010
[ 1683.384058][T14635]  __text_poke+0xb4e/0xfb0
[ 1683.388642][T14635]  text_poke_bp_batch+0x17f/0x960
[ 1683.393844][T14635]  text_poke_finish+0x7d/0xd0
[ 1683.398694][T14635]  arch_jump_label_transform_apply+0x23/0x40
[ 1683.404842][T14635]  __jump_label_update+0x6af/0x6d0
[ 1683.410210][T14635]  jump_label_update+0x6a0/0x7a0
[ 1683.415332][T14635]  static_key_enable_cpuslocked+0x229/0x260
[ 1683.421433][T14635]  static_key_enable+0x23/0x30
[ 1683.426377][T14635]  tracepoint_add_func+0x1084/0x1280
[ 1683.431868][T14635]  tracepoint_probe_register_prio_may_exist+0xa8/0xf0
[ 1683.438839][T14635]  bpf_probe_register+0x201/0x250
[ 1683.444030][T14635]  bpf_raw_tp_link_attach+0x627/0x8a0
[ 1683.449582][T14635]  bpf_raw_tracepoint_open+0x485/0x8a0
[ 1683.455250][T14635]  __sys_bpf+0x5a6/0xd90
[ 1683.459660][T14635]  __x64_sys_bpf+0xa0/0xe0
[ 1683.464233][T14635]  x64_sys_call+0x96b/0x3b50
[ 1683.469054][T14635]  do_syscall_64+0xcf/0x1e0
[ 1683.473823][T14635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1683.479985][T14635] 
[ 1683.482390][T14635] Local variable stack created at:
[ 1683.487585][T14635]  __bpf_prog_run32+0x43/0xe0
[ 1683.492442][T14635]  bpf_trace_run2+0x116/0x300
[ 1683.497257][T14635] 
[ 1683.499677][T14635] CPU: 0 PID: 14635 Comm: syz-executor.0 Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0
[ 1683.509909][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 1683.520096][T14635] =====================================================
[ 1683.527133][T14635] Disabling lock debugging due to kernel taint
[ 1683.533368][T14635] Kernel panic - not syncing: kmsan.panic set ...
[ 1683.539901][T14635] CPU: 0 PID: 14635 Comm: syz-executor.0 Tainted: G    B              6.9.0-syzkaller-02707-g614da38e2f7a #0
[ 1683.551569][T14635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[ 1683.561726][T14635] Call Trace:
[ 1683.565094][T14635]  <TASK>
[ 1683.568095][T14635]  dump_stack_lvl+0x216/0x2d0
[ 1683.572922][T14635]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1683.578865][T14635]  dump_stack+0x1e/0x30
[ 1683.583167][T14635]  panic+0x4e2/0xcd0
[ 1683.587264][T14635]  ? kmsan_get_metadata+0xf1/0x1d0
[ 1683.592513][T14635]  kmsan_report+0x2d5/0x2e0
[ 1683.597153][T14635]  ? __msan_warning+0x95/0x120
[ 1683.602044][T14635]  ? strnchr+0x90/0xd0
[ 1683.606256][T14635]  ? bpf_bprintf_prepare+0x1c2/0x23c0
[ 1683.611801][T14635]  ? bpf_trace_printk+0xec/0x3e0
[ 1683.616960][T14635]  ? ___bpf_prog_run+0x13fe/0xe0f0
[ 1683.622201][T14635]  ? __bpf_prog_run32+0xb2/0xe0
[ 1683.627171][T14635]  ? bpf_trace_run2+0x116/0x300
[ 1683.632137][T14635]  ? __bpf_trace_tlb_flush+0x2c/0x40
[ 1683.637577][T14635]  ? switch_mm_irqs_off+0x9d2/0x1010
[ 1683.643012][T14635]  ? __text_poke+0xb4e/0xfb0
[ 1683.647783][T14635]  ? text_poke_bp_batch+0x17f/0x960
[ 1683.653150][T14635]  ? text_poke_finish+0x7d/0xd0
[ 1683.658146][T14635]  ? arch_jump_label_transform_apply+0x23/0x40
[ 1683.664432][T14635]  ? __jump_label_update+0x6af/0x6d0
[ 1683.669861][T14635]  ? jump_label_update+0x6a0/0x7a0
[ 1683.675133][T14635]  ? static_key_enable_cpuslocked+0x229/0x260
[ 1683.681356][T14635]  ? static_key_enable+0x23/0x30
[ 1683.686441][T14635]  ? tracepoint_add_func+0x1084/0x1280
[ 1683.692088][T14635]  ? tracepoint_probe_register_prio_may_exist+0xa8/0xf0
[ 1683.699199][T14635]  ? bpf_probe_register+0x201/0x250
[ 1683.704535][T14635]  ? bpf_raw_tp_link_attach+0x627/0x8a0
[ 1683.710263][T14635]  ? bpf_raw_tracepoint_open+0x485/0x8a0
[ 1683.716034][T14635]  ? __sys_bpf+0x5a6/0xd90
[ 1683.720594][T14635]  ? __x64_sys_bpf+0xa0/0xe0
[ 1683.725330][T14635]  ? x64_sys_call+0x96b/0x3b50
[ 1683.730250][T14635]  ? do_syscall_64+0xcf/0x1e0
[ 1683.735067][T14635]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1683.741317][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1683.746649][T14635]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1683.752593][T14635]  ? bpf_bprintf_prepare+0x193/0x23c0
[ 1683.758134][T14635]  ? filter_irq_stacks+0x60/0x1a0
