last executing test programs:

10.848527463s ago: executing program 2:
chown(0x0, 0x0, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

9.840520159s ago: executing program 2:
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
write$FUSE_NOTIFY_STORE(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0)
getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f00000007c0)=0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000400)="1c0000001200050f0c109afe230ca9888738787c411e78d273660000", 0x1c, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4087, 0xff7}, {&(0x7f0000000980)=""/4100, 0x1004}], 0x2}, 0x0)
recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0)
recvfrom$inet6(r0, 0x0, 0xfffffe61, 0x0, 0x0, 0x0)
recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0x72, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0)
socket$inet6(0x10, 0x3, 0x0)
recvmsg(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
openat$hwrng(0xffffffffffffff9c, 0x0, 0x400, 0x0)
add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r3 = fanotify_init(0x200, 0x0)
fanotify_mark(r3, 0x1, 0x4800003e, r2, 0x0)

9.589537997s ago: executing program 1:
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300))
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xa}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x7, 0x2, 0x0, 0x2}, {0x18, 0x9, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

8.336218511s ago: executing program 1:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

8.254464144s ago: executing program 1:
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x200010, &(0x7f0000000980)=ANY=[], 0xf9, 0x691, &(0x7f00000002c0)="$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")
r0 = socket(0x840000000002, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x0, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f", 0x0, 0x400000})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioperm(0x0, 0x4, 0x2)
fanotify_mark(0xffffffffffffffff, 0x105, 0x44001033, 0xffffffffffffffff, 0x0)
r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @remote}, 0x10)
sendto$inet(0xffffffffffffffff, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
mkdir(&(0x7f0000000080)='./bus\x00', 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1})
chdir(0x0)
futex(&(0x7f0000002500)=0x1, 0x6, 0x0, &(0x7f0000002540)={0x0, 0x989680}, 0x0, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYRESHEX, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x13c}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x6000)

8.219394159s ago: executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r4})

7.200845757s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@dioread_nolock}, {@discard}, {@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x46f, &(0x7f0000000580)="$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")
setns(0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x800)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4)
recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, 0x0, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
listen(0xffffffffffffffff, 0x3)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3ff, 0x100)
ioctl$MON_IOCQ_URB_LEN(r5, 0x9201)
socket$inet_dccp(0x2, 0x6, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

6.552088027s ago: executing program 2:
syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000002bc0)=ANY=[], 0xff, 0x5e97, &(0x7f0000005d80)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(0x0, 0x0, 0x0)
mknodat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ff000008000000b70400000000925e850000000868d5b2f7e0ff9e52bb90141ca3a7849e5f292c1d7202f41f968a824824280817c3d6fc197bf802448f0505a8aaa0893c5bcc4e746e362b3e5d4ce99682ecb321b7a7ab610b53cbe55266cf923da9e60e625974ac62cc55474f2f60e2f9cf04a496bd4671140806895cacc52a5bc118a09b09757679b7d02830bc2b837e8c49c8e9186698abe647240e61fcd3e8757f7e81b645ddd79b4f747f6ef4a4d65fdade088f40e82627c148b060c68e7940dffef457"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000000), 0x400000)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000580)={0x0, 0x0, 0x2})

6.254823153s ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="00000005000000ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100c1a200000043000000950b3dc1504061f32547badabba20c80205a00"/85], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007d000000a40000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_ext_remove_space\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r8 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r8, r7, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x4, r6, r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

5.938419462s ago: executing program 3:
r0 = socket$rds(0x15, 0x5, 0x0)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x9, 'vlan1\x00'})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
quotactl_fd$Q_GETQUOTA(0xffffffffffffffff, 0xffffffff80000702, 0x0, 0x0)
fsetxattr$security_capability(r0, &(0x7f00000000c0), &(0x7f0000000100)=@v3={0x3000000, [{0x80, 0xff}, {0x1, 0x68d9}]}, 0x18, 0x2)
getpid()
r2 = socket$inet(0x2, 0x80001, 0x84)
syz_open_dev$MSR(&(0x7f0000000200), 0x2, 0x0)
listen(r2, 0x3)
r3 = socket$netlink(0x10, 0x3, 0x4)
writev(r3, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1)

5.414087813s ago: executing program 0:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@dioread_nolock}, {@discard}, {@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x46f, &(0x7f0000000580)="$eJzs289vFFUcAPDvbLvlt62IP/ihVtHY+KOlBZWDF40mXExM9IDHWgpBCjW0JkKIVGPwaPgL1KOJf4EnvRj1pPGqiRcTY0IMF9GDGTO7M7C0u+v+ahfczycZeG/mTd/7zszbfTNvJ4CBNZ79k0Rsj4ifRiJGq9mbC4xX/7t29cLcX1cvzCWRpq/+kVTK/Xn1wlxRtNhvW56ZKEWUPkhib516l86dPzW7sDB/Ns9PLZ9+a2rp3PmnTp6ePTF/Yv7MzOHDhw5OP/vMzNM9iXNH1tY97y7u233k9csvzx29/Ma3n2frt+fba+OoGuu6zvEYv/lY1ng04tc0Tbuu41axoyadDPexIbRlKCKy01XO+n+MxlDcOHmj8dL7fW0csK7SNE03rVk7VCRWUuB/LIl+twDoj+KLPrv/LZYNHH703ZXnqzdAWdzX8qW6ZThKeZnyqvvbXhqPiKMrf3+cLVH3OQQAQG99mY1/nqw3/ivFPTXl7ojq3NBYRNwZETsj4q6I2BURd0dUyt4bEfe1Wf/4qvza8c8PWzoKrEXZ+O+5fG7r5vFfMfqLsaE8t6MSfzk5fnJh/kB+TCaivCnLTzep46sXf/yo0bba8V+2ZPUXY8G8Hb8Pr3pAd2x2ebabmGtdeS9iz3C9+JPrMwFJROyOiD0d/P3smJ18/LN9jbb/d/xN9GCeKf004rHq+V+JVfEXkubzk1ObY2H+wFRxVaz13feXXmlUf1fx90B2/rfWvf6vxz+W1M7XLrVfx6WfP2x4T9Pp9T+SvFZJj+Tr3pldXj47HTGSrKxdP3Nj3yJflM/in9hfv//vjPjnk3y/vRGRXcT3R8QDEfFg3vaHIuLhiNjfJP5vXnjkzc7jX19Z/MfaOv/tJ4ZOff1Fo/pbO/+HKqmJfE0rn3+tNrCbYwcAAAC3i1LlN/BJafJ6ulSanKz+hn9XbC0tLC4tP3F88e0zx6q/lR+Lcql40jVa8zx0On82XORnVuUPVp4bp2mabqnkJ+cWF9ZrTh1ozbYG/T/z21C/Wwesu7bm0Rq90QbclryvCYNL/4fB1Wr/L69zO4CN5/sfBle9/n8x4lofmgJsMN//MLj0fxhc+j8MLv0fBlI37/U3S+w80vHuaVe1b84D63D3X9blaDRLDG1gXb1MRKnupnJE3CItbJIo3RrNqCY2RUSrhS92emG3nejzBxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/BsAAP//cGjokQ==")
setns(0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x800)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4)
recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, 0x0, 0x0, 0x0)
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
listen(0xffffffffffffffff, 0x3)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3ff, 0x100)
ioctl$MON_IOCQ_URB_LEN(r5, 0x9201)
socket$inet_dccp(0x2, 0x6, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

5.218588803s ago: executing program 4:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

5.087958393s ago: executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x6c, 0x0, 0x128, 0x0, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x20, 0x0, "6583e10cc3890998d3044c3ed686f65cee4e3cbb3d8a197fa397b5e3f7d5"}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x340)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x1, @time})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0xc0105303, &(0x7f00000000c0)={{}, {0xbe, 0xfb}})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc08c5335, &(0x7f0000000180))
tkill(r1, 0x7)
write$cgroup_int(r0, &(0x7f0000000200), 0xf000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4000000}, 0x0)

4.872055087s ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x0, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r3, 0x1, 0x0, 0x0, {0x11}}, 0x14}}, 0x0)

4.142478189s ago: executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="edb31d7be648da153ddb1ac8", 0xc}], 0x1)

4.076743329s ago: executing program 2:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
capset(0x0, &(0x7f0000000040))
syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00')
madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc)
r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0)
write$sysctl(r0, &(0x7f0000000300)='1\x00', 0xffffff4a)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
write$sysctl(r0, 0x0, 0x0)

3.970480686s ago: executing program 3:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x60}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

3.144290114s ago: executing program 1:
syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000002bc0)=ANY=[], 0xff, 0x5e97, &(0x7f0000005d80)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(0x0, 0x0, 0x0)
mknodat(r1, 0x0, 0x0, 0x0)
r2 = syz_open_dev$video4linux(&(0x7f0000000000), 0xffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ff000008000000b70400000000925e850000000868d5b2f7e0ff9e52bb90141ca3a7849e5f292c1d7202f41f968a824824280817c3d6fc197bf802448f0505a8aaa0893c5bcc4e746e362b3e5d4ce99682ecb321b7a7ab610b53cbe55266cf923da9e60e625974ac62cc55474f2f60e2f9cf04a496bd4671140806895cacc52a5bc118a09b09757679b7d02830bc2b837e8c49c8e9186698abe647240e61fcd3e8757f7e81b645ddd79b4f747f6ef4a4d65fdade088f40e82627c148b060c68e7940dffef457"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000000), 0x400000)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000580)={0x0, 0x0, 0x2})

2.700491732s ago: executing program 3:
pwritev(0xffffffffffffffff, &(0x7f0000000280)=[{&(0x7f0000000340)}], 0x1, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000002400)={{}, 0x0, 0x12, @unused=[0x7f, 0x3, 0x4f000, 0x200], @subvolid})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000003b0007010000000000000000027c00000400000014000180060006008847000008001c"], 0x2c}}, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700)
r4 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x4}, @typed={0x8, 0xaa, 0x0, 0x0, @pid}]}, 0x20}}, 0x0)
write$cgroup_int(r3, &(0x7f0000000200), 0x18000)
r5 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0)
syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), 0xffffffffffffffff)
r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r6)
sendmsg$NL802154_CMD_SET_TX_POWER(r6, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)={0x1c, r7, 0x400, 0x0, 0x0, {0x1d}, [@NL802154_ATTR_WPAN_PHY={0x8}]}, 0x1c}}, 0x0)
r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r9)
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r11, 0x8933, &(0x7f0000000340)={'wpan0\x00', <r12=>0x0})
sendmsg$IEEE802154_LLSEC_ADD_DEV(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x44, r10, 0x852dd6c070cd7e4d, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x44}, 0x4, 0x700000000000000}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r8, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84000}, 0x20048010)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0)
r13 = socket(0xa, 0x6, 0x0)
getsockopt$inet6_mreq(r13, 0x10d, 0xa4, 0x0, &(0x7f0000000080))

2.426256805s ago: executing program 0:
chown(0x0, 0x0, 0x0)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window, @mss, @window, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0xc7)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9)
sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

2.408443987s ago: executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0)
r3 = socket$packet(0x11, 0x3, 0x300)
r4 = dup(r3)
ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x0, r4})

2.178272593s ago: executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000000c0)=@gcm_128={{0x0, 0x37}, "475566172f45f011", "bd14060000000000000092f94413582b", "a4774ec6", "15b188e5e74e13ed"}, 0x28)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="2df24d8a", 0x4}, {&(0x7f0000000280)="edb31d7be648", 0x6}], 0x2)

2.148552897s ago: executing program 4:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="00000005000000ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100c1a200000043000000950b3dc1504061f32547badabba20c80205a00"/85], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000007d000000a40000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='ext4_ext_remove_space\x00', r4}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc}})
r6 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r7 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000080)={'fscrypt:', @desc2}, &(0x7f00000000c0)={0x0, "f1a1173fb9462d3589e67197f90be6e423ceb0ab4912f9f6a31854ec98e950cfed21fcad7ff0fbcb566a0982f8938caa52dd8d39af14c31ed56ad59300"}, 0x52ba, 0xffffffffffffffff)
r8 = add_key$fscrypt_v1(&(0x7f0000000400), &(0x7f0000000440)={'fscrypt:', @desc1}, &(0x7f0000000480)={0x0, "6035ae1e0fe721441705322225930e6c1e3e2a51a92fd796bc34d7cf6e0236805b4377f7ab1a9b01c103a4c6a7ef54e6763fd7264c39ea00c508ba6062696138"}, 0x48, 0xfffffffffffffffe)
keyctl$KEYCTL_MOVE(0x4, r8, r7, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x4, r6, r6, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

