last executing test programs:

1m3.588624073s ago: executing program 0 (id=344):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10)
r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0)
fsmount(r1, 0x0, 0x0)

1m3.268188183s ago: executing program 0 (id=346):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0xed, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000000000001d8500000007000000a50000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000001c0)='kmem_cache_free\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32, 0x0, 0x9}, 0x9c)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x9c)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4)
r5 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001070000940001000000fc11c60000000f000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="7c010000190001000000000000000000fe880000000000000000000000000001ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000100000000000000c4000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000010000000000000000000000000000e0000002000000000000000000000000000000006c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fc00000000000000000000000000000000000000040004"], 0x17c}}, 0x0)

53.421815894s ago: executing program 0 (id=369):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB, @ANYBLOB='\x00'/21], 0x48)
syz_mount_image$ext4(&(0x7f00000004c0)='ext2\x00', &(0x7f0000000500)='./bus\x00', 0xd000, &(0x7f00000003c0)={[{@init_itable_val={'init_itable', 0x3d, 0xc}}, {@debug}], [{@smackfstransmute={'smackfstransmute', 0x3d, '.)){R'}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@obj_user={'obj_user', 0x3d, 'x#('}}]}, 0x1, 0x502, &(0x7f0000002080)="$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")
ftruncate(0xffffffffffffffff, 0xc17a)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r0 = socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, r0, 0x1d853000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$unix(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x18}, 0x0)
setsockopt$sock_int(r5, 0x1, 0x5, &(0x7f0000000000), 0x4)
recvmmsg(r5, &(0x7f0000001140), 0x700, 0x0, 0x0)
r6 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r7 = dup(r6)
write$UHID_INPUT(r7, &(0x7f00000029c0)={0x2, {"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", 0x1000}}, 0x1006)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)

51.086496549s ago: executing program 0 (id=374):
pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$bsg(0xffffffffffffff9c, 0x0, 0x402100, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$RTC_PIE_OFF(r0, 0x7006)
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYRESHEX], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$F2FS_IOC_START_ATOMIC_WRITE(0xffffffffffffffff, 0xf501, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "7f12ddb357f7adf97affffffff7d1800"})
r5 = syz_open_pts(r4, 0x0)
ioctl$TIOCVHANGUP(r5, 0x5437, 0x0)
dup3(r4, r5, 0x0)
ioctl$TCSETA(0xffffffffffffffff, 0x5406, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x31, '\x00\x00\x00\x00 #\x00'})
socketpair$unix(0x1, 0x0, 0x0, 0x0)
clock_gettime(0x7, &(0x7f0000000040))
ioctl$TIOCGPTPEER(r4, 0x5441, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffd4b)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="b40000000000000071103900000000004600000002c1cef0cc0000005aced435c700000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x8, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

50.171353632s ago: executing program 0 (id=379):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_clone(0x640c7000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x10)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x80801c, &(0x7f0000000f40), 0x1, 0x503, &(0x7f0000000880)="$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")
r5 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
munmap(&(0x7f0000001000/0x1000)=nil, 0x1000)
fcntl$setstatus(r5, 0x4, 0x46100)
write$cgroup_type(r5, &(0x7f0000000200), 0xf642e7e)

26.693493883s ago: executing program 1 (id=463):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18090000002300810000000000000000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000780)=ANY=[@ANYBLOB="5000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300fe80000000000000000000000000000008000a00", @ANYRES32=r4], 0x50}}, 0x0)

20.102837767s ago: executing program 1 (id=483):
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6}]})
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000200000014000180060001000200000008000300ac1414aa"], 0x28}, 0x1, 0x0, 0x0, 0x4008840}, 0x0)
r6 = socket$unix(0x1, 0x5, 0x0)
r7 = dup2(r6, r0)
close_range(r7, 0xffffffffffffffff, 0x0)

18.923580726s ago: executing program 1 (id=489):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000240))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x4000000000010046)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r5 = dup3(r1, r0, 0x0)
recvmmsg$unix(r5, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)

17.422593073s ago: executing program 1 (id=496):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='configfs\x00', 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x104000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x1a49002, 0x0)
syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='map=normal,mode=0x0000000000000003,norock,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=maciceland,overriderockperm,map=normal,mode=0x000000000000001,map=acorn,check=strict,overriderockperm,map=normal,cruft,\x00\x00'], 0x3, 0x3f8, &(0x7f0000000f00)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000240)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x189505a, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mkdirat$cgroup(r0, &(0x7f0000001080)='syz0\x00', 0x1ff)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='mounts\x00')
pread64(r1, &(0x7f0000004180)=""/4096, 0x1000, 0x0)

17.172532916s ago: executing program 1 (id=499):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_open_dev$swradio(&(0x7f0000000400), 0x1, 0x2)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000540)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$EBT_SO_SET_COUNTERS(r4, 0x0, 0x81, &(0x7f00000000c0)={'broute\x00', 0x0, 0x0, 0x0, [0x43, 0x1, 0x5, 0x1ff, 0x8001], 0x2, 0x0, 0x0, [{}, {}]}, 0x98)
getsockopt$inet_tcp_int(r4, 0x6, 0x25, 0x0, &(0x7f0000000080))
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000340)={<r6=>0x0, 0xffffff20, 0x7, 0x5, 0x3a55, 0x1000, 0x4, 0x4, {0x0, @in={{0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x25b, 0x2, 0x0, 0x2, 0xe}}, &(0x7f0000000480)=0xb0)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f0000444ff8)={r6, 0x4}, 0xfffffffffffffeff)
sendmmsg$inet6(r5, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)}], 0x1}}], 0x1, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2c0000003a000b00000000000000000003000000c1fe0080130003000d34d8026a2c0000a22807e6489625d1b99f3fc875ed68ad5627e320c4bafcb56589847cbf3383e59b7e52361216145440fcc3fd378cc29c8ba37cd0d6fbb685ef49d68b5259971ca91555be6c54756804a388d5692e45"], 0x2c}}, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r5, 0x84, 0x79, &(0x7f0000000100)={0x0, 0x0, 0x600}, 0x8)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f00000002c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000400), 0x0, &(0x7f0000000440)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev={0xac, 0x14, 0x14, 0x17}}}}], 0x20}, 0x20000041)
syz_init_net_socket$ax25(0x3, 0x3, 0x0)
open$dir(&(0x7f00000000c0)='./file0\x00', 0x1, 0x1)
socket(0x10, 0x80002, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ip_mr_cache\x00')

13.800039905s ago: executing program 1 (id=508):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10)
utime(&(0x7f0000003dc0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

5.477371288s ago: executing program 4 (id=546):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x4008000)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xc4}, {&(0x7f00000007c0)=""/154, 0x3a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x500}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

5.154395628s ago: executing program 3 (id=547):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, 0x0, &(0x7f0000000040)}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)
r2 = msgget$private(0x0, 0x0)
msgsnd(r2, &(0x7f0000000080)={0x2}, 0x8, 0x800)

5.153827658s ago: executing program 4 (id=548):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r7, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20)
sendmsg(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)

4.772155763s ago: executing program 3 (id=549):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
r1 = socket(0x2a, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0)
getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x3}, {}, {0x1c}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x10, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}]}]}]}}]}, 0x44}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4.086577596s ago: executing program 4 (id=550):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000180)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f777", 0x2}], 0x1, 0x7fff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, 0x0)

3.797889342s ago: executing program 3 (id=551):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1, 0x0, 0x0, 0x1008}, 0x1f00)
sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
syz_io_uring_setup(0xf3b, 0x0, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10)

2.635923539s ago: executing program 3 (id=554):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000024"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
r0 = socket(0x1e, 0x4, 0x0)
r1 = socket(0x1e, 0x4, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file2\x00', 0x18502, &(0x7f0000001b80)=ANY=[], 0x1, 0x11f3, &(0x7f0000000980)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$HIDIOCGPHYS(0xffffffffffffffff, 0x80404812, &(0x7f0000000240))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x1612c2, 0x0)
r6 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/crypto\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x4000000000010046)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
r7 = dup3(r1, r0, 0x0)
recvmmsg$unix(r7, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f0000000380)}}], 0x1, 0x0, 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)

2.202742149s ago: executing program 2 (id=555):
syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f0000000800)='./file0\x00', 0x1081e, &(0x7f0000000200)=ANY=[], 0x1, 0x6d0, &(0x7f0000000a40)="$eJzs3V1v29Ydx/Ef5QcpzhAU2xAEQZqcpBtgY5lCyY0DIwNWjaJsbpIokPKQAAOKtLGLIEq6JRmw+Cb1zR6A7g3srje72IsYsOte7w3sbgO67W7AdsGBT5ZkiVGcyEmLfj8CKurw8Jz/IRX+S1k8EgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAkOU0bbtmqe11d2798wNTxGkGfid/8b/J9WlrS1pLF9Zm9itZ1oEsVSo6lxad+/Zw9dn4P1d0IX11QZX4qaL902ffuvmtxVK2vQrDfTk6boOPn+7fvzMY7D56gboLOnbzb5JKw+XF7KgkL0b3+pbb9ULf6zS2XOOFvtnc2LCvbbdC0/LabqiS1DFO4Jb6fmBWnTVT29xcN271tr/T3Wo22m5eeOP7ddveMD8upwdaUjV0tr122+tuJXXi1XGdG+bTn6UV3EYnfhrsrs8ayd69wW7tRSrVZ1Wq2/qkVqvXaxvXN6/fsO3Ful2vjxXYMcs+pIkac3/T4itmLudtYB5Kcf7/myW1VVFXO7olM/XhqKlAvjoF6zNJ4j+QdM0t6jI/xVtxDo/zf57lz0k/zNadV5L/L6avLhbl/4JYjEyywbQ1VkH58R5LSURGj/VU+7qvOxoo0q4ezaFtI3NpLq2c0CMa2e9bctWVp1C+PHXUSEpMVmK0qQ1tyNb72lZLoYxa8tSWq1C3FaovN3lHOQrkqqG+fAUyWpWjNRnVtKlNrcvIVVW35WtHXW2pqYb+E0XRnu5poN2kRtFDeaVaQYXyaKX6c1qaSOZZwQfP0vdplv9t8v/XlRRF0bNy+nb4vKhOdooE3rQou/4/pksnEw0AAAAAADgJVvLpu5X87f5tSZFaXtu133RYAAAAAABgjixFZV2QFV//S3pb1otf/5dOOjgAAAAAADAXVnKPnSVpJflSvzW8E+pFPgRYeA0hAgAAAACAV5Tc+X9xWYqSSSsuyTrW9T8AAAAAAPgK+O3IHPuL+Ry7Uf5n/ZKksFe2/vyvsoIl66B36zvWg0a8pvEgqzP+DYBFqd86b53JJupNnpYlJa8c94KV9ZbNF5x8+mAtSl/szZrr3wqOBLC8kDdwxGgAVtzzxmL2Sp/qcrrJ5WwS4rv7JSVr0l5WWl7brTp++2ZNjcaZUt+91f/lw3u/koLDce7dG+xWP/x4cDeJJZnH8+BB3OizsXBKE7EkT8NYniTzLST3XEwb8Sm18i5/1+2sWEm/dj7+BTUelEY7Khj/kT5/rSvpMbuyktZd2R9OxyxZlXj8tepyfMjGRh8sWcMoakdHPu1ATI0iD/ad7Gn1nfRp//TZv+btlKzK9xakenXyGIxFUR+NonQ4jKIorH9P7IspUYy8F5J9sR5H8Ze4oSSKaOKIrI9HcewjAgBvyt4wCyWTmE/k3fy8mp/UXirvzM7u741n9yd/iNJz7UL8/xRReWYvFcVn9FUryUPLSk6si+ennNHtLK9UVJBX7JfObmlff9JaejPlmrKwJ6L4bxRFN2tJv78/klU/izf4rLDfsF1fiHfhtScPfp5MgB/7aPej3Yf1+vqG/a5tX69rKRlG9rQgcg8AYMLs39iZWcN6V5fTGpfv/uO76dJYxvvm4VcKqvpQH2ugu7qa/4TApemtrox8DeFqetWqkatWc/atm6eko3Vrulp4VZd+1rAy8kMved0l5ZuMZ+ph3fUTPgoAALxeV2bk4en5vzKW/69qNa2xen7qdfd4Ls9+Gvjwkr6obm128O/Ne28AAPD14AZfWCv931hB4PXer21u1hr9bdcEvvMTE3jNLdd43b4bONuN7pZreoHf9x2/bXqByl7TDU240+v5Qd+0/MD0/NC7lfzyuwlvh323Y0K30+j2PSfstd1G6BrH7/YbTt80vdAxvZ0ftb1w2w2SjcOe63gtz2n0Pb9rQn8ncNyqMaHrjlT0mm6377W8eLFreoHXaQS3zU/99k7HNU03dAKv1/fTBvO+vG7LDzpJs9Xkp2sBAMDjp/v37wwGu4+OLpyKL83TkgMV1JlcWJ7SIHMEAQDwJTNM18fYaPp3rQEAAAAAAAAAAAAAAAAAAAAAwAmZfUvfMReWpt0sKB2W/OJMVqJPNLzFcKIdS68Yz7PoFTYvHXer/JaI/fufP6fyqcOSfPeP1jmY+7EoWvj7N6TTSYnSksV41fmXa7AcD+O594/GJdlUxc9ObFw/2Ev3aGGdeOXUVeXDY7E4/38O8cLDPxasivfIaEk+JfOwpDz+D2T5eQMcX4jberT84nfuTiy83vMQgNfv/wEAAP//Nkg53w==")
r0 = open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
open(&(0x7f00009e1000)='./file0\x00', 0x0, 0x0)

