last executing test programs:

4.404767475s ago: executing program 1:
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x8, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121}, {@rand_addr=0x64010101}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.391350648s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000590000"], 0x0}, 0x90)
getpid()
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000402)
ftruncate(r2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="8c3d6d84ebf2307b77d9e8a8176b0ae40a4d6951f32d5ce342081f0e2611f35d8b0bb82747a5e2e89b6d24f99bb384b560ffd0edd864b9a2bbcd666bcf789837badcbc9925d75a749d77"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r5, 0x0, 0x0)

3.780896601s ago: executing program 2:
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000140)=@v1={0x0, @adiantum, 0x0, @desc3})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r1, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/93, 0x5d}], 0x1)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001980)={{0x2000, 0x0, 0x800, 0x8, 'syz0\x00', 0xffff}, 0x5, 0x30, 0x1, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

3.672962108s ago: executing program 2:
r0 = syz_open_dev$cec(0x0, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"c800", 0x0, 0x6, 0x1, 0x0, 0x0, "01cff78ea77000ebff00", "04000107", "05049e3c", "fd0000ac", ["c2fffedbff00ffdfbf00", "000000e8df00", '\a\x00', "38a70ed483d94574c99b9f16"]})

3.599605689s ago: executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000b80)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x129, 0x800}, 0x9, 0x4, 0x7, 0xfbbc, 0x0, 0x0, 0xbe8})
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="6b2141f9237f25882696ff63ecb6cbb5fb55750aeaf84901d04c8259d691823b9fa40c6f214d0bdabc4223c47f1bc4558fda0e918fa980dc67f5d639eefb93b8ca98d07b6470fde54789da843266f765f7353470265b60c1419f8bbfc4315da394c5e7bc416457259e77042ea11efea207b109b0cd4d554a4aaa166f4e970294c97e640f67994003f8d2581bc1e56a34966e3bf7d4f847c402d77e75cb9437d3ae0323c1d17dcab86fa43bc6fefda061f631ded291aab501f4a37e5b63a3713075dbb19df8d87bebbe7634aad325255b739cf9d7c72c8665173a29", 0xdb}, {&(0x7f00000003c0)="aebd6e7bc7908981a851eac401fb293c42ca13ea60a29fabfb5e333ee9d1ad142a211c4517936f897d027e547b93e7cf4f28bc7b7965e6a812ac93177095b6f22dd9b8a40c939ab21217c32873d171abdc2eaa04f0f14054c2e787cece6d0066dc1cada22325496bd3eaa9779b92b51483a1bf6aa06cd1468ae0d6b756530421429ce7e49dd357c8acfb32e3d90faacfdf9dc2e20370e94506be3e0c287208a3672ccd88c3673179131e3b261956440ec75e78d1a5320f81ef1f8dd4a8b12a7eaff7be9c19007236e572b13cec9ef1e99f764cb9bb4580aa9d64f5803c97b1358d5ade6f55162cfec210fa0709cea0b9", 0xf0}, {&(0x7f00000004c0)="0416f70014", 0x5}, {&(0x7f0000000500)="a0aaa076bc5fce3fd614095fd6cd0499b5641a61c7c119b66587402b91253b9282d8926272014acc80d2bc03b1b883d10f669ee3506c5d3f8d65978d30e78726d96edbf820836a66ae8324ed3e35fb448a4e67c13943e22ef4a5eb69f44df25a75f535a47ea596dc1cc64322f79cafd53af9bda6c4c9e2f46966eae98eec1cc65872afd7c5f0eec20063c3ec", 0x8c}, {&(0x7f00000005c0)="77d61a4209d0d73df15dee87cba1ca7d48b43cafa02c0a7e41cf5225bef420c20161d0a88eccf9f606dc195210b1557b13115f0852d8c791f7494d09a30c6736a96759da1722e4a72cf30d405cd2f726113dfcb1d04e8d343b3375fca9d8cf3bdbf9aeddb5afd7940ce71f236382480cbb11775865a24ec18869147d914118e315e5bc6b85e1f0f63d7acee801a69bcfdb172a30ae989a6f1dda2658bdf64994dfcd49d79002d4f77caa536367b8b3ad27", 0xb1}, {&(0x7f0000000680)="425480e239f02b5e70081ba6fd5a8442011d7cf6065f854a5073a34d366ea1195870f6b15df5852e6c124638b65c701e72e748b8803dbf65ee1d55d0edbf0ba6d1d1e5e5280cfdd67367916a7141eb597e26eeac6a3c66496cfea362c8e76bd03537a98fe2fef08939deb88da5bb86ad5a7d5bb58232c0937980dba790cfcfd00f6ae9a6992a0262bee49cfff2afa3151cd57987fc98b61e502ded3eedffba5efc5abecc8bc9c7640909ce2a09ea4ca780afec4f173fa45f42af970d47046cb7811cdca51dcf4e519c", 0xc9}, {&(0x7f0000000780)="33d567bb672c01c7932e9c23ff8060a6b8bd96e6ea35d8af93577b401ee7194c0cc7b51b194e0ee628d81fa7035b5b3e151c64fa0c1d5db266d1c17f6129c9aeb5311d0b833a5f85e64fe82b735b4aa747a8fbfbfe61ebbbcd1a69e5211d773c029b8802e01989ad16e436b0bf924ed8ba8feed29173", 0x76}], 0x7}}], 0x1, 0x0)

2.601068252s ago: executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = fcntl$dupfd(r0, 0x0, r0)
write$P9_RWRITE(r1, &(0x7f0000000000)={0xb}, 0xfffffe6a)
sendto$packet(r1, &(0x7f0000001980)="81", 0x1, 0x0, 0x0, 0x0)

2.473332112s ago: executing program 0:
socket(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
r4 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000080), 0x9)

2.358940579s ago: executing program 1:
syz_open_dev$dri(0x0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0)

2.144570432s ago: executing program 4:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
ioctl$sock_FIOSETOWN(r0, 0x541b, 0x0)

2.078829242s ago: executing program 4:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r5, 0x40044145, &(0x7f0000000000)={0x0, [0x0, 0x3000, 0x3]})
ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}]})
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x2004cb], 0x100000})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
close_range(r1, 0xffffffffffffffff, 0x2)

2.069037143s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001800)=[@text64={0x40, &(0x7f0000001840)="f3470fbc06c74424000600007848b800280000000000000f23c00f21f835030004000f23f8c7442406000000000f0114246aa2450f0012124424001afa0000c744240216383d27c7442406000000000f011c2466b8f0000f00d0400f060f00e4c4a1c1edba2500000066baa00066b8000066ef66b82f008ed0", 0x79}], 0x1, 0x0, 0x0, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r6 = landlock_create_ruleset(&(0x7f0000000000)={0x2}, 0x10, 0x0)
landlock_restrict_self(r6, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x4000})
ioctl$KVM_NMI(r5, 0xae9a)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000071000/0x18000)=nil, &(0x7f0000000380)=[@text16={0x10, &(0x7f0000000040)="f30fbd4e610f01bf66b6bad104ec5f660f413881a133000f01c33e660f3a224941df66b8040000800f23d00f21f866350000000e0f23f80fc7f1660f38824c09", 0x40}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.83075603s ago: executing program 1:
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x10000000}}, 0x10)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)

1.717572837s ago: executing program 1:
gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21}, &(0x7f0000bbdffc))
r0 = msgget$private(0x0, 0x0)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
rt_sigreturn()
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef)
timer_settime(0x0, 0x0, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)

1.658891566s ago: executing program 0:
r0 = syz_open_dev$cec(0x0, 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"c800", 0x0, 0x6, 0x1, 0x0, 0x0, "01cff78ea77000ebff00", "04000107", "05049e3c", "fd0000ac", ["c2fffedbff00ffdfbf00", "000000e8df00", '\a\x00', "38a70ed483d94574c99b9f16"]})

1.639657849s ago: executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x77359400}, {0x0, 0x989680}}, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff})
write$binfmt_script(r2, &(0x7f0000000340), 0xffffff46)
dup3(r2, r1, 0x0)
sendmsg$netlink(r1, &(0x7f0000001300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=ANY=[], 0x10}], 0x1}, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000000180)=@in6={0xa, 0x0, 0x0, @local}, 0x80, 0x0, 0xfffffffffffffd05}, 0x0)
rt_sigreturn()
poll(0x0, 0x0, 0x64)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
rt_sigreturn()
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)

1.596440325s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x2000040, &(0x7f00000007c0)={[{@errors_remount}, {@nodiscard}, {@noquota}, {@init_itable}, {@stripe={'stripe', 0x3d, 0x79}}, {@resgid}, {@sysvgroups}, {@delalloc}, {@usrquota}]}, 0x10, 0x4d2, &(0x7f00000002c0)="$eJzs3c9rHG8ZAPBnJtlvf+VrUvVQC7bFVtKi3U0a2wYPtYLYU8Fa7zUmmxCyyYbspm1CkRTvCiIqePLkRfAPEKR/gggFvUsVRbTVgwd1ZWdnaxt3m0i3OzX5fGA67zvv7j7P27Az88687ARwaJ2LiJsRMRIRlyJiPN+e5sutdvudzutePH80316SaLXu/jmJJN/W/awkX5+IiJ2IOBoRX70V8Y3kv+M2trZX5mq16kZerzRX1yuNre3Ly6tzS9Wl6trMzPS12euzV2enBtLPiYi48aXff/87P/nyjV989sFv7/3x4jfbaY3l7a/2Y5A6XS9l/xddoxGx8S6CFWAkX5f6tH97ZIjJAACwp/Y5/kcj4lPZ+f94jGRnpwAAAMBB0vrCWPwjiWgBAAAAB1aazYFN0nI+F2As0rRc7szh/XgcT2v1RvMzi/XNtYXOXNmJKKWLy7XqVD5XeCJKSbs+nc+x7dav7KrPRMTJiPje+LGsXp6v1xaKvvgBAAAAh8SJXeP/v41n4/8jRecFAAAADNhE0QkAAAAA75zxPwAAABx8xv8AAABwoH3l9u320uo+/3rh/tbmSv3+5YVqY6W8ujlfnq9vrJeX6vWl7Df7Vvf6vFq9vv65WNt8WGlWG81KY2v73mp9c615b/m1R2ADAAAAQ3Ty7JPfJBGx8/lj2dL2QdFJAUOR7NGePSTkWV753RASAoZmpOgEgMKMFp0AUJhS0QkAhdvrOkDfyTu/HHwuAADAuzH5if73/10bgIMtLToBAGDo3P+Hw6v0+gzAq8VlAhTlI3u0v/39/1brf0oIAAAYuLFsSdJyfi9wLNK0XI74MHssQClZXK5Vp/Lxwa/HS0fa9ensncmec4YBAAAAAAAAAAAAAAAAAAAAAAAAgI5WK4kWAAAAcKBFpH9Isl/zj5gcvzC2+/rAB8nfx7N1RDz40d0fPJxrNjem29v/8nJ784f59itFXMEAAAAAduuO07vjeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYpBfPH813l2HG/dMXI2KiZ/yzR7PV0ShFxPG/JjH6yvuSiBgZQPydxxFxqlf8pJ1WTEQni17xjxUYP42IEwOID4fZk/b+52av718a57J17+/faL68rf77vzS6+7+RPvufD/cZ4/TTn1X6xn8ccXq09/6nGz/pE//8PuN//Wvb2/3aWj+OmOx5/Elei1Vprq5XGlvbl5dX55aqS9W1mZnpa7PXZ6/OTlUWl2vV/N+eMb77yZ//6039P94n/sQe/b+wz/7/8+nD5x/rFEu94l883/v4e6pP/DQ/9n06L7fbJ7vlnU75VWd++qszb+r/Qp/+v/z79zjQtmNe3Gf/L9351rN9vhQAGILG1vbKXK1W3fh/LKTxXqShMJDCkfcjDYVOoeg9EwAAMGj/OekvOhMAAAAAAAAAAAAAAAAAAAA4vIbxc2K7Y+4U01UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDf6dwAAAP//sf7Zeg==")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280))
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000d80)=ANY=[@ANYBLOB="b4050000000000007910a1000000000007000000000000049500000000000000ab738bbb6ffff18f19dd82d81363410496dfab57e0c280716260932d8cf37aabe56cc10449d34cb4ec1ea65419d36f78c5b439876e4d4a450add8d2457ab688c4000b391e26f95122abf6ee74f30d598d1cfeaf3326b484e30bb47102b734469467e4229566d86f8aee4ea455857f16f6f694a1f12bd5f1f9869fb3cb9aefc987177cf6f57f66202e75d5bfe1e991496b17597b9d6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$unix(r3, &(0x7f0000000200)=@abs={0x1}, 0x6e)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r4=>0xffffffffffffffff})
getpid()
syz_open_pts(0xffffffffffffffff, 0x402)
sendmmsg$unix(r4, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24050095}}, {{&(0x7f0000000000)=@abs={0x1, 0x0, 0x4e22}, 0x6e, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x20890}}], 0x2, 0x0)
fsopen(&(0x7f0000000000)='tmpfs\x00', 0x0)
creat(&(0x7f0000000040)='./bus\x00', 0x0)
r5 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000005b00))
r6 = open(&(0x7f0000000000)='./bus\x00', 0x60342, 0x0)
r7 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
ftruncate(r6, 0x2007ffd)
sendfile(r6, r7, 0x0, 0x1000000201005)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080), 0x208e24b)