2.033382945s ago: executing program 0:
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400})

1.839988455s ago: executing program 0:
syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000002bc0)=ANY=[], 0xff, 0x5e97, &(0x7f0000005d80)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(0x0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x0)
r2 = syz_open_dev$video4linux(0x0, 0xffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ff000008000000b70400000000925e850000000868d5b2f7e0ff9e52bb90141ca3a7849e5f292c1d7202f41f968a824824280817c3d6fc197bf802448f0505a8aaa0893c5bcc4e746e362b3e5d4ce99682ecb321b7a7ab610b53cbe55266cf923da9e60e625974ac62cc55474f2f60e2f9cf04a496bd4671140806895cacc52a5bc118a09b09757679b7d02830bc2b837e8c49c8e9186698abe647240e61fcd3e8757f7e81b645ddd79b4f747f6ef4a4d65fdade088f40e82627c148b060c68e7940dffef457"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000000), 0x400000)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000580)={0x0, 0x0, 0x2})

1.815383349s ago: executing program 2:
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x128, 0x6c, 0x0, 0x128, 0x0, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@MARK={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x20, 0x0, "6583e10cc3890998d3044c3ed686f65cee4e3cbb3d8a197fa397b5e3f7d5"}}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x2001}}, {0x28}}}}, 0x340)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000440)=""/247, 0x26)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x1, @time})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0xc0105303, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0xc08c5335, &(0x7f0000000180))
tkill(r1, 0x7)
write$cgroup_int(r0, &(0x7f0000000200), 0xf000)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0xba01, 0x0, 0x4000000}, 0x0)

158.136475ms ago: executing program 4:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000080)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, 0x0, 0x0)
writev(r0, &(0x7f0000000040)=[{&(0x7f0000000280)="edb31d7be648da153ddb1ac8", 0xc}], 0x1)

105.448423ms ago: executing program 2:
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x100000}}, {@dioread_nolock}, {@discard}, {@test_dummy_encryption}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2e}, 0x84, 0x46f, &(0x7f0000000580)="$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")
setns(0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r0 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14, 0x800)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000140)=0x2998, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000080)={0x11, 0x0, r2}, 0x14)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x40f4, 0x4)
recvfrom$packet(r1, 0x0, 0x0, 0x2000, 0x0, 0x0)
sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x7f}]})
bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
listen(0xffffffffffffffff, 0x3)
r5 = syz_open_dev$usbmon(&(0x7f0000000080), 0x3ff, 0x100)
ioctl$MON_IOCQ_URB_LEN(r5, 0x9201)
socket$inet_dccp(0x2, 0x6, 0x0)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x61, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

22.257376ms ago: executing program 1:
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x60}}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
close(0xffffffffffffffff)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
r1 = io_uring_setup(0x1694, &(0x7f0000000080))
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
mremap(&(0x7f00003c6000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f00000f4000/0x4000)=nil)
r2 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r2, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9)

0s ago: executing program 4:
syz_mount_image$jfs(&(0x7f0000000280), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000002bc0)=ANY=[], 0xff, 0x5e97, &(0x7f0000005d80)="$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")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = open(0x0, 0x0, 0x0)
mknodat(r1, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', 0x0, 0x0)
r2 = syz_open_dev$video4linux(0x0, 0xffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="2598ccde00000000b70800004e9d00007b8af8ff00000000bfa20000fbff000007020000f8fffffdb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000187b8af8ff00000000bfa200000000000007020000d8ff000008000000b70400000000925e850000000868d5b2f7e0ff9e52bb90141ca3a7849e5f292c1d7202f41f968a824824280817c3d6fc197bf802448f0505a8aaa0893c5bcc4e746e362b3e5d4ce99682ecb321b7a7ab610b53cbe55266cf923da9e60e625974ac62cc55474f2f60e2f9cf04a496bd4671140806895cacc52a5bc118a09b09757679b7d02830bc2b837e8c49c8e9186698abe647240e61fcd3e8757f7e81b645ddd79b4f747f6ef4a4d65fdade088f40e82627c148b060c68e7940dffef457"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x26, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r7}, 0x10)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r8, &(0x7f0000000000), 0x400000)
ioctl$VIDIOC_SUBDEV_G_SELECTION(r2, 0xc040563d, &(0x7f0000000580)={0x0, 0x0, 0x2})

kernel console output (not intermixed with test programs):