2.18299888s ago: executing program 4 (id=556):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$NFNL_MSG_CTHELPER_GET(r0, &(0x7f0000000580)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40011}, 0x4008000)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0xc4}, {&(0x7f00000007c0)=""/154, 0x3a}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x500}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

1.715422553s ago: executing program 3 (id=557):
r0 = socket(0x11, 0x3, 0x0)
r1 = socket$inet6(0xa, 0x3, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x16}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
select(0x40, &(0x7f0000000340)={0x1f}, 0x0, 0x0, 0x0)
write$eventfd(0xffffffffffffffff, &(0x7f0000000380)=0x5, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a00)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
setsockopt$inet6_int(r1, 0x29, 0x4b, &(0x7f0000000000), 0x4)
sendmmsg$inet6(r1, &(0x7f0000000900)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @remote}, 0x1c, 0x0}}, {{&(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f00000001c0)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @multicast2}}}}], 0x28}}], 0x2, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x107, 0x18, 0x0, 0x20000002)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00'})

1.64401525s ago: executing program 2 (id=558):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000000c0)})
r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$MAP_CREATE(0x0, 0x0, 0x0)
r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xf, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000004008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@map=r5, r8, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r5}, &(0x7f0000000100), &(0x7f0000000140)=r4}, 0x20)
sendmsg(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0)

708.647316ms ago: executing program 4 (id=559):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000b80)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000600)={0x0, 0x8, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}}, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r5 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x4, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000808004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0)

654.4866ms ago: executing program 3 (id=560):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
shmget$private(0x0, 0x400000, 0x20, &(0x7f000000e000/0x400000)=nil)
mlockall(0x2)
r2 = shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000)
r3 = shmget$private(0x0, 0x3000, 0x10, &(0x7f00000eb000/0x3000)=nil)
shmat(0x0, &(0x7f000018b000/0x3000)=nil, 0x5000)
mlockall(0x1)
shmdt(r2)
shmat(r3, &(0x7f00003b7000/0x1000)=nil, 0x6000)
mlockall(0x7)
shmget$private(0x0, 0x2000, 0x400, &(0x7f00003dc000/0x2000)=nil)

546.046501ms ago: executing program 2 (id=561):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
setuid(0x0)
ioctl$sock_x25_SIOCADDRT(r0, 0x890b, 0x0)

412.937343ms ago: executing program 2 (id=562):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000180)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)

232.125749ms ago: executing program 2 (id=563):
r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000140)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

192.061753ms ago: executing program 4 (id=564):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000140)='./bus\x00', 0x300000a, &(0x7f0000000180)={[{@nodatacow}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@clear_cache}, {@datacow}, {@ref_verify}, {@clear_cache}, {@nobarrier}, {@thread_pool={'thread_pool', 0x3d, 0x8}}, {@nodiscard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@ssd_spread}, {@nossd}]}, 0x3, 0x55a3, &(0x7f000000e0c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x101042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000780)="f777", 0x2}], 0x1, 0x7fff, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r1, 0x40305839, 0x0)

157.715766ms ago: executing program 2 (id=565):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000b8e9850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='kfree\x00', r1}, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_BEACON(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="24010000", @ANYRES16=r2, @ANYBLOB="2b0300000ec00000000005"], 0x124}}, 0x0)

0s ago: executing program 0 (id=425):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = socket$inet6(0xa, 0x6, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
listen(r2, 0xc)
r3 = socket$inet_dccp(0x2, 0x6, 0x0)
connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @empty}, 0x10)

kernel console output (not intermixed with test programs):