1.561921351s ago: executing program 0:
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6465636f6d706f73652c756d61736b3d30313737373737373737373737373737373737373737372c6e6f6465636f6d706f73652c6e6f626172726965722c747970653de5f2875e2c6e6c733d63703836322c00"], 0x6, 0x632, &(0x7f0000000800)="$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")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
open(&(0x7f0000007f80)='./bus\x00', 0x145142, 0x0)
ioctl$FS_IOC_FIEMAP(r0, 0x40086602, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'])

1.468458595s ago: executing program 3:
r0 = msgget(0x0, 0x0)
shmctl$IPC_SET(r0, 0xb, 0x0)

1.400801035s ago: executing program 2:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
connect$netrom(r0, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
socket(0x10, 0x3, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/mdstat\x00', 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket(0x0, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000040)={0x3fd}, 0x0, 0x0)

1.388933017s ago: executing program 0:
getrandom(&(0x7f0000001340)=""/4099, 0xfffffffffffffe16, 0x0)

1.380148518s ago: executing program 3:
socket(0x0, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x6}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000200), 0x2, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
write$cgroup_subtree(r3, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5)
r4 = openat$cgroup_type(r0, &(0x7f0000000040), 0x2, 0x0)
write$cgroup_type(r4, &(0x7f0000000080), 0x9)

1.10835617s ago: executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
write$binfmt_script(r1, &(0x7f0000000200)={'#! ', '', [{0x20, '#!2'}, {0x20, '#! '}, {0x20, '/proc/sys/net/ipv4/tcp_congestion_control\x00'}, {}], 0xa, "8855d1bef46f70e481dbdabbfc3bcc3f005c1079e7344e4392717247b88b05708cd1663511237737ac00004c03fa9d00005380"}, 0xfffffe59)
sendmsg$unix(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000040)='D', 0x1}], 0x1}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000002600)=[{&(0x7f00000002c0)="157248574be8a8a5aceead2ef8fbc46987455f9e9a57e845d9206a35026b7cf01514c53157ba3b6df8063d2756451b4cc1640d78741495603e0bc566271d2cb2ac567c5c1d9675da64a8fb2512386fb7a75bce9c1ccab594b96614b8a16aab26ffe7ca6401c14476c4bbc47c8aa11689c5dd8a47db7e3ecf3e5ccba75af30e60267f771a61d91bac10fabca6d2c4e8eadaf6463cc30daa3692fd1dbd52bf6c7ed98e774e999622d0adea703fd5ca99c7e4fda1f98f54296bc8a7a161716703e38051cc428ef4b9e52014fc1bcfb258d1b78338f611ffc54e065da77aed92083a623441a43b82e2a08d2ed33127e8fc0a0d266d1355696ca1ee72d41cd02ad5d0bc484bbfd67f110f2345768cfbbe2e5913d7742ea4d85100bfaf1e82c54d7c111c9d4f2d3f63f51aa2a55528fcb9a29876b83ce5dc012ce085867aaa1fe67d611619e7df9d1ebbc97317ad446467fa586b35b2130ea103fb0b5c66085bb797ee78d5c74969b702cc8a66ae375063e02b30428cc4d84267aedb1e4e2aeb982eb2607079899d18c487d4f8f4c0e8de3043ad7baf393a159ea0fd5d410ac81f8cb150a8d7c209b2dd4318305275695fe891651696893aee994f36fc592282f2244b591456f6284568e6c0a96a2322ee7c1470bea75d102a9557a7f26f1ad4d09b16a0929bedfa644913d18d4707f73998c1198f83f30e8caafce6ae5d29fa61218089ae9b85e980c880e0641cada63903508dae22a30548f6a2c40b7a794b1152b0e62e2dfea97dae08af56b3f7f097f25fdb707ef465b559e0b7350b705d61912e641c516b0a44a2c46f357596f4c8f4bf37f8ea741cb5d4629822dbf482b7960fcbb48dfefbb647b0e9b88b5e0320201e34d87361a152fddbecf59cb0a3cc54f540f573e47f14b060b51845a57007e5ef176de8ed9e337802929a5f1cde1490dd9a29d7cdd0b0f00348f882534338d6340c1f44f38dbe4796a92ce9f3df1485e8792f7a974a7f655e0bfb78e3c3987bea28e45b32746614a7428c51c417314fa294e8d908372bd7a552639841dfbcba750de6cf5ffba49adc10ee4b99c664b8725090dd1c89305d57e656ed33f39428067e2ba72ada13eb912881c68d15a91c84a25af1b197be2e16b6c1274a2ca4e209331e243ffe6eccb56557d0a08af8d154941d15ba774756e60f8b6633595a6c9f55d130a7d577e69036445246c1c999b10782b8c1f32ec5f8a70eafd6b3b010a9e63fe331d64cb70760083b50ac7f323dbc8405b3c5966c9f81411e986a4565cbad7cda4fe6abf435e62fc3658bed68fc09ff4c860b5afceb193fdf", 0x3ab}], 0x1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x3938700}}, 0x0)

1.105961731s ago: executing program 3:
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x10000000}}, 0x10)
bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000040), 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10)
sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0)

1.004497166s ago: executing program 3:
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
r0 = getpid()
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
futex(&(0x7f000000cffc)=0x1, 0x6, 0x0, 0x0, 0x0, 0x0)
r1 = io_uring_setup(0x30d3, &(0x7f0000000000))
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000080), 0xc)
read(r2, &(0x7f0000000180)=""/52, 0xfffffdef)
close_range(r1, 0xffffffffffffffff, 0x0)
creat(&(0x7f00000002c0)='./file0\x00', 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

779.90034ms ago: executing program 2:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000942000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f00000000c0)="48b8081c462832e1494f0f23d00f21f835200000090f23f848b800000000008000000f23c00f21f83502000d000f23f866ba4200ed262ef30fc776010f2162260f01c9c7442400a7000000c744240200700000ff1c2466baa100b00cee66ba4100b800000080eff20f102c52", 0x6c}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/block/loop0', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x275a, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7)
socket(0x10, 0x3, 0x0)
ioctl$FIONREAD(0xffffffffffffffff, 0x541b, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

285.181796ms ago: executing program 4:
r0 = eventfd(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
read$eventfd(r0, &(0x7f0000000000), 0x8)
write$FUSE_ATTR(r1, &(0x7f0000000180)={0x78}, 0x78)

222.895306ms ago: executing program 1:
readv(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
read$char_usb(0xffffffffffffffff, 0x0, 0x0)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
msgget$private(0x0, 0x0)
msgrcv(0x0, 0x0, 0x0, 0x0, 0x0)
rt_sigreturn()
pipe2$9p(&(0x7f0000000280), 0x0)
dup(0xffffffffffffffff)
rt_sigreturn()
poll(0x0, 0x0, 0x64)
rt_sigreturn()
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
mount$9p_tcp(0x0, 0x0, 0x0, 0x200000, 0x0)

170.153824ms ago: executing program 0:
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockname(r0, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, <r2=>0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f00000000c0)=0x80)
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x5451, 0x0)
r3 = dup3(r1, r2, 0x0)
sendmsg$nl_route_sched_retired(r2, 0x0, 0x0)
r4 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x9)
open$dir(&(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, &(0x7f0000002380)={0x6, 'syz_tun\x00', {}, 0x7})
ioctl$VT_DISALLOCATE(0xffffffffffffffff, 0x5450)

89.622086ms ago: executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x0, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f00000004c0), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x28011, r3, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000b80)={{0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x129, 0x800}, 0x9, 0x4, 0x7, 0xfbbc, 0x0, 0x0, 0xbe8})
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x5b40, 0x4)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendmmsg$inet(r4, &(0x7f0000004740)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000002c0)="6b2141f9237f25882696ff63ecb6cbb5fb55750aeaf84901d04c8259d691823b9fa40c6f214d0bdabc4223c47f1bc4558fda0e918fa980dc67f5d639eefb93b8ca98d07b6470fde54789da843266f765f7353470265b60c1419f8bbfc4315da394c5e7bc416457259e77042ea11efea207b109b0cd4d554a4aaa166f4e970294c97e640f67994003f8d2581bc1e56a34966e3bf7d4f847c402d77e75cb9437d3ae0323c1d17dcab86fa43bc6fefda061f631ded291aab501f4a37e5b63a3713075dbb19df8d87bebbe7634aad325255b739cf9d7c72c8665173a29", 0xdb}, {&(0x7f00000003c0)="aebd6e7bc7908981a851eac401fb293c42ca13ea60a29fabfb5e333ee9d1ad142a211c4517936f897d027e547b93e7cf4f28bc7b7965e6a812ac93177095b6f22dd9b8a40c939ab21217c32873d171abdc2eaa04f0f14054c2e787cece6d0066dc1cada22325496bd3eaa9779b92b51483a1bf6aa06cd1468ae0d6b756530421429ce7e49dd357c8acfb32e3d90faacfdf9dc2e20370e94506be3e0c287208a3672ccd88c3673179131e3b261956440ec75e78d1a5320f81ef1f8dd4a8b12a7eaff7be9c19007236e572b13cec9ef1e99f764cb9bb4580aa9d64f5803c97b1358d5ade6f55162cfec210fa0709cea0b9", 0xf0}, {&(0x7f00000004c0)="0416f70014", 0x5}, {&(0x7f0000000500)="a0aaa076bc5fce3fd614095fd6cd0499b5641a61c7c119b66587402b91253b9282d8926272014acc80d2bc03b1b883d10f669ee3506c5d3f8d65978d30e78726d96edbf820836a66ae8324ed3e35fb448a4e67c13943e22ef4a5eb69f44df25a75f535a47ea596dc1cc64322f79cafd53af9bda6c4c9e2f46966eae98eec1cc65872afd7c5f0eec20063c3ec", 0x8c}, {&(0x7f00000005c0)="77d61a4209d0d73df15dee87cba1ca7d48b43cafa02c0a7e41cf5225bef420c20161d0a88eccf9f606dc195210b1557b13115f0852d8c791f7494d09a30c6736a96759da1722e4a72cf30d405cd2f726113dfcb1d04e8d343b3375fca9d8cf3bdbf9aeddb5afd7940ce71f236382480cbb11775865a24ec18869147d914118e315e5bc6b85e1f0f63d7acee801a69bcfdb172a30ae989a6f1dda2658bdf64994dfcd49d79002d4f77caa536367b8b3ad27", 0xb1}, {&(0x7f0000000680)="425480e239f02b5e70081ba6fd5a8442011d7cf6065f854a5073a34d366ea1195870f6b15df5852e6c124638b65c701e72e748b8803dbf65ee1d55d0edbf0ba6d1d1e5e5280cfdd67367916a7141eb597e26eeac6a3c66496cfea362c8e76bd03537a98fe2fef08939deb88da5bb86ad5a7d5bb58232c0937980dba790cfcfd00f6ae9a6992a0262bee49cfff2afa3151cd57987fc98b61e502ded3eedffba5efc5abecc8bc9c7640909ce2a09ea4ca780afec4f173fa45f42af970d47046cb7811cdca51dcf4e519c", 0xc9}, {&(0x7f0000000780)="33d567bb672c01c7932e9c23ff8060a6b8bd96e6ea35d8af93577b401ee7194c0cc7b51b194e0ee628d81fa7035b5b3e151c64fa0c1d5db266d1c17f6129c9aeb5311d0b833a5f85e64fe82b735b4aa747a8fbfbfe61ebbbcd1a69e5211d773c029b8802e01989ad16e436b0bf924ed8ba8feed29173", 0x76}], 0x7}}], 0x1, 0x0)