 res=0 errno=0
[  322.268133][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  322.283366][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  322.870782][ T6530] team0: Port device team_slave_0 added
[  322.881747][ T6530] team0: Port device team_slave_1 added
[  322.959741][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0
[  323.011984][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.112917][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  323.147105][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1
[  323.172083][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  323.294651][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  323.433821][ T6608] loop0: detected capacity change from 0 to 512
[  323.445918][ T6530] device hsr_slave_0 entered promiscuous mode
[  323.465453][ T3580] Bluetooth: hci6: command tx timeout
[  323.474099][ T6608] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 256 (level 2)
[  323.490416][ T6608] EXT4-fs (loop0): 2 truncates cleaned up
[  323.496586][ T6608] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  323.507828][ T6530] device hsr_slave_1 entered promiscuous mode
[  323.534699][ T6530] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  323.575284][ T6530] Cannot create hsr debugfs directory
[  324.133376][   T26] audit: type=1800 audit(1718799237.240:755): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0
[  324.219548][ T4531] EXT4-fs (loop0): unmounting filesystem.
[  324.510281][ T6530] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  325.208989][ T6630] loop1: detected capacity change from 0 to 32768
[  328.827506][ T3580] Bluetooth: hci6: command tx timeout
[  329.647610][ T6530] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.871198][ T6530] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.237896][ T6530] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  332.673627][ T6649] loop0: detected capacity change from 0 to 1024
[  332.817550][ T6530] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  332.945456][ T6530] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  332.953446][ T6631] hfsplus: b-tree write err: -5, ino 4
[  333.008972][ T6530] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  333.071972][ T6530] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  333.458502][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0
[  333.499755][ T6658] loop1: detected capacity change from 0 to 256
[  333.531584][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  333.546469][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  333.578941][ T6530] 8021q: adding VLAN 0 to HW filter on device team0
[  333.614581][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  333.639264][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  333.670754][ T3923] bridge0: port 1(bridge_slave_0) entered blocking state
[  333.678058][ T3923] bridge0: port 1(bridge_slave_0) entered forwarding state
[  333.756697][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  333.764986][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  333.809509][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  333.848965][ T3651] bridge0: port 2(bridge_slave_1) entered blocking state
[  333.856196][ T3651] bridge0: port 2(bridge_slave_1) entered forwarding state
[  333.887128][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  333.887324][ T6662] xt_CONNSECMARK: invalid mode: 0
[  333.950967][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  334.029049][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  334.058297][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  334.073583][ T6666] loop3: detected capacity change from 0 to 512
[  334.092811][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  334.128398][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  334.169863][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  334.187805][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  334.207747][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  334.234755][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  334.253278][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  334.273752][ T6666] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2)
[  334.284088][ T6530] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  334.316564][ T6666] EXT4-fs (loop3): 2 truncates cleaned up
[  334.322600][ T6666] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  335.070021][ T6680] loop4: detected capacity change from 0 to 32768
[  335.079847][ T6680] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6680)
[  335.097858][ T6680] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  335.108546][ T6680] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  335.117348][ T6680] BTRFS error (device loop4): unrecognized mount option 'dont_appraise'
[  335.127556][ T6680] BTRFS error (device loop4): open_ctree failed
[  339.027767][ T6669] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  339.203357][   T26] audit: type=1800 audit(1718799252.310:756): pid=6660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=15 res=0 errno=0
[  339.309004][ T6114] EXT4-fs (loop3): unmounting filesystem.
[  339.633096][ T6689] loop4: detected capacity change from 0 to 1024
[  341.784413][ T5394] hfsplus: b-tree write err: -5, ino 4
[  342.040737][ T6694] loop3: detected capacity change from 0 to 1024
[  342.797604][ T3644] hfsplus: b-tree write err: -5, ino 4
[  343.018998][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  343.049855][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  343.111411][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0
[  343.210554][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  343.233744][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  343.308800][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  343.324454][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  343.346538][ T6530] device veth0_vlan entered promiscuous mode
[  343.381268][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  343.393459][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  343.430548][ T6530] device veth1_vlan entered promiscuous mode
[  343.544468][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  343.561511][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  343.587395][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  343.608035][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  343.636833][ T6530] device veth0_macvtap entered promiscuous mode
[  343.694382][ T6530] device veth1_macvtap entered promiscuous mode
[  343.786132][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.818770][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.844674][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.871982][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.905028][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.937508][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.965294][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  343.976776][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  343.986856][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.000526][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.046297][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  344.095564][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.149772][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0
[  344.218439][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.264835][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.323720][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.385382][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.439167][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.473143][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.528793][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.557582][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.614148][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.638135][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.686609][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  344.704877][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  344.718114][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1
[  344.732342][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  344.750854][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  344.766811][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  344.786273][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  344.875256][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  344.906631][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  345.485271][ T6725] loop3: detected capacity change from 0 to 32768
[  349.248407][ T6530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  349.292094][ T6530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  349.332755][ T6530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  349.395010][ T6530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  349.773310][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.786213][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  349.808923][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  349.831603][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  349.840195][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  350.736106][ T3923] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  351.474065][ T6748] loop2: detected capacity change from 0 to 256
[  351.764686][ T6754] xt_CONNSECMARK: invalid mode: 0
[  353.773468][ T6775] loop4: detected capacity change from 0 to 32768
[  357.661592][ T6775] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6775)
[  358.129312][ T6789] loop0: detected capacity change from 0 to 512
[  358.260985][ T6789] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 256 (level 2)
[  358.327857][ T6789] EXT4-fs (loop0): 2 truncates cleaned up
[  358.333779][ T6789] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  358.737530][   T26] audit: type=1800 audit(1718799271.850:757): pid=6789 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0
[  358.854339][ T4531] EXT4-fs (loop0): unmounting filesystem.
[  359.235644][  T936] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  359.488072][  T936] usb 1-1: Using ep0 maxpacket: 8
[  360.287094][  T936] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  360.301868][  T936] usb 1-1: config 0 has no interface number 0
[  360.308894][  T936] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  360.329599][  T936] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  360.360828][  T936] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  360.412454][  T936] usb 1-1: config 0 descriptor??
[  360.419794][ T6820] loop2: detected capacity change from 0 to 256
[  360.446759][ T6820] FAT-fs (loop2): Unrecognized mount option "nnonumtail=1" or missing value
[  360.509490][  T936] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  360.527719][ T6820] loop2: detected capacity change from 0 to 8
[  360.540101][ T6820] SQUASHFS error: zstd decompression error: 10
[  360.550220][ T6820] SQUASHFS error: zstd decompression failed, data probably corrupt
[  360.560924][ T6820] SQUASHFS error: Failed to read block 0x4ea: -5
[  360.570242][ T6820] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  360.578175][ T6820] SQUASHFS error: Unable to read inode 0x11f
[  361.031814][ T6828] loop1: detected capacity change from 0 to 32768
[  365.018569][   T41] usb 1-1: USB disconnect, device number 9
[  365.027690][   T41] iowarrior 1-1:0.1: I/O-Warror #0 now disconnected
[  365.109890][ T6828] BTRFS error (device loop1): open_ctree failed
[  365.491663][ T6845] loop3: detected capacity change from 0 to 512
[  365.630695][ T6845] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2)
[  365.660276][ T6845] EXT4-fs (loop3): 2 truncates cleaned up
[  365.681076][ T6845] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  366.280682][   T26] audit: type=1800 audit(1718799279.390:758): pid=6845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=15 res=0 errno=0
[  366.413020][ T3583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  366.424793][ T3583] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  366.442918][ T3583] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  366.452305][ T3583] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  366.460658][ T3583] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  366.468200][ T3583] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  366.500236][   T33] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.514350][ T6114] EXT4-fs (loop3): unmounting filesystem.
[  366.784986][   T33] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.844970][ T6861] device ip_vti0 entered promiscuous mode
[  366.861816][ T6861] device vlan2 entered promiscuous mode
[  366.922943][ T6861] device ip_vti0 left promiscuous mode
[  367.033270][   T33] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.190217][   T33] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  367.417774][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  367.519601][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  367.574926][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  367.602636][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  367.696211][ T6857] chnl_net:caif_netlink_parms(): no params data found
[  367.739849][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  367.810511][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  367.918222][ T6873] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  368.713755][ T6883] loop1: detected capacity change from 0 to 32768
[  372.402753][ T3583] Bluetooth: hci1: command tx timeout
[  372.749848][ T6857] bridge0: port 1(bridge_slave_0) entered blocking state
[  372.793370][ T6857] bridge0: port 1(bridge_slave_0) entered disabled state
[  372.826960][ T6857] device bridge_slave_0 entered promiscuous mode
[  372.901889][ T6857] bridge0: port 2(bridge_slave_1) entered blocking state
[  372.960455][ T6857] bridge0: port 2(bridge_slave_1) entered disabled state
[  372.988575][ T6857] device bridge_slave_1 entered promiscuous mode
[  373.082584][ T6857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  373.123663][ T6857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  373.196869][ T6857] team0: Port device team_slave_0 added
[  373.232345][ T6857] team0: Port device team_slave_1 added
[  373.295527][ T3651] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  373.317173][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_0
[  373.343977][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.374397][ T6857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  373.413571][ T6857] batman_adv: batadv0: Adding interface: batadv_slave_1
[  373.428345][ T6857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  373.458927][ T6857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  373.545587][ T3651] usb 2-1: Using ep0 maxpacket: 8
[  373.589515][ T6857] device hsr_slave_0 entered promiscuous mode
[  373.601323][ T6857] device hsr_slave_1 entered promiscuous mode
[  373.623721][ T6857] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  373.631839][ T6857] Cannot create hsr debugfs directory
[  373.665592][ T3651] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  373.674119][ T3651] usb 2-1: config 0 has no interface number 0
[  373.703906][   T33] device hsr_slave_0 left promiscuous mode
[  373.723718][ T3651] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  373.735180][   T33] device hsr_slave_1 left promiscuous mode
[  373.746989][ T3651] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  373.765529][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  373.773404][   T33] batman_adv: batadv0: Removing interface: batadv_slave_0
[  373.775416][ T3651] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  373.835574][   T33] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  373.846614][ T3651] usb 2-1: config 0 descriptor??
[  373.862592][   T33] batman_adv: batadv0: Removing interface: batadv_slave_1
[  373.902346][   T33] device bridge_slave_1 left promiscuous mode
[  373.909225][ T3651] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  373.963918][   T33] bridge0: port 2(bridge_slave_1) entered disabled state
[  373.981549][   T33] device bridge_slave_0 left promiscuous mode
[  373.993703][   T33] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.048887][   T33] device veth1_macvtap left promiscuous mode
[  374.078499][   T33] device veth0_macvtap left promiscuous mode
[  374.088539][   T33] device veth1_vlan left promiscuous mode
[  374.095489][   T33] device veth0_vlan left promiscuous mode
[  374.116137][ T6548] usb 2-1: USB disconnect, device number 16
[  374.128519][ T6548] iowarrior 2-1:0.1: I/O-Warror #0 now disconnected
[  374.426861][ T3583] Bluetooth: hci1: command tx timeout
[  374.453499][ T6918] loop4: detected capacity change from 0 to 1024
[  374.462845][ T6918] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  374.483698][ T6918] EXT4-fs (loop4): invalid journal inode
[  374.490414][ T6918] EXT4-fs (loop4): can't get journal size
[  374.500219][ T6918] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  374.625153][   T33] team0 (unregistering): Port device team_slave_1 removed
[  374.665146][   T33] team0 (unregistering): Port device team_slave_0 removed
[  374.707539][   T33] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  374.862678][   T33] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  375.112714][   T33] bond0 (unregistering): Released all slaves
[  376.213164][ T6857] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  376.269624][ T6857] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  376.347119][ T6857] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  376.415140][ T6857] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  376.505658][ T3583] Bluetooth: hci1: command tx timeout
[  376.869938][ T6857] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.953552][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  376.973974][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  377.010366][ T6857] 8021q: adding VLAN 0 to HW filter on device team0