interface
[   93.903472][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   94.417195][  T102] bond0 (unregistering): Released all slaves
[   94.577452][ T4000] IPv6: Can't replace route, no match found
[   94.590325][ T4002] netlink: 'syz.3.52': attribute type 22 has an invalid length.
[   94.654311][ T3829] team0: Port device team_slave_0 added
[   94.826984][ T3829] team0: Port device team_slave_1 added
[   95.060194][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.129342][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.312378][ T3829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   96.295944][ T3829] batman_adv: batadv0: Adding interface: batadv_slave_1
[   96.352298][ T3829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   96.435872][ T4025] overlayfs: failed to resolve './file1': -2
[   96.446331][ T4022] loop2: detected capacity change from 0 to 4096
[   96.457492][ T3829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.477657][ T4022] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[   96.642592][ T3829] device hsr_slave_0 entered promiscuous mode
[   96.751740][ T3829] device hsr_slave_1 entered promiscuous mode
[   96.816607][ T3829] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   96.826413][ T3829] Cannot create hsr debugfs directory
[   96.837861][   T26] audit: type=1326 audit(1727174865.277:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[   96.943677][   T26] audit: type=1326 audit(1727174865.277:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[   97.042942][   T26] audit: type=1326 audit(1727174865.277:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[   97.158717][   T26] audit: type=1326 audit(1727174865.277:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[   97.192314][   T26] audit: type=1326 audit(1727174865.277:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[   97.584941][   T26] kauditd_printk_skb: 147 callbacks suppressed
[   97.584959][   T26] audit: type=1326 audit(1727174866.027:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000
[   97.615743][   T26] audit: type=1326 audit(1727174866.027:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000
[   97.641862][   T26] audit: type=1326 audit(1727174866.027:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[   97.681982][   T26] audit: type=1326 audit(1727174866.057:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000
[   97.738753][   T26] audit: type=1326 audit(1727174866.057:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000
[   97.968499][   T26] audit: type=1326 audit(1727174866.057:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000
[   98.019564][   T26] audit: type=1326 audit(1727174866.057:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000
[   98.100298][   T26] audit: type=1326 audit(1727174866.057:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=449 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[   98.130225][ T4045] netlink: 20 bytes leftover after parsing attributes in process `syz.3.62'.
[   98.179313][   T26] audit: type=1326 audit(1727174866.077:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000
[   98.341001][   T26] audit: type=1326 audit(1727174866.077:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4030 comm="syz.3.60" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000
[   98.554883][ T4051] netlink: 'syz.3.65': attribute type 22 has an invalid length.
[   98.679418][ T4054] loop4: detected capacity change from 0 to 1024
[   98.971185][ T3829] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   98.983171][ T4054] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[   99.293332][ T3829] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   99.684525][ T3829] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   99.755444][ T3829] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   99.857350][ T3638] EXT4-fs (loop4): unmounting filesystem.
[  100.092180][ T4071] loop0: detected capacity change from 0 to 8192
[  100.183294][ T4071] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  100.238265][ T3829] 8021q: adding VLAN 0 to HW filter on device bond0
[  100.501207][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  100.532936][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  100.663464][ T3829] 8021q: adding VLAN 0 to HW filter on device team0
[  100.730165][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  100.762425][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  100.808719][ T4067] bridge0: port 1(bridge_slave_0) entered blocking state
[  100.816002][ T4067] bridge0: port 1(bridge_slave_0) entered forwarding state
[  101.065732][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  101.074608][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  101.121350][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  101.148980][ T4067] bridge0: port 2(bridge_slave_1) entered blocking state
[  101.156229][ T4067] bridge0: port 2(bridge_slave_1) entered forwarding state
[  101.166918][ T4088] loop3: detected capacity change from 0 to 128
[  101.195536][ T4088] =======================================================
[  101.195536][ T4088] WARNING: The mand mount option has been deprecated and
[  101.195536][ T4088]          and is ignored by this kernel. Remove the mand
[  101.195536][ T4088]          option from the mount to silence this warning.
[  101.195536][ T4088] =======================================================
[  101.237196][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  101.271342][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  101.320626][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  101.346584][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  101.375001][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  101.422262][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  101.448316][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  101.481916][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  101.509208][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  101.543193][ T3829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  101.626775][ T3829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  101.657067][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  101.667099][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  101.711765][ T4077] loop4: detected capacity change from 0 to 32768
[  101.721668][ T4100] loop3: detected capacity change from 0 to 128
[  101.758590][ T4077] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.71 (4077)
[  101.834599][ T4077] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  101.892814][ T4077] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  101.938015][ T4077] BTRFS info (device loop4): using free space tree
[  102.357666][ T4077] BTRFS info (device loop4): enabling ssd optimizations
[  102.382801][ T4127] loop3: detected capacity change from 0 to 512
[  102.443922][ T4127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  102.678626][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  102.714029][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  102.792543][ T4127] EXT4-fs (loop3): 1 truncate cleaned up
[  102.833145][ T4127] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  102.861278][ T3829] 8021q: adding VLAN 0 to HW filter on device batadv0
[  103.145446][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  103.176592][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  103.299217][ T3640] EXT4-fs (loop3): unmounting filesystem.
[  103.355197][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  103.426403][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  103.488587][ T3829] device veth0_vlan entered promiscuous mode
[  103.518368][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  103.539003][ T4068] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  103.550617][ T3638] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  103.561185][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  103.589281][ T3829] device veth1_vlan entered promiscuous mode
[  103.634834][ T4147] tipc: Started in network mode
[  103.664120][ T4147] tipc: Node identity ac1414aa, cluster identity 4711
[  103.758583][ T4147] tipc: New replicast peer: 100.1.1.1
[  103.835247][ T4147] tipc: Enabled bearer <udp:ree>, priority 10
[  103.884480][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  103.904343][ T3706] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  103.990315][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  104.011133][ T4067] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  104.036552][ T3829] device veth0_macvtap entered promiscuous mode
[  104.090012][ T3829] device veth1_macvtap entered promiscuous mode
[  104.245477][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.279235][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.300784][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.408772][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.430228][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  104.447041][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  104.695374][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  104.704610][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  104.712972][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  104.721879][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  104.730281][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[  105.227706][ T3754] tipc: Node number set to 2886997162
[  105.316939][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  105.341656][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.401535][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.436506][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  105.458105][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  105.492407][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  105.544894][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  105.576486][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.603898][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.653733][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  105.694784][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  105.858666][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.639499][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.707736][ T3829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  106.790653][ T3829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  106.868466][ T3829] batman_adv: batadv0: Interface activated: batadv_slave_1
[  106.887052][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  106.897967][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  107.011462][ T3829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  107.083658][ T3829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  107.092605][ T3829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  107.256636][ T3829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  107.908618][ T4194] 9pnet: Could not find request transport: ­|¼V¡äM!Œ•jS’©•ñúèéòï»3…MÇ
×MÀwHùt\·–Ú-ûqJ
[  108.184633][ T3778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.193157][ T3778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.307538][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  108.307786][ T3784] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  108.365440][ T3784] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  108.521146][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  108.567607][ T4207] loop2: detected capacity change from 0 to 4096
[  108.821381][ T4207] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  109.336521][ T4218] loop1: detected capacity change from 0 to 256
[  109.359768][ T4218] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  109.721627][ T4224] loop1: detected capacity change from 0 to 512
[  109.801156][ T4224] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  109.845732][ T4224] EXT4-fs (loop1): 1 truncate cleaned up
[  109.878177][ T4224] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  110.032521][ T4229] loop2: detected capacity change from 0 to 8192
[  110.093242][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  110.112414][ T4229] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  110.782373][ T4211] loop3: detected capacity change from 0 to 32768
[  110.890361][ T4211] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.93 (4211)
[  111.035079][ T4211] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.091109][ T4211] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  111.104993][ T4211] BTRFS info (device loop3): setting nodatacow, compression disabled
[  111.113192][ T4211] BTRFS info (device loop3): force clearing of disk cache
[  111.130971][ T4211] BTRFS info (device loop3): setting datacow
[  111.138161][ T4211] BTRFS info (device loop3): doing ref verification
[  111.155669][ T4211] BTRFS info (device loop3): turning off barriers
[  111.162585][ T4211] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  111.253690][ T4211] BTRFS info (device loop3): use zstd compression, level 3
[  111.261260][ T4211] BTRFS info (device loop3): enabling ssd optimizations
[  111.368510][ T4211] BTRFS info (device loop3): using spread ssd allocation scheme
[  111.410690][ T4211] BTRFS info (device loop3): not using ssd optimizations
[  111.432835][ T4211] BTRFS info (device loop3): not using spread ssd allocation scheme
[  111.495258][ T4211] BTRFS info (device loop3): using free space tree
[  112.073185][ T4211] BTRFS error (device loop3): open_ctree failed
[  112.385518][ T4227] loop0: detected capacity change from 0 to 32768
[  112.444536][ T4227] XFS: ikeep mount option is deprecated.
[  112.455352][ T4227] XFS: noikeep mount option is deprecated.
[  112.542633][ T4278] loop2: detected capacity change from 0 to 256
[  112.557217][ T4277] loop4: detected capacity change from 0 to 4096
[  112.603689][ T4277] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  112.694870][ T4278] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  113.745875][ T4288] loop1: detected capacity change from 0 to 512
[  113.799385][ T4288] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  113.823670][ T4292] loop3: detected capacity change from 0 to 136
[  113.862455][ T4288] EXT4-fs (loop1): 1 truncate cleaned up
[  113.868430][ T4288] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  113.984268][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  113.996059][ T4292] tmpfs: Unknown parameter ''
[  114.185761][   T26] kauditd_printk_skb: 46 callbacks suppressed
[  114.185777][   T26] audit: type=1326 audit(1727174882.627:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  114.376649][ T4303] loop3: detected capacity change from 0 to 128
[  114.393175][   T26] audit: type=1326 audit(1727174882.627:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  115.124006][   T26] audit: type=1326 audit(1727174882.627:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  115.148117][   T26] audit: type=1326 audit(1727174882.627:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  115.183055][   T26] audit: type=1326 audit(1727174882.627:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  115.276077][   T26] audit: type=1326 audit(1727174882.627:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  115.299309][   T26] audit: type=1326 audit(1727174882.637:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  115.391574][   T26] audit: type=1326 audit(1727174882.637:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  115.483679][   T26] audit: type=1326 audit(1727174882.637:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  115.646445][   T26] audit: type=1326 audit(1727174882.637:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4298 comm="syz.4.112" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe5be37def9 code=0x7ffc0000
[  116.629604][ T4319] loop4: detected capacity change from 0 to 256
[  116.706806][ T4319] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  117.886201][ T4307] loop0: detected capacity change from 0 to 32768
[  117.929663][ T4307] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.117 (4307)
[  118.018016][ T4307] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  118.049601][ T4307] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  118.073172][ T4307] BTRFS info (device loop0): setting nodatacow, compression disabled
[  118.090617][ T4307] BTRFS info (device loop0): force clearing of disk cache
[  118.118441][ T4307] BTRFS info (device loop0): setting datacow
[  118.152592][ T4307] BTRFS info (device loop0): doing ref verification
[  118.177982][ T4307] BTRFS info (device loop0): turning off barriers
[  118.205237][ T4307] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  118.245176][ T4307] BTRFS info (device loop0): use zstd compression, level 3
[  118.268045][ T4335] loop1: detected capacity change from 0 to 4096
[  118.268523][ T4307] BTRFS info (device loop0): enabling ssd optimizations
[  118.310518][ T4307] BTRFS info (device loop0): using spread ssd allocation scheme
[  118.333647][ T4335] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  118.357204][ T4307] BTRFS info (device loop0): not using ssd optimizations
[  118.376019][ T4307] BTRFS info (device loop0): not using spread ssd allocation scheme
[  118.490872][ T4307] BTRFS info (device loop0): using free space tree
[  118.897011][ T4307] BTRFS error (device loop0): open_ctree failed
[  119.568743][ T4327] loop4: detected capacity change from 0 to 32768
[  119.613948][ T4327] XFS: ikeep mount option is deprecated.
[  119.619678][ T4327] XFS: noikeep mount option is deprecated.
[  119.716333][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  119.716349][   T26] audit: type=1326 audit(1727174888.157:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  119.775289][   T26] audit: type=1326 audit(1727174888.167:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  119.802673][   T26] audit: type=1326 audit(1727174888.167:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  119.827874][ T3630] udevd[3630]: failed to send result of seq 10572 to main daemon: Connection refused