0s ago: executing program 4:
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x1600008, &(0x7f0000000100)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c6465636f6d706f73652c756d61736b3d30313737373737373737373737373737373737373737372c6e6f6465636f6d706f73652c6e6f626172726965722c747970653de5f2875e2c6e6c733d63703836322c00"], 0x6, 0x632, &(0x7f0000000800)="$eJzs3UtsG2kdAPD/OI4TB9TN7qa7Ba1EtJUWRESbh7IQLpSHUA4rtFoOnKPWbay6aZW4KK0QCi9x4MKh4lwOuXFC6j1SOcMF9ZpjJVAvPaDcjGY8dpy386qd7e8Xjb/v8zfzzX/+9jzsyJoA3lrzE1HciCTmJz5bTdub6zO1zfWZoby7FhFpvRBRbBaRLEUkz5vdN9KHr6VP5vMnB63nSXXuixevN182W8XWwkkprQ0fvNxRmguu5VOMR8RAXu412O2oO8a7eeB4+/nvn/YPshlous1XW4mDXmvssXacxU+83wL9I2meN/cYjRjJztDN64DIjw6FNxvd2TvWUQ4AAAAuqHe2Ymut0Wj0Og4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4SPL7/yf5VGjVxyNp3f+/1DF7qYehnomNXgcAAAAAAAAAACfSGOhsfWMrtmI1LrV7k+x//h9njbHs8SvxMFaiEstxLVZjIepRj+WYiojRjoFKqwv1+vJUF0tO77vk9LluNAAAAAAAAAB82f025rf//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP0giRhoFtk01qqPRqEYEcMRUUrnW4v4V6t+kW30OgAAAAB4A97Ziq1YjUutdiPJPvN/kH3uH46HsRT1qEY9alGJW9l3Ac1P/YXN9Zna5vrMvXTaO+5f/tfIdBlGNmI0v3vYf81XsjnKcTuq2TPX4mbcj1q5c5QrrXj2j+s3r9Kxf5DrMrJbeZlu+Z/zsj+MZhkZbGdkMo8tzeO7h2fih69OtaapKLS/+Rk7h5yP5GWyq+y93ZmYjkKW79QHh2ci4pvP/vaLxdrS3cXbKxP9s0kn1MxEo9HMxFDWamXiw7cqE5PZtl9ut+fjp/HzmIjx+DyWoxq/jIWoRyXG4ydZbSF/P6ePo7syVdg59I0drc+PiqSUvy7No+jxYvo4W/ZSVONncT9uRSU+zf6mYyq+G7MxG3Mdr/DlLvb6wvH2+qvfyivpIf2Pedkf0ry+25HXzmPuaNbX+cx2lt47+2Nj8et5JV3H7yLix2e4naezOxPpWeLZV5t97x+eib9m1wkrtaW7y4sLD7pc3yd5me5Hf+irs0T6fnkvfbGy1s53R9r3/r59U1nfWLuvsKfvcrvvqD21lF/D7R1pOuv7cN++mazvSkffnuut9vUQAH1s5NsjpfJ/yv8sPy3/vrxY/mz4R0PfG/qoFIP/GPx+cXLgk8JHyd/jafx6+/M/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwciuPHt9dqNUqy0dWkuzm/xFdzdxRad3O6fCZk/xGPscZWaVWqwxHX4RxrErt3xEdzyS9jqcfKkP99ubv7XEJOH/X6/ceXF959Pg71XsLdyp3KkuDs7Nzk3Ozn85cv12tDUT6WJnsdZTAedg+6fc6EgAAAAAAAAAAAKBbh/8MYDCf63Q/J+jxJgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX3PxEFDciianJa5Npe3N9ppZOrfr2nMWIKERE8quI5HnEjWhOMdoxXHLQep5U57548Xrz5fZYxdb8hcOW685aPsV4RAzk5VmNd/PU4yXtLUwTdrV0uuDgzPw/AAD//4oVCL4=")
r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(0xffffffffffffffff, 0x2007ffb)
ioctl$FS_IOC_FIEMAP(r0, 0x40086602, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00'])

kernel console output (not intermixed with test programs):