[  377.060171][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  377.092749][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  377.122909][ T3651] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.130151][ T3651] bridge0: port 1(bridge_slave_0) entered forwarding state
[  377.190241][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  377.209753][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  377.236378][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  377.272704][ T3922] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.280044][ T3922] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.356919][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  377.408317][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  377.443293][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  377.507137][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  377.540167][ T3651] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  377.555127][ T6209] EXT4-fs (loop4): unmounting filesystem.
[  377.579879][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  377.589611][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  377.638761][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  377.689460][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  377.714549][ T6857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  377.771898][ T6857] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  377.802005][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  377.818521][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  378.425136][ T6977] loop1: detected capacity change from 0 to 128
[  378.500071][ T6977] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  378.532298][ T6977] ext4 filesystem being mounted at /root/syzkaller-testdir1618943788/syzkaller.nl7Ljp/33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  378.589766][ T3583] Bluetooth: hci1: command tx timeout
[  378.594262][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  378.615863][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  378.652457][ T6857] 8021q: adding VLAN 0 to HW filter on device batadv0
[  378.769225][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  378.789999][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  378.860979][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  378.876445][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  378.900296][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  378.936433][ T6857] device veth0_vlan entered promiscuous mode
[  378.964037][ T6857] device veth1_vlan entered promiscuous mode
[  379.000575][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  379.012412][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  379.029921][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  379.261998][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  379.276812][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  379.300318][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  379.553032][ T6857] device veth0_macvtap entered promiscuous mode
[  379.801500][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  380.037198][ T6857] device veth1_macvtap entered promiscuous mode
[  380.168765][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.205611][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.237082][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.275282][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.315495][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.339969][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.363565][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.381107][ T6995] loop4: detected capacity change from 0 to 1024
[  380.384368][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.415845][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.437928][ T6995] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  380.452137][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.477174][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  380.478996][ T6995] EXT4-fs (loop4): invalid journal inode
[  380.493141][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.504738][ T6995] EXT4-fs (loop4): can't get journal size
[  380.523061][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_0
[  380.534455][ T6993] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'.
[  380.545517][ T6995] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  380.565640][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  380.586451][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  380.615801][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.638894][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.665465][ T3583] Bluetooth: hci2: command 0x0406 tx timeout
[  380.686063][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.764728][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.775086][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.802893][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.854980][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.894209][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.904572][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.915692][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.926401][ T6857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  380.955957][ T6857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  380.991657][ T6857] batman_adv: batadv0: Interface activated: batadv_slave_1
[  381.006764][ T6996] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'.
[  381.032171][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  381.046770][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  381.076833][ T6857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  381.106777][ T6857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  381.137750][ T6857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  381.161975][ T6857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  381.193138][ T6996] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'.
[  381.209684][ T7008] loop2: detected capacity change from 0 to 512
[  381.220153][ T6996] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'.
[  381.263597][ T6996] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'.
[  381.463469][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.483524][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.553973][ T6304] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  381.631564][ T7008] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  381.650704][ T7008] EXT4-fs (loop2): Test dummy encryption mode enabled
[  381.675808][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  381.684124][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  381.693560][ T7008] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  381.708485][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  381.715249][ T7008] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 2 len 1
[  381.738603][ T7008] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  381.786600][ T7008] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0)
[  381.845952][ T7008] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1)
[  381.907689][ T7008] EXT4-fs (loop2): 1 truncate cleaned up
[  381.914222][ T7008] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  382.050620][   T26] audit: type=1326 audit(1718799295.160:759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7007 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07647cf29 code=0x0
[  382.301871][ T7033] ext4: Unknown parameter '/dev/cpu/#/msr'
[  383.326383][ T6209] EXT4-fs (loop4): unmounting filesystem.
[  383.432208][ T6530] EXT4-fs (loop2): unmounting filesystem.
[  383.709990][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  383.724787][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  384.051176][ T7059] loop1: detected capacity change from 0 to 256
[  384.091004][ T7059] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  384.249159][ T7059] loop1: detected capacity change from 0 to 8
[  384.290892][ T7059] SQUASHFS error: zstd decompression error: 10
[  384.312218][ T7059] SQUASHFS error: zstd decompression failed, data probably corrupt
[  384.338682][ T7059] SQUASHFS error: Failed to read block 0x4ea: -5
[  384.366596][ T7059] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  384.373982][ T7059] SQUASHFS error: Unable to read inode 0x11f
[  384.530377][ T7072] loop0: detected capacity change from 0 to 256
[  385.252127][ T7072] xt_CONNSECMARK: invalid mode: 0
[  385.278507][ T7080] loop2: detected capacity change from 0 to 1024
[  385.371465][ T7080] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  385.444718][ T7080] EXT4-fs (loop2): invalid journal inode
[  385.476038][ T7080] EXT4-fs (loop2): can't get journal size
[  385.488846][ T7080] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  385.785459][ T3580] Bluetooth: hci5: command 0x0406 tx timeout
[  385.875539][ T6547] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  386.138275][ T6547] usb 4-1: Using ep0 maxpacket: 8
[  386.275693][ T6547] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  386.305649][ T6547] usb 4-1: config 0 has no interface number 0
[  386.353690][ T6547] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  386.380957][ T6547] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  386.392013][ T6547] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.413149][ T6547] usb 4-1: config 0 descriptor??
[  386.477018][ T6547] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  386.678104][ T6547] usb 4-1: USB disconnect, device number 20
[  387.197845][ T7108] loop0: detected capacity change from 0 to 512
[  387.339998][ T7108] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 256 (level 2)
[  387.367139][ T7108] EXT4-fs (loop0): 2 truncates cleaned up
[  387.385578][ T7108] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  387.533089][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  387.607047][ T7102] loop4: detected capacity change from 0 to 32768
[  387.627106][ T7119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  387.704829][ T7119] device gtp0 entered promiscuous mode
[  388.545647][   T26] audit: type=1800 audit(1718799301.660:760): pid=7108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0
[  388.741854][ T6857] EXT4-fs (loop0): unmounting filesystem.
[  388.899502][ T6530] EXT4-fs (loop2): unmounting filesystem.
[  388.901650][ T7132] team0: Port device macvlan2 added
[  390.539223][ T3618] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  390.960274][ T3618] usb 4-1: Using ep0 maxpacket: 8
[  391.177517][ T3618] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  391.222105][ T3618] usb 4-1: config 0 has no interface number 0
[  391.257989][ T3618] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  391.293798][ T3618] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  391.335271][ T3618] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.360229][ T3618] usb 4-1: config 0 descriptor??
[  391.407015][ T3618] iowarrior 4-1:0.1: no interrupt-in endpoint found
[  391.468735][ T7169] loop2: detected capacity change from 0 to 128
[  391.528483][ T7174] loop4: detected capacity change from 0 to 512
[  391.537576][ T7174] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  391.550016][ T7174] EXT4-fs (loop4): Test dummy encryption mode enabled
[  391.560553][ T7169] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  391.582771][ T7174] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  391.599027][ T7169] ext4 filesystem being mounted at /root/syzkaller-testdir971285137/syzkaller.v1HEkZ/17/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  391.646066][ T3618] usb 4-1: USB disconnect, device number 21
[  391.678089][ T7174] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #13: comm syz-executor.4: attempt to clear invalid blocks 2 len 1
[  391.714616][ T7174] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  391.749529][ T7174] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 0)
[  391.782856][ T7174] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 1819239214 (level 1)
[  391.840612][ T7174] EXT4-fs (loop4): 1 truncate cleaned up
[  391.840682][ T6530] EXT4-fs (loop2): unmounting filesystem.
[  391.852523][ T7174] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  391.983590][   T26] audit: type=1326 audit(1718799305.090:761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7173 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214827cf29 code=0x0
[  392.148481][ T7183] ext4: Unknown parameter '/dev/cpu/#/msr'
[  392.341374][ T7171] loop0: detected capacity change from 0 to 32768
[  393.254949][ T7207] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  394.086473][ T7218] loop3: detected capacity change from 0 to 256
[  394.126147][ T7218] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value
[  394.204991][ T7218] loop3: detected capacity change from 0 to 8
[  394.218524][ T7218] SQUASHFS error: zstd decompression error: 10
[  394.285726][ T7218] SQUASHFS error: zstd decompression failed, data probably corrupt
[  394.311229][ T7218] SQUASHFS error: Failed to read block 0x4ea: -5
[  394.322111][ T7218] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  394.365556][ T7218] SQUASHFS error: Unable to read inode 0x11f
[  394.685131][ T7227] openvswitch: netlink: Message has 12 unknown bytes.
[  395.178319][ T7228] loop1: detected capacity change from 0 to 256
[  395.313381][ T7226] team0: Port device macvlan2 added
[  395.398762][ T7234] loop3: detected capacity change from 0 to 512
[  395.498336][ T7228] FAT-fs (loop1): Unrecognized mount option "nnonumtail=1" or missing value
[  395.655701][ T3922] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  395.700491][ T7228] loop1: detected capacity change from 0 to 8
[  395.707686][ T7234] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2)
[  395.756893][ T7228] SQUASHFS error: zstd decompression error: 10
[  395.765767][ T7234] EXT4-fs (loop3): 2 truncates cleaned up
[  395.771545][ T7234] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  395.784248][ T7228] SQUASHFS error: zstd decompression failed, data probably corrupt
[  395.829273][ T6209] EXT4-fs (loop4): unmounting filesystem.
[  395.833263][ T7228] SQUASHFS error: Failed to read block 0x4ea: -5
[  395.849876][ T7228] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  395.875248][ T7228] SQUASHFS error: Unable to read inode 0x11f
[  395.895553][ T3922] usb 1-1: Using ep0 maxpacket: 8
[  396.025449][ T3583] Bluetooth: hci0: command 0x0406 tx timeout
[  396.116421][ T3922] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  396.123542][   T26] audit: type=1800 audit(1718799309.220:762): pid=7234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=15 res=0 errno=0
[  396.230124][ T3922] usb 1-1: config 0 has no interface number 0
[  396.249151][ T3922] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  396.272020][ T3922] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  396.281849][ T3922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.637939][ T3922] usb 1-1: config 0 descriptor??
[  396.659555][ T6114] EXT4-fs (loop3): unmounting filesystem.
[  396.706953][ T3922] iowarrior 1-1:0.1: no interrupt-in endpoint found
[  396.833202][ T7256] loop4: detected capacity change from 0 to 512
[  396.862012][ T7256] EXT4-fs error (device loop4): ext4_orphan_get:1422: comm syz-executor.4: bad orphan inode 15
[  396.883571][ T7256] ext4_test_bit(bit=14, block=5) = 0
[  396.894779][ T7256] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  396.916992][ T3651] usb 1-1: USB disconnect, device number 10
[  397.163929][ T7253] loop3: detected capacity change from 0 to 32768
[  398.233481][ T7251] loop1: detected capacity change from 0 to 32768
[  398.526188][ T6209] EXT4-fs (loop4): unmounting filesystem.
[  399.129490][ T7274] loop3: detected capacity change from 0 to 256
[  399.177232][ T7274] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value
[  399.292649][ T7274] loop3: detected capacity change from 0 to 8
[  399.311343][ T7282] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_hsr, syncid = 0, id = 0
[  399.334296][ T7274] SQUASHFS error: zstd decompression error: 10
[  399.366950][ T7274] SQUASHFS error: zstd decompression failed, data probably corrupt
[  399.415709][ T7274] SQUASHFS error: Failed to read block 0x4ea: -5
[  399.422109][ T7274] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  399.449231][ T7274] SQUASHFS error: Unable to read inode 0x11f
[  399.471734][ T7288] loop4: detected capacity change from 0 to 256
[  399.489258][ T7288] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value
[  399.547557][ T7288] loop4: detected capacity change from 0 to 8
[  399.592742][ T7288] SQUASHFS error: zstd decompression error: 10
[  399.629898][ T7288] SQUASHFS error: zstd decompression failed, data probably corrupt
[  399.693131][ T7288] SQUASHFS error: Failed to read block 0x4ea: -5
[  399.699765][ T7288] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  399.708265][ T7288] SQUASHFS error: Unable to read inode 0x11f
[  399.819422][ T7296] openvswitch: netlink: Message has 12 unknown bytes.
[  401.295515][ T3923] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  401.306344][ T3587] Bluetooth: hci3: command 0x0406 tx timeout
[  401.545550][ T3923] usb 1-1: Using ep0 maxpacket: 8
[  401.675677][ T3923] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  401.685823][ T3923] usb 1-1: config 0 has no interface number 0
[  401.695723][ T3923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  401.706506][ T3923] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  401.716096][ T3923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  401.748738][ T3923] usb 1-1: config 0 descriptor??
[  401.796876][ T3923] iowarrior 1-1:0.1: no interrupt-in endpoint found
[  402.103687][ T3923] usb 1-1: USB disconnect, device number 11
[  402.217146][ T7331] Bluetooth: MGMT ver 1.22
[  402.259140][ T7331] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  402.281779][ T7331] device bridge_slave_1 left promiscuous mode
[  402.300995][ T7331] bridge0: port 2(bridge_slave_1) entered disabled state
[  402.466011][ T7331] device bridge_slave_0 left promiscuous mode
[  402.482422][ T7331] bridge0: port 1(bridge_slave_0) entered disabled state