[  119.839100][   T26] audit: type=1326 audit(1727174888.167:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  119.864004][   T26] audit: type=1326 audit(1727174888.177:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  119.889253][ T4327] XFS (loop4): Mounting V5 Filesystem
[  119.895873][   T26] audit: type=1326 audit(1727174888.197:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  119.920542][   T26] audit: type=1326 audit(1727174888.207:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000
[  119.943471][   T26] audit: type=1326 audit(1727174888.207:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc4fbb19879 code=0x7ffc0000
[  119.966046][   T26] audit: type=1326 audit(1727174888.207:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  119.989247][   T26] audit: type=1326 audit(1727174888.207:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4418 comm="syz.3.128" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc4fbb74ea7 code=0x7ffc0000
[  120.158782][ T4327] XFS (loop4): Ending clean mount
[  120.660065][ T4327] XFS (loop4): Quotacheck needed: Please wait.
[  120.808844][ T4438] loop3: detected capacity change from 0 to 256
[  121.042044][ T4438] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  121.204439][ T4327] XFS (loop4): Quotacheck: Done.
[  122.094388][ T3638] XFS (loop4): Unmounting Filesystem
[  122.233340][ T4448] loop0: detected capacity change from 0 to 512
[  123.507384][ T4451] loop3: detected capacity change from 0 to 32768
[  123.518784][ T4464] loop0: detected capacity change from 0 to 2048
[  123.547500][ T4451] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.138 (4451)
[  123.592064][ T4451] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  123.620893][ T4464] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  123.639821][ T4451] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  123.707628][ T4451] BTRFS info (device loop3): doing ref verification
[  123.747900][ T4451] BTRFS info (device loop3): use zlib compression, level 3
[  123.759980][ T4454] loop1: detected capacity change from 0 to 32768
[  123.790192][ T4464] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  123.814561][ T4451] BTRFS info (device loop3): using free space tree
[  123.831526][ T4464] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 32 with error 28
[  123.852578][ T4454] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.136 (4454)
[  123.883359][ T4464] EXT4-fs (loop0): This should not happen!! Data will be lost
[  123.883359][ T4464] 
[  123.901912][ T4464] EXT4-fs (loop0): Total free blocks count 0
[  123.935881][ T4464] EXT4-fs (loop0): Free/Dirty block details
[  123.955017][ T4464] EXT4-fs (loop0): free_blocks=2415919104
[  123.983078][ T4464] EXT4-fs (loop0): dirty_blocks=32
[  123.993932][ T4454] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  124.019639][ T4464] EXT4-fs (loop0): Block reservation details
[  124.041825][ T4454] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  124.041992][ T4454] BTRFS info (device loop1): setting nodatacow, compression disabled
[  124.042057][ T4454] BTRFS info (device loop1): force clearing of disk cache
[  124.042078][ T4454] BTRFS info (device loop1): setting datacow
[  124.042101][ T4454] BTRFS info (device loop1): doing ref verification
[  124.042120][ T4454] BTRFS info (device loop1): turning off barriers
[  124.042172][ T4454] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  124.042219][ T4454] BTRFS info (device loop1): use zstd compression, level 3
[  124.042247][ T4454] BTRFS info (device loop1): enabling ssd optimizations
[  124.042265][ T4454] BTRFS info (device loop1): using spread ssd allocation scheme
[  124.042286][ T4454] BTRFS info (device loop1): not using ssd optimizations
[  124.042303][ T4454] BTRFS info (device loop1): not using spread ssd allocation scheme
[  124.042321][ T4454] BTRFS info (device loop1): using free space tree
[  124.105138][ T4464] EXT4-fs (loop0): i_reserved_data_blocks=2
[  124.215688][ T4451] BTRFS info (device loop3): enabling ssd optimizations
[  124.695975][ T4454] BTRFS info (device loop1): rebuilding free space tree
[  125.939280][ T3640] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  125.981781][   T26] kauditd_printk_skb: 31 callbacks suppressed
[  125.981799][   T26] audit: type=1326 audit(1727174894.417:325): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  126.010784][   T26] audit: type=1326 audit(1727174894.417:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  126.071917][   T26] audit: type=1326 audit(1727174894.417:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  127.299784][   T26] audit: type=1326 audit(1727174894.437:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  127.329005][   T26] audit: type=1326 audit(1727174894.437:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  127.351846][   T26] audit: type=1326 audit(1727174894.437:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  127.385524][   T26] audit: type=1326 audit(1727174894.437:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  127.449971][   T26] audit: type=1326 audit(1727174894.437:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  127.552453][ T3829] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  127.613794][   T26] audit: type=1326 audit(1727174894.447:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  127.694326][   T26] audit: type=1326 audit(1727174894.447:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4518 comm="syz.2.143" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  127.907704][ T4528] loop4: detected capacity change from 0 to 2048
[  128.116507][ T4532] loop2: detected capacity change from 0 to 512
[  128.180268][ T4528] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  128.782799][ T3638] EXT4-fs (loop4): unmounting filesystem.
[  131.271222][ T3641] EXT4-fs (loop0): unmounting filesystem.
[  131.441600][ T4558] loop2: detected capacity change from 0 to 32768
[  131.532783][ T4558] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.155 (4558)
[  131.659424][ T4558] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  131.660165][ T4563] loop4: detected capacity change from 0 to 32768
[  131.685773][ T4558] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  131.720003][ T4558] BTRFS info (device loop2): doing ref verification
[  131.734550][ T4563] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.156 (4563)
[  131.735441][ T4558] BTRFS info (device loop2): use zlib compression, level 3
[  131.788266][ T4563] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  131.811382][ T4558] BTRFS info (device loop2): using free space tree
[  131.814238][ T4563] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  131.863721][ T4563] BTRFS info (device loop4): setting nodatacow, compression disabled
[  131.892652][ T4563] BTRFS info (device loop4): force clearing of disk cache
[  131.919509][ T4563] BTRFS info (device loop4): setting datacow
[  131.938876][ T4571] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'.
[  131.946666][ T4563] BTRFS info (device loop4): doing ref verification
[  131.980572][ T4563] BTRFS info (device loop4): turning off barriers
[  132.023702][ T4563] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  132.033211][ T4563] BTRFS info (device loop4): use zstd compression, level 3
[  132.045511][ T4578] loop3: detected capacity change from 0 to 512
[  132.118830][ T4563] BTRFS info (device loop4): enabling ssd optimizations
[  132.136737][ T4563] BTRFS info (device loop4): using spread ssd allocation scheme
[  132.145780][ T4563] BTRFS info (device loop4): not using ssd optimizations
[  132.153273][ T4563] BTRFS info (device loop4): not using spread ssd allocation scheme
[  132.163154][ T4563] BTRFS info (device loop4): using free space tree
[  132.194760][ T4558] BTRFS info (device loop2): enabling ssd optimizations
[  132.318561][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  132.318582][   T26] audit: type=1800 audit(1727174900.747:354): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=263 res=0 errno=0
[  132.345568][    C1] vkms_vblank_simulate: vblank timer overrun
[  132.430612][ T4563] BTRFS info (device loop4): rebuilding free space tree
[  132.505561][   T26] audit: type=1800 audit(1727174900.767:355): pid=4558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.155" name="bus" dev="loop2" ino=263 res=0 errno=0
[  132.846065][   T26] audit: type=1326 audit(1727174901.287:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  132.877100][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  132.883598][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  132.983627][   T26] audit: type=1326 audit(1727174901.317:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  133.010681][ T3638] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.054944][   T26] audit: type=1326 audit(1727174901.327:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  133.245287][   T26] audit: type=1326 audit(1727174901.327:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  133.269730][   T26] audit: type=1326 audit(1727174901.327:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4615 comm="syz.0.164" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  133.368044][ T3645] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  134.038877][   T26] audit: type=1326 audit(1727174902.477:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  134.162179][   T26] audit: type=1326 audit(1727174902.517:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  134.303067][   T26] audit: type=1326 audit(1727174902.517:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4621 comm="syz.1.168" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  134.558333][ T4629] syz.0.171[4629] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.558466][ T4629] syz.0.171[4629] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  134.584937][ T4627] loop1: detected capacity change from 0 to 512
[  134.685460][ T4627] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  135.222973][ T4627] EXT4-fs (loop1): 1 truncate cleaned up
[  135.237506][ T4627] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  135.424644][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  135.802077][ T4656] netlink: 132 bytes leftover after parsing attributes in process `syz.3.177'.
[  135.836142][ T4658] netlink: 'syz.3.177': attribute type 10 has an invalid length.
[  135.916160][ T4658] bond0: (slave dummy0): Enslaving as an active interface with an up link
[  136.092245][ T4664] loop0: detected capacity change from 0 to 512
[  136.228519][ T4666] loop2: detected capacity change from 0 to 1024
[  136.475426][ T4664] EXT4-fs error (device loop0): ext4_acquire_dquot:6800: comm syz.0.179: Failed to acquire dquot type 1
[  136.707310][ T4654] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  137.104680][ T4664] EXT4-fs (loop0): 1 truncate cleaned up
[  137.110507][ T4664] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  137.130719][ T4664] ext4 filesystem being mounted at /34/file0 supports timestamps until 2038 (0x7fffffff)
[  137.161465][ T4654] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  137.262413][ T4666] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  137.315791][ T4653] loop1: detected capacity change from 0 to 32768
[  137.321981][ T4666] EXT4-fs (loop2): unmounting filesystem.
[  137.348711][ T4678] loop3: detected capacity change from 0 to 1024
[  137.381395][ T4653] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.175 (4653)
[  137.394872][ T3641] EXT4-fs (loop0): unmounting filesystem.
[  137.449024][ T4678] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  137.501572][ T4653] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.545752][ T4666] support for the xor transformation has been removed.
[  137.556830][ T4653] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  137.608632][ T4653] BTRFS info (device loop1): setting nodatacow, compression disabled
[  137.640145][ T4653] BTRFS info (device loop1): force clearing of disk cache
[  137.673183][ T4653] BTRFS info (device loop1): setting datacow
[  137.701602][ T4653] BTRFS info (device loop1): doing ref verification
[  137.714315][ T4653] BTRFS info (device loop1): turning off barriers
[  137.733028][ T3640] EXT4-fs (loop3): unmounting filesystem.
[  137.749329][ T4653] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  137.765832][ T4653] BTRFS info (device loop1): use zstd compression, level 3
[  137.793045][ T4653] BTRFS info (device loop1): enabling ssd optimizations
[  137.800697][ T4653] BTRFS info (device loop1): using spread ssd allocation scheme
[  137.840979][ T4653] BTRFS info (device loop1): not using ssd optimizations
[  137.848693][ T4653] BTRFS info (device loop1): not using spread ssd allocation scheme
[  137.877291][ T4653] BTRFS info (device loop1): using free space tree
[  137.897248][ T4685] loop2: detected capacity change from 0 to 1024
[  138.024530][ T4694] loop0: detected capacity change from 0 to 128
[  138.146609][ T4692] loop3: detected capacity change from 0 to 512
[  138.164845][ T4694] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  138.281941][ T4692] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  138.515747][ T4685] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  138.540590][ T4692] EXT4-fs (loop3): 1 truncate cleaned up
[  138.554253][ T4692] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  138.665376][ T4653] BTRFS error (device loop1): open_ctree failed
[  138.924520][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  138.934431][ T3640] EXT4-fs (loop3): unmounting filesystem.
[  139.171000][   T26] kauditd_printk_skb: 2 callbacks suppressed
[  139.171017][   T26] audit: type=1326 audit(1727174907.607:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  139.276018][   T26] audit: type=1326 audit(1727174907.717:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  139.360279][   T26] audit: type=1326 audit(1727174907.717:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  139.433217][   T26] audit: type=1326 audit(1727174907.717:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  139.634094][   T26] audit: type=1326 audit(1727174907.717:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  139.999257][   T26] audit: type=1326 audit(1727174907.737:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  140.104030][   T26] audit: type=1326 audit(1727174907.737:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  140.143654][   T26] audit: type=1326 audit(1727174907.737:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  140.176267][   T26] audit: type=1326 audit(1727174907.737:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  140.219249][   T26] audit: type=1326 audit(1727174907.737:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4716 comm="syz.0.191" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  140.369692][ T4730] netlink: 20 bytes leftover after parsing attributes in process `syz.3.196'.
[  140.468194][ T4733] loop2: detected capacity change from 0 to 512
[  140.524160][ T4733] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  140.752650][ T4733] EXT4-fs (loop2): 1 truncate cleaned up
[  140.758647][ T4733] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  140.781563][ T4741] loop3: detected capacity change from 0 to 8192
[  140.880850][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  140.914358][ T4735] loop0: detected capacity change from 0 to 32768
[  140.957730][ T4735] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.199 (4735)
[  140.970652][ T4741] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  141.016125][ T4735] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  141.037109][ T4735] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  141.066363][ T4735] BTRFS info (device loop0): setting nodatacow, compression disabled
[  141.084855][ T4735] BTRFS info (device loop0): force clearing of disk cache
[  141.105723][ T4735] BTRFS info (device loop0): setting datacow
[  141.115965][ T4735] BTRFS info (device loop0): doing ref verification
[  141.139190][ T4735] BTRFS info (device loop0): turning off barriers
[  141.155911][ T4735] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  141.204123][ T4735] BTRFS info (device loop0): use zstd compression, level 3
[  141.228502][ T4735] BTRFS info (device loop0): enabling ssd optimizations
[  141.252702][ T4735] BTRFS info (device loop0): using spread ssd allocation scheme
[  141.302772][ T4735] BTRFS info (device loop0): not using ssd optimizations
[  141.337565][ T4735] BTRFS info (device loop0): not using spread ssd allocation scheme
[  141.364499][ T4735] BTRFS info (device loop0): using free space tree
[  141.517306][ T4735] BTRFS info (device loop0): rebuilding free space tree
[  141.757358][ T3641] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.537646][ T4770] netlink: 'syz.0.203': attribute type 11 has an invalid length.
[  142.872455][ T4774] xt_CT: You must specify a L4 protocol and not use inversions on it
[  143.158753][ T4776] loop0: detected capacity change from 0 to 1024
[  143.259304][ T4776] EXT4-fs: Ignoring removed nobh option
[  143.305348][ T4776] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  143.402381][ T4776] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  143.516648][ T4782] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0
[  143.561892][ T4780] IPVS: stopping master sync thread 4782 ...
[  143.635119][ T4776] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3 with max blocks 1 with error 28
[  143.678429][ T4776] EXT4-fs (loop0): This should not happen!! Data will be lost
[  143.678429][ T4776] 
[  143.698217][ T4776] EXT4-fs (loop0): Total free blocks count 0
[  143.743783][ T4776] EXT4-fs (loop0): Free/Dirty block details
[  143.766071][ T4776] EXT4-fs (loop0): free_blocks=0
[  143.779223][ T4776] EXT4-fs (loop0): dirty_blocks=0
[  143.811816][ T4776] EXT4-fs (loop0): Block reservation details
[  143.833770][ T4776] EXT4-fs (loop0): i_reserved_data_blocks=0
[  143.956167][ T3641] EXT4-fs (loop0): unmounting filesystem.
[  144.311464][ T4799] loop3: detected capacity change from 0 to 1024
[  144.527658][ T4802] loop2: detected capacity change from 0 to 164
[  144.934432][ T4799] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  146.270949][ T3640] EXT4-fs (loop3): unmounting filesystem.