0:50:50:50:50:50
[  227.118987][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  227.129475][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  227.179525][ T6040] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.196606][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  227.243627][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  227.252040][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.289729][ T6040] 8021q: adding VLAN 0 to HW filter on device team0
[  227.331501][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  227.351591][ T6227] fuse: Bad value for 'group_id'
[  227.357479][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  227.376324][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.383473][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.434018][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  227.449813][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  227.476914][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  227.477617][ T6227] loop3: detected capacity change from 0 to 2048
[  227.505263][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.512443][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.547648][ T6227]  loop3: p1 < > p4
[  227.559199][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  227.583008][ T6227] loop3: p4 size 8388608 extends beyond EOD, truncated
[  227.588576][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  227.609438][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  227.641157][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  227.693254][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  227.724758][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  227.757701][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  227.793511][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  227.819859][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.843212][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  227.872075][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  227.889937][ T6040] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  227.938356][ T3583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  227.948717][ T3583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  227.958306][ T3583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  228.001474][ T3583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  228.010528][ T3583] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  228.017941][ T3578] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  228.038147][   T26] audit: type=1326 audit(1719025060.210:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6237 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bac7d0a9 code=0x0
[  228.646682][ T6249] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  229.432767][ T6256] fuse: Bad value for 'fd'
[  229.465263][   T26] audit: type=1804 audit(1719025061.640:40): pid=6256 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="file0" dev="sda1" ino=1945 res=1 errno=0
[  229.764970][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  229.779515][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  229.819545][ T6234] chnl_net:caif_netlink_parms(): no params data found
[  229.848483][ T6040] 8021q: adding VLAN 0 to HW filter on device batadv0
[  229.953639][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  229.970222][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.064552][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  230.078323][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  230.086444][ T3578] Bluetooth: hci1: command tx timeout
[  230.118409][ T6040] device veth0_vlan entered promiscuous mode
[  230.133799][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  230.141717][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  230.199330][ T6040] device veth1_vlan entered promiscuous mode
[  230.210398][ T6234] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.217959][ T6234] bridge0: port 1(bridge_slave_0) entered disabled state
[  230.226716][ T6234] device bridge_slave_0 entered promiscuous mode
[  230.237159][ T6234] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.245029][ T6234] bridge0: port 2(bridge_slave_1) entered disabled state
[  230.253996][ T6234] device bridge_slave_1 entered promiscuous mode
[  230.287259][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  230.296213][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  230.304841][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  230.314426][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  230.342815][ T6040] device veth0_macvtap entered promiscuous mode
[  230.372090][ T6234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  230.414696][ T6040] device veth1_macvtap entered promiscuous mode
[  230.427217][ T6234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  230.537114][ T6276] fuse: Bad value for 'user_id'
[  230.555254][ T6276] overlayfs: failed to clone upperpath
[  230.580475][ T6234] team0: Port device team_slave_0 added
[  230.610458][ T6234] team0: Port device team_slave_1 added
[  230.755540][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_0
[  230.782633][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  230.836378][   T26] audit: type=1326 audit(1719025063.010:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x7ffc0000
[  230.901050][   T26] audit: type=1326 audit(1719025063.010:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x7ffc0000
[  230.925579][ T6234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  230.963629][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  230.972090][   T26] audit: type=1326 audit(1719025063.020:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f62bee7d0a9 code=0x7ffc0000
[  230.992903][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  231.026630][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.030493][   T26] audit: type=1326 audit(1719025063.020:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x7ffc0000
[  231.052982][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.110810][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.116944][   T26] audit: type=1326 audit(1719025063.020:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=73 compat=0 ip=0x7f62bee7d0a9 code=0x7ffc0000
[  231.169358][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.214963][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.258541][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.288270][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.332449][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.337687][   T26] audit: type=1326 audit(1719025063.020:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x7ffc0000
[  231.408849][ T6292] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  231.417128][ T3582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  231.425360][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.436777][ T3583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  231.445385][ T3583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  231.453348][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.464468][ T3583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  231.473325][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.483167][   T26] audit: type=1326 audit(1719025063.070:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6280 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x7ffc0000
[  231.506644][ T3583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  231.514561][ T3583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  231.522445][ T6234] batman_adv: batadv0: Adding interface: batadv_slave_1
[  231.529397][ T6234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  231.558957][ T6234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  231.575721][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  231.584636][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  231.613305][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.632395][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.649607][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.662265][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.672680][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.685144][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.695196][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.705806][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.715932][ T6040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.726577][ T6040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.738084][ T6040] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.757156][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  231.768448][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  231.804209][ T6040] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.813543][ T6040] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.823696][ T6040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.848036][ T6040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.947289][ T6234] device hsr_slave_0 entered promiscuous mode
[  231.962663][ T6234] device hsr_slave_1 entered promiscuous mode
[  232.102718][   T26] audit: type=1326 audit(1719025064.270:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6296 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bac7d0a9 code=0x0
[  232.162835][ T3583] Bluetooth: hci1: command tx timeout
[  232.382542][ T3663] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  232.415528][ T4931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.746548][ T4931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.186198][ T3663] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.237158][ T6304] loop3: detected capacity change from 0 to 256
[  233.252568][ T6304] exfat: Deprecated parameter 'namecase'
[  233.277014][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  233.314043][ T6304] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011fc6, chksum : 0x5c39844e, utbl_chksum : 0xe619d30d)
[  233.344151][ T3663] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.429145][ T4924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  233.448411][ T4924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  233.478977][ T3663] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.529916][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  233.603012][ T3583] Bluetooth: hci5: command tx timeout
[  233.649268][ T6234] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.787053][ T6234] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.869652][ T6290] chnl_net:caif_netlink_parms(): no params data found
[  233.923808][ T6234] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  233.936222][ T6315] loop0: detected capacity change from 0 to 1024
[  234.042654][ T6234] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.217207][ T6290] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.226106][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.235054][ T6290] device bridge_slave_0 entered promiscuous mode
[  234.242799][ T3583] Bluetooth: hci1: command tx timeout
[  234.303384][ T6290] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.312275][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.330347][ T6290] device bridge_slave_1 entered promiscuous mode
[  234.446454][ T6290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.524288][ T6290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.657035][ T6290] team0: Port device team_slave_0 added
[  234.695435][ T6234] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  234.746511][ T6290] team0: Port device team_slave_1 added
[  234.760571][ T6234] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  234.833241][ T6234] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  234.894714][ T6234] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  235.043965][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_0
[  235.050936][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.107497][ T6290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  235.143080][ T6290] batman_adv: batadv0: Adding interface: batadv_slave_1
[  235.160299][ T6290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  235.211629][ T6290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  235.541104][ T6290] device hsr_slave_0 entered promiscuous mode
[  235.565559][ T6290] device hsr_slave_1 entered promiscuous mode
[  235.592057][ T6290] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.621829][ T6290] Cannot create hsr debugfs directory
[  235.682835][ T3583] Bluetooth: hci5: command tx timeout
[  235.880077][ T6234] 8021q: adding VLAN 0 to HW filter on device bond0
[  235.918908][ T6234] 8021q: adding VLAN 0 to HW filter on device team0
[  235.932901][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  235.943288][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  236.074150][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  236.104463][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  236.146368][ T4509] bridge0: port 1(bridge_slave_0) entered blocking state
[  236.153562][ T4509] bridge0: port 1(bridge_slave_0) entered forwarding state
[  236.252042][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  236.331465][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  236.410206][ T4509] bridge0: port 2(bridge_slave_1) entered blocking state
[  236.417412][ T4509] bridge0: port 2(bridge_slave_1) entered forwarding state
[  236.539017][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  236.583586][ T3583] Bluetooth: hci1: command tx timeout
[  236.701110][ T6350] loop3: detected capacity change from 0 to 32768
[  236.730485][ T6350] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6350)
[  236.775064][ T6359] fuse: Invalid rootmode
[  236.781101][ T6350] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  236.797583][   T26] audit: type=1804 audit(1719025068.970:49): pid=6359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="file0" dev="sda1" ino=1947 res=1 errno=0
[  236.806522][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  236.852555][ T6350] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  236.861252][ T6350] BTRFS info (device loop3): using free space tree
[  236.870546][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  236.923262][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  236.954501][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  236.976838][ T3578] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  236.986637][ T3578] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  237.011108][ T3578] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  237.020995][ T3578] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  237.029121][ T3582] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  237.037919][ T3582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  237.080531][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  237.090223][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  237.108306][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  237.118058][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  237.126768][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  237.147324][ T6350] BTRFS info (device loop3): enabling ssd optimizations
[  237.230645][   T26] audit: type=1800 audit(1719025069.400:50): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0
[  237.236449][ T6234] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  237.328909][ T6234] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  237.379705][ T5963] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  237.422759][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  237.431314][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  237.666971][ T3663] device hsr_slave_0 left promiscuous mode
[  237.696328][ T3663] device hsr_slave_1 left promiscuous mode
[  237.717646][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.742544][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.759755][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.767674][ T3578] Bluetooth: hci5: command tx timeout
[  237.784236][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.808680][ T6403] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  237.809708][ T3663] device bridge_slave_0 left promiscuous mode
[  237.831062][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.852760][ T3663] device hsr_slave_0 left promiscuous mode
[  237.891376][ T3663] device hsr_slave_1 left promiscuous mode
[  237.910198][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.922888][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.956100][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.991141][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.012547][ T3663] device bridge_slave_1 left promiscuous mode
[  238.018930][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.044183][ T3663] device bridge_slave_0 left promiscuous mode
[  238.064311][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.085515][ T3663] device veth1_macvtap left promiscuous mode
[  238.091633][ T3663] device veth0_macvtap left promiscuous mode
[  238.098481][ T3663] device veth1_vlan left promiscuous mode
[  238.105494][ T3663] device veth0_vlan left promiscuous mode
[  238.115212][ T3663] device veth1_macvtap left promiscuous mode
[  238.121323][ T3663] device veth0_macvtap left promiscuous mode
[  238.127764][ T3663] device veth1_vlan left promiscuous mode
[  238.133791][ T3663] device veth0_vlan left promiscuous mode
[  238.489439][ T3663] team0 (unregistering): Port device team_slave_1 removed
[  238.507007][ T3663] team0 (unregistering): Port device team_slave_0 removed
[  238.521834][ T3663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.539413][ T3663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.605663][ T3663] bond0 (unregistering): Released all slaves
[  238.760921][ T3663] team0 (unregistering): Port device team_slave_1 removed
[  238.789425][ T3663] team0 (unregistering): Port device team_slave_0 removed
[  238.826553][ T3663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  238.846860][ T3663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  238.939534][ T3663] bond0 (unregistering): Released all slaves
[  239.122491][ T3578] Bluetooth: hci0: command tx timeout
[  239.343264][   T26] audit: type=1326 audit(1719025071.520:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6418 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  239.414614][ T6290] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  239.431384][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  239.452814][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  239.631242][ T6290] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  239.652178][ T6374] chnl_net:caif_netlink_parms(): no params data found
[  239.675684][ T6234] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.441347][ T3578] Bluetooth: hci5: command tx timeout
[  240.449630][ T6290] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  240.496117][ T6290] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  240.647937][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  240.667069][   T26] audit: type=1326 audit(1719025072.830:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6426 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  240.723605][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  240.764246][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  240.802150][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  240.893325][ T6234] device veth0_vlan entered promiscuous mode
[  240.910891][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  240.931187][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  241.001110][ T6234] device veth1_vlan entered promiscuous mode
[  241.095519][   T26] audit: type=1804 audit(1719025073.270:53): pid=6442 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0
[  241.135139][ T6290] 8021q: adding VLAN 0 to HW filter on device bond0
[  241.142865][ T6374] bridge0: port 1(bridge_slave_0) entered blocking state
[  241.156042][ T6374] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.171531][ T6450] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  241.191870][ T6450] cramfs: wrong magic
[  241.194322][ T6374] device bridge_slave_0 entered promiscuous mode
[  241.202505][ T3578] Bluetooth: hci0: command tx timeout
[  241.242204][ T6234] device veth0_macvtap entered promiscuous mode
[  241.288411][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  241.307623][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  241.338202][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  241.367546][ T4508] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  241.393995][ T6374] bridge0: port 2(bridge_slave_1) entered blocking state
[  241.401135][ T6374] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.431700][ T6374] device bridge_slave_1 entered promiscuous mode
[  241.512785][ T6234] device veth1_macvtap entered promiscuous mode
[  241.553062][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  241.571274][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  241.605629][ T6374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  241.639359][ T6290] 8021q: adding VLAN 0 to HW filter on device team0
[  241.659708][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  241.668728][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  241.696041][ T6374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  241.723690][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.752457][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.782490][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.814303][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.852419][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.882479][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.902492][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  241.932971][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  241.954089][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.022874][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  242.031605][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  242.061200][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  242.105333][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  242.143014][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state