[  402.618155][ T7333] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  402.705590][ T7335] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  403.284557][ T7350] loop4: detected capacity change from 0 to 256
[  403.337810][ T7350] FAT-fs (loop4): Unrecognized mount option "nnonumtail=1" or missing value
[  403.417398][ T7350] loop4: detected capacity change from 0 to 8
[  403.438436][ T7350] SQUASHFS error: zstd decompression error: 10
[  403.444843][ T7350] SQUASHFS error: zstd decompression failed, data probably corrupt
[  403.473406][ T7350] SQUASHFS error: Failed to read block 0x4ea: -5
[  403.490875][ T7350] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  403.512853][ T7350] SQUASHFS error: Unable to read inode 0x11f
[  403.564103][ T7342] loop0: detected capacity change from 0 to 32768
[  407.118875][ T7386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  407.135243][ T7386] device bridge_slave_1 left promiscuous mode
[  407.142218][ T7386] bridge0: port 2(bridge_slave_1) entered disabled state
[  407.205912][ T7386] device bridge_slave_0 left promiscuous mode
[  407.213090][ T7386] bridge0: port 1(bridge_slave_0) entered disabled state
[  407.285362][ T3923] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  407.340219][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  407.355648][ T7389] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'.
[  407.401034][ T7389] device gtp1 entered promiscuous mode
[  407.420332][ T7390] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  407.497522][ T7393] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  407.526994][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  407.543407][ T7396] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  407.555577][ T3923] usb 1-1: Using ep0 maxpacket: 8
[  407.564510][   T26] audit: type=1800 audit(1718799320.670:763): pid=7398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1973 res=0 errno=0
[  407.579282][ T7396] device gtp0 entered promiscuous mode
[  407.855636][ T3923] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  407.870368][ T3923] usb 1-1: config 0 has no interface number 0
[  407.885940][ T3923] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  407.913319][ T3923] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  407.932737][ T3923] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  407.933989][ T7391] loop2: detected capacity change from 0 to 32768
[  407.955015][ T3923] usb 1-1: config 0 descriptor??
[  408.006939][ T3923] iowarrior 1-1:0.1: no interrupt-in endpoint found
[  408.011165][ T7391] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (7391)
[  408.057492][ T7391] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  408.077994][ T7391] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  408.096050][ T7391] BTRFS info (device loop2): using free space tree
[  408.208610][ T3922] usb 1-1: USB disconnect, device number 12
[  408.240992][ T7391] BTRFS info (device loop2): enabling ssd optimizations
[  408.600655][ T7428] loop3: detected capacity change from 0 to 512
[  408.686446][ T7428] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2)
[  408.744425][ T7428] EXT4-fs (loop3): 2 truncates cleaned up
[  408.767537][ T7428] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  408.936627][ T7432] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  409.325397][ T7430] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  409.364569][   T26] audit: type=1800 audit(1718799322.470:764): pid=7428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file1" dev="loop3" ino=15 res=0 errno=0
[  409.549994][ T6114] EXT4-fs (loop3): unmounting filesystem.
[  409.719201][ T7444] dlm: no local IP address has been set
[  409.724819][ T7444] dlm: cannot start dlm midcomms -107
[  410.039620][ T6530] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  410.063121][ T7447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  410.096805][ T7447] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'.
[  410.179403][ T7447] device gtp1 entered promiscuous mode
[  410.815960][ T7470] loop2: detected capacity change from 0 to 512
[  410.852591][ T7470] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  410.893694][ T7470] EXT4-fs (loop2): Test dummy encryption mode enabled
[  411.075428][ T7470] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  411.125264][ T7470] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 2 len 1
[  411.173461][ T7470] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  411.179031][ T7477] loop3: detected capacity change from 0 to 128
[  411.228455][ T7470] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0)
[  411.268332][ T7470] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1)
[  411.272225][ T7477] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  411.296672][ T7470] EXT4-fs (loop2): 1 truncate cleaned up
[  411.310164][ T7470] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  411.425737][ T7477] ext4 filesystem being mounted at /root/syzkaller-testdir1003483339/syzkaller.QfhTwu/69/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  411.491638][   T26] audit: type=1326 audit(1718799324.600:765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7468 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07647cf29 code=0x0
[  411.646388][ T6114] EXT4-fs (loop3): unmounting filesystem.
[  411.658150][ T7481] ext4: Unknown parameter '/dev/cpu/#/msr'
[  411.765814][ T7469] loop1: detected capacity change from 0 to 32768
[  413.229619][ T7496] loop1: detected capacity change from 0 to 512
[  413.284198][ T7496] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 256 (level 2)
[  414.203651][ T7496] EXT4-fs (loop1): 2 truncates cleaned up
[  414.254768][ T7496] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  414.474413][   T26] audit: type=1800 audit(1718799327.580:766): pid=7496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0
[  414.553325][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  415.486750][ T6530] EXT4-fs (loop2): unmounting filesystem.
[  415.590566][ T7524] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  416.119280][   T26] audit: type=1326 audit(1718799329.230:767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7536 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc07647cf29 code=0x0
[  416.901349][   T26] audit: type=1800 audit(1718799330.010:768): pid=7543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1973 res=0 errno=0
[  416.939093][ T7543] 9pnet_fd: Insufficient options for proto=fd
[  417.025258][ T7547] loop1: detected capacity change from 0 to 512
[  417.107990][ T7547] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 256 (level 2)
[  417.150081][ T7547] EXT4-fs (loop1): 2 truncates cleaned up
[  417.166513][ T7547] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  417.778760][ T7558] loop2: detected capacity change from 0 to 512
[  417.808527][   T26] audit: type=1800 audit(1718799330.920:769): pid=7547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0
[  417.883855][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  417.905124][ T7535] loop4: detected capacity change from 0 to 32768
[  418.684272][ T7565] read_mapping_page failed!
[  419.013250][ T7566] loop3: detected capacity change from 0 to 4096
[  419.016280][ T7568] fuse: Bad value for 'fd'
[  419.055443][ T7566] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  419.201676][   T26] audit: type=1804 audit(1718799332.310:770): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1003483339/syzkaller.QfhTwu/78/file0/file1" dev="loop3" ino=30 res=1 errno=0
[  419.676144][   T26] audit: type=1326 audit(1718799332.790:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7577 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15e967cf29 code=0x0
[  420.230781][   T26] audit: type=1800 audit(1718799333.340:772): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=1972 res=0 errno=0
[  420.285075][ T7590] 9pnet_fd: Insufficient options for proto=fd
[  420.581008][ T7594] loop0: detected capacity change from 0 to 256
[  421.629699][ T7594] FAT-fs (loop0): Unrecognized mount option "nnonumtail=1" or missing value
[  421.840385][ T7594] loop0: detected capacity change from 0 to 8
[  421.896853][ T7594] SQUASHFS error: zstd decompression error: 10
[  421.921698][ T7594] SQUASHFS error: zstd decompression failed, data probably corrupt
[  422.316853][ T7594] SQUASHFS error: Failed to read block 0x4ea: -5
[  422.325916][ T7594] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  422.345600][ T7594] SQUASHFS error: Unable to read inode 0x11f
[  424.386363][ T7622] loop1: detected capacity change from 0 to 256
[  424.574113][ T3580] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  424.584964][ T3580] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  424.593462][ T3580] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  424.603630][ T3580] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  424.612633][ T3580] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  424.620185][ T3580] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  424.868670][  T102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  424.954064][ T7632] loop3: detected capacity change from 0 to 256
[  424.984207][   T26] audit: type=1326 audit(1718799338.090:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7630 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214827cf29 code=0x0
[  425.024344][ T7632] FAT-fs (loop3): Unrecognized mount option "nnonumtail=1" or missing value
[  425.055195][  T102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.089401][ T7632] loop3: detected capacity change from 0 to 8
[  425.123783][ T7632] SQUASHFS error: zstd decompression error: 10
[  425.154930][ T7632] SQUASHFS error: zstd decompression failed, data probably corrupt
[  425.180409][  T102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.191855][ T7632] SQUASHFS error: Failed to read block 0x4ea: -5
[  425.218504][ T7632] SQUASHFS error: Unable to read metadata cache entry [4e8]
[  425.233854][ T7632] SQUASHFS error: Unable to read inode 0x11f
[  425.282395][  T102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  425.545509][ T7635] openvswitch: netlink: Message has 12 unknown bytes.
[  426.665495][ T3587] Bluetooth: hci6: command tx timeout
[  427.070350][ T7626] chnl_net:caif_netlink_parms(): no params data found
[  427.408622][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.443847][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.470013][ T7626] device bridge_slave_0 entered promiscuous mode
[  427.555553][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.562906][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.600612][ T7626] device bridge_slave_1 entered promiscuous mode
[  427.730377][ T7667] loop3: detected capacity change from 0 to 128
[  427.793148][ T7669] loop4: detected capacity change from 0 to 512
[  427.794488][ T7626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.814059][ T7667] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  427.840823][ T7626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.850409][ T7667] ext4 filesystem being mounted at /root/syzkaller-testdir1003483339/syzkaller.QfhTwu/87/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  427.990238][ T7669] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  428.030822][ T7669] ext4 filesystem being mounted at /root/syzkaller-testdir1787969741/syzkaller.q80DPQ/75/file0 supports timestamps until 2038 (0x7fffffff)
[  428.050796][ T7626] team0: Port device team_slave_0 added
[  428.093664][ T6114] EXT4-fs (loop3): unmounting filesystem.
[  428.127963][ T7626] team0: Port device team_slave_1 added
[  428.255377][ T7675] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  428.288944][ T7675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'.
[  428.310768][ T7678] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  428.349764][ T7675] device gtp2 entered promiscuous mode
[  428.380598][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_0
[  428.396210][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.397842][   T26] audit: type=1800 audit(1718799341.510:774): pid=7669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=15 res=0 errno=0
[  428.502434][ T7626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  428.531296][   T26] audit: type=1804 audit(1718799341.570:775): pid=7679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1787969741/syzkaller.q80DPQ/75/file0/file1" dev="loop4" ino=15 res=1 errno=0
[  428.587322][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.594376][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.638159][ T6209] EXT4-fs (loop4): unmounting filesystem.
[  428.660334][ T7626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  428.745625][ T3587] Bluetooth: hci6: command tx timeout
[  429.064256][ T7626] device hsr_slave_0 entered promiscuous mode
[  429.083263][   T26] audit: type=1326 audit(1718799342.190:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7685 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f62df47cf29 code=0x0
[  429.125852][ T7626] device hsr_slave_1 entered promiscuous mode
[  429.147494][ T7626] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  429.159680][ T7626] Cannot create hsr debugfs directory
[  429.250790][ T7677] loop1: detected capacity change from 0 to 32768
[  429.269089][  T102] device hsr_slave_0 left promiscuous mode
[  429.284252][  T102] device hsr_slave_1 left promiscuous mode
[  429.324272][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  430.554137][  T102] batman_adv: batadv0: Removing interface: batadv_slave_0
[  430.565083][  T102] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  430.572782][  T102] batman_adv: batadv0: Removing interface: batadv_slave_1
[  430.835533][ T3587] Bluetooth: hci6: command tx timeout
[  430.862704][  T102] device veth1_macvtap left promiscuous mode
[  430.885554][  T102] device veth0_macvtap left promiscuous mode
[  430.896889][  T102] device veth1_vlan left promiscuous mode
[  430.946884][  T102] device veth0_vlan left promiscuous mode
[  431.314250][  T102] team0 (unregistering): Port device macvlan2 removed
[  431.536619][  T102] team0 (unregistering): Port device team_slave_1 removed
[  431.546400][ T7716] loop4: detected capacity change from 0 to 128
[  431.561527][  T102] team0 (unregistering): Port device team_slave_0 removed
[  431.566518][ T7716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  431.577927][ T7716] ext4 filesystem being mounted at /root/syzkaller-testdir1787969741/syzkaller.q80DPQ/77/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  431.614597][  T102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  431.645845][  T102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  431.661601][ T6209] EXT4-fs (loop4): unmounting filesystem.
[  431.789381][  T102] bond0 (unregistering): Released all slaves
[  431.812771][ T7703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  431.822823][ T7703] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'.
[  431.838048][ T7703] device gtp0 entered promiscuous mode
[  431.850607][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  431.875476][ T7713] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  431.917957][ T7714] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  431.953510][ T7722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'.
[  431.979498][ T7722] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'.
[  432.149688][ T7722] device gtp2 entered promiscuous mode
[  432.734059][ T7732] loop0: detected capacity change from 0 to 1024
[  433.651787][ T3587] Bluetooth: hci6: command tx timeout
[  433.710897][ T5399] hfsplus: b-tree write err: -5, ino 4
[  434.539459][ T7747] loop0: detected capacity change from 0 to 256
[  434.723276][ T7752] netlink: 'syz-executor.4': attribute type 1 has an invalid length.
[  435.016926][   T26] audit: type=1800 audit(1718799348.130:777): pid=7755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0
[  435.684344][ T7626] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  435.735072][ T7626] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  435.873847][ T7626] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  435.923256][ T7626] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  436.208117][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0
[  436.278223][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  436.289046][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  436.336833][ T7626] 8021q: adding VLAN 0 to HW filter on device team0
[  436.367992][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  436.389427][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  436.426748][ T7461] bridge0: port 1(bridge_slave_0) entered blocking state
[  436.434275][ T7461] bridge0: port 1(bridge_slave_0) entered forwarding state
[  436.546305][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  436.559473][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  436.598256][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  436.633873][ T7459] bridge0: port 2(bridge_slave_1) entered blocking state
[  436.641153][ T7459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  436.672474][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  436.693920][ T7459] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  436.767402][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  436.777838][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  436.796446][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  436.850915][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  436.886868][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  436.915751][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  436.924570][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  436.954750][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  436.968871][   T26] audit: type=1326 audit(1718799350.080:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7764 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214827cf29 code=0x0
[  437.008733][ T7626] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  437.040181][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  437.192268][ T7773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  437.196018][ T7772] loop1: detected capacity change from 0 to 128