[  146.374157][ T4822] loop0: detected capacity change from 0 to 256
[  146.382769][ T4822] FAT-fs (loop0): Unrecognized mount option "" or missing value
[  146.992615][ T4834] loop1: detected capacity change from 0 to 512
[  147.109272][ T3652] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  147.120939][ T3652] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  147.132253][ T3651] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  147.148108][ T3651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  147.156483][ T3651] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  147.166735][ T3651] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  147.250574][ T4834] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  147.280387][ T4834] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038 (0x7fffffff)
[  147.554884][   T26] kauditd_printk_skb: 56 callbacks suppressed
[  147.554900][   T26] audit: type=1326 audit(1727174915.997:430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  147.616532][ T4834] netlink: '+}[@': attribute type 10 has an invalid length.
[  147.682588][   T26] audit: type=1326 audit(1727174916.027:431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  147.733463][ T4834] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.752337][   T26] audit: type=1326 audit(1727174916.027:432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc4fbb7c890 code=0x7ffc0000
[  147.794336][ T4834] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  147.854293][   T26] audit: type=1326 audit(1727174916.027:433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  147.885162][ T4849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[  147.930281][   T26] audit: type=1326 audit(1727174916.027:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  148.065339][   T26] audit: type=1326 audit(1727174916.027:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  148.127666][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  148.152759][ T4835] loop0: detected capacity change from 0 to 32768
[  148.504122][ T4835] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.226 (4835)
[  148.536541][   T26] audit: type=1326 audit(1727174916.027:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  148.854524][ T4836] chnl_net:caif_netlink_parms(): no params data found
[  148.866912][   T26] audit: type=1326 audit(1727174916.027:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  148.909998][   T26] audit: type=1326 audit(1727174916.027:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  148.927213][ T4835] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.952985][ T4835] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  149.018028][ T4835] BTRFS info (device loop0): setting nodatacow, compression disabled
[  149.028503][   T26] audit: type=1326 audit(1727174916.027:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4841 comm="syz.3.229" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  149.108248][ T4835] BTRFS info (device loop0): force clearing of disk cache
[  149.143656][ T4835] BTRFS info (device loop0): setting datacow
[  149.187039][ T4864] loop3: detected capacity change from 0 to 1024
[  149.193823][ T4835] BTRFS info (device loop0): doing ref verification
[  149.200491][ T4835] BTRFS info (device loop0): turning off barriers
[  149.233718][ T4835] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  149.243192][ T4835] BTRFS info (device loop0): use zstd compression, level 3
[  149.266540][ T4836] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.282327][ T3651] Bluetooth: hci5: command tx timeout
[  149.303270][ T4836] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.341667][ T4836] device bridge_slave_0 entered promiscuous mode
[  149.354707][ T4864] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  149.373761][ T4835] BTRFS info (device loop0): enabling ssd optimizations
[  149.380941][ T4835] BTRFS info (device loop0): using spread ssd allocation scheme
[  149.460568][ T4836] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.485581][ T4836] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.512663][ T4835] BTRFS info (device loop0): not using ssd optimizations
[  149.551363][ T4836] device bridge_slave_1 entered promiscuous mode
[  149.579522][ T4835] BTRFS info (device loop0): not using spread ssd allocation scheme
[  149.616708][ T4835] BTRFS info (device loop0): using free space tree
[  149.637991][ T4836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.715379][ T4836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  149.789693][ T3640] EXT4-fs (loop3): unmounting filesystem.
[  150.308625][ T4835] BTRFS error (device loop0): open_ctree failed
[  150.361907][ T4895] random: crng reseeded on system resumption
[  150.767305][ T4898] loop1: detected capacity change from 0 to 512
[  150.817341][ T4898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.847852][ T4836] team0: Port device team_slave_0 added
[  150.890651][ T4836] team0: Port device team_slave_1 added
[  150.899132][ T4898] EXT4-fs (loop1): 1 truncate cleaned up
[  150.937781][ T4898] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  151.097012][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_0
[  151.132622][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  151.138684][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  151.309997][ T4836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  151.383764][ T4836] batman_adv: batadv0: Adding interface: batadv_slave_1
[  151.391147][ T4836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.053692][ T4836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.087398][ T3651] Bluetooth: hci5: command tx timeout
[  154.254620][ T4915] mmap: syz.0.244 (4915) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  154.343189][ T4917] loop2: detected capacity change from 0 to 1024
[  154.381432][ T4836] device hsr_slave_0 entered promiscuous mode
[  154.411131][ T4836] device hsr_slave_1 entered promiscuous mode
[  154.445098][ T4836] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  154.452728][ T4836] Cannot create hsr debugfs directory
[  154.573765][ T4920] netlink: 'syz.1.246': attribute type 3 has an invalid length.
[  154.576733][ T4922] overlayfs: missing 'lowerdir'
[  154.609811][ T4917] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  154.968746][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  155.092500][ T4935] loop2: detected capacity change from 0 to 512
[  155.288631][ T4935] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  155.432897][ T4935] EXT4-fs (loop2): 1 truncate cleaned up
[  155.440218][ T4935] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  155.467781][ T4930] loop3: detected capacity change from 0 to 32768
[  155.484455][ T4930] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.249 (4930)
[  155.629805][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  155.664781][ T4930] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  155.686006][ T4930] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  155.778708][ T4943] loop2: detected capacity change from 0 to 128
[  155.796891][ T4930] BTRFS info (device loop3): setting nodatacow, compression disabled
[  155.811270][ T4943] EXT4-fs: Ignoring removed nobh option
[  155.817364][ T4930] BTRFS info (device loop3): force clearing of disk cache
[  155.844345][ T4930] BTRFS info (device loop3): setting datacow
[  155.850632][ T4930] BTRFS info (device loop3): doing ref verification
[  155.884057][ T4930] BTRFS info (device loop3): turning off barriers
[  155.891656][ T4930] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  155.907055][ T4930] BTRFS info (device loop3): use zstd compression, level 3
[  155.914510][ T4930] BTRFS info (device loop3): enabling ssd optimizations
[  155.921579][ T4930] BTRFS info (device loop3): using spread ssd allocation scheme
[  155.929430][ T4930] BTRFS info (device loop3): not using ssd optimizations
[  155.936578][ T4930] BTRFS info (device loop3): not using spread ssd allocation scheme
[  155.945756][ T4943] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  155.954665][ T4930] BTRFS info (device loop3): using free space tree
[  156.257244][ T3651] Bluetooth: hci5: command tx timeout
[  156.297170][ T4943] ext4 filesystem being mounted at /61/mnt supports timestamps until 2038 (0x7fffffff)
[  156.859918][ T4967] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  157.015560][ T4930] BTRFS info (device loop3): rebuilding free space tree
[  157.487081][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  157.668498][   T26] kauditd_printk_skb: 33 callbacks suppressed
[  157.668514][   T26] audit: type=1326 audit(1727174926.107:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  157.797087][   T26] audit: type=1326 audit(1727174926.167:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  157.801478][ T3640] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  157.861221][ T4975] loop2: detected capacity change from 0 to 2048
[  157.996949][   T26] audit: type=1326 audit(1727174926.167:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  158.030094][ T4977] loop0: detected capacity change from 0 to 1024
[  158.053444][ T4975] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  158.140289][   T26] audit: type=1326 audit(1727174926.167:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  158.187364][ T4977] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  158.205579][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  158.257258][   T26] audit: type=1326 audit(1727174926.187:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  158.299510][   T26] audit: type=1326 audit(1727174926.187:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  158.327594][ T4836] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.350859][ T3651] Bluetooth: hci5: command tx timeout
[  158.457070][ T3641] EXT4-fs (loop0): unmounting filesystem.
[  158.513814][   T26] audit: type=1326 audit(1727174926.187:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  158.550834][ T4983] device ipvlan1 entered promiscuous mode
[  158.561221][ T4985] overlayfs: missing 'lowerdir'
[  158.590876][ T4983] device ipvlan1 left promiscuous mode
[  158.620369][   T26] audit: type=1326 audit(1727174926.187:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  158.731273][   T26] audit: type=1326 audit(1727174926.187:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  158.803755][   T26] audit: type=1326 audit(1727174926.187:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4972 comm="syz.0.258" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  158.831635][ T4990] loop3: detected capacity change from 0 to 128
[  158.847761][ T4990] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  159.327044][ T4993] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  161.984370][ T5005] loop3: detected capacity change from 0 to 32768
[  162.033141][ T5005] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.268 (5005)
[  162.089415][ T5005] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  162.121445][ T5005] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  162.153678][ T5005] BTRFS info (device loop3): setting nodatacow, compression disabled
[  162.163201][ T5005] BTRFS info (device loop3): force clearing of disk cache
[  162.202982][ T5005] BTRFS info (device loop3): setting datacow
[  162.227878][ T5005] BTRFS info (device loop3): doing ref verification
[  162.259244][ T5005] BTRFS info (device loop3): turning off barriers
[  162.283454][ T5005] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  162.305340][ T5011] syz.0.270[5011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.305452][ T5011] syz.0.270[5011] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  162.333741][ T5005] BTRFS info (device loop3): use zstd compression, level 3
[  162.386615][ T5005] BTRFS info (device loop3): enabling ssd optimizations
[  162.407445][ T5005] BTRFS info (device loop3): using spread ssd allocation scheme
[  162.427727][ T5005] BTRFS info (device loop3): not using ssd optimizations
[  162.451080][ T5005] BTRFS info (device loop3): not using spread ssd allocation scheme
[  162.474265][ T5005] BTRFS info (device loop3): using free space tree
[  162.815233][ T5005] BTRFS info (device loop3): rebuilding free space tree
[  163.566022][ T4836] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  164.037636][ T5033] overlayfs: missing 'lowerdir'
[  164.076257][ T5034] netlink: 332 bytes leftover after parsing attributes in process `syz.2.273'.
[  164.091037][ T3640] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  164.151383][ T5034] netlink: 'syz.2.273': attribute type 9 has an invalid length.
[  164.207944][ T5034] netlink: 108 bytes leftover after parsing attributes in process `syz.2.273'.
[  164.313672][ T5034] netlink: 32 bytes leftover after parsing attributes in process `syz.2.273'.
[  164.687176][ T5044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.276'.
[  165.440698][ T5061] syz.3.284[5061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.440814][ T5061] syz.3.284[5061] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  165.716556][ T5063] loop0: detected capacity change from 0 to 512
[  165.751208][ T5065] overlayfs: missing 'lowerdir'
[  165.933333][ T5057] loop2: detected capacity change from 0 to 32768
[  165.966494][ T5057] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.283 (5057)
[  166.016762][ T5057] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.035740][ T5057] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  166.053837][ T5057] BTRFS info (device loop2): setting nodatacow, compression disabled
[  166.062038][ T5057] BTRFS info (device loop2): force clearing of disk cache
[  166.083615][ T5057] BTRFS info (device loop2): setting datacow
[  166.089692][ T5057] BTRFS info (device loop2): doing ref verification
[  166.128954][ T5057] BTRFS info (device loop2): turning off barriers
[  166.172329][ T5057] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  166.182921][ T5057] BTRFS info (device loop2): use zstd compression, level 3
[  166.216149][ T5057] BTRFS info (device loop2): enabling ssd optimizations
[  166.223340][ T5057] BTRFS info (device loop2): using spread ssd allocation scheme
[  166.240764][ T5057] BTRFS info (device loop2): not using ssd optimizations
[  166.264982][ T5057] BTRFS info (device loop2): not using spread ssd allocation scheme
[  166.273310][ T5057] BTRFS info (device loop2): using free space tree
[  166.413090][ T5057] BTRFS info (device loop2): rebuilding free space tree
[  166.553701][ T3645] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  166.903463][ T4836] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  168.338969][ T5111] loop1: detected capacity change from 0 to 136
[  168.356502][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  168.356519][   T26] audit: type=1326 audit(1727174936.797:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  168.406801][   T26] audit: type=1326 audit(1727174936.837:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  168.434237][   T26] audit: type=1326 audit(1727174936.837:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  168.460276][   T26] audit: type=1326 audit(1727174936.837:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5110 comm="syz.0.297" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd5577def9 code=0x7ffc0000
[  169.008840][ T5120] syz.1.301[5120] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  169.019632][ T5120] syz.1.301[5120] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  169.201329][ T5124] syz.1.301[5124] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  169.426336][ T5124] syz.1.301[5124] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  172.120139][ T5140] loop1: detected capacity change from 0 to 512
[  173.289902][ T5153] netlink: 'syz.3.310': attribute type 2 has an invalid length.
[  173.454246][ T5153] netlink: 'syz.3.310': attribute type 1 has an invalid length.
[  173.487898][ T5153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.310'.
[  175.090343][   T26] audit: type=1326 audit(1727174943.527:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  175.463607][   T26] audit: type=1326 audit(1727174943.527:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  175.485911][    C1] vkms_vblank_simulate: vblank timer overrun
[  175.589452][   T26] audit: type=1326 audit(1727174943.527:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  175.623435][   T26] audit: type=1326 audit(1727174943.717:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  175.648719][ T5175] loop0: detected capacity change from 0 to 1024
[  175.678028][   T26] audit: type=1326 audit(1727174943.717:497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  175.711852][ T5179] loop1: detected capacity change from 0 to 512
[  175.717287][   T26] audit: type=1326 audit(1727174943.737:498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  175.764755][ T5175] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  175.847553][   T26] audit: type=1326 audit(1727174943.737:499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  175.972970][   T26] audit: type=1326 audit(1727174943.737:500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  176.007450][ T3641] EXT4-fs (loop0): unmounting filesystem.
[  176.101758][ T4836] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  176.137206][   T26] audit: type=1326 audit(1727174943.747:501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  176.319957][ T5192] loop2: detected capacity change from 0 to 1024
[  176.328315][ T5192] EXT4-fs: Ignoring removed i_version option
[  176.334797][ T5192] EXT4-fs: Ignoring removed bh option
[  176.341218][   T26] audit: type=1326 audit(1727174943.747:502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5168 comm="syz.1.317" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  176.374731][ T5192] EXT4-fs warning (device loop2): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  176.400664][ T5192] EXT4-fs (loop2): mount failed
[  178.526064][ T5208] loop2: detected capacity change from 0 to 512
[  178.582215][ T5208] EXT4-fs (loop2): too many log groups per flexible block group
[  178.610767][ T5208] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  178.625886][ T5208] EXT4-fs (loop2): mount failed