[  242.150239][ T3614] bridge0: port 1(bridge_slave_0) entered forwarding state
[  242.198876][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  242.229663][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  242.259828][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state
[  242.267018][ T3614] bridge0: port 2(bridge_slave_1) entered forwarding state
[  242.305385][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  242.324891][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  242.346103][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.373106][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.392486][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.412396][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.440745][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.471993][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.491396][ T6234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.512269][ T6234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.537286][ T6234] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.568548][ T6374] team0: Port device team_slave_0 added
[  242.584968][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  242.606799][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  242.637804][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  242.671392][ T6374] team0: Port device team_slave_1 added
[  242.754976][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  242.775660][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  242.804490][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  242.830794][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  242.880712][ T6290] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  242.915396][ T6290] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  242.979748][ T6234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  242.989018][ T6234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.022378][ T6234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.031113][ T6234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.079923][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.089708][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.192704][ T6374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.233392][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  243.242116][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  243.273559][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  243.282136][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  243.290381][ T3578] Bluetooth: hci0: command tx timeout
[  243.323109][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  243.331924][ T4594] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  243.362177][ T6374] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.372510][ T6374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  243.452420][ T6374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.657971][ T6374] device hsr_slave_0 entered promiscuous mode
[  243.700040][ T6374] device hsr_slave_1 entered promiscuous mode
[  243.714567][ T6374] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  243.732400][ T6374] Cannot create hsr debugfs directory
[  243.747228][ T6481] loop3: detected capacity change from 0 to 32768
[  243.799248][ T6481] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6481)
[  243.903068][ T4914] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.911215][ T4914] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.942708][ T6481] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  243.982460][ T6481] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  244.013132][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  244.029315][ T6481] BTRFS info (device loop3): using free space tree
[  244.168637][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  244.188030][ T4914] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.205640][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  244.241820][ T6290] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.248844][ T4914] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.285666][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  244.406852][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  244.435787][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  244.444271][ T6481] BTRFS info (device loop3): enabling ssd optimizations
[  244.481721][   T26] audit: type=1326 audit(1719025076.650:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6518 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x0
[  244.539379][ T6374] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.592752][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  244.603483][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  244.615427][ T6290] device veth0_vlan entered promiscuous mode
[  244.654819][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  244.671412][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  244.689650][ T5963] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  244.768862][ T6374] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.872646][   T26] audit: type=1804 audit(1719025077.040:55): pid=6525 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1059060057/syzkaller.Ayk6is/0/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0
[  244.904881][ T6290] device veth1_vlan entered promiscuous mode
[  244.969421][ T6374] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  246.692785][ T3578] Bluetooth: hci0: command tx timeout
[  246.721162][ T6290] device veth0_macvtap entered promiscuous mode
[  247.831702][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  247.844634][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  247.854012][ T3614] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  247.868186][ T6290] device veth1_macvtap entered promiscuous mode
[  247.984853][   T26] audit: type=1326 audit(1719025080.160:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6532 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  248.001367][ T6374] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  248.136573][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.168405][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.200563][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.221598][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.255637][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.282429][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.302516][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.418594][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.472474][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  248.522272][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.543384][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_0
[  248.608081][ T6541] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET)
[  248.705460][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  248.801542][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  248.881121][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.013954][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.136748][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.162467][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.185265][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.202996][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.221390][ T6290] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  249.234502][ T6290] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  249.272593][ T6290] batman_adv: batadv0: Interface activated: batadv_slave_1
[  249.284432][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  249.303432][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  249.322823][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  249.341750][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  249.410005][ T6290] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  249.442103][ T6290] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  249.459257][ T6290] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  249.468484][ T6290] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  249.867926][ T6374] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  249.972933][ T6374] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  250.582663][ T6374] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  250.683653][ T4936] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.783690][ T4936] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  250.829509][ T6374] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  250.868255][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  250.934650][ T4270] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  250.968808][ T4270] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  251.119678][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.469091][   T26] audit: type=1804 audit(1719025084.470:57): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir777213662/syzkaller.NaUo7Y/0/bus" dev="sda1" ino=1963 res=1 errno=0
[  252.546106][   T26] audit: type=1326 audit(1719025084.470:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6570 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fae9b07d0a9 code=0x0
[  252.851225][ T6374] 8021q: adding VLAN 0 to HW filter on device bond0
[  252.919997][ T6374] 8021q: adding VLAN 0 to HW filter on device team0
[  253.064574][ T6580] team0: Port device team_slave_0 removed
[  253.070837][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  253.095690][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  253.115238][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  253.160026][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  253.209196][ T3331] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.216364][ T3331] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.264941][   T26] audit: type=1800 audit(1719025085.440:59): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1960 res=0 errno=0
[  253.289366][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  253.299701][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  253.390490][ T3331] bridge0: port 2(bridge_slave_1) entered blocking state
[  253.397709][ T3331] bridge0: port 2(bridge_slave_1) entered forwarding state
[  253.426030][ T6589] loop3: detected capacity change from 0 to 256
[  253.724876][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  254.027671][   T26] audit: type=1326 audit(1719025086.200:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6592 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  254.044081][ T6594] loop1: detected capacity change from 0 to 1024
[  254.079510][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  254.157580][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  254.202092][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  254.227082][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  254.251020][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  254.289625][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  254.338119][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  254.384707][   T26] audit: type=1800 audit(1719025086.560:61): pid=6605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1963 res=0 errno=0
[  254.395874][ T4598] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  254.443129][   T26] audit: type=1804 audit(1719025086.620:62): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0
[  254.449416][ T6374] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  254.518339][ T6607] loop2: detected capacity change from 0 to 256
[  254.608408][ T6374] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  254.641782][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  254.683285][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  254.692284][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  254.895368][ T3663] device hsr_slave_0 left promiscuous mode
[  254.948715][ T3663] device hsr_slave_1 left promiscuous mode
[  254.957930][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  254.978456][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  254.999542][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  255.029158][ T6611] fuse: Invalid rootmode
[  255.036019][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  255.066217][   T26] audit: type=1804 audit(1719025087.240:63): pid=6611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="file0" dev="sda1" ino=1943 res=1 errno=0
[  255.097634][ T3663] device bridge_slave_1 left promiscuous mode
[  255.112497][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.145696][ T3663] device bridge_slave_0 left promiscuous mode
[  255.158248][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.197753][ T3663] device veth1_macvtap left promiscuous mode
[  255.216860][ T3663] device veth0_macvtap left promiscuous mode
[  255.244948][ T3663] device veth1_vlan left promiscuous mode
[  255.263854][ T3663] device veth0_vlan left promiscuous mode
[  255.694236][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  255.700643][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  260.018755][ T3663] team0 (unregistering): Port device team_slave_1 removed
[  260.087670][ T3663] team0 (unregistering): Port device team_slave_0 removed
[  260.211671][ T3663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  260.290856][ T3663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  260.295335][ T6638] fuse: Bad value for 'user_id'
[  260.719381][ T6638] loop2: detected capacity change from 0 to 2048
[  261.086581][ T6638]  loop2: p1 < > p4
[  261.088246][ T3663] bond0 (unregistering): Released all slaves
[  261.096847][ T6638] loop2: p4 size 8388608 extends beyond EOD, truncated
[  261.218525][ T6643] loop3: detected capacity change from 0 to 1024
[  261.601437][ T6650] fuse: Bad value for 'rootmode'
[  261.614137][   T26] audit: type=1804 audit(1719025093.790:64): pid=6650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1059060057/syzkaller.Ayk6is/10/file0" dev="sda1" ino=1948 res=1 errno=0
[  261.719384][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  261.736090][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  261.770724][ T6374] 8021q: adding VLAN 0 to HW filter on device batadv0
[  261.832652][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  261.849720][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  261.878592][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  261.916119][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  261.940515][ T6374] device veth0_vlan entered promiscuous mode
[  261.967232][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  262.063766][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  262.082089][ T6374] device veth1_vlan entered promiscuous mode
[  262.225606][ T6374] device veth0_macvtap entered promiscuous mode
[  262.252155][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  262.272235][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  262.286600][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  262.329341][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  262.361523][ T6374] device veth1_macvtap entered promiscuous mode
[  262.389966][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  262.413324][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  262.429671][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.478633][ T3583] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  262.492861][ T3583] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  262.501168][ T3582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  262.510395][ T3583] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  262.518284][ T3582] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  262.526069][ T3583] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  262.546503][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.706527][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.799779][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.924498][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.060155][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.176215][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.280599][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.342635][   T26] audit: type=1326 audit(1719025095.520:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6674 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  263.343989][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  263.378006][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.459518][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.511279][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.541457][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.719898][ T6678] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  263.758067][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  265.825142][ T3582] Bluetooth: hci3: command tx timeout
[  265.883733][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  265.924373][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.002610][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.064386][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.090720][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.119003][ T6374] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.183816][ T6374] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.276676][ T6374] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.286955][ T3578] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  266.297024][ T3578] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  266.306509][ T3578] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  266.467367][ T3578] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  266.479073][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  266.488479][ T3578] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  266.496422][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  266.504744][ T3578] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  266.513286][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  266.548332][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  266.569170][ T6374] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.589853][ T6374] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.600576][ T6374] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.610439][ T6374] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.203498][ T4933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.211589][ T4933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.402862][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  267.439170][ T6694] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  267.448028][ T6694] cramfs: wrong magic
[  267.491188][ T4933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.558758][ T4933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.632455][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  267.831922][ T6664] chnl_net:caif_netlink_parms(): no params data found
[  267.842958][ T3582] Bluetooth: hci3: command tx timeout
[  268.563626][ T3582] Bluetooth: hci4: command tx timeout
[  269.073508][ T6687] chnl_net:caif_netlink_parms(): no params data found
[  269.092787][ T6664] bridge0: port 1(bridge_slave_0) entered blocking state
[  269.226470][ T6664] bridge0: port 1(bridge_slave_0) entered disabled state
[  269.238817][   T26] audit: type=1326 audit(1719025101.410:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6730 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  269.340659][ T6733] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  269.432950][ T6664] device bridge_slave_0 entered promiscuous mode
[  269.546235][ T6664] bridge0: port 2(bridge_slave_1) entered blocking state
[  269.612094][ T6664] bridge0: port 2(bridge_slave_1) entered disabled state
[  269.720419][ T6664] device bridge_slave_1 entered promiscuous mode
[  269.949769][ T3582] Bluetooth: hci3: command tx timeout
[  270.142626][   T26] audit: type=1804 audit(1719025102.310:67): pid=6736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1938 res=1 errno=0
[  270.213781][ T6664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  270.236295][   T26] audit: type=1326 audit(1719025102.410:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6739 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f0547d0a9 code=0x0
[  270.239910][ T6664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  270.662371][ T3582] Bluetooth: hci4: command tx timeout
[  271.268846][ T6664] team0: Port device team_slave_0 added
[  271.285988][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state
[  271.298444][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state
[  271.325766][ T6687] device bridge_slave_0 entered promiscuous mode
[  271.356638][ T6664] team0: Port device team_slave_1 added
[  271.423859][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state
[  271.431581][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state
[  271.471376][ T6687] device bridge_slave_1 entered promiscuous mode
[  271.824977][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_0
[  271.852242][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.002958][ T3582] Bluetooth: hci3: command tx timeout