[  437.230193][ T7773] device bridge_slave_1 left promiscuous mode
[  437.269571][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state
[  437.286612][ T7772] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  437.323602][ T7772] ext4 filesystem being mounted at /root/syzkaller-testdir1618943788/syzkaller.nl7Ljp/73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  437.325472][   T26] audit: type=1804 audit(1718799350.440:779): pid=7779 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1787969741/syzkaller.q80DPQ/85/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0
[  437.406153][ T7773] device bridge_slave_0 left promiscuous mode
[  437.415839][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state
[  437.443712][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  437.594641][ T7776] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  437.694521][ T7780] netlink: 'syz-executor.0': attribute type 4 has an invalid length.
[  439.056990][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  439.064673][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  439.098680][ T7626] 8021q: adding VLAN 0 to HW filter on device batadv0
[  439.198224][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  439.225208][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  439.334128][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  439.356372][  T936] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  439.459772][ T7794] loop0: detected capacity change from 0 to 4096
[  439.485948][   T26] audit: type=1326 audit(1718799352.590:780): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7792 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214827cf29 code=0x0
[  439.512528][ T7626] device veth0_vlan entered promiscuous mode
[  439.537283][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  439.569660][ T7794] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512)
[  439.582423][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  439.638959][ T7626] device veth1_vlan entered promiscuous mode
[  439.836944][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  439.851868][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  440.355226][   T26] audit: type=1804 audit(1718799353.460:781): pid=7794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1108726379/syzkaller.wFooH3/39/file0/file1" dev="loop0" ino=30 res=1 errno=0
[  440.625703][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  440.638162][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  440.663151][ T7626] device veth0_macvtap entered promiscuous mode
[  440.693299][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  440.721831][ T7626] device veth1_macvtap entered promiscuous mode
[  440.941910][ T7804] team0: Port device macvlan2 added
[  440.965098][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  440.994319][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.032674][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.070564][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.102522][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.139558][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.193380][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.372324][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.386199][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.398688][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.414530][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  441.440936][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.459493][ T7626] batman_adv: batadv0: Interface activated: batadv_slave_0
[  441.477272][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  441.498895][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  441.519666][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.533746][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.608593][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.654971][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.743991][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  441.825560][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  441.947746][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.016196][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.026858][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.047269][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.255444][ T7626] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  442.289607][ T7626] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  442.328754][ T7626] batman_adv: batadv0: Interface activated: batadv_slave_1
[  442.365548][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  442.385247][ T3922] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  442.434017][ T7626] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  442.458741][ T7626] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  442.492768][ T7626] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  442.527593][ T7626] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  443.302191][ T5394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.320718][ T5394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.374259][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  443.431578][ T7359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  443.453318][ T7359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  443.516964][ T7461] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  443.897797][   T26] audit: type=1326 audit(1718799357.010:782): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7845 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214827cf29 code=0x0
[  445.041230][ T7856] team0: Port device macvlan3 added
[  445.147562][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  445.154440][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  445.207887][ T3583] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  445.220550][ T3583] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  445.240853][ T3583] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  445.258529][ T3583] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  445.267543][ T3583] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[  445.275020][ T3583] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  445.322098][ T3644] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.489585][ T7867] loop1: detected capacity change from 0 to 4096
[  445.499009][ T3644] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.520108][ T7867] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512)
[  445.546280][ T7870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  445.557484][ T7870] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  445.574653][ T7870] device gtp1 entered promiscuous mode
[  445.621189][ T3644] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  445.673901][   T26] audit: type=1804 audit(1718799358.780:783): pid=7867 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1618943788/syzkaller.nl7Ljp/78/file0/file1" dev="loop1" ino=30 res=1 errno=0
[  446.195777][ T3922] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  446.238530][ T3644] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  446.463619][ T7863] chnl_net:caif_netlink_parms(): no params data found
[  446.528214][ T7885] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  446.589085][ T3922] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  446.599251][ T3922] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.611444][ T3922] usb 5-1: config 0 descriptor??
[  446.670808][ T3922] cp210x 5-1:0.0: cp210x converter detected
[  446.789913][ T7863] bridge0: port 1(bridge_slave_0) entered blocking state
[  446.816497][ T7863] bridge0: port 1(bridge_slave_0) entered disabled state
[  446.861589][ T7863] device bridge_slave_0 entered promiscuous mode
[  446.974569][ T7863] bridge0: port 2(bridge_slave_1) entered blocking state
[  446.993160][ T7863] bridge0: port 2(bridge_slave_1) entered disabled state
[  447.028288][ T7863] device bridge_slave_1 entered promiscuous mode
[  447.085646][ T3922] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  447.178852][ T3922] usb 5-1: cp210x converter now attached to ttyUSB0
[  447.218056][ T7863] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  447.262257][ T7863] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  447.307751][ T3587] Bluetooth: hci5: command tx timeout
[  447.337864][    T7] usb 5-1: USB disconnect, device number 9
[  447.371756][    T7] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  447.394502][    T7] cp210x 5-1:0.0: device disconnected
[  447.460509][ T7902] team0: Port device macvlan3 added
[  447.535344][ T7863] team0: Port device team_slave_0 added
[  447.633307][ T7863] team0: Port device team_slave_1 added
[  447.793001][ T7908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  447.814604][ T7908] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'.
[  447.934221][ T7908] device gtp0 entered promiscuous mode
[  447.989627][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_0
[  448.008632][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  448.112954][ T7863] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  448.131578][ T7920] loop1: detected capacity change from 0 to 512
[  448.213154][ T3644] device hsr_slave_0 left promiscuous mode
[  448.243232][ T3644] device hsr_slave_1 left promiscuous mode
[  448.300149][ T7920] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 256 (level 2)
[  448.346385][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  448.373018][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_0
[  448.377416][ T7927] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  448.459552][ T7920] EXT4-fs (loop1): 2 truncates cleaned up
[  448.476946][ T3644] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  448.484464][ T3644] batman_adv: batadv0: Removing interface: batadv_slave_1
[  448.504440][ T7920] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  448.563734][ T3644] device bridge_slave_1 left promiscuous mode
[  448.583729][ T3644] bridge0: port 2(bridge_slave_1) entered disabled state
[  448.585445][ T7923] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  448.606913][ T3644] device bridge_slave_0 left promiscuous mode
[  448.613439][ T3644] bridge0: port 1(bridge_slave_0) entered disabled state
[  448.653085][ T3644] device veth1_macvtap left promiscuous mode
[  448.662505][ T3644] device veth0_macvtap left promiscuous mode
[  448.687928][ T3644] device veth1_vlan left promiscuous mode
[  448.714001][ T3644] device veth0_vlan left promiscuous mode
[  448.891109][   T26] audit: type=1800 audit(1718799362.000:784): pid=7920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0
[  448.983750][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  449.301442][ T3644] team0 (unregistering): Port device macvlan2 removed
[  449.385707][ T3587] Bluetooth: hci5: command tx timeout
[  449.385968][ T7461] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  449.488354][ T3644] team0 (unregistering): Port device team_slave_1 removed
[  449.526505][ T3644] team0 (unregistering): Port device team_slave_0 removed
[  449.559523][ T3644] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  449.605765][ T3644] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  449.812783][ T3644] bond0 (unregistering): Released all slaves
[  449.846009][ T7461] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  449.865688][ T7461] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  449.897751][ T7461] usb 2-1: config 0 descriptor??
[  449.920838][ T7863] batman_adv: batadv0: Adding interface: batadv_slave_1
[  449.936564][ T7461] cp210x 2-1:0.0: cp210x converter detected
[  449.942694][ T7863] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  449.995408][ T7863] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  450.023137][ T7942] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'.
[  450.035732][ T7942] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'.
[  450.058139][ T7942] device gtp2 entered promiscuous mode
[  450.070455][ T7936] loop2: detected capacity change from 0 to 40427
[  450.076038][ T7934] loop4: detected capacity change from 0 to 40427
[  450.098011][ T7934] F2FS-fs (loop4): invalid crc value
[  450.122138][ T7936] F2FS-fs (loop2): invalid crc value
[  450.166810][ T7934] F2FS-fs (loop4): Found nat_bits in checkpoint
[  450.212128][ T7936] F2FS-fs (loop2): Found nat_bits in checkpoint
[  450.230125][ T7863] device hsr_slave_0 entered promiscuous mode
[  450.254968][ T7863] device hsr_slave_1 entered promiscuous mode
[  450.277493][ T7934] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  450.284263][ T7863] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  450.294762][ T7863] Cannot create hsr debugfs directory
[  450.299173][ T7934] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  450.368755][ T7461] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  450.398828][ T7936] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  450.436229][ T7461] usb 2-1: cp210x converter now attached to ttyUSB0
[  450.610854][ T7936] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  450.645862][ T7461] usb 2-1: USB disconnect, device number 17
[  452.009623][ T7461] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  452.302769][ T7461] cp210x 2-1:0.0: device disconnected
[  452.495471][ T3587] Bluetooth: hci5: command tx timeout
[  452.768117][ T7969] loop1: detected capacity change from 0 to 512
[  452.795909][ T7953] loop0: detected capacity change from 0 to 32768
[  452.842671][ T7969] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 256 (level 2)
[  452.865602][ T7953] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (7953)
[  452.925444][ T7953] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  452.937564][ T7969] EXT4-fs (loop1): 2 truncates cleaned up
[  452.955864][ T7953] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  452.992258][ T7953] BTRFS info (device loop0): using free space tree
[  453.003186][ T7969] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  453.087885][   T26] audit: type=1326 audit(1718799366.200:785): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7973 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214827cf29 code=0x0
[  453.124589][ T7863] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  453.158506][ T7863] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  453.190770][ T7984] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  453.221153][ T7863] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  453.270322][ T7863] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  453.520050][   T26] audit: type=1800 audit(1718799366.630:786): pid=7969 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0
[  453.570711][ T7953] BTRFS error (device loop0): open_ctree failed
[  453.709901][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  453.957373][ T7863] 8021q: adding VLAN 0 to HW filter on device bond0
[  454.011301][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  454.031662][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  454.063041][ T7863] 8021q: adding VLAN 0 to HW filter on device team0
[  454.095619][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  454.104501][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  454.138073][ T7455] bridge0: port 1(bridge_slave_0) entered blocking state
[  454.145320][ T7455] bridge0: port 1(bridge_slave_0) entered forwarding state
[  454.169635][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  454.186581][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  454.203495][ T7455] bridge0: port 2(bridge_slave_1) entered blocking state
[  454.210728][ T7455] bridge0: port 2(bridge_slave_1) entered forwarding state
[  454.254239][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  454.266316][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  454.285807][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  454.325467][ T6548] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  454.325853][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  454.361879][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  454.379327][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  454.399911][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  454.434815][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  454.447522][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  454.455513][   T26] audit: type=1326 audit(1718799367.560:787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8009 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f214827cf29 code=0x0
[  454.486304][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  454.502893][ T7863] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  454.513487][ T3587] Bluetooth: hci5: command tx timeout
[  454.523742][ T7863] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  454.532657][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  454.542480][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  454.642247][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  454.652973][ T7454] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  454.682979][ T7863] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.716076][ T6548] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  454.739283][ T6548] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  454.788083][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  454.798190][ T6548] usb 3-1: config 0 descriptor??
[  454.809796][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  454.866533][ T6548] cp210x 3-1:0.0: cp210x converter detected
[  454.888926][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  454.934271][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  454.966734][ T7863] device veth0_vlan entered promiscuous mode
[  454.977350][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  454.986316][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  455.018576][ T7863] device veth1_vlan entered promiscuous mode
[  455.028301][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  455.096495][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  455.112138][ T7455] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  455.134125][ T7863] device veth0_macvtap entered promiscuous mode