[  179.579880][ T5219] loop0: detected capacity change from 0 to 128
[  181.164703][ T5234] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma?
[  182.283325][ T5245] loop3: detected capacity change from 0 to 512
[  182.378114][ T5240] loop1: detected capacity change from 0 to 8192
[  182.640367][ T5240] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  184.113538][    C1] sched: RT throttling activated
[  184.583826][ T5261] syz.0.346 uses obsolete (PF_INET,SOCK_PACKET)
[  184.934097][ T5273] loop2: detected capacity change from 0 to 256
[  185.240917][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.355748][ T5273] FAT-fs (loop2): Filesystem has been set read-only
[  185.411436][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.427065][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.457324][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.472100][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.484246][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.496238][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.560309][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.571584][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.581236][ T5273] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 196)
[  185.594329][   T26] kauditd_printk_skb: 6 callbacks suppressed
[  185.594345][   T26] audit: type=1800 audit(1727174954.037:508): pid=5273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.351" name="file1" dev="loop2" ino=1048634 res=0 errno=0
[  185.660268][ T5273] syz.2.351 (5273) used greatest stack depth: 19120 bytes left
[  185.974188][ T4836] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  186.041253][ T4836] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  186.072133][ T4836] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  186.100816][   T26] audit: type=1326 audit(1727174954.537:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  186.152268][ T4836] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  186.182283][   T26] audit: type=1326 audit(1727174954.567:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  186.254064][   T26] audit: type=1326 audit(1727174954.567:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  186.352741][   T26] audit: type=1326 audit(1727174954.567:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  186.438006][   T26] audit: type=1326 audit(1727174954.567:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  186.533117][   T26] audit: type=1326 audit(1727174954.567:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  186.622646][   T26] audit: type=1326 audit(1727174954.577:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  186.650264][ T4836] 8021q: adding VLAN 0 to HW filter on device bond0
[  186.692484][   T26] audit: type=1326 audit(1727174954.577:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5286 comm="syz.3.355" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  186.708665][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  186.715033][    C0] vkms_vblank_simulate: vblank timer overrun
[  186.769990][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  186.832944][ T4836] 8021q: adding VLAN 0 to HW filter on device team0
[  186.904788][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  186.954890][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  186.987459][   T33] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.994942][   T33] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.062176][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  187.111082][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  187.162885][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  187.203013][   T33] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.210324][   T33] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.267018][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  187.298606][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  187.333680][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  187.399829][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  187.439125][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  187.467341][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  187.509388][ T4836] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  187.540671][ T4836] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  187.557982][ T5300] loop2: detected capacity change from 0 to 8192
[  187.572309][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  187.591087][ T5300] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  187.607339][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  187.626550][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  187.642794][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  187.655702][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  187.676039][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  189.329192][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  189.381830][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  189.422088][ T4836] 8021q: adding VLAN 0 to HW filter on device batadv0
[  189.771874][   T26] audit: type=1326 audit(1727174958.207:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5319 comm="syz.2.362" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c4cd7def9 code=0x7ffc0000
[  190.166866][ T5326] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  190.226339][ T5326] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  190.319584][ T5330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'.
[  190.346715][ T5330] netlink: 28 bytes leftover after parsing attributes in process `syz.1.365'.
[  190.590900][ T5336] loop2: detected capacity change from 0 to 1024
[  191.515087][ T5336] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  191.532255][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  191.564586][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  191.713446][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  191.765276][ T5339] loop1: detected capacity change from 0 to 8192
[  191.773009][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  191.790326][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  191.800148][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  191.820890][ T4836] device veth0_vlan entered promiscuous mode
[  191.829428][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  191.842919][ T4836] device veth1_vlan entered promiscuous mode
[  191.880899][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  191.891001][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  191.907684][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  191.918263][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  191.930199][ T4836] device veth0_macvtap entered promiscuous mode
[  191.943453][ T4836] device veth1_macvtap entered promiscuous mode
[  191.966216][ T5339] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  191.981657][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.002366][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.022310][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.040066][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.051307][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.069819][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.081806][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  192.100134][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.112536][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_0
[  192.126895][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  192.140413][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  192.156218][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  192.171088][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  192.185635][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.208319][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.448110][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.563625][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.638860][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.729723][ T5352] loop0: detected capacity change from 0 to 512
[  192.766179][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.800949][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.840034][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.872766][ T5348] loop2: detected capacity change from 0 to 8192
[  192.879462][ T4836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  192.903632][ T4836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  192.935426][ T4836] batman_adv: batadv0: Interface activated: batadv_slave_1
[  192.987523][ T4836] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  193.026835][ T4836] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  193.098106][ T4836] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  193.343975][ T4836] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  193.552246][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  193.726385][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  194.717238][ T1270] ieee802154 phy0 wpan0: encryption failed: -22
[  194.725549][ T1270] ieee802154 phy1 wpan1: encryption failed: -22
[  194.822179][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  194.842321][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  194.882764][ T5370] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  195.077171][ T5370] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  195.591530][ T5382] loop2: detected capacity change from 0 to 512
[  195.599384][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  195.624654][ T5382] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  195.725566][ T5382] EXT4-fs (loop2): 1 truncate cleaned up
[  195.739069][ T4406] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  195.749700][ T5382] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  195.766773][ T4406] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  195.855740][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  195.916139][ T5386] loop1: detected capacity change from 0 to 512
[  195.989672][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  196.017112][ T5386] EXT4-fs (loop1): revision level too high, forcing read-only mode
[  196.075096][ T5386] EXT4-fs (loop1): orphan cleanup on readonly fs
[  196.091084][ T5388] loop0: detected capacity change from 0 to 512
[  196.118564][ T5386] EXT4-fs warning (device loop1): ext4_enable_quotas:7035: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  196.153396][ T5386] EXT4-fs (loop1): Cannot turn on quotas: error -22
[  196.214835][ T5386] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2924: inode #16: comm syz.1.378: corrupted xattr block 31
[  196.237154][ T5388] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  196.253489][ T5388] ext4 filesystem being mounted at /86/file1 supports timestamps until 2038 (0x7fffffff)
[  196.268032][ T5386] EXT4-fs (loop1): Remounting filesystem read-only
[  196.286288][ T5386] EXT4-fs warning (device loop1): ext4_evict_inode:299: xattr delete (err -117)
[  196.313751][ T5386] EXT4-fs (loop1): 1 orphan inode deleted
[  196.319904][ T5386] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  196.725212][ T3656] Bluetooth: hci4: command 0x0406 tx timeout
[  196.731795][ T3651] Bluetooth: hci1: command 0x0406 tx timeout
[  196.784445][ T3651] Bluetooth: hci3: command 0x0406 tx timeout
[  196.913973][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  197.301917][ T5404] loop1: detected capacity change from 0 to 1024
[  197.309489][ T5404] EXT4-fs: Ignoring removed oldalloc option
[  197.392019][ T5404] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  197.747688][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  197.946149][   T26] kauditd_printk_skb: 40 callbacks suppressed
[  197.946166][   T26] audit: type=1326 audit(1727174966.387:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  198.002239][ T5417] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  198.024252][   T26] audit: type=1326 audit(1727174966.427:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  198.208293][   T26] audit: type=1326 audit(1727174966.427:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5418 comm="syz.1.386" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x7ffc0000
[  198.830731][ T5427] loop1: detected capacity change from 0 to 512
[  198.841458][ T5427] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  198.869512][ T5427] EXT4-fs (loop1): 1 truncate cleaned up
[  198.876706][ T5427] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  198.898167][ T5429] loop4: detected capacity change from 0 to 256
[  198.945558][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  198.997909][ T5429] FAT-fs (loop4): Directory bread(block 64) failed
[  199.033796][ T5429] FAT-fs (loop4): Directory bread(block 65) failed
[  199.040586][ T5429] FAT-fs (loop4): Directory bread(block 66) failed
[  199.083674][ T5429] FAT-fs (loop4): Directory bread(block 67) failed
[  199.107960][ T5429] FAT-fs (loop4): Directory bread(block 68) failed
[  199.129058][ T5429] FAT-fs (loop4): Directory bread(block 69) failed
[  199.148341][ T5429] FAT-fs (loop4): Directory bread(block 70) failed
[  199.183053][ T5429] FAT-fs (loop4): Directory bread(block 71) failed
[  199.193745][ T5429] FAT-fs (loop4): Directory bread(block 72) failed
[  199.233709][ T5429] FAT-fs (loop4): Directory bread(block 73) failed
[  199.322494][ T5429] process 'syz.4.390' launched './file0' with NULL argv: empty string added
[  199.346890][ T5439] netlink: 9 bytes leftover after parsing attributes in process `syz.2.395'.
[  199.368047][ T5429] syz.4.390: attempt to access beyond end of device
[  199.368047][ T5429] loop4: rw=524288, sector=1736, nr_sectors = 32 limit=256
[  199.444510][ T5429] syz.4.390: attempt to access beyond end of device
[  199.444510][ T5429] loop4: rw=0, sector=1736, nr_sectors = 8 limit=256
[  199.499680][ T5441] netlink: 40 bytes leftover after parsing attributes in process `syz.1.396'.
[  199.743017][ T5446] loop1: detected capacity change from 0 to 128
[  199.902185][ T5446] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  199.922641][ T5451] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  200.065763][ T5449] loop2: detected capacity change from 0 to 8192
[  200.102918][ T5449] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  200.955326][ T5463] xt_hashlimit: max too large, truncated to 1048576
[  201.166930][ T5465] loop1: detected capacity change from 0 to 1024
[  201.191554][ T5467] loop4: detected capacity change from 0 to 512
[  201.194637][ T5465] EXT4-fs: Ignoring removed orlov option
[  201.214589][ T5467] EXT4-fs: Ignoring removed oldalloc option
[  201.234023][ T5465] EXT4-fs: Ignoring removed nomblk_io_submit option
[  201.282898][ T5467] EXT4-fs error (device loop4): ext4_xattr_inode_iget:400: comm syz.4.406: Parent and EA inode have the same ino 15
[  201.337231][ T5465] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  201.353307][ T5467] EXT4-fs (loop4): Remounting filesystem read-only
[  201.403084][ T5467] EXT4-fs error (device loop4): ext4_evict_inode:290: comm syz.4.406: couldn't truncate inode 15 (err -30)
[  201.452976][ T5467] EXT4-fs (loop4): 1 orphan inode deleted
[  201.488242][ T5467] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  201.592821][ T4836] EXT4-fs (loop4): unmounting filesystem.
[  201.660405][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  202.090645][ T5481] loop1: detected capacity change from 0 to 512
[  202.171048][ T5481] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  202.224038][ T5481] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038 (0x7fffffff)
[  202.475719][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  202.764376][ T5478] 9pnet_fd: Insufficient options for proto=fd
[  202.894957][ T5490] atomic_op ffff8880575f1198 conn xmit_atomic 0000000000000000
[  205.697354][ T5522] loop3: detected capacity change from 0 to 1024
[  205.720877][ T5522] EXT4-fs: Ignoring removed bh option
[  205.831199][ T5522] Quota error (device loop3): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  205.892137][ T5522] EXT4-fs warning (device loop3): ext4_enable_quotas:7035: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  205.995203][ T5522] EXT4-fs (loop3): mount failed
[  207.031170][ T5515] loop1: detected capacity change from 0 to 32768
[  207.084922][ T5515] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.421 (5515)
[  207.804696][ T3655] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  207.836354][ T5515] BTRFS error (device loop1): open_ctree failed
[  207.933748][ T3655] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  207.936158][ T5538] loop4: detected capacity change from 0 to 128
[  207.942942][ T3656] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  207.957758][ T3656] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  207.966711][ T3656] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  207.974620][ T3656] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  207.981521][ T5538] FAT-fs (loop4): Unrecognized mount option "ÿÿ18446744073709551615" or missing value
[  208.435972][ T5552] loop2: detected capacity change from 0 to 1024
[  208.504123][ T5533] chnl_net:caif_netlink_parms(): no params data found
[  209.316328][ T5552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  209.943398][ T5533] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.989094][ T5533] bridge0: port 1(bridge_slave_0) entered disabled state
[  209.999320][ T5533] device bridge_slave_0 entered promiscuous mode
[  210.008718][ T5533] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.028880][ T5533] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.041722][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  210.054473][ T3656] Bluetooth: hci2: command tx timeout
[  210.105777][ T5533] device bridge_slave_1 entered promiscuous mode
[  210.399312][ T5533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.472045][ T5533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.597220][ T5533] team0: Port device team_slave_0 added
[  210.650092][ T5533] team0: Port device team_slave_1 added