[  272.142277][ T6664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  272.182513][   T26] audit: type=1326 audit(1719025104.340:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6755 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  272.196807][ T6664] batman_adv: batadv0: Adding interface: batadv_slave_1
[  272.248769][ T6664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  272.292032][ T6664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  272.482182][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  272.742614][ T3582] Bluetooth: hci4: command tx timeout
[  273.077230][ T6664] device hsr_slave_0 entered promiscuous mode
[  273.181209][ T6664] device hsr_slave_1 entered promiscuous mode
[  273.210598][ T3583] Bluetooth: hci2: command 0x0406 tx timeout
[  273.217695][ T6664] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  273.232421][ T6664] Cannot create hsr debugfs directory
[  273.350140][ T3663] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.407065][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  273.517143][ T3663] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.579895][ T6687] team0: Port device team_slave_0 added
[  273.611355][ T6687] team0: Port device team_slave_1 added
[  273.740801][ T3663] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  273.774367][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0
[  273.954670][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.318722][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  274.458028][ T3663] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  274.507327][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1
[  274.542493][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  274.608094][ T6771] loop0: detected capacity change from 0 to 32768
[  274.634484][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  274.634707][ T6771] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6771)
[  274.690116][ T6771] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  274.708663][ T6771] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  274.720273][ T6771] BTRFS info (device loop0): using free space tree
[  274.807872][ T3583] Bluetooth: hci4: command tx timeout
[  274.965833][ T6687] device hsr_slave_0 entered promiscuous mode
[  274.998915][ T6687] device hsr_slave_1 entered promiscuous mode
[  275.019818][ T6687] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  275.029337][ T6687] Cannot create hsr debugfs directory
[  275.116564][ T6800] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  275.502027][ T6771] BTRFS info (device loop0): enabling ssd optimizations
[  275.555299][ T6664] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  275.772574][ T6374] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  275.874010][ T6664] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.036400][ T6664] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  276.235593][ T6664] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.607359][ T6664] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  279.960529][ T6664] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  280.288750][ T6664] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  280.619943][ T6664] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  280.714016][   T26] audit: type=1326 audit(1719025112.890:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6848 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x0
[  281.135203][ T6687] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  281.190607][ T6687] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  281.234798][ T6687] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  281.261740][ T6664] 8021q: adding VLAN 0 to HW filter on device bond0
[  281.275791][ T6687] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  281.334274][ T6664] 8021q: adding VLAN 0 to HW filter on device team0
[  281.357000][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  281.370855][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  281.554816][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  281.567116][ T6859] loop0: detected capacity change from 0 to 32768
[  281.592744][ T6859] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6859)
[  281.603318][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  281.615359][ T6859] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  281.627174][ T6859] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  281.646241][ T6859] BTRFS info (device loop0): using free space tree
[  281.692002][ T4600] bridge0: port 1(bridge_slave_0) entered blocking state
[  281.699201][ T4600] bridge0: port 1(bridge_slave_0) entered forwarding state
[  281.707243][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  281.727642][ T4600] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  281.763124][ T4600] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.770289][ T4600] bridge0: port 2(bridge_slave_1) entered forwarding state
[  281.891800][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  281.906264][ T4599] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  281.968511][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  281.980602][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  281.982505][ T6859] BTRFS info (device loop0): enabling ssd optimizations
[  282.014357][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  282.059169][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  282.092204][ T4592] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  282.148003][ T6374] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  282.200185][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  282.220013][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  282.253801][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  282.677339][ T3663] device hsr_slave_0 left promiscuous mode
[  282.793141][ T3663] device hsr_slave_1 left promiscuous mode
[  282.947599][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.091759][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.154497][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.167756][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.224519][ T3663] device bridge_slave_1 left promiscuous mode
[  283.230815][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.259924][ T3663] device bridge_slave_0 left promiscuous mode
[  283.278976][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.356915][ T3663] device hsr_slave_0 left promiscuous mode
[  283.364417][ T3663] device hsr_slave_1 left promiscuous mode
[  283.385076][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  283.404820][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_0
[  283.428665][ T3663] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  283.451869][ T3663] batman_adv: batadv0: Removing interface: batadv_slave_1
[  283.485949][ T3663] device bridge_slave_1 left promiscuous mode
[  283.492200][ T3663] bridge0: port 2(bridge_slave_1) entered disabled state
[  283.511736][ T3663] device bridge_slave_0 left promiscuous mode
[  283.521544][ T3663] bridge0: port 1(bridge_slave_0) entered disabled state
[  283.822103][ T3663] device veth1_macvtap left promiscuous mode
[  283.875877][ T3663] device veth0_macvtap left promiscuous mode
[  283.918214][ T3663] device veth1_vlan left promiscuous mode
[  283.999076][ T3663] device veth0_vlan left promiscuous mode
[  284.065380][ T3663] device veth1_macvtap left promiscuous mode
[  284.123525][ T3663] device veth0_macvtap left promiscuous mode
[  284.155887][ T3663] device veth1_vlan left promiscuous mode
[  284.185447][ T3663] device veth0_vlan left promiscuous mode
[  284.305380][   T26] audit: type=1326 audit(1719025116.480:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6930 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  284.488860][ T3663] team0 (unregistering): Port device team_slave_1 removed
[  284.501991][ T3663] team0 (unregistering): Port device team_slave_0 removed
[  284.524591][ T3663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.539773][ T3663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.610388][ T3663] bond0 (unregistering): Released all slaves
[  284.678991][   T26] audit: type=1804 audit(1719025116.850:72): pid=6933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0
[  284.759321][ T3663] team0 (unregistering): Port device team_slave_1 removed
[  284.777364][ T3663] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  284.793800][ T3663] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  284.855042][ T3663] bond0 (unregistering): Released all slaves
[  284.925779][ T6664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  284.939898][ T6664] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  284.948675][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  284.966321][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  285.028920][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0
[  285.095365][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  285.114206][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  285.146908][ T6687] 8021q: adding VLAN 0 to HW filter on device team0
[  285.187256][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  285.203440][ T3571] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  285.240355][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state
[  285.247547][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state
[  285.297481][ T6942] 9pnet_fd: Insufficient options for proto=fd
[  285.328119][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  285.353295][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  285.425457][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  285.453175][ T4601] bridge0: port 2(bridge_slave_1) entered blocking state
[  285.460357][ T4601] bridge0: port 2(bridge_slave_1) entered forwarding state
[  285.631962][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  285.645228][ T6945] device team0 entered promiscuous mode
[  285.664077][ T6945] device team_slave_0 entered promiscuous mode
[  285.670591][ T6945] device team_slave_1 entered promiscuous mode
[  285.693091][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  285.704859][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  285.734962][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  285.900970][ T6941] device team0 left promiscuous mode
[  285.907135][ T6941] device team_slave_0 left promiscuous mode
[  286.009642][ T6941] device team_slave_1 left promiscuous mode
[  286.210780][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  286.259420][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  286.339526][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  286.452828][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  286.461440][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  286.499772][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  286.533109][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  286.557988][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  286.580879][ T3331] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  286.591422][ T6687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  286.611991][ T6664] 8021q: adding VLAN 0 to HW filter on device batadv0
[  287.473093][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  287.481909][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  287.581189][ T6664] device veth0_vlan entered promiscuous mode
[  287.840283][ T6664] device veth1_vlan entered promiscuous mode
[  288.017072][   T26] audit: type=1326 audit(1719025120.190:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6967 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f0547d0a9 code=0x0
[  288.195524][ T6664] device veth0_macvtap entered promiscuous mode
[  288.366216][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  288.383294][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  288.411574][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  288.444863][ T6980] loop2: detected capacity change from 0 to 2048
[  288.460967][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  288.469393][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  288.493264][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  288.532646][ T6980]  loop2: p3 < > p4 < >
[  288.536865][ T6980] loop2: partition table partially beyond EOD, truncated
[  288.544144][ T6980] loop2: p3 start 4284289 is beyond EOD, truncated
[  288.552591][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  288.560462][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  288.586371][ T4601] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  289.233978][ T6664] device veth1_macvtap entered promiscuous mode
[  289.513084][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.526030][ T6989] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'.
[  289.565891][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.600183][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.641373][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.682159][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.737336][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.755473][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  289.772274][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.789767][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_0
[  289.806901][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.883978][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.902466][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.913708][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.929592][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.948252][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.958688][ T6664] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  289.970740][ T6664] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  289.984452][ T6664] batman_adv: batadv0: Interface activated: batadv_slave_1
[  289.996075][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  290.024280][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  290.044982][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  290.053996][ T4509] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  290.067879][ T6664] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  290.078512][ T6664] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  290.088802][ T6664] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  290.105241][ T6664] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  290.204166][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0
[  290.227450][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  290.237683][ T6909] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  290.377694][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  290.395593][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  290.439155][ T3645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.458957][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  290.473446][ T4061] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  290.483155][ T3645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.513783][ T6687] device veth0_vlan entered promiscuous mode
[  290.555330][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  290.568546][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  290.597439][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  290.628481][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  290.640180][ T6687] device veth1_vlan entered promiscuous mode
[  290.644974][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  290.687800][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  290.727732][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  290.755651][ T7008] 9pnet_fd: Insufficient options for proto=fd
[  290.757462][ T4506] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  290.789101][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.825290][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.866513][ T7006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.894328][ T7006] batman_adv: batadv0: Removing interface: batadv_slave_1
[  291.028664][ T7008] device team0 entered promiscuous mode
[  291.052054][ T7008] device team_slave_1 entered promiscuous mode
[  291.074595][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  291.084918][ T4503] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  291.098128][ T6687] device veth0_macvtap entered promiscuous mode
[  291.110217][ T7007] device team0 left promiscuous mode
[  291.117480][ T7007] device team_slave_1 left promiscuous mode
[  291.143104][ T6687] device veth1_macvtap entered promiscuous mode
[  291.267875][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.340200][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  291.372739][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  291.563245][ T7028] fuse: Bad value for 'user_id'
[  291.572006][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.251397][ T7028] overlayfs: failed to clone upperpath
[  292.277083][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.372391][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.420107][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  292.524543][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.536122][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0
[  292.546440][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.567187][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.637950][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.688054][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.721416][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.751904][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.811227][ T6687] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  292.931190][ T6687] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  292.966093][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1
[  292.999765][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  293.018490][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  293.037870][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  293.087158][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  293.120727][ T3611] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  293.144739][ T6687] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  293.167118][ T6687] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  293.183480][ T6687] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  293.194092][ T6687] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  293.588541][ T3775] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  293.603426][ T7068] loop1: detected capacity change from 0 to 2048
[  293.611755][ T3775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  293.643556][ T7068]  loop1: p3 < > p4 < >
[  293.647820][ T7068] loop1: partition table partially beyond EOD, truncated
[  293.655156][ T7068] loop1: p3 start 4284289 is beyond EOD, truncated
[  293.925651][ T4595] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  294.171625][ T7071] fuse: Bad value for 'user_id'
[  294.710678][ T7077] overlayfs: failed to clone upperpath
[  294.827722][ T4654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  294.850990][ T4654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  294.929313][ T4507] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  296.320946][ T7126] fuse: Bad value for 'user_id'
[  296.359839][ T7126] loop3: detected capacity change from 0 to 2048
[  296.476891][ T7126]  loop3: p1 < > p4
[  296.482844][ T7126] loop3: p4 size 8388608 extends beyond EOD, truncated
[  297.545689][ T7150] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  297.552530][ T7150] cramfs: wrong magic
[  299.163938][ T7191] fuse: Bad value for 'fd'
[  299.193984][   T26] audit: type=1804 audit(1719025131.370:74): pid=7191 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1059060057/syzkaller.Ayk6is/54/file0" dev="sda1" ino=1937 res=1 errno=0
[  299.790079][ T7180] loop3: detected capacity change from 0 to 32768
[  299.859702][ T3002] Dev loop3 SGI disklabel: csum bad, label corrupted
[  299.877684][ T7207] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  299.886253][ T7207] cramfs: wrong magic
[  299.947489][ T3653] I/O error, dev loop3, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  300.806606][ T3611] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  301.184968][ T3611] usb 4-1: Using ep0 maxpacket: 16
[  301.375768][ T3611] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  301.450909][ T3611] usb 4-1: config 1 interface 0 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  301.505498][ T3611] usb 4-1: config 1 interface 0 has no altsetting 0
[  301.784010][ T3611] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  301.793956][ T3611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.803221][ T3611] usb 4-1: Product: syz
[  301.807532][ T3611] usb 4-1: Manufacturer: syz
[  301.812194][ T3611] usb 4-1: SerialNumber: syz
[  301.858719][ T7259] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  301.865756][ T7259] cramfs: wrong magic
[  302.163284][ T3611] usb 4-1: MIDIStreaming interface descriptor not found
[  302.241184][ T3611] usb 4-1: USB disconnect, device number 12
[  302.330833][ T4272] udevd[4272]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  302.366618][ T7262] fuse: Bad value for 'user_id'
[  302.395890][ T7262] loop2: detected capacity change from 0 to 2048
[  302.453740][ T7262]  loop2: p1 < > p4
[  302.458969][ T7262] loop2: p4 size 8388608 extends beyond EOD, truncated
[  304.011648][ T7288] process 'syz-executor.3' launched './file0' with NULL argv: empty string added
[  304.902945][ T7308] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  304.909868][ T7308] cramfs: wrong magic
[  305.098797][ T7313] fuse: Bad value for 'fd'
[  305.140994][ T7313] loop2: detected capacity change from 0 to 2048
[  305.186639][ T7313]  loop2: p1 < > p4
[  305.195987][ T7313] loop2: p4 size 8388608 extends beyond EOD, truncated