[  455.183433][ T7863] device veth1_macvtap entered promiscuous mode
[  455.248397][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.285343][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.302232][ T6548] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  455.316099][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.358548][ T6548] usb 3-1: cp210x converter now attached to ttyUSB0
[  455.367723][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.398924][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.429945][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.460674][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.512147][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.546469][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.581407][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.605758][ T6548] usb 3-1: USB disconnect, device number 15
[  455.611863][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  455.626253][ T6548] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  455.634888][ T6548] cp210x 3-1:0.0: device disconnected
[  455.645775][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.696192][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_0
[  455.731484][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  455.746215][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  455.786836][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  455.806348][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  455.838180][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  455.872435][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.925333][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  455.957673][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  455.988180][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.015593][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.037062][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.072739][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.112943][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.144202][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.170132][ T7863] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  456.280350][ T7863] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.363344][ T7863] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.436873][ T8019] loop0: detected capacity change from 0 to 40427
[  456.446357][ T7863] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.452079][ T8023] loop2: detected capacity change from 0 to 32768
[  456.463842][ T8023] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (8023)
[  456.481786][ T8023] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  456.492686][ T8023] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  456.496500][ T8021] loop4: detected capacity change from 0 to 40427
[  456.502434][ T8023] BTRFS info (device loop2): using free space tree
[  456.516963][ T7863] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.525797][ T7863] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.534528][ T7863] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.543878][ T8019] F2FS-fs (loop0): invalid crc value
[  456.549992][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  456.574542][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  456.609129][ T8019] F2FS-fs (loop0): Found nat_bits in checkpoint
[  456.621851][ T8021] F2FS-fs (loop4): invalid crc value
[  456.727669][ T8043] loop1: detected capacity change from 0 to 128
[  456.758299][ T8021] F2FS-fs (loop4): Found nat_bits in checkpoint
[  456.805654][ T8043] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  456.835754][ T8023] BTRFS info (device loop2): enabling ssd optimizations
[  456.858844][ T8043] ext4 filesystem being mounted at /root/syzkaller-testdir1618943788/syzkaller.nl7Ljp/88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  456.897098][ T7359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.956297][ T7359] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.960481][ T8019] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  457.059370][ T8019] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  457.165641][ T6548] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  457.171084][ T8021] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  457.254903][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  457.273283][ T3777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  457.282098][ T8021] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  457.296436][ T8054] dlm: no local IP address has been set
[  457.316831][ T3777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.373738][ T8054] dlm: cannot start dlm midcomms -107
[  457.648380][ T7457] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  458.378782][ T8061] loop1: detected capacity change from 0 to 512
[  459.667770][ T8061] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 256 (level 2)
[  459.704282][ T8061] EXT4-fs (loop1): 2 truncates cleaned up
[  459.716125][ T8061] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  459.936912][   T26] audit: type=1800 audit(1718799373.050:788): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=15 res=0 errno=0
[  460.034768][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  460.885391][ T3617] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  461.255621][ T3617] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  461.273031][ T3617] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.322869][ T3617] usb 5-1: config 0 descriptor??
[  461.386399][ T3617] cp210x 5-1:0.0: cp210x converter detected
[  461.993292][ T3617] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  462.011171][ T7626] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  462.047240][ T3617] usb 5-1: cp210x converter now attached to ttyUSB0
[  462.173819][ T8098] loop1: detected capacity change from 0 to 1024
[  462.409448][ T3617] usb 5-1: USB disconnect, device number 10
[  462.628193][ T3617] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  462.877047][ T3617] cp210x 5-1:0.0: device disconnected
[  463.296527][ T5394] hfsplus: b-tree write err: -5, ino 4
[  463.480619][ T8106] loop4: detected capacity change from 0 to 1024
[  465.072453][ T5430] hfsplus: b-tree write err: -5, ino 4
[  465.125873][ T8110] loop2: detected capacity change from 0 to 128
[  465.796127][ T8112] loop1: detected capacity change from 0 to 32768
[  470.033192][   T26] audit: type=1804 audit(1718799383.140:789): pid=8127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2503041844/syzkaller.Ki64IY/5/file1" dev="sda1" ino=1960 res=1 errno=0
[  470.151994][ T8121] team0: Port device macvlan2 added
[  470.393678][ T8132] loop3: detected capacity change from 0 to 32768
[  470.402774][ T8132] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (8132)
[  470.420299][ T8132] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  470.431255][ T8132] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  470.440051][ T8132] BTRFS info (device loop3): using free space tree
[  470.519310][ T3587] Bluetooth: hci3: unexpected event for opcode 0x080e
[  470.651456][   T26] audit: type=1326 audit(1718799383.760:790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8136 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f15e967cf29 code=0x0
[  470.757825][ T8132] BTRFS info (device loop3): enabling ssd optimizations
[  471.019337][ T8103] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  471.341409][ T8170] loop2: detected capacity change from 0 to 32768
[  475.313755][ T3587] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  475.324416][ T3587] Bluetooth: hci3: Injecting HCI hardware error event
[  475.347785][ T3583] Bluetooth: hci3: hardware error 0x00
[  475.438094][ T7863] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  475.678046][   T26] audit: type=1326 audit(1718799388.790:791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8174 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7feb02e7cf29 code=0x0
[  475.833072][ T8180] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  475.981613][ T8182] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  476.011194][   T26] audit: type=1804 audit(1718799389.120:792): pid=8181 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1108726379/syzkaller.wFooH3/60/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0
[  476.067021][ T8188] loop2: detected capacity change from 0 to 128
[  476.205003][ T8188] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  476.225546][ T8188] ext4 filesystem being mounted at /root/syzkaller-testdir985835474/syzkaller.3wcpkO/18/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  476.323451][ T7626] EXT4-fs (loop2): unmounting filesystem.
[  476.562213][ T8195] team0: Port device macvlan4 added
[  477.013975][ T8215] loop3: detected capacity change from 0 to 512
[  477.059982][ T8215] EXT4-fs error (device loop3): ext4_orphan_get:1422: comm syz-executor.3: bad orphan inode 15
[  477.101347][ T8215] ext4_test_bit(bit=14, block=5) = 0
[  477.115646][ T8215] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  477.185406][ T8103] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  477.258460][   T26] audit: type=1326 audit(1718799390.370:793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8212 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcedc47cf29 code=0x0
[  477.300758][ T7863] EXT4-fs (loop3): unmounting filesystem.
[  477.394095][ T8222] loop3: detected capacity change from 0 to 128
[  477.458496][ T8222] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  477.465755][ T3583] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  477.508964][ T8222] ext4 filesystem being mounted at /root/syzkaller-testdir2503041844/syzkaller.Ki64IY/10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  477.605647][ T8103] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  477.615516][ T8103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  477.633561][ T8103] usb 2-1: config 0 descriptor??
[  477.676596][ T8103] cp210x 2-1:0.0: cp210x converter detected
[  477.790387][ T7863] EXT4-fs (loop3): unmounting filesystem.
[  478.193567][ T8232] loop3: detected capacity change from 0 to 1024
[  478.376579][ T8103] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  478.578248][ T8103] usb 2-1: cp210x converter now attached to ttyUSB0
[  479.049845][ T8220] loop4: detected capacity change from 0 to 40427
[  479.088693][ T8103] usb 2-1: USB disconnect, device number 18
[  479.092963][ T8220] F2FS-fs (loop4): invalid crc value
[  479.108075][ T8103] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  479.208812][ T8220] F2FS-fs (loop4): Found nat_bits in checkpoint
[  479.221745][ T8103] cp210x 2-1:0.0: device disconnected
[  479.241665][ T8240] loop2: detected capacity change from 0 to 512
[  479.444066][ T8220] F2FS-fs (loop4): Cannot turn on quotas: -2 on 1
[  479.520107][ T8240] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 256 (level 2)
[  479.535634][ T8220] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  479.739876][ T8240] EXT4-fs (loop2): 2 truncates cleaned up
[  479.746184][ T8240] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  479.966992][   T26] audit: type=1800 audit(1718799393.080:794): pid=8240 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=15 res=0 errno=0
[  480.674065][ T7626] EXT4-fs (loop2): unmounting filesystem.
[  481.445098][ T8274] loop1: detected capacity change from 0 to 1024
[  483.332766][ T8272] loop3: detected capacity change from 0 to 128
[  483.573900][ T8272] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  483.603586][ T8272] ext4 filesystem being mounted at /root/syzkaller-testdir2503041844/syzkaller.Ki64IY/14/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  483.767803][ T5430] hfsplus: b-tree write err: -5, ino 4
[  483.900533][ T7863] EXT4-fs (loop3): unmounting filesystem.
[  484.215542][    T7] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  484.291034][ T8297] loop3: detected capacity change from 0 to 1024
[  485.138880][ T3751] hfsplus: b-tree write err: -5, ino 4
[  485.150929][ T8299] loop0: detected capacity change from 0 to 512
[  485.391662][ T8299] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 256 (level 2)
[  485.436721][ T8299] EXT4-fs (loop0): 2 truncates cleaned up
[  485.442684][ T8299] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  485.555641][    T7] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  485.583071][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.603623][    T7] usb 2-1: config 0 descriptor??
[  485.656538][    T7] cp210x 2-1:0.0: cp210x converter detected
[  485.744238][   T26] audit: type=1800 audit(1718799398.850:795): pid=8291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0
[  486.264576][    T7] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  486.311399][ T6857] EXT4-fs (loop0): unmounting filesystem.
[  486.337960][    T7] usb 2-1: cp210x converter now attached to ttyUSB0
[  486.339240][ T8319] loop3: detected capacity change from 0 to 512
[  486.389687][   T26] audit: type=1800 audit(1718799399.500:796): pid=8321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1958 res=0 errno=0
[  486.617923][ T7455] usb 2-1: USB disconnect, device number 19
[  486.643753][ T7455] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  486.653939][ T8326] loop0: detected capacity change from 0 to 128
[  486.695827][ T7455] cp210x 2-1:0.0: device disconnected
[  486.716195][ T8326] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  486.758840][ T8326] ext4 filesystem being mounted at /root/syzkaller-testdir1108726379/syzkaller.wFooH3/71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  486.791617][ T8302] loop2: detected capacity change from 0 to 40427
[  486.816679][ T8302] F2FS-fs (loop2): invalid crc value
[  486.843169][ T8302] F2FS-fs (loop2): Found nat_bits in checkpoint
[  486.909946][ T6857] EXT4-fs (loop0): unmounting filesystem.
[  486.957518][ T8302] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1
[  486.969169][ T8302] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  487.077480][ T8341] loop3: detected capacity change from 0 to 4096
[  487.104340][ T8341] ntfs3: loop3: Different NTFS' sector size (2048) and media sector size (512)
[  487.269874][   T26] audit: type=1804 audit(1718799400.380:797): pid=8341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2503041844/syzkaller.Ki64IY/21/file0/file1" dev="loop3" ino=30 res=1 errno=0
[  488.274312][ T8359] loop0: detected capacity change from 0 to 512
[  488.377493][ T8359] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz-executor.0: invalid indirect mapped block 256 (level 2)
[  488.391858][  T153] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  488.400544][ T8359] EXT4-fs (loop0): 2 truncates cleaned up
[  488.409688][ T8359] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  488.516805][ T8367] loop1: detected capacity change from 0 to 512
[  488.805442][  T153] usb 5-1: Using ep0 maxpacket: 8
[  488.811534][   T26] audit: type=1800 audit(1718799401.920:798): pid=8370 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1952 res=0 errno=0
[  488.865792][   T26] audit: type=1800 audit(1718799401.960:799): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="file1" dev="loop0" ino=15 res=0 errno=0
[  488.925614][  T153] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  488.933728][  T153] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  488.954962][  T153] usb 5-1: config 0 has no interface number 0
[  488.963801][  T153] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  488.968211][ T6857] EXT4-fs (loop0): unmounting filesystem.
[  488.982013][  T153] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  489.015542][  T153] usb 5-1: config 0 descriptor??
[  489.056894][  T153] iowarrior 5-1:0.1: no interrupt-in endpoint found
[  489.100551][ T8376] loop0: detected capacity change from 0 to 128
[  489.126475][ T8379] netlink: 'syz-executor.2': attribute type 1 has an invalid length.
[  489.139466][ T8376] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  489.156042][ T8376] ext4 filesystem being mounted at /root/syzkaller-testdir1108726379/syzkaller.wFooH3/75/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  489.259106][ T7455] usb 5-1: USB disconnect, device number 11
[  489.269296][ T6857] EXT4-fs (loop0): unmounting filesystem.
[  489.425515][ T8103] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  489.996039][ T8393] loop3: detected capacity change from 0 to 1024
[  490.058784][ T8103] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  490.915538][ T8103] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.937256][ T8103] usb 2-1: config 0 descriptor??
[  491.069578][ T8401] loop4: detected capacity change from 0 to 1024
[  491.660503][   T26] audit: type=1800 audit(1718799404.770:800): pid=8406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1960 res=0 errno=0
[  491.759576][ T8103] cp210x 2-1:0.0: cp210x converter detected
[  491.759821][ T5399] hfsplus: b-tree write err: -5, ino 4
[  491.772639][ T3644] hfsplus: b-tree write err: -5, ino 4
[  491.827695][ T8391] loop0: detected capacity change from 0 to 40427
[  491.845674][ T8103] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  491.881747][ T8391] F2FS-fs (loop0): invalid crc value
[  491.890435][ T8103] usb 2-1: cp210x converter now attached to ttyUSB0
[  491.918969][ T8412] loop3: detected capacity change from 0 to 512
[  491.941594][ T8391] F2FS-fs (loop0): Found nat_bits in checkpoint
[  492.105149][ T8184] usb 2-1: USB disconnect, device number 20
[  492.149602][ T8184] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  492.180489][ T8184] cp210x 2-1:0.0: device disconnected
[  492.705016][ T8420] loop4: detected capacity change from 0 to 128
[  492.776561][ T8420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  492.832501][ T8391] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1
[  492.850072][ T8420] ext4 filesystem being mounted at /root/syzkaller-testdir1787969741/syzkaller.q80DPQ/117/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff)
[  493.105034][ T6209] EXT4-fs (loop4): unmounting filesystem.