[  210.940288][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.998779][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.220995][ T5533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  211.390125][ T5533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  211.453254][ T5533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  211.522013][ T5533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  211.672004][ T5576] IPVS: Error connecting to the multicast addr
[  211.709808][ T5533] device hsr_slave_0 entered promiscuous mode
[  211.734753][ T5533] device hsr_slave_1 entered promiscuous mode
[  211.761016][ T5533] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  211.771175][ T5533] Cannot create hsr debugfs directory
[  211.791246][ T5569] loop3: detected capacity change from 0 to 32768
[  211.798726][ T5576] loop2: detected capacity change from 0 to 1024
[  211.820942][ T5569] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.438 (5569)
[  211.851097][ T5569] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  211.870850][ T5576] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  211.873331][ T5569] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  211.891640][ T5569] BTRFS info (device loop3): using free space tree
[  212.057831][ T5569] BTRFS info (device loop3): enabling ssd optimizations
[  212.066938][ T3651] Bluetooth: hci0: command 0x0406 tx timeout
[  212.152467][ T3651] Bluetooth: hci2: command tx timeout
[  212.152944][ T5599] EXT4-fs (loop2): re-mounted. Quota mode: none.
[  212.368699][ T5602] loop1: detected capacity change from 0 to 512
[  212.419199][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  212.442796][ T5602] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  212.499636][ T5602] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038 (0x7fffffff)
[  212.666575][   T26] audit: type=1800 audit(1727174981.107:561): pid=5602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.429" name="bus" dev="loop1" ino=18 res=0 errno=0
[  213.053241][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  214.229713][ T3651] Bluetooth: hci2: command tx timeout
[  214.499617][ T5625] loop2: detected capacity change from 0 to 1024
[  215.181623][ T3640] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.234629][ T5625] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  215.295331][ T5533] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.313861][ T3651] Bluetooth: hci2: command tx timeout
[  216.489456][ T5634] loop1: detected capacity change from 0 to 512
[  216.617884][   T26] audit: type=1326 audit(1727174985.057:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5635 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  216.640448][ T5634] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  216.640872][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  216.696191][   T26] audit: type=1326 audit(1727174985.097:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5635 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=328 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  216.738104][ T5634] EXT4-fs (loop1): 1 truncate cleaned up
[  216.763052][ T5634] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  216.819443][   T26] audit: type=1326 audit(1727174985.097:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5635 comm="syz.4.452" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  217.148667][ T3829] EXT4-fs (loop1): unmounting filesystem.
[  218.292079][ T5647] loop2: detected capacity change from 0 to 32768
[  218.325733][ T5647] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.456 (5647)
[  219.194817][ T5647] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  219.234200][ T5647] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  219.248989][ T5647] BTRFS info (device loop2): using free space tree
[  219.319930][ T5674] netlink: 'syz.1.463': attribute type 1 has an invalid length.
[  219.367337][ T5681] loop3: detected capacity change from 0 to 1024
[  219.400295][ T5681] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  219.430514][ T5674] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.569928][ T5685] 8021q: adding VLAN 0 to HW filter on device bond1
[  219.601477][ T5685] bond1: (slave ip6tnl1): The slave device specified does not support setting the MAC address
[  219.639457][ T5685] bond1: (slave ip6tnl1): Error -95 calling set_mac_address
[  219.657910][ T5647] BTRFS info (device loop2): enabling ssd optimizations
[  219.921061][ T5702] loop4: detected capacity change from 0 to 512
[  220.019025][ T5702] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[  220.034805][ T5702] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2
[  220.101767][ T5533] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  220.107953][ T5702] EXT4-fs (loop4): 1 truncate cleaned up
[  220.221621][ T5702] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  220.277018][ T5702] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  220.313145][ T5702] EXT4-fs (loop4): re-mounted. Quota mode: writeback.
[  220.410511][ T4836] EXT4-fs (loop4): unmounting filesystem.
[  221.768519][ T5710] loop4: detected capacity change from 0 to 512
[  221.796443][ T5710] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  221.822819][ T3645] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  221.900217][ T5710] EXT4-fs (loop4): 1 truncate cleaned up
[  221.925674][ T3640] EXT4-fs (loop3): unmounting filesystem.
[  221.934339][ T5710] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  222.148993][ T5715] loop3: detected capacity change from 0 to 512
[  222.236468][ T4836] EXT4-fs (loop4): unmounting filesystem.
[  222.265989][ T5715] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  222.303464][ T5715] ext4 filesystem being mounted at /109/bus supports timestamps until 2038 (0x7fffffff)
[  223.320369][ T3640] EXT4-fs (loop3): unmounting filesystem.
[  225.120924][ T5747] loop4: detected capacity change from 0 to 1024
[  225.351614][ T5747] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  225.724977][ T4836] EXT4-fs (loop4): unmounting filesystem.
[  225.821344][ T5533] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.857353][   T26] audit: type=1326 audit(1727174994.297:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5753 comm="syz.1.483" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10a977def9 code=0x0
[  225.966687][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  226.066236][ T5738] loop2: detected capacity change from 0 to 32768
[  226.084521][ T5738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.478 (5738)
[  226.149130][ T5738] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  226.162572][ T5533] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  226.173845][ T5738] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  226.183105][ T5738] BTRFS info (device loop2): using free space tree
[  227.032376][ T5738] BTRFS error (device loop2): open_ctree failed
[  227.244923][ T5795] loop3: detected capacity change from 0 to 1024
[  227.314850][ T5795] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  227.968074][ T3640] EXT4-fs (loop3): unmounting filesystem.
[  228.007493][ T5791] loop1: detected capacity change from 0 to 8192
[  228.026328][ T5791] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  228.132474][ T5800] loop4: detected capacity change from 0 to 1024
[  228.178204][ T5800] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities
[  228.420445][ T5533] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  228.436740][ T5808] netlink: 'syz.2.494': attribute type 1 has an invalid length.
[  228.548655][ T5808] device bond1 entered promiscuous mode
[  228.559898][ T5533] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  228.587310][ T5814] loop1: detected capacity change from 0 to 136
[  228.669207][ T5811] team0: Port device team_slave_1 removed
[  228.675965][ T5817] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  228.693701][ T5533] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  228.728418][ T5815] netlink: 4 bytes leftover after parsing attributes in process `syz.4.497'.
[  228.749001][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  228.778524][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_0
[  228.792881][ T5815] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  228.825613][ T5815] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.997385][ T5823] loop2: detected capacity change from 0 to 1024
[  229.199155][ T5823] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  229.765621][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  229.923678][ T5533] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  230.484077][ T5387] EXT4-fs (loop0): unmounting filesystem.
[  230.675143][ T5533] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.784282][ T5836] loop4: detected capacity change from 0 to 8192
[  230.854861][ T5836] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  231.434383][ T5829] loop2: detected capacity change from 0 to 32768
[  231.460762][ T5829] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.503 (5829)
[  231.563904][ T5829] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  231.618627][ T5829] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  231.644350][ T5829] BTRFS info (device loop2): using free space tree
[  231.777906][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  231.787109][ T4373] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  231.830536][ T5533] 8021q: adding VLAN 0 to HW filter on device team0
[  231.983168][ T5829] BTRFS info (device loop2): enabling ssd optimizations
[  232.061074][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  232.075984][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  232.098516][ T4401] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.106013][ T4401] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.190481][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  232.206962][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  232.247235][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  232.262992][ T4401] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.270217][ T4401] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.310403][ T4381] device hsr_slave_0 left promiscuous mode
[  232.332297][ T4381] device hsr_slave_1 left promiscuous mode
[  232.352052][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  232.379719][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_0
[  232.402856][ T4381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  232.422457][ T4381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  232.433645][ T4381] device bridge_slave_1 left promiscuous mode
[  232.482434][ T4381] bridge0: port 2(bridge_slave_1) entered disabled state
[  232.512817][ T4381] device bridge_slave_0 left promiscuous mode
[  232.530814][ T4381] bridge0: port 1(bridge_slave_0) entered disabled state
[  232.556460][ T3645] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  232.646168][ T4381] device veth1_macvtap left promiscuous mode
[  232.652415][ T4381] device veth0_macvtap left promiscuous mode
[  232.690516][ T4381] device veth1_vlan left promiscuous mode
[  232.707814][ T4381] device veth0_vlan left promiscuous mode
[  232.991422][ T3651] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  233.000503][ T3651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  233.011324][ T3651] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  233.024279][ T3651] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  233.032818][ T3651] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  233.042510][ T3651] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  234.027738][ T4381] team0 (unregistering): Port device team_slave_1 removed
[  234.095921][ T4381] team0 (unregistering): Port device team_slave_0 removed
[  234.155287][ T4381] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  234.219824][ T4381] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  234.511126][   T26] audit: type=1326 audit(1727175002.947:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.559607][   T26] audit: type=1326 audit(1727175002.947:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.612203][   T26] audit: type=1326 audit(1727175002.947:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.652422][   T26] audit: type=1326 audit(1727175002.947:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.680334][ T5892] loop4: detected capacity change from 0 to 512
[  234.697136][ T5892] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  234.702095][   T26] audit: type=1326 audit(1727175002.947:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.744232][   T26] audit: type=1326 audit(1727175002.947:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.770431][   T26] audit: type=1326 audit(1727175002.947:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.795296][   T26] audit: type=1326 audit(1727175002.947:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.820399][   T26] audit: type=1326 audit(1727175002.947:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.837070][ T5892] EXT4-fs (loop4): 1 truncate cleaned up
[  234.844631][   T26] audit: type=1326 audit(1727175002.947:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5889 comm="syz.4.519" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f369897def9 code=0x7ffc0000
[  234.871788][ T5892] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  234.954109][ T4836] EXT4-fs (loop4): unmounting filesystem.
[  235.093757][ T3651] Bluetooth: hci0: command tx timeout
[  235.280664][ T4381] bond0 (unregistering): Released all slaves
[  235.365154][ T4375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  235.447008][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  235.468804][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  235.491021][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  235.524717][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  235.560535][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  235.574991][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  235.616159][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  235.658891][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  235.847788][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  235.864828][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  235.934731][ T5533] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  237.174955][ T3651] Bluetooth: hci0: command tx timeout
[  237.384946][ T5872] chnl_net:caif_netlink_parms(): no params data found
[  237.418839][ T5919] loop2: detected capacity change from 0 to 8192
[  237.484800][ T5919] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  238.166076][ T4381] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.262283][ T5930] loop2: detected capacity change from 0 to 256
[  238.284541][ T5930] FAT-fs (loop2): Unrecognized mount option "" or missing value
[  238.357277][ T4381] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.380471][ T5872] bridge0: port 1(bridge_slave_0) entered blocking state
[  238.403776][ T5872] bridge0: port 1(bridge_slave_0) entered disabled state
[  238.426260][ T5872] device bridge_slave_0 entered promiscuous mode
[  238.451005][ T5533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  238.509687][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  238.534630][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  238.608534][ T4381] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.610682][ T5939] loop2: detected capacity change from 0 to 512
[  238.664696][ T5872] bridge0: port 2(bridge_slave_1) entered blocking state
[  238.677951][ T5872] bridge0: port 2(bridge_slave_1) entered disabled state
[  238.695173][ T5872] device bridge_slave_1 entered promiscuous mode
[  238.716209][ T5939] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  238.734030][ T5939] ext4 filesystem being mounted at /135/bus supports timestamps until 2038 (0x7fffffff)
[  238.777694][ T4381] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.826832][ T5872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  238.839300][ T5872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  238.876947][ T5872] team0: Port device team_slave_0 added
[  238.888795][ T5872] team0: Port device team_slave_1 added
[  239.002626][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  239.041215][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  239.264842][ T3651] Bluetooth: hci0: command tx timeout
[  239.306961][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.366903][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  239.431185][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.530429][ T5872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.560278][ T5872] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.569730][ T5953] loop3: detected capacity change from 0 to 8192
[  239.578196][ T5872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.579895][ T5953] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  239.628748][ T5872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.682422][ T5957] loop2: detected capacity change from 0 to 512
[  239.703092][ T5872] device hsr_slave_0 entered promiscuous mode
[  239.715428][ T5872] device hsr_slave_1 entered promiscuous mode
[  239.726170][ T5957] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  239.755258][ T5957] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038 (0x7fffffff)
[  239.861204][ T5957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.539'.
[  239.907695][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  239.927249][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  239.962029][ T5533] device veth0_vlan entered promiscuous mode
[  239.970785][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  239.979721][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  240.006473][ T3645] EXT4-fs (loop2): unmounting filesystem.
[  240.116396][ T5533] device veth1_vlan entered promiscuous mode
[  240.493753][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  240.528215][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  240.572953][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  240.588306][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  240.598350][   T26] kauditd_printk_skb: 19 callbacks suppressed