[  307.064499][ T7346] fuse: Bad value for 'fd'
[  307.306357][ T7346] loop1: detected capacity change from 0 to 2048
[  307.343782][   T26] audit: type=1326 audit(1719025139.430:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7349 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x0
[  307.569921][ T3002]  loop1: p1 < > p4
[  307.574959][ T3002] loop1: p4 size 8388608 extends beyond EOD, truncated
[  307.728460][ T7368] 9pnet_fd: Insufficient options for proto=fd
[  307.745715][ T7368] device team0 entered promiscuous mode
[  307.751709][ T7368] device team_slave_0 entered promiscuous mode
[  307.758577][ T7368] device team_slave_1 entered promiscuous mode
[  307.766076][ T7366] device team0 left promiscuous mode
[  307.771571][ T7366] device team_slave_0 left promiscuous mode
[  307.778437][ T7366] device team_slave_1 left promiscuous mode
[  308.234167][   T26] audit: type=1326 audit(1719025140.410:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7377 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x0
[  309.218486][   T26] audit: type=1804 audit(1719025141.390:77): pid=7386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1059060057/syzkaller.Ayk6is/72/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0
[  310.308701][ T7410] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  310.315580][ T7410] cramfs: wrong magic
[  313.825911][   T26] audit: type=1326 audit(1719025146.000:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7443 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f0547d0a9 code=0x0
[  315.636333][ T7473] 9pnet_fd: Insufficient options for proto=fd
[  317.043929][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  317.050256][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  317.186254][ T7502] fuse: Unknown parameter '0x0000000000000004'
[  317.214139][   T26] audit: type=1804 audit(1719025149.390:79): pid=7502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1059060057/syzkaller.Ayk6is/83/file0" dev="sda1" ino=1948 res=1 errno=0
[  317.412051][   T26] audit: type=1326 audit(1719025149.580:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  317.502454][   T26] audit: type=1326 audit(1719025149.590:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  317.636766][   T26] audit: type=1326 audit(1719025149.590:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  317.862431][   T26] audit: type=1326 audit(1719025149.590:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  317.906729][ T7523] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  317.913567][ T7523] cramfs: wrong magic
[  317.971499][   T26] audit: type=1326 audit(1719025149.590:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.252555][   T26] audit: type=1326 audit(1719025149.590:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.318273][   T26] audit: type=1326 audit(1719025149.590:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.341651][   T26] audit: type=1326 audit(1719025149.590:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.365247][   T26] audit: type=1326 audit(1719025149.590:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.388513][   T26] audit: type=1326 audit(1719025149.590:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.411845][   T26] audit: type=1326 audit(1719025149.590:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.436884][   T26] audit: type=1326 audit(1719025149.590:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.468501][   T26] audit: type=1326 audit(1719025149.640:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.491754][   T26] audit: type=1326 audit(1719025149.670:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  319.526249][   T26] audit: type=1326 audit(1719025149.670:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7508 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x7ffc0000
[  320.320811][ T7544] No such timeout policy "syz0"
[  320.851465][ T7550] fuse: Unknown parameter '0x0000000000000004'
[  321.160797][ T7554] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  321.972270][ T7570] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  321.989760][ T7570] cramfs: wrong magic
[  322.571101][ T7584] fuse: Unknown parameter 'fd0x0000000000000004'
[  322.595896][ T7587] loop2: detected capacity change from 0 to 128
[  322.640216][ T7588] syz-executor.4[7588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  322.640736][ T7588] syz-executor.4[7588] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  325.016034][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  325.016053][   T26] audit: type=1326 audit(1719025157.190:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  325.185680][   T26] audit: type=1326 audit(1719025157.240:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  325.262524][   T26] audit: type=1326 audit(1719025157.240:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  325.394694][   T26] audit: type=1326 audit(1719025157.240:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  325.473299][   T26] audit: type=1326 audit(1719025157.240:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7608 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  326.307648][ T7623] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  326.314824][ T7623] cramfs: wrong magic
[  326.466481][ T7628] fuse: Unknown parameter 'fd0x0000000000000004'
[  326.490201][   T26] audit: type=1804 audit(1719025158.660:111): pid=7628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1059060057/syzkaller.Ayk6is/95/file0" dev="sda1" ino=1966 res=1 errno=0
[  327.019128][ T7639] syz-executor.2[7639] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  327.019587][ T7639] syz-executor.2[7639] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  328.536910][ T7639] team0: Port device team_slave_0 removed
[  328.821964][   T26] audit: type=1326 audit(1719025160.990:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7646 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x0
[  328.906257][ T7650] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  329.083180][ T7650] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  329.142607][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  329.169861][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  331.320497][ T7661] loop3: detected capacity change from 0 to 32768
[  331.338696][ T7661] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (7661)
[  331.383020][ T7661] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  331.426704][ T7661] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  331.443135][ T7661] BTRFS info (device loop3): using free space tree
[  331.768833][ T7682] loop2: detected capacity change from 0 to 128
[  331.775868][ T7671] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  331.782811][ T7671] cramfs: wrong magic
[  332.042667][ T7661] BTRFS info (device loop3): enabling ssd optimizations
[  333.000642][ T7694] fuse: Unknown parameter 'fd0x0000000000000004'
[  333.045421][   T26] audit: type=1804 audit(1719025165.220:113): pid=7694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1151899829/syzkaller.0ktf3S/65/file0" dev="sda1" ino=1948 res=1 errno=0
[  333.084778][ T6687] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  333.384038][ T7706] loop1: detected capacity change from 0 to 512
[  333.617637][ T7706] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  333.632045][ T7706] ext4 filesystem being mounted at /root/syzkaller-testdir218318192/syzkaller.AcLyXw/39/file0 supports timestamps until 2038 (0x7fffffff)
[  333.805568][ T6664] EXT4-fs (loop1): unmounting filesystem.
[  334.253063][ T7722] syz-executor.3[7722] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  334.253181][ T7722] syz-executor.3[7722] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  335.196732][ T7722] team0: Port device team_slave_0 removed
[  335.535136][ T7736] loop2: detected capacity change from 0 to 128
[  336.729903][ T7752] loop2: detected capacity change from 0 to 256
[  336.741759][ T7754] syz-executor.3[7754] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.741860][ T7754] syz-executor.3[7754] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  336.796759][ T7754] loop3: detected capacity change from 0 to 512
[  336.823870][ T7754] EXT4-fs: Ignoring removed nomblk_io_submit option
[  336.876028][ T7754] EXT4-fs (loop3): Test dummy encryption mode enabled
[  336.951009][ T7754] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz-executor.3: iget: bogus i_mode (0)
[  337.001192][ T7754] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 17 (err -117)
[  337.005531][ T7734] loop0: detected capacity change from 0 to 32768
[  337.028979][ T7754] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  337.052835][ T7734] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7734)
[  337.170068][ T7734] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  337.212647][ T7734] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  337.221441][ T7734] BTRFS info (device loop0): using free space tree
[  337.364965][ T7765] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'.
[  337.460082][ T7734] BTRFS info (device loop0): enabling ssd optimizations
[  337.532492][ T7765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'.
[  337.547054][ T7754] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  337.574643][ T7754] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz-executor.3: bg 0: block 7: invalid block bitmap
[  337.610458][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  337.631146][ T6374] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  337.659688][ T7765] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  337.674804][ T6687] EXT4-fs (loop3): unmounting filesystem.
[  337.760182][ T7767] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'.
[  337.825542][   T26] audit: type=1326 audit(1719025169.990:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7784 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x0
[  339.215205][ T7796] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[  339.320077][ T7799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'.
[  339.842636][ T7808] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  339.849432][ T7808] cramfs: wrong magic
[  340.796827][   T26] audit: type=1804 audit(1719025172.970:115): pid=7818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="file0" dev="sda1" ino=1952 res=1 errno=0
[  340.877449][ T7820] fuse: Unknown parameter 'use0x0000000000000003'
[  340.917091][ T7828] syz-executor.3[7828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  340.917198][ T7828] syz-executor.3[7828] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  340.987688][ T7829] loop3: detected capacity change from 0 to 512
[  341.015222][ T7820] loop0: detected capacity change from 0 to 2048
[  341.030555][ T7829] EXT4-fs: Ignoring removed nomblk_io_submit option
[  341.038116][ T7829] EXT4-fs (loop3): Test dummy encryption mode enabled
[  341.057031][ T7829] EXT4-fs error (device loop3): ext4_orphan_get:1396: inode #17: comm syz-executor.3: iget: bogus i_mode (0)
[  341.074579][ T7829] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz-executor.3: couldn't read orphan inode 17 (err -117)
[  341.090515][ T7829] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  341.172703][ T7828] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm syz-executor.3: bg 0: block 7: invalid block bitmap
[  341.205887][ T7820]  loop0: p1 < > p4
[  341.214032][ T7820] loop0: p4 size 8388608 extends beyond EOD, truncated
[  341.771849][ T6687] EXT4-fs (loop3): unmounting filesystem.
[  342.011010][ T7822] loop1: detected capacity change from 0 to 32768
[  342.042490][ T7822] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7822)
[  342.119607][ T7822] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  342.147610][ T7822] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  342.253623][ T7822] BTRFS info (device loop1): using free space tree
[  342.730329][ T7822] BTRFS info (device loop1): enabling ssd optimizations
[  342.825916][ T6664] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  344.021283][ T7883] loop2: detected capacity change from 0 to 512
[  344.239086][ T7883] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  344.304832][ T7883] ext4 filesystem being mounted at /root/syzkaller-testdir1059060057/syzkaller.Ayk6is/114/file0 supports timestamps until 2038 (0x7fffffff)
[  344.760740][ T7901] fuse: Unknown parameter 'use0x0000000000000003'
[  344.839815][ T7901] loop1: detected capacity change from 0 to 2048
[  344.932473][ T6234] EXT4-fs (loop2): unmounting filesystem.
[  344.994623][ T7901]  loop1: p1 < > p4
[  345.013146][ T7901] loop1: p4 size 8388608 extends beyond EOD, truncated
[  345.372644][ T4595] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  345.662604][ T4595] usb 4-1: Using ep0 maxpacket: 32
[  345.882749][ T4595] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  345.892486][ T4595] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  345.920767][ T4595] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  346.511287][ T7922] loop1: detected capacity change from 0 to 32768
[  346.529734][ T7922] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (7922)
[  346.553640][ T7922] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  346.563969][ T7922] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  346.572750][ T4595] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  346.572805][ T4595] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.572825][ T4595] usb 4-1: Product: syz
[  346.572839][ T4595] usb 4-1: Manufacturer: syz
[  346.582599][ T7922] BTRFS info (device loop1): using free space tree
[  346.595261][ T4595] usb 4-1: SerialNumber: syz
[  346.692690][ T7922] BTRFS info (device loop1): enabling ssd optimizations
[  346.880365][ T6664] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  346.891521][ T7946] syz-executor.2[7946] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  346.891581][ T7946] syz-executor.2[7946] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  346.936403][ T4595] usb 4-1: 0:2 : does not exist
[  347.132563][ T7946] loop2: detected capacity change from 0 to 512
[  347.155720][ T4595] usb 4-1: USB disconnect, device number 13
[  347.168980][ T7946] EXT4-fs: Ignoring removed nomblk_io_submit option
[  347.188016][ T7946] EXT4-fs (loop2): Test dummy encryption mode enabled
[  347.326037][ T7946] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #17: comm syz-executor.2: iget: bogus i_mode (0)
[  347.607754][ T7946] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 17 (err -117)
[  347.727341][ T7946] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  348.091298][ T3653] udevd[3653]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  348.208566][ T7946] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm syz-executor.2: bg 0: block 7: invalid block bitmap
[  348.317492][ T6234] EXT4-fs (loop2): unmounting filesystem.
[  348.353104][ T7967] fuse: Unknown parameter 'use0x0000000000000003'
[  348.441091][ T7967] loop0: detected capacity change from 0 to 2048
[  348.473820][ T7967]  loop0: p1 < > p4
[  348.480122][ T7967] loop0: p4 size 8388608 extends beyond EOD, truncated
[  349.792268][ T7999] loop3: detected capacity change from 0 to 16
[  349.806819][ T7999] erofs: (device loop3): mounted with root inode @ nid 36.
[  350.285346][ T8009] syz-executor.4[8009] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  350.285436][ T8009] syz-executor.4[8009] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  350.723537][ T8017] fuse: Unknown parameter 'user_i0x0000000000000003'
[  350.847339][ T8017] loop2: detected capacity change from 0 to 2048
[  350.875880][ T8017]  loop2: p1 < > p4
[  350.881731][ T8017] loop2: p4 size 8388608 extends beyond EOD, truncated
[  351.368987][ T3874] udevd[3874]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[  352.624293][ T8044] loop2: detected capacity change from 0 to 128
[  354.375329][   T26] audit: type=1326 audit(1719025186.550:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8063 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  354.487026][ T8069] loop2: detected capacity change from 0 to 1024
[  354.649744][ T8069] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  354.808568][ T8069] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  354.964786][ T3578] Bluetooth: hci1: command 0x0406 tx timeout
[  355.558297][ T6234] EXT4-fs (loop2): unmounting filesystem.
[  358.264323][   T26] audit: type=1326 audit(1719025190.410:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8116 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x0
[  360.018732][ T8135] loop2: detected capacity change from 0 to 1024
[  360.094579][ T8135] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  360.282549][ T8135] EXT4-fs error (device loop2): __ext4_iget:5044: inode #12: block 13: comm syz-executor.2: invalid block
[  360.328140][ T3583] Bluetooth: hci0: command 0x0406 tx timeout
[  361.456086][ T8158] syz-executor.4 (pid 8158) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  361.477663][ T8154] EXT4-fs error (device loop2): __ext4_iget:5044: inode #12: block 13: comm syz-executor.2: invalid block
[  361.589987][ T8161] fuse: Unknown parameter '00000000000000000000'
[  361.852110][ T6234] EXT4-fs (loop2): unmounting filesystem.
[  362.721435][   T26] audit: type=1326 audit(1719025194.890:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8172 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  363.804893][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  364.572608][   T26] audit: type=1326 audit(1719025196.680:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8214 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x0
[  365.397628][ T8244] device pim6reg1 entered promiscuous mode
[  366.612774][ T8281] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  367.711461][   T26] audit: type=1326 audit(1719025199.880:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x0
[  369.391727][ T8344] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  371.928098][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  372.284790][ T8393] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  376.124897][ T8456] overlayfs: failed to resolve './file2': -2
[  378.493344][ T1244] ieee802154 phy0 wpan0: encryption failed: -22
[  378.500505][ T1244] ieee802154 phy1 wpan1: encryption failed: -22
[  378.623081][   T26] audit: type=1326 audit(1719025210.800:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8500 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x0
[  380.050771][ T8545] loop2: detected capacity change from 0 to 512
[  380.078967][ T8545] EXT4-fs: Ignoring removed mblk_io_submit option
[  380.116202][ T8546] loop0: detected capacity change from 0 to 2048
[  380.126802][ T8545] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  380.193374][ T8545] EXT4-fs error (device loop2): __ext4_iget:5044: inode #2: block 256: comm syz-executor.2: invalid block
[  380.248207][ T8545] EXT4-fs (loop2): get root inode failed
[  380.248638][ T8546] EXT4-fs error (device loop0): ext4_orphan_get:1422: comm syz-executor.0: bad orphan inode 8192
[  380.265139][ T8546] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  380.292547][ T8545] EXT4-fs (loop2): mount failed
[  380.354581][ T6374] EXT4-fs (loop0): unmounting filesystem.
[  380.529244][ T8560] device dummy0 entered promiscuous mode
[  380.795958][   T26] audit: type=1326 audit(1719025212.970:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8569 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f596027d0a9 code=0x0
[  380.846392][ T8571] Bluetooth: MGMT ver 1.22
[  380.871651][   T26] audit: type=1326 audit(1719025213.010:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  380.896581][   T26] audit: type=1326 audit(1719025213.010:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  380.937381][   T26] audit: type=1326 audit(1719025213.010:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=25 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  381.020660][   T26] audit: type=1326 audit(1719025213.010:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  381.066119][ T8568] loop7: detected capacity change from 0 to 16384
[  381.129226][   T26] audit: type=1326 audit(1719025213.010:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  381.225584][   T26] audit: type=1326 audit(1719025213.020:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  381.248687][   T26] audit: type=1326 audit(1719025213.020:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  381.277885][   T26] audit: type=1326 audit(1719025213.020:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8542 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x7ffc0000
[  381.406930][ T8574] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  381.416995][ T8568] I/O error, dev loop7, sector 384 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  381.431347][ T8574] Buffer I/O error on dev loop7, logical block 3, async page read
[  381.441188][ T8574]  loop7: unable to read partition table
[  381.454993][ T8574] loop7: partition table beyond EOD, truncated
[  381.461400][ T8574] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  382.104801][ T8601] loop3: detected capacity change from 0 to 512
[  382.153914][ T8601] journal_path: Lookup failure for './file0'
[  382.159953][ T8601] EXT4-fs: error: could not find journal device path
[  382.237604][ T8603] loop0: detected capacity change from 0 to 512
[  382.334627][ T8609] loop3: detected capacity change from 0 to 512
[  382.361264][ T8609] EXT4-fs: Ignoring removed mblk_io_submit option
[  382.385278][ T8609] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  382.442538][ T8609] EXT4-fs error (device loop3): __ext4_iget:5044: inode #2: block 256: comm syz-executor.3: invalid block
[  382.462732][ T8609] EXT4-fs (loop3): get root inode failed