[ 1683.763342][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1683.768663][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1683.773978][T14635]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1683.779912][T14635]  __msan_warning+0x95/0x120
[ 1683.784611][T14635]  strnchr+0x90/0xd0
[ 1683.788683][T14635]  bpf_bprintf_prepare+0x1c2/0x23c0
[ 1683.794052][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1683.799375][T14635]  ? kmsan_internal_memmove_metadata+0x91/0x230
[ 1683.805786][T14635]  ? __msan_memcpy+0x108/0x1c0
[ 1683.810708][T14635]  bpf_trace_printk+0xec/0x3e0
[ 1683.815613][T14635]  ? __bpf_prog_run32+0x5c/0xe0
[ 1683.820604][T14635]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[ 1683.826542][T14635]  ___bpf_prog_run+0x13fe/0xe0f0
[ 1683.831632][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1683.836970][T14635]  __bpf_prog_run32+0xb2/0xe0
[ 1683.841767][T14635]  ? kmsan_get_metadata+0x110/0x1d0
[ 1683.847122][T14635]  ? __pfx___bpf_prog_run32+0x10/0x10
[ 1683.852640][T14635]  bpf_trace_run2+0x116/0x300
[ 1683.857443][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1683.862811][T14635]  __bpf_trace_tlb_flush+0x2c/0x40
[ 1683.868061][T14635]  switch_mm_irqs_off+0x9d2/0x1010
[ 1683.873313][T14635]  __text_poke+0xb4e/0xfb0
[ 1683.877863][T14635]  ? __pfx_text_poke_memcpy+0x10/0x10
[ 1683.883389][T14635]  ? switch_mm_irqs_off+0x920/0x1010
[ 1683.888829][T14635]  ? switch_mm_irqs_off+0x920/0x1010
[ 1683.894247][T14635]  text_poke_bp_batch+0x17f/0x960
[ 1683.899425][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1683.904747][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1683.910086][T14635]  ? kmsan_get_shadow_origin_ptr+0x16/0xb0
[ 1683.916030][T14635]  text_poke_finish+0x7d/0xd0
[ 1683.920873][T14635]  arch_jump_label_transform_apply+0x23/0x40
[ 1683.926977][T14635]  __jump_label_update+0x6af/0x6d0
[ 1683.932267][T14635]  jump_label_update+0x6a0/0x7a0
[ 1683.937372][T14635]  ? kmsan_report+0x2a0/0x2e0
[ 1683.942190][T14635]  static_key_enable_cpuslocked+0x229/0x260
[ 1683.948299][T14635]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[ 1683.954284][T14635]  static_key_enable+0x23/0x30
[ 1683.959215][T14635]  ? __SCT__tp_func_exit_mmap+0x8/0x8
[ 1683.964773][T14635]  tracepoint_add_func+0x1084/0x1280
[ 1683.970252][T14635]  ? kmsan_internal_set_shadow_origin+0x66/0xe0
[ 1683.976691][T14635]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[ 1683.982650][T14635]  tracepoint_probe_register_prio_may_exist+0xa8/0xf0
[ 1683.989601][T14635]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[ 1683.995584][T14635]  ? __pfx___bpf_trace_tlb_flush+0x10/0x10
[ 1684.001612][T14635]  bpf_probe_register+0x201/0x250
[ 1684.006815][T14635]  bpf_raw_tp_link_attach+0x627/0x8a0
[ 1684.012389][T14635]  ? kmsan_internal_unpoison_memory+0x14/0x20
[ 1684.018677][T14635]  ? kmsan_get_metadata+0x146/0x1d0
[ 1684.024037][T14635]  bpf_raw_tracepoint_open+0x485/0x8a0
[ 1684.029676][T14635]  __sys_bpf+0x5a6/0xd90
[ 1684.034116][T14635]  __x64_sys_bpf+0xa0/0xe0
[ 1684.038681][T14635]  x64_sys_call+0x96b/0x3b50
[ 1684.043450][T14635]  do_syscall_64+0xcf/0x1e0
[ 1684.048133][T14635]  ? clear_bhb_loop+0x25/0x80
[ 1684.052955][T14635]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1684.059071][T14635] RIP: 0033:0x7fe398c7cf69
[ 1684.063574][T14635] Code: Unable to access opcode bytes at 0x7fe398c7cf3f.
[ 1684.070672][T14635] RSP: 002b:00007fe399a670c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 1684.079209][T14635] RAX: ffffffffffffffda RBX: 00007fe398db3f80 RCX: 00007fe398c7cf69
[ 1684.087296][T14635] RDX: 0000000000000010 RSI: 0000000020000080 RDI: 0000000000000011
[ 1684.095365][T14635] RBP: 00007fe398cda6fe R08: 0000000000000000 R09: 0000000000000000
[ 1684.103433][T14635] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1684.111519][T14635] R13: 000000000000000b R14: 00007fe398db3f80 R15: 00007ffca1c891b8
[ 1684.119611][T14635]  </TASK>
[ 1685.530101][T14635] Shutting down cpus with NMI
[ 1685.535205][T14635] Kernel Offset: disabled
[ 1685.539623][T14635] Rebooting in 86400 seconds..