[  240.598368][   T26] audit: type=1326 audit(1727175009.037:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  240.741901][   T26] audit: type=1326 audit(1727175009.077:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  240.842375][   T26] audit: type=1326 audit(1727175009.077:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  240.887662][ T5533] device veth0_macvtap entered promiscuous mode
[  241.091505][ T5533] device veth1_macvtap entered promiscuous mode
[  241.206243][   T26] audit: type=1326 audit(1727175009.077:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  241.703850][ T3651] Bluetooth: hci0: command tx timeout
[  241.752803][   T26] audit: type=1326 audit(1727175009.077:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  241.803644][   T26] audit: type=1326 audit(1727175009.087:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  241.843574][   T26] audit: type=1326 audit(1727175009.087:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  241.903668][   T26] audit: type=1326 audit(1727175009.087:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  241.963239][   T26] audit: type=1326 audit(1727175009.087:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  241.997183][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.037886][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.058331][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.095762][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.119957][   T26] audit: type=1326 audit(1727175009.087:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5977 comm="syz.3.545" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc4fbb7def9 code=0x7ffc0000
[  242.130064][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  242.213151][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.298498][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  242.515282][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  242.559018][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  242.695000][ T5989] loop4: detected capacity change from 0 to 32768
[  242.704133][ T5989] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.550 (5989)
[  242.722929][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.741063][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.798913][ T5989] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  242.809508][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.828096][ T5989] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  242.837786][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.854279][ T5989] BTRFS info (device loop4): setting nodatacow, compression disabled
[  242.859568][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.878259][ T5989] BTRFS info (device loop4): force clearing of disk cache
[  242.889605][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.898043][ T5989] BTRFS info (device loop4): setting datacow
[  242.910136][ T5533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  242.918102][ T5989] BTRFS info (device loop4): doing ref verification
[  242.941413][ T5533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  242.953623][ T5989] BTRFS info (device loop4): turning off barriers
[  242.957856][ T5533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  242.970396][ T5989] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  242.980406][ T5989] BTRFS info (device loop4): use zstd compression, level 3
[  242.989881][ T5989] BTRFS info (device loop4): enabling ssd optimizations
[  242.997404][ T5989] BTRFS info (device loop4): using spread ssd allocation scheme
[  243.005740][ T5989] BTRFS info (device loop4): not using ssd optimizations
[  243.024762][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  243.033385][ T5989] BTRFS info (device loop4): not using spread ssd allocation scheme
[  243.055251][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  243.070453][ T5989] BTRFS info (device loop4): using free space tree
[  243.144383][ T5533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  243.161412][ T5533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  243.171056][ T5533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  243.184640][ T5533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  243.198800][ T5997] netlink: 4 bytes leftover after parsing attributes in process `syz.2.553'.
[  243.218190][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  243.230353][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_0
[  243.247839][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  243.262468][ T5997] batman_adv: batadv0: Removing interface: batadv_slave_1
[  243.309389][ T6011] loop3: detected capacity change from 0 to 8192
[  243.316722][ T5989] BTRFS info (device loop4): rebuilding free space tree
[  243.330260][ T6011] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  243.729205][ T4836] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  243.776918][ T6021] loop2: detected capacity change from 0 to 164
[  243.791033][ T6021] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  243.820117][ T6021] rock: corrupted directory entry. extent=28, offset=0, size=16777216
[  243.993954][ T6022] syz.2.555: attempt to access beyond end of device
[  243.993954][ T6022] loop2: rw=524288, sector=263328, nr_sectors = 4 limit=164
[  244.016464][ T6022] syz.2.555: attempt to access beyond end of device
[  244.016464][ T6022] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  244.035192][ T6021] syz.2.555: attempt to access beyond end of device
[  244.035192][ T6021] loop2: rw=0, sector=263328, nr_sectors = 4 limit=164
[  244.338100][ T3691] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.351146][ T3691] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.496280][ T3691] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  245.436900][ T5872] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  245.488611][ T5872] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  245.525990][ T5872] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  245.528284][ T4404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.546353][ T4404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.662987][ T6045] usb usb1: usbfs: process 6045 (syz.2.563) did not claim interface 0 before use
[  245.786109][   T33] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  245.795428][ T5872] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  245.833183][ T6049] netlink: 272 bytes leftover after parsing attributes in process `syz.2.565'.
[  245.904583][ T6049] ------------[ cut here ]------------
[  245.910175][ T6049] WARNING: CPU: 1 PID: 6049 at net/wireless/core.h:231 wdev_lock+0x96/0xc0
[  245.918933][ T6049] Modules linked in:
[  245.922885][ T6049] CPU: 1 PID: 6049 Comm: syz.2.565 Not tainted 6.1.111-syzkaller #0
[  245.931072][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  245.941392][ T6049] RIP: 0010:wdev_lock+0x96/0xc0
[  245.946451][ T6049] Code: e8 7d f7 85 ed 74 1e e8 98 e4 7d f7 eb 05 e8 91 e4 7d f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 ef 18 a3 00 e8 7a e4 7d f7 <0f> 0b eb e5 48 c7 c1 24 1a 9a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 7b
[  245.967041][ T6049] RSP: 0018:ffffc90003acef40 EFLAGS: 00010287
[  245.973602][ T6049] RAX: ffffffff8a0ccac6 RBX: ffff88807e600c90 RCX: 0000000000040000
[  245.981722][ T6049] RDX: ffffc9000a61a000 RSI: 0000000000004065 RDI: 0000000000004066
[  245.989899][ T6049] RBP: 0000000000000000 R08: ffffffff8a0cca9f R09: ffffed1009448412
[  245.998129][ T6049] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  246.006209][ T6049] R13: ffff8880629278c0 R14: dffffc0000000000 R15: ffff88804a242014
[  246.014367][ T6049] FS:  00007f7c4cbff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  246.023446][ T6049] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  246.030506][ T6049] CR2: 00007f368f3d7000 CR3: 0000000076336000 CR4: 00000000003506e0
[  246.038688][ T6049] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  246.046884][ T6049] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  246.054978][ T6049] Call Trace:
[  246.058447][ T6049]  <TASK>
[  246.061438][ T6049]  ? __warn+0x15a/0x520
[  246.065787][ T6049]  ? wdev_lock+0x96/0xc0
[  246.070089][ T6049]  ? report_bug+0x2af/0x500
[  246.074766][ T6049]  ? wdev_lock+0x96/0xc0
[  246.079074][ T6049]  ? handle_bug+0x3d/0x70
[  246.083601][ T6049]  ? exc_invalid_op+0x16/0x40
[  246.088468][ T6049]  ? asm_exc_invalid_op+0x16/0x20
[  246.093709][ T6049]  ? wdev_lock+0x6f/0xc0
[  246.098003][ T6049]  ? wdev_lock+0x96/0xc0
[  246.102340][ T6049]  ? wdev_lock+0x96/0xc0
[  246.106685][ T6049]  nl80211_send_iface+0x816/0x1470
[  246.111879][ T6049]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  246.118076][ T6049]  ? nl80211_notify_iface+0x160/0x160
[  246.123569][ T6049]  ? kasan_quarantine_put+0xd4/0x220
[  246.128995][ T6049]  ? lockdep_hardirqs_on+0x94/0x130
[  246.134397][ T6049]  ? __kmem_cache_free+0x25c/0x3c0
[  246.139577][ T6049]  ? nl80211_dump_wiphy_parse+0x19c/0x580
[  246.145433][ T6049]  ? nl80211_dump_wiphy_parse+0x19c/0x580
[  246.151233][ T6049]  ? nl80211_exit+0x20/0x20
[  246.155875][ T6049]  nl80211_dump_interface+0x490/0x6a0
[  246.161480][ T6049]  ? nl80211_get_interface+0x200/0x200
[  246.167055][ T6049]  ? netlink_dump+0x267/0xca0
[  246.171827][ T6049]  ? __alloc_skb+0x419/0x670
[  246.176543][ T6049]  netlink_dump+0x5a2/0xca0
[  246.181125][ T6049]  ? netlink_lookup+0x200/0x200
[  246.186206][ T6049]  ? genl_start+0x2e1/0x490
[  246.190862][ T6049]  __netlink_dump_start+0x521/0x6c0
[  246.196202][ T6049]  genl_rcv_msg+0x9f3/0xf70
[  246.200807][ T6049]  ? nl80211_get_interface+0x200/0x200
[  246.206415][ T6049]  ? genl_bind+0x400/0x400
[  246.210990][ T6049]  ? genl_rcv_msg+0xf70/0xf70
[  246.215779][ T6049]  ? nl80211_get_interface+0x200/0x200
[  246.221372][ T6049]  ? genl_lock_done+0xd0/0xd0
[  246.226151][ T6049]  ? read_lock_is_recursive+0x10/0x10
[  246.231776][ T6049]  ? __might_sleep+0xb0/0xb0
[  246.236477][ T6049]  ? ref_tracker_free+0x638/0x7d0
[  246.241777][ T6049]  ? nl80211_set_wiphy+0x2f60/0x2f60
[  246.247172][ T6049]  ? nl80211_get_interface+0x200/0x200
[  246.252691][ T6049]  ? refcount_inc+0x80/0x80
[  246.257299][ T6049]  ? __copy_skb_header+0x47b/0x600
[  246.262481][ T6049]  netlink_rcv_skb+0x1cd/0x410
[  246.267359][ T6049]  ? genl_bind+0x400/0x400
[  246.271839][ T6049]  ? netlink_ack+0x1290/0x1290
[  246.276733][ T6049]  genl_rcv+0x24/0x40
[  246.280762][ T6049]  netlink_unicast+0x7d8/0x970
[  246.285731][ T6049]  ? netlink_detachskb+0x90/0x90
[  246.290725][ T6049]  ? __virt_addr_valid+0x45b/0x530
[  246.295945][ T6049]  ? __phys_addr_symbol+0x2b/0x70
[  246.301030][ T6049]  ? __check_object_size+0x4dd/0xa30
[  246.306409][ T6049]  ? bpf_lsm_netlink_send+0x5/0x10
[  246.311572][ T6049]  netlink_sendmsg+0xa26/0xd60
[  246.316502][ T6049]  ? netlink_getsockopt+0x580/0x580
[  246.322024][ T6049]  ? aa_sock_msg_perm+0x91/0x150
[  246.327160][ T6049]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  246.332508][ T6049]  ? security_socket_sendmsg+0x7d/0xa0
[  246.338066][ T6049]  ? netlink_getsockopt+0x580/0x580
[  246.343533][ T6049]  ____sys_sendmsg+0x5a5/0x8f0
[  246.348650][ T6049]  ? __sys_sendmsg_sock+0x30/0x30
[  246.353789][ T6049]  __sys_sendmsg+0x2a9/0x390
[  246.358448][ T6049]  ? ____sys_sendmsg+0x8f0/0x8f0
[  246.363534][ T6049]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  246.369593][ T6049]  ? syscall_enter_from_user_mode+0x2e/0x230
[  246.375691][ T6049]  ? lockdep_hardirqs_on+0x94/0x130
[  246.381053][ T6049]  ? syscall_enter_from_user_mode+0x2e/0x230
[  246.387376][ T6049]  do_syscall_64+0x3b/0xb0
[  246.391866][ T6049]  ? clear_bhb_loop+0x45/0xa0
[  246.396763][ T6049]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  246.402719][ T6049] RIP: 0033:0x7f7c4cd7def9
[  246.407282][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.427161][ T6049] RSP: 002b:00007f7c4cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.435868][ T6049] RAX: ffffffffffffffda RBX: 00007f7c4cf35f80 RCX: 00007f7c4cd7def9
[  246.444043][ T6049] RDX: 0000000000000000 RSI: 0000000020000c40 RDI: 0000000000000006
[  246.452154][ T6049] RBP: 00007f7c4cdf0b76 R08: 0000000000000000 R09: 0000000000000000
[  246.460246][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  246.468453][ T6049] R13: 0000000000000000 R14: 00007f7c4cf35f80 R15: 00007ffc3081ef38
[  246.476584][ T6049]  </TASK>
[  246.479652][ T6049] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  246.486970][ T6049] CPU: 1 PID: 6049 Comm: syz.2.565 Not tainted 6.1.111-syzkaller #0
[  246.494987][ T6049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  246.505079][ T6049] Call Trace:
[  246.508393][ T6049]  <TASK>
[  246.511446][ T6049]  dump_stack_lvl+0x1e3/0x2cb
[  246.516191][ T6049]  ? nf_tcp_handle_invalid+0x642/0x642
[  246.521713][ T6049]  ? panic+0x764/0x764
[  246.525827][ T6049]  ? 0xffffffffa0001fb0
[  246.530014][ T6049]  ? vscnprintf+0x59/0x80
[  246.534397][ T6049]  panic+0x318/0x764
[  246.538410][ T6049]  ? __warn+0x169/0x520
[  246.542585][ T6049]  ? memcpy_page_flushcache+0xfc/0xfc
[  246.547985][ T6049]  __warn+0x348/0x520
[  246.552238][ T6049]  ? wdev_lock+0x96/0xc0
[  246.556522][ T6049]  report_bug+0x2af/0x500
[  246.560904][ T6049]  ? wdev_lock+0x96/0xc0
[  246.565168][ T6049]  handle_bug+0x3d/0x70
[  246.569418][ T6049]  exc_invalid_op+0x16/0x40
[  246.573953][ T6049]  asm_exc_invalid_op+0x16/0x20
[  246.578960][ T6049] RIP: 0010:wdev_lock+0x96/0xc0
[  246.583847][ T6049] Code: e8 7d f7 85 ed 74 1e e8 98 e4 7d f7 eb 05 e8 91 e4 7d f7 48 83 c3 48 48 89 df 31 f6 5b 41 5e 5d e9 ef 18 a3 00 e8 7a e4 7d f7 <0f> 0b eb e5 48 c7 c1 24 1a 9a 8e 80 e1 07 80 c1 03 38 c1 0f 8c 7b
[  246.603762][ T6049] RSP: 0018:ffffc90003acef40 EFLAGS: 00010287
[  246.610044][ T6049] RAX: ffffffff8a0ccac6 RBX: ffff88807e600c90 RCX: 0000000000040000
[  246.618110][ T6049] RDX: ffffc9000a61a000 RSI: 0000000000004065 RDI: 0000000000004066
[  246.626185][ T6049] RBP: 0000000000000000 R08: ffffffff8a0cca9f R09: ffffed1009448412
[  246.634336][ T6049] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000
[  246.642402][ T6049] R13: ffff8880629278c0 R14: dffffc0000000000 R15: ffff88804a242014
[  246.650388][ T6049]  ? wdev_lock+0x6f/0xc0
[  246.654668][ T6049]  ? wdev_lock+0x96/0xc0
[  246.658942][ T6049]  nl80211_send_iface+0x816/0x1470
[  246.664165][ T6049]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  246.670185][ T6049]  ? nl80211_notify_iface+0x160/0x160
[  246.675575][ T6049]  ? kasan_quarantine_put+0xd4/0x220
[  246.680869][ T6049]  ? lockdep_hardirqs_on+0x94/0x130
[  246.686081][ T6049]  ? __kmem_cache_free+0x25c/0x3c0
[  246.691254][ T6049]  ? nl80211_dump_wiphy_parse+0x19c/0x580
[  246.697005][ T6049]  ? nl80211_dump_wiphy_parse+0x19c/0x580
[  246.702832][ T6049]  ? nl80211_exit+0x20/0x20
[  246.707443][ T6049]  nl80211_dump_interface+0x490/0x6a0
[  246.713006][ T6049]  ? nl80211_get_interface+0x200/0x200
[  246.718557][ T6049]  ? netlink_dump+0x267/0xca0
[  246.723254][ T6049]  ? __alloc_skb+0x419/0x670
[  246.727947][ T6049]  netlink_dump+0x5a2/0xca0
[  246.732475][ T6049]  ? netlink_lookup+0x200/0x200
[  246.737349][ T6049]  ? genl_start+0x2e1/0x490
[  246.741865][ T6049]  __netlink_dump_start+0x521/0x6c0
[  246.747087][ T6049]  genl_rcv_msg+0x9f3/0xf70
[  246.751599][ T6049]  ? nl80211_get_interface+0x200/0x200
[  246.757065][ T6049]  ? genl_bind+0x400/0x400
[  246.761497][ T6049]  ? genl_rcv_msg+0xf70/0xf70
[  246.766178][ T6049]  ? nl80211_get_interface+0x200/0x200
[  246.771643][ T6049]  ? genl_lock_done+0xd0/0xd0
[  246.776328][ T6049]  ? read_lock_is_recursive+0x10/0x10
[  246.781712][ T6049]  ? __might_sleep+0xb0/0xb0
[  246.786310][ T6049]  ? ref_tracker_free+0x638/0x7d0
[  246.791342][ T6049]  ? nl80211_set_wiphy+0x2f60/0x2f60
[  246.796634][ T6049]  ? nl80211_get_interface+0x200/0x200
[  246.802119][ T6049]  ? refcount_inc+0x80/0x80
[  246.806637][ T6049]  ? __copy_skb_header+0x47b/0x600
[  246.811770][ T6049]  netlink_rcv_skb+0x1cd/0x410
[  246.816556][ T6049]  ? genl_bind+0x400/0x400
[  246.820980][ T6049]  ? netlink_ack+0x1290/0x1290
[  246.825772][ T6049]  genl_rcv+0x24/0x40
[  246.829758][ T6049]  netlink_unicast+0x7d8/0x970
[  246.834549][ T6049]  ? netlink_detachskb+0x90/0x90
[  246.839519][ T6049]  ? __virt_addr_valid+0x45b/0x530
[  246.844662][ T6049]  ? __phys_addr_symbol+0x2b/0x70
[  246.849737][ T6049]  ? __check_object_size+0x4dd/0xa30
[  246.855049][ T6049]  ? bpf_lsm_netlink_send+0x5/0x10
[  246.860189][ T6049]  netlink_sendmsg+0xa26/0xd60
[  246.864987][ T6049]  ? netlink_getsockopt+0x580/0x580
[  246.870200][ T6049]  ? aa_sock_msg_perm+0x91/0x150
[  246.875156][ T6049]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  246.880539][ T6049]  ? security_socket_sendmsg+0x7d/0xa0
[  246.886039][ T6049]  ? netlink_getsockopt+0x580/0x580
[  246.891262][ T6049]  ____sys_sendmsg+0x5a5/0x8f0
[  246.896059][ T6049]  ? __sys_sendmsg_sock+0x30/0x30
[  246.901112][ T6049]  __sys_sendmsg+0x2a9/0x390
[  246.905721][ T6049]  ? ____sys_sendmsg+0x8f0/0x8f0
[  246.910716][ T6049]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  246.916739][ T6049]  ? syscall_enter_from_user_mode+0x2e/0x230
[  246.922907][ T6049]  ? lockdep_hardirqs_on+0x94/0x130
[  246.928125][ T6049]  ? syscall_enter_from_user_mode+0x2e/0x230
[  246.934473][ T6049]  do_syscall_64+0x3b/0xb0
[  246.938906][ T6049]  ? clear_bhb_loop+0x45/0xa0
[  246.943609][ T6049]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  246.949871][ T6049] RIP: 0033:0x7f7c4cd7def9
[  246.954473][ T6049] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  246.974205][ T6049] RSP: 002b:00007f7c4cbff038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  246.983130][ T6049] RAX: ffffffffffffffda RBX: 00007f7c4cf35f80 RCX: 00007f7c4cd7def9
[  246.991322][ T6049] RDX: 0000000000000000 RSI: 0000000020000c40 RDI: 0000000000000006
[  246.999748][ T6049] RBP: 00007f7c4cdf0b76 R08: 0000000000000000 R09: 0000000000000000
[  247.007731][ T6049] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  247.015711][ T6049] R13: 0000000000000000 R14: 00007f7c4cf35f80 R15: 00007ffc3081ef38
[  247.023727][ T6049]  </TASK>
[  247.027041][ T6049] Kernel Offset: disabled
[  247.031439][ T6049] Rebooting in 86400 seconds..