[  382.471946][ T8609] EXT4-fs (loop3): mount failed
[  384.518718][ T8649] loop7: detected capacity change from 0 to 16384
[  384.760648][ T8663] Â: renamed from pim6reg1
[  384.898231][ T8649] I/O error, dev loop7, sector 1032 op 0x0:(READ) flags 0x80700 phys_seg 31 prio class 2
[  385.241293][ T8690] loop1: detected capacity change from 0 to 2048
[  385.301317][ T8690] EXT4-fs: Ignoring removed mblk_io_submit option
[  385.335768][ T8690] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  385.362948][   T26] kauditd_printk_skb: 14 callbacks suppressed
[  385.362963][   T26] audit: type=1326 audit(1719025217.540:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  385.393820][ T8694] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  385.403146][ T8694] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  385.411854][ T8694] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  385.420653][ T8694] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  385.420866][ T8692] loop3: detected capacity change from 0 to 2048
[  385.441076][ T8694] device vxlan0 entered promiscuous mode
[  385.450593][   T26] audit: type=1326 audit(1719025217.540:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  385.462079][ T6664] EXT4-fs (loop1): unmounting filesystem.
[  385.474581][   T26] audit: type=1326 audit(1719025217.540:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  385.502571][ T8694] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.503462][   T26] audit: type=1326 audit(1719025217.540:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  385.511524][ T8694] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.542525][   T26] audit: type=1326 audit(1719025217.540:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  385.543664][ T8694] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.575341][ T8694] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  385.601827][   T26] audit: type=1326 audit(1719025217.540:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  385.631562][ T8692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  385.815456][   T26] audit: type=1326 audit(1719025217.540:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  385.825053][ T3578] Bluetooth: hci3: command 0x0406 tx timeout
[  386.767954][ T6687] EXT4-fs (loop3): unmounting filesystem.
[  386.803283][   T26] audit: type=1326 audit(1719025217.540:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  386.958020][   T26] audit: type=1326 audit(1719025217.540:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  387.007587][   T26] audit: type=1326 audit(1719025217.540:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8682 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x7ffc0000
[  387.050613][ T8712] Â: renamed from pim6reg1
[  387.828023][ T8714] xt_CT: No such helper "netbios-ns"
[  388.038749][ T8721] loop2: detected capacity change from 0 to 2048
[  388.113959][ T8721] EXT4-fs: Ignoring removed mblk_io_submit option
[  388.137778][ T8710] loop3: detected capacity change from 0 to 40427
[  388.183086][ T8710] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  388.201899][ T8710] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  388.239811][ T8710] F2FS-fs (loop3): invalid crc value
[  388.275242][ T8710] F2FS-fs (loop3): Found nat_bits in checkpoint
[  388.298138][ T8730] loop7: detected capacity change from 0 to 16384
[  388.318218][ T8721] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  388.911881][ T8734] xt_CT: No such helper "netbios-ns"
[  388.942700][   T52] I/O error, dev loop7, sector 128 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  388.952867][   T52] Buffer I/O error on dev loop7, logical block 16, lost async page write
[  388.990704][ T8710] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  389.019576][ T8710] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  389.123673][ T8697] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  389.169911][ T8697] EXT4-fs (loop2): Remounting filesystem read-only
[  389.429637][ T6234] EXT4-fs (loop2): unmounting filesystem.
[  389.859004][ T6687] syz-executor.3: attempt to access beyond end of device
[  389.859004][ T6687] loop3: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[  389.886114][ T6687] syz-executor.3: attempt to access beyond end of device
[  389.886114][ T6687] loop3: rw=2051, sector=57344, nr_sectors = 20480 limit=40427
[  389.917420][ T6687] syz-executor.3: attempt to access beyond end of device
[  389.917420][ T6687] loop3: rw=2051, sector=81920, nr_sectors = 4096 limit=40427
[  389.954002][ T6687] F2FS-fs (loop3): Issue discard(6144, 6144, 512) failed, ret: -5
[  389.954048][ T6687] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5
[  389.970489][ T6687] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5
[  390.893143][ T3583] Bluetooth: hci4: command 0x0406 tx timeout
[  391.001375][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  391.001438][   T26] audit: type=1800 audit(1719025223.170:160): pid=8775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1948 res=0 errno=0
[  391.098139][ T8776] xt_CT: No such helper "netbios-ns"
[  391.369428][   T26] audit: type=1326 audit(1719025223.540:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8784 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62bee7d0a9 code=0x0
[  392.334252][ T8794] xt_CT: No such helper "netbios-ns"
[  392.347365][ T8793] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  392.356998][ T8793] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  392.365840][ T8793] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  392.374624][ T8793] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  392.479961][ T8793] device vxlan0 entered promiscuous mode
[  392.682164][ T8793] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.691442][ T8793] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.700466][ T8793] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  392.709420][ T8793] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  394.309545][ T8823] loop7: detected capacity change from 0 to 16384
[  394.875059][ T8831] xt_CT: No such helper "netbios-ns"
[  394.984377][ T8828] I/O error, dev loop7, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  395.010775][   T26] audit: type=1326 audit(1719025227.180:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6f0547d0a9 code=0x0
[  395.053601][ T8823] I/O error, dev loop7, sector 768 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 2
[  395.217692][ T8828] Buffer I/O error on dev loop7, logical block 3, async page read
[  395.247153][ T8828]  loop7: unable to read partition table
[  395.292535][ T8828] loop7: partition table beyond EOD, truncated
[  395.298785][ T8828] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  395.552756][   T26] audit: type=1326 audit(1719025227.690:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8842 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc08ae7d0a9 code=0x0
[  396.461245][ T8868] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  396.470392][ T8868] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  396.479292][ T8868] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  396.488181][ T8868] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  396.502982][ T8868] device vxlan0 entered promiscuous mode
[  396.527538][ T8868] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.536731][ T8868] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.545715][ T8868] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  396.554666][ T8868] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  397.778372][ T8901] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'.
[  398.448898][ T8908] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  400.686457][ T8946] fuse: Unknown parameter '0x0000000000000004'
[  400.739089][ T8950] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.0'.
[  400.873535][ T8950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  401.013853][ T8946] overlayfs: failed to resolve './file0': -2
[  401.189111][ T8951] loop2: detected capacity change from 0 to 2048
[  401.682738][ T8963] IPVS: rr: SCTP 127.0.0.1:0 - no destination available
[  402.161092][ T8970] loop7: detected capacity change from 0 to 16384
[  402.306164][ T8972] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 25 (only 8 groups)
[  402.306186][ T8975] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'.
[  402.402905][ T8973] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  402.420245][ T8973] Buffer I/O error on dev loop7, logical block 0, async page read
[  402.436708][ T8973] ldm_validate_partition_table(): Disk read failed.
[  402.504003][ T8973] Dev loop7: unable to read RDB block 0
[  402.531659][ T8973]  loop7: unable to read partition table
[  402.546208][   T52] I/O error, dev loop7, sector 640 op 0x1:(WRITE) flags 0x800 phys_seg 1 prio class 2
[  402.567708][   T52] Buffer I/O error on dev loop7, logical block 80, lost async page write
[  402.569846][ T8973] loop7: partition table beyond EOD, truncated
[  402.597431][ T8973] loop_reread_partitions: partition scan of loop7 () failed (rc=-5)
[  402.645224][   T26] audit: type=1326 audit(1719025234.820:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8981 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe31427d0a9 code=0x0
[  402.727470][ T8991] fuse: Unknown parameter '0x0000000000000004'
[  402.788229][ T8991] loop2: detected capacity change from 0 to 2048
[  402.860115][ T8991]  loop2: p1 < > p4
[  402.882651][ T8991] loop2: p4 size 8388608 extends beyond EOD, truncated
[  403.909220][ T9011] loop2: detected capacity change from 0 to 1024
[  403.986576][   T26] audit: type=1800 audit(1719025236.160:165): pid=9011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=25 res=0 errno=0
[  404.127235][ T9024] capability: warning: `syz-executor.2' uses 32-bit capabilities (legacy support in use)
[  404.195662][ T9014] kvm: emulating exchange as write
[  405.586900][ T9050] loop0: detected capacity change from 0 to 1024
[  405.703785][   T26] audit: type=1800 audit(1719025237.880:166): pid=9050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=25 res=0 errno=0
[  406.149289][ T9063] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  406.304928][ T9063] team0: Port device wlan1 added
[  406.737604][ T9085] loop1: detected capacity change from 0 to 512
[  406.743992][ T9086] loop0: detected capacity change from 0 to 1024
[  406.782190][   T26] audit: type=1800 audit(1719025238.950:167): pid=9086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=25 res=0 errno=0
[  406.898611][ T9085] EXT4-fs (loop1): 1 orphan inode deleted
[  406.929065][ T9085] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  406.952621][ T9085] ext4 filesystem being mounted at /root/syzkaller-testdir218318192/syzkaller.AcLyXw/117/file1 supports timestamps until 2038 (0x7fffffff)
[  407.364388][   T26] audit: type=1804 audit(1719025239.530:168): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir218318192/syzkaller.AcLyXw/117/file1/bus" dev="loop1" ino=16 res=1 errno=0
[  407.900503][   T26] audit: type=1804 audit(1719025239.650:169): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir218318192/syzkaller.AcLyXw/117/file1/bus" dev="loop1" ino=16 res=1 errno=0
[  407.951253][   T26] audit: type=1804 audit(1719025239.670:170): pid=9108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir218318192/syzkaller.AcLyXw/117/file1/bus" dev="loop1" ino=16 res=1 errno=0
[  408.022000][ T6664] EXT4-fs (loop1): unmounting filesystem.
[  513.672373][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  513.679380][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6664/1:b..l
[  513.687831][    C0] 	(detected by 0, t=10502 jiffies, g=41877, q=140 ncpus=2)
[  513.695116][    C0] task:syz-executor.1  state:R  running task     stack:20472 pid:6664  ppid:6651   flags:0x00004002
[  513.707083][    C0] Call Trace:
[  513.710383][    C0]  <TASK>
[  513.713319][    C0]  __schedule+0x142d/0x4550
[  513.717880][    C0]  ? __sched_text_start+0x8/0x8
[  513.722742][    C0]  ? print_irqtrace_events+0x210/0x210
[  513.728214][    C0]  ? preempt_schedule_irq+0xec/0x1c0
[  513.733508][    C0]  preempt_schedule_irq+0xf7/0x1c0
[  513.738621][    C0]  ? preempt_schedule_notrace+0x140/0x140
[  513.744340][    C0]  ? page_ext_get+0x1d2/0x2a0
[  513.749034][    C0]  irqentry_exit+0x53/0x80
[  513.753456][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  513.759443][    C0] RIP: 0010:lock_acquire+0x26f/0x5a0
[  513.764746][    C0] Code: 2b 00 74 08 4c 89 f7 e8 4f ab 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25
[  513.784353][    C0] RSP: 0018:ffffc900041b7060 EFLAGS: 00000206
[  513.790426][    C0] RAX: 0000000000000001 RBX: 1ffff92000836e18 RCX: 1ffff92000836db8
[  513.798399][    C0] RDX: dffffc0000000000 RSI: ffffffff8aec13c0 RDI: ffffffff8b3d4660
[  513.806372][    C0] RBP: ffffc900041b71a8 R08: dffffc0000000000 R09: fffffbfff2093a45
[  513.814434][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000836e14
[  513.822413][    C0] R13: dffffc0000000000 R14: ffffc900041b70c0 R15: 0000000000000246
[  513.830430][    C0]  ? read_lock_is_recursive+0x10/0x10
[  513.835829][    C0]  ? __next_zones_zonelist+0x9e/0x130
[  513.841205][    C0]  ? __alloc_pages+0x770/0x770
[  513.845982][    C0]  ? __memcg_kmem_charge_page+0x105/0x3b0
[  513.851708][    C0]  __memcg_kmem_charge_page+0x122/0x3b0
[  513.857260][    C0]  ? __memcg_kmem_charge_page+0x105/0x3b0
[  513.863076][    C0]  __alloc_pages+0x2c4/0x770
[  513.867671][    C0]  ? zone_statistics+0x160/0x160
[  513.872621][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  513.877652][    C0]  ? alloc_pages+0x50c/0x770
[  513.882260][    C0]  pte_alloc_one+0x86/0x360
[  513.886773][    C0]  ? pfn_modify_allowed+0x540/0x540
[  513.891975][    C0]  ? _raw_spin_unlock+0x24/0x40
[  513.896830][    C0]  ? __pmd_alloc+0x6de/0x850
[  513.901424][    C0]  ? __pud_alloc+0x220/0x220
[  513.906016][    C0]  __pte_alloc+0x75/0x220
[  513.910362][    C0]  ? pmd_install+0x220/0x220
[  513.914963][    C0]  copy_page_range+0x3e3e/0x4660
[  513.919948][    C0]  ? pfn_valid+0x440/0x440
[  513.924370][    C0]  ? mas_store+0x56d/0x6b0
[  513.928798][    C0]  ? mas_empty_area_rev+0x18c0/0x18c0
[  513.934182][    C0]  ? anon_vma_fork+0x51d/0x580
[  513.938956][    C0]  copy_mm+0x12af/0x19c0
[  513.943217][    C0]  ? copy_signal+0x670/0x670
[  513.947808][    C0]  ? lockdep_init_map_type+0x9d/0x900
[  513.953291][    C0]  ? __init_rwsem+0x11e/0x160
[  513.957974][    C0]  ? copy_signal+0x548/0x670
[  513.962569][    C0]  copy_process+0x19d5/0x4060
[  513.967265][    C0]  ? copy_process+0x9e1/0x4060
[  513.972294][    C0]  ? do_wp_page+0x83d/0x1ab0
[  513.976892][    C0]  ? idle_dummy+0x10/0x10
[  513.981223][    C0]  ? handle_mm_fault+0x3717/0x5340
[  513.986340][    C0]  ? mt_find+0x29a/0xc60
[  513.990592][    C0]  kernel_clone+0x222/0x920
[  513.995104][    C0]  ? create_io_thread+0x180/0x180
[  514.000147][    C0]  __x64_sys_clone+0x231/0x280
[  514.004916][    C0]  ? __do_sys_vfork+0x110/0x110
[  514.009765][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  514.015763][    C0]  ? syscall_enter_from_user_mode+0x2e/0x230
[  514.021832][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  514.027044][    C0]  ? syscall_enter_from_user_mode+0x2e/0x230
[  514.033118][    C0]  do_syscall_64+0x3b/0xb0
[  514.037544][    C0]  ? clear_bhb_loop+0x45/0xa0
[  514.042233][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  514.048130][    C0] RIP: 0033:0x7fe31427a0d3
[  514.052555][    C0] RSP: 002b:00007ffdfdefe358 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[  514.061065][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe31427a0d3
[  514.069040][    C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011
[  514.077012][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[  514.085075][    C0] R10: 000055555586a750 R11: 0000000000000246 R12: 0000000000000000
[  514.093046][    C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001
[  514.101030][    C0]  </TASK>
[  514.104055][    C0] rcu: rcu_preempt kthread starved for 9751 jiffies! g41877 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  514.115163][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  514.125126][    C0] rcu: RCU grace-period kthread stack dump:
[  514.131011][    C0] task:rcu_preempt     state:R  running task     stack:25208 pid:16    ppid:2      flags:0x00004000
[  514.141794][    C0] Call Trace:
[  514.145071][    C0]  <TASK>
[  514.148003][    C0]  __schedule+0x142d/0x4550
[  514.152521][    C0]  ? _raw_spin_unlock+0x40/0x40
[  514.157395][    C0]  ? __sched_text_start+0x8/0x8
[  514.162250][    C0]  ? lockdep_softirqs_off+0x420/0x420
[  514.167627][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  514.173529][    C0]  ? _raw_spin_unlock+0x40/0x40
[  514.178408][    C0]  schedule+0xbf/0x180
[  514.182529][    C0]  schedule_timeout+0x1b9/0x300
[  514.187395][    C0]  ? console_conditional_schedule+0x40/0x40
[  514.193293][    C0]  ? update_process_times+0x1b0/0x1b0
[  514.198677][    C0]  ? prepare_to_swait_event+0x329/0x350
[  514.204236][    C0]  rcu_gp_fqs_loop+0x2d2/0x1150
[  514.209098][    C0]  ? dyntick_save_progress_counter+0x2b0/0x2b0
[  514.215267][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  514.220477][    C0]  ? rcu_gp_init+0x15f0/0x15f0
[  514.225243][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  514.231149][    C0]  ? finish_swait+0xcf/0x1e0
[  514.235755][    C0]  rcu_gp_kthread+0xa3/0x3b0
[  514.240353][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  514.245465][    C0]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  514.251366][    C0]  ? __kthread_parkme+0x168/0x1c0
[  514.256398][    C0]  kthread+0x28d/0x320
[  514.260467][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  514.265577][    C0]  ? kthread_blkcg+0xd0/0xd0
[  514.270166][    C0]  ret_from_fork+0x1f/0x30
[  514.274603][    C0]  </TASK>
[  514.277618][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  514.283945][    C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.94-syzkaller #0
[  514.291576][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  514.301626][    C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340
[  514.307444][    C0] Code: 43 f5 f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 a4 02 fc f6 0f 1f 44 00 00 e8 fa 3f f5 f6 0f 00 2d e3 10 b2 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 ab c0 4c f7
[  514.327046][    C0] RSP: 0018:ffffffff8ce07b20 EFLAGS: 000002d3
[  514.333120][    C0] RAX: ffffffff8a955356 RBX: 0000000000000000 RCX: ffffffff8cebd800
[  514.341089][    C0] RDX: 0000000000000000 RSI: ffffffff8aec0240 RDI: ffffffff8b3d4660
[  514.349057][    C0] RBP: ffffffff8ce07bb0 R08: ffffffff8a955338 R09: fffffbfff19d7b01
[  514.357029][    C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff19c0f64
[  514.365001][    C0] R13: ffff8880173c3004 R14: ffffffff8ce07b40 R15: dffffc0000000000
[  514.372974][    C0] FS:  0000000000000000(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000
[  514.381904][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  514.388487][    C0] CR2: 00007ff49485b6c0 CR3: 000000002120a000 CR4: 00000000003506f0
[  514.396462][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  514.404431][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  514.412402][    C0] Call Trace:
[  514.415682][    C0]  <IRQ>
[  514.418527][    C0]  ? rcu_check_gp_kthread_starvation+0x1b8/0x220
[  514.424869][    C0]  ? print_other_cpu_stall+0x150c/0x1640
[  514.430536][    C0]  ? print_cpu_stall+0x5f0/0x5f0
[  514.435493][    C0]  ? __lock_acquire+0x1f80/0x1f80
[  514.440542][    C0]  ? do_raw_spin_unlock+0x137/0x8a0
[  514.445769][    C0]  ? rcu_sched_clock_irq+0xaf6/0x1200
[  514.451166][    C0]  ? rcutree_dead_cpu+0x20/0x20
[  514.456027][    C0]  ? hrtimer_run_queues+0x163/0x450
[  514.461249][    C0]  ? update_process_times+0x147/0x1b0
[  514.466638][    C0]  ? tick_sched_timer+0x386/0x550
[  514.471727][    C0]  ? tick_setup_sched_timer+0x2f0/0x2f0
[  514.477560][    C0]  ? __hrtimer_run_queues+0x5a7/0xe50
[  514.482984][    C0]  ? hrtimer_interrupt+0x980/0x980
[  514.488120][    C0]  ? ktime_get_update_offsets_now+0x407/0x420
[  514.494216][    C0]  ? hrtimer_interrupt+0x392/0x980
[  514.499357][    C0]  ? __sysvec_apic_timer_interrupt+0x156/0x580
[  514.505523][    C0]  ? sysvec_apic_timer_interrupt+0x8c/0xb0
[  514.511341][    C0]  </IRQ>
[  514.514279][    C0]  <TASK>
[  514.517211][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  514.523391][    C0]  ? acpi_idle_do_entry+0xe8/0x340
[  514.528513][    C0]  ? acpi_idle_do_entry+0x106/0x340
[  514.533736][    C0]  ? acpi_idle_do_entry+0x10f/0x340
[  514.539341][    C0]  ? acpi_idle_enter_bm+0x5e0/0x5e0
[  514.544554][    C0]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  514.550559][    C0]  ? __sched_clock_gtod_offset+0xe0/0xe0
[  514.556209][    C0]  acpi_idle_enter+0x352/0x4f0
[  514.560996][    C0]  cpuidle_enter_state+0x516/0xf80
[  514.566170][    C0]  ? cpuidle_enter_s2idle+0x6b0/0x6b0
[  514.571573][    C0]  ? tick_nohz_idle_stop_tick+0x238/0xad0
[  514.577313][    C0]  cpuidle_enter+0x59/0x90
[  514.581757][    C0]  do_idle+0x3ce/0x680
[  514.585839][    C0]  ? print_irqtrace_events+0x210/0x210
[  514.591314][    C0]  ? idle_inject_timer_fn+0x60/0x60
[  514.596526][    C0]  ? lockdep_hardirqs_on+0x94/0x130
[  514.601742][    C0]  ? asm_sysvec_error_interrupt+0x11/0x20
[  514.607482][    C0]  ? schedule_idle+0x57/0x90
[  514.612077][    C0]  ? rest_init+0x31/0x300
[  514.616410][    C0]  cpu_startup_entry+0x3d/0x60
[  514.621191][    C0]  rest_init+0x2da/0x300
[  514.625451][    C0]  ? time_init+0x33/0x33
[  514.629707][    C0]  arch_call_rest_init+0xa/0xa
[  514.634487][    C0]  start_kernel+0x496/0x53f
[  514.639004][    C0]  secondary_startup_64_no_verify+0xcf/0xdb
[  514.644932][    C0]  </TASK>