[  493.305392][ T3587] Bluetooth: hci1: command 0x0406 tx timeout
[  493.606311][ T8102] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  493.871683][ T8102] usb 1-1: Using ep0 maxpacket: 8
[  494.015761][ T8102] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  494.034193][ T8102] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  494.065474][ T8455] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
[  494.071719][ T8102] usb 1-1: config 0 has no interface number 0
[  494.101356][ T8102] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  494.122625][ T8102] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  494.131076][ T8456] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
[  494.151685][ T8102] usb 1-1: config 0 descriptor??
[  494.161621][ T8456] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
[  494.182685][ T8456] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
[  494.199109][ T8456] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'.
[  494.216873][ T8102] iowarrior 1-1:0.1: no interrupt-in endpoint found
[  494.240643][ T8458] loop3: detected capacity change from 0 to 512
[  494.484970][ T8102] usb 1-1: USB disconnect, device number 14
[  494.695072][ T8461] loop2: detected capacity change from 0 to 4096
[  494.713114][ T8461] ntfs3: loop2: Different NTFS' sector size (2048) and media sector size (512)
[  494.816869][   T26] audit: type=1804 audit(1718799407.930:801): pid=8461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir985835474/syzkaller.3wcpkO/37/file0/file1" dev="loop2" ino=30 res=1 errno=0
[  495.145231][ T8467] loop1: detected capacity change from 0 to 512
[  495.247438][ T8467] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  495.322491][ T8467] EXT4-fs (loop1): Test dummy encryption mode enabled
[  495.427162][ T8467] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  495.469105][ T8467] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 2 len 1
[  495.551986][ T8467] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  495.585764][ T8467] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0)
[  495.615157][ T8467] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1)
[  495.660747][ T8467] EXT4-fs (loop1): 1 truncate cleaned up
[  495.672576][ T8467] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  495.822550][ T8479] ext4: Unknown parameter '/dev/cpu/#/msr'
[  496.153904][ T8490] loop0: detected capacity change from 0 to 512
[  496.243325][ T8490] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  496.275443][ T8490] ext4 filesystem being mounted at /root/syzkaller-testdir1108726379/syzkaller.wFooH3/82/file0 supports timestamps until 2038 (0x7fffffff)
[  496.419201][ T8490] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  496.491756][   T26] audit: type=1804 audit(1718799409.600:802): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1108726379/syzkaller.wFooH3/82/file0/file1" dev="loop0" ino=15 res=1 errno=0
[  496.534892][ T8490] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  496.584681][ T8490] EXT4-fs (loop0): This should not happen!! Data will be lost
[  496.584681][ T8490] 
[  496.622200][ T8490] EXT4-fs (loop0): Total free blocks count 0
[  496.635433][ T8490] EXT4-fs (loop0): Free/Dirty block details
[  496.642467][ T8490] EXT4-fs (loop0): free_blocks=65280
[  496.648792][ T8490] EXT4-fs (loop0): dirty_blocks=32
[  496.654247][ T8490] EXT4-fs (loop0): Block reservation details
[  496.661390][ T8490] EXT4-fs (loop0): i_reserved_data_blocks=32
[  496.705655][ T8494] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 31 with error 28
[  497.251331][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  497.575590][  T936] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  497.845514][  T936] usb 3-1: Using ep0 maxpacket: 8
[  497.975622][  T936] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  497.983680][  T936] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  498.008179][  T936] usb 3-1: config 0 has no interface number 0
[  498.019265][  T936] usb 3-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  498.050154][  T936] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  498.067822][  T936] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  498.092559][  T936] usb 3-1: config 0 descriptor??
[  498.150276][  T936] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  498.458055][  T936] usb 3-1: USB disconnect, device number 16
[  498.652985][ T8530] loop1: detected capacity change from 0 to 1024
[  500.896302][ T8532] loop4: detected capacity change from 0 to 512
[  500.941665][ T5430] hfsplus: b-tree write err: -5, ino 4
[  501.007116][ T8532] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  501.049914][ T8532] ext4 filesystem being mounted at /root/syzkaller-testdir1787969741/syzkaller.q80DPQ/124/file0 supports timestamps until 2038 (0x7fffffff)
[  501.302318][ T8532] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  501.606348][   T26] audit: type=1804 audit(1718799414.720:803): pid=8547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1787969741/syzkaller.q80DPQ/124/file0/file1" dev="loop4" ino=15 res=1 errno=0
[  501.633496][ T8532] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  501.665509][ T8532] EXT4-fs (loop4): This should not happen!! Data will be lost
[  501.665509][ T8532] 
[  501.683774][ T8532] EXT4-fs (loop4): Total free blocks count 0
[  501.691517][ T8532] EXT4-fs (loop4): Free/Dirty block details
[  501.707644][ T8532] EXT4-fs (loop4): free_blocks=65280
[  501.713256][ T8532] EXT4-fs (loop4): dirty_blocks=32
[  501.745497][ T8532] EXT4-fs (loop4): Block reservation details
[  501.752130][ T8532] EXT4-fs (loop4): i_reserved_data_blocks=32
[  501.773549][ T8547] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 11 with error 28
[  501.914257][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  502.025456][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  502.078461][ T8553] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  502.165705][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  503.080775][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  503.117105][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  503.225499][ T8552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  503.521977][ T8569] loop1: detected capacity change from 0 to 1024
[  503.755369][ T3924] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  504.037782][ T3924] usb 5-1: Using ep0 maxpacket: 8
[  504.165658][ T3924] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  504.188399][ T3924] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  504.329363][ T3924] usb 5-1: config 0 has no interface number 0
[  504.363382][ T3924] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  504.486432][ T3924] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  504.534527][ T3924] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.554979][ T3924] usb 5-1: config 0 descriptor??
[  504.617630][ T3924] iowarrior 5-1:0.1: no interrupt-in endpoint found
[  504.726660][ T8583] loop1: detected capacity change from 0 to 512
[  504.757906][ T8583] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  504.788920][ T8583] EXT4-fs (loop1): Test dummy encryption mode enabled
[  504.824930][ T8102] usb 5-1: USB disconnect, device number 12
[  504.864146][ T8583] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -13
[  504.878953][ T8583] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #13: comm syz-executor.1: attempt to clear invalid blocks 2 len 1
[  504.934988][ T8583] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  505.010796][ T8583] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 0)
[  505.038198][ T8583] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz-executor.1: invalid indirect mapped block 1819239214 (level 1)
[  505.062324][ T8583] EXT4-fs (loop1): 1 truncate cleaned up
[  505.069387][ T8583] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  505.284807][ T8591] ext4: Unknown parameter '/dev/cpu/#/msr'
[  506.471811][ T8600] loop0: detected capacity change from 0 to 512
[  506.501656][ T8590] loop2: detected capacity change from 0 to 32768
[  506.527446][ T8600] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  506.561880][ T8600] EXT4-fs (loop0): Test dummy encryption mode enabled
[  506.589838][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  506.596256][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  506.611690][ T8600] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  506.774339][ T8600] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz-executor.0: attempt to clear invalid blocks 2 len 1
[  506.799902][ T8600] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  507.313459][ T8600] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 0)
[  507.345443][ T8600] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 1819239214 (level 1)
[  507.388065][ T8600] EXT4-fs (loop0): 1 truncate cleaned up
[  507.404411][ T8600] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  507.641880][ T8600] ext4: Unknown parameter '/dev/cpu/#/msr'
[  508.585909][ T6181] EXT4-fs (loop1): unmounting filesystem.
[  509.043817][ T8632] netlink: 'syz-executor.3': attribute type 1 has an invalid length.
[  509.250035][ T6857] EXT4-fs (loop0): unmounting filesystem.
[  509.933932][ T8630] loop1: detected capacity change from 0 to 32768
[  511.632515][ T8661] loop2: detected capacity change from 0 to 512
[  511.646199][ T8661] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  511.724938][ T8661] EXT4-fs (loop2): Test dummy encryption mode enabled
[  511.779970][ T8661] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -13
[  511.796636][ T8661] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #13: comm syz-executor.2: attempt to clear invalid blocks 2 len 1
[  511.856301][ T8661] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  511.881407][ T8649] loop0: detected capacity change from 0 to 32768
[  511.889977][ T8661] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 0)
[  511.931919][ T8661] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz-executor.2: invalid indirect mapped block 1819239214 (level 1)
[  512.086657][ T8661] EXT4-fs (loop2): 1 truncate cleaned up
[  512.092402][ T8661] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  512.884286][  T133] ==================================================================
[  512.892425][  T133] BUG: KASAN: use-after-free in jfs_lazycommit+0x7da/0xb60
[  512.899835][  T133] Read of size 4 at addr ffff888021673e94 by task jfsCommit/133
[  512.907469][  T133] 
[  512.909811][  T133] CPU: 0 PID: 133 Comm: jfsCommit Not tainted 6.1.94-syzkaller #0
[  512.917627][  T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  512.927709][  T133] Call Trace:
[  512.931005][  T133]  <TASK>
[  512.933946][  T133]  dump_stack_lvl+0x1e3/0x2cb
[  512.938685][  T133]  ? nf_tcp_handle_invalid+0x642/0x642
[  512.944269][  T133]  ? panic+0x764/0x764
[  512.948354][  T133]  ? _printk+0xd1/0x111
[  512.952510][  T133]  ? __virt_addr_valid+0x17f/0x520
[  512.957629][  T133]  ? __virt_addr_valid+0x17f/0x520
[  512.962745][  T133]  print_report+0x15f/0x4f0
[  512.967249][  T133]  ? __virt_addr_valid+0x17f/0x520
[  512.972394][  T133]  ? __virt_addr_valid+0x17f/0x520
[  512.978002][  T133]  ? __virt_addr_valid+0x44a/0x520
[  512.983144][  T133]  ? __phys_addr+0xb6/0x170
[  512.987665][  T133]  ? jfs_lazycommit+0x7da/0xb60
[  512.992520][  T133]  kasan_report+0x136/0x160
[  512.997042][  T133]  ? jfs_lazycommit+0x7da/0xb60
[  513.001893][  T133]  jfs_lazycommit+0x7da/0xb60
[  513.006579][  T133]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  513.012475][  T133]  ? lockdep_hardirqs_on+0x94/0x130
[  513.017676][  T133]  ? txFreelock+0x580/0x580
[  513.022184][  T133]  ? do_task_dead+0xd0/0xd0
[  513.026705][  T133]  ? _raw_spin_unlock+0x40/0x40
[  513.031558][  T133]  ? __kthread_parkme+0x168/0x1c0
[  513.036595][  T133]  kthread+0x28d/0x320
[  513.040676][  T133]  ? txFreelock+0x580/0x580
[  513.045180][  T133]  ? kthread_blkcg+0xd0/0xd0
[  513.049767][  T133]  ret_from_fork+0x1f/0x30
[  513.054226][  T133]  </TASK>
[  513.057255][  T133] 
[  513.059578][  T133] Allocated by task 8649:
[  513.063901][  T133]  kasan_set_track+0x4b/0x70
[  513.068570][  T133]  __kasan_kmalloc+0x97/0xb0
[  513.073368][  T133]  jfs_fill_super+0xfb/0xc40
[  513.077978][  T133]  mount_bdev+0x2c9/0x3f0
[  513.082320][  T133]  legacy_get_tree+0xeb/0x180
[  513.087005][  T133]  vfs_get_tree+0x88/0x270
[  513.091505][  T133]  do_new_mount+0x2ba/0xb40
[  513.096104][  T133]  __se_sys_mount+0x2d5/0x3c0
[  513.100796][  T133]  do_syscall_64+0x3b/0xb0
[  513.105222][  T133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  513.111312][  T133] 
[  513.113641][  T133] Freed by task 6857:
[  513.117716][  T133]  kasan_set_track+0x4b/0x70
[  513.122328][  T133]  kasan_save_free_info+0x27/0x40
[  513.127351][  T133]  ____kasan_slab_free+0xd6/0x120
[  513.132441][  T133]  __kmem_cache_free+0x25c/0x3c0
[  513.137620][  T133]  generic_shutdown_super+0x130/0x340
[  513.142997][  T133]  kill_block_super+0x7a/0xe0
[  513.147761][  T133]  deactivate_locked_super+0xa0/0x110
[  513.153172][  T133]  cleanup_mnt+0x490/0x520
[  513.157590][  T133]  task_work_run+0x246/0x300
[  513.162180][  T133]  exit_to_user_mode_loop+0xde/0x100
[  513.167560][  T133]  exit_to_user_mode_prepare+0xb1/0x140
[  513.173188][  T133]  syscall_exit_to_user_mode+0x60/0x270
[  513.178732][  T133]  do_syscall_64+0x47/0xb0
[  513.183151][  T133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  513.189064][  T133] 
[  513.191393][  T133] Last potentially related work creation:
[  513.197099][  T133]  kasan_save_stack+0x3b/0x60
[  513.201784][  T133]  __kasan_record_aux_stack+0xb0/0xc0
[  513.207153][  T133]  kvfree_call_rcu+0x116/0x8c0
[  513.211928][  T133]  ip_mc_drop_socket+0x1d1/0x270
[  513.216868][  T133]  inet_release+0x92/0x1f0
[  513.221286][  T133]  sock_close+0xcd/0x230
[  513.225524][  T133]  __fput+0x3b7/0x890
[  513.229502][  T133]  task_work_run+0x246/0x300
[  513.234103][  T133]  exit_to_user_mode_loop+0xde/0x100
[  513.239384][  T133]  exit_to_user_mode_prepare+0xb1/0x140
[  513.244926][  T133]  syscall_exit_to_user_mode+0x60/0x270
[  513.250482][  T133]  do_syscall_64+0x47/0xb0
[  513.254912][  T133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  513.260841][  T133] 
[  513.263158][  T133] The buggy address belongs to the object at ffff888021673e00
[  513.263158][  T133]  which belongs to the cache kmalloc-256 of size 256
[  513.277214][  T133] The buggy address is located 148 bytes inside of
[  513.277214][  T133]  256-byte region [ffff888021673e00, ffff888021673f00)
[  513.290586][  T133] 
[  513.292904][  T133] The buggy address belongs to the physical page:
[  513.299507][  T133] page:ffffea0000859c80 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff888021673400 pfn:0x21672
[  513.310961][  T133] head:ffffea0000859c80 order:1 compound_mapcount:0 compound_pincount:0
[  513.319278][  T133] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  513.327266][  T133] raw: 00fff00000010200 ffffea00017ce500 dead000000000002 ffff888012441b40
[  513.335848][  T133] raw: ffff888021673400 000000008010000c 00000001ffffffff 0000000000000000
[  513.344422][  T133] page dumped because: kasan: bad access detected
[  513.350847][  T133] page_owner tracks the page as allocated
[  513.356568][  T133] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6114, tgid 6114 (syz-executor.3), ts 265308721727, free_ts 256752811051
[  513.379838][  T133]  post_alloc_hook+0x18d/0x1b0
[  513.384633][  T133]  get_page_from_freelist+0x31a1/0x3320
[  513.390175][  T133]  __alloc_pages+0x28d/0x770
[  513.394785][  T133]  alloc_slab_page+0x6a/0x150
[  513.399483][  T133]  new_slab+0x84/0x2d0
[  513.403559][  T133]  ___slab_alloc+0xc20/0x1270
[  513.408247][  T133]  __kmem_cache_alloc_node+0x19f/0x260
[  513.413706][  T133]  __kmalloc+0xa1/0x230
[  513.417862][  T133]  __register_sysctl_table+0x9f1/0x11e0
[  513.423404][  T133]  neigh_sysctl_register+0x3ec/0x4d0
[  513.428690][  T133]  addrconf_sysctl_register+0xac/0x180
[  513.434146][  T133]  ipv6_add_dev+0xb8e/0x1180
[  513.438816][  T133]  addrconf_notify+0x7a6/0xf60
[  513.443587][  T133]  raw_notifier_call_chain+0xd0/0x170
[  513.448980][  T133]  call_netdevice_notifiers+0x145/0x1b0
[  513.454531][  T133]  register_netdevice+0x12f2/0x1720
[  513.459734][  T133] page last free stack trace:
[  513.464398][  T133]  free_unref_page_prepare+0xf63/0x1120
[  513.469956][  T133]  free_unref_page+0x33/0x3e0
[  513.474623][  T133]  qlist_free_all+0x76/0xe0
[  513.479137][  T133]  kasan_quarantine_reduce+0x156/0x170
[  513.484604][  T133]  __kasan_krealloc+0x43/0xf0
[  513.489286][  T133]  krealloc+0xa6/0xf0
[  513.493275][  T133]  do_check_common+0x78bf/0xc1d0
[  513.498220][  T133]  bpf_check+0x1039b/0x15ea0
[  513.502804][  T133]  bpf_prog_load+0x12df/0x1bb0
[  513.507571][  T133]  __sys_bpf+0x382/0x6c0
[  513.511818][  T133]  __x64_sys_bpf+0x78/0x90
[  513.516235][  T133]  do_syscall_64+0x3b/0xb0
[  513.520665][  T133]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  513.526577][  T133] 
[  513.528903][  T133] Memory state around the buggy address:
[  513.534524][  T133]  ffff888021673d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  513.542578][  T133]  ffff888021673e00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  513.550648][  T133] >ffff888021673e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  513.558717][  T133]                          ^
[  513.563299][  T133]  ffff888021673f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  513.571362][  T133]  ffff888021673f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  513.579415][  T133] ==================================================================
[  513.587477][  T133] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  513.594751][  T133] CPU: 0 PID: 133 Comm: jfsCommit Not tainted 6.1.94-syzkaller #0
[  513.602551][  T133] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  513.612614][  T133] Call Trace:
[  513.615892][  T133]  <TASK>
[  513.618834][  T133]  dump_stack_lvl+0x1e3/0x2cb
[  513.623536][  T133]  ? nf_tcp_handle_invalid+0x642/0x642
[  513.628997][  T133]  ? panic+0x764/0x764
[  513.633073][  T133]  ? lock_release+0xd6/0xa20
[  513.637669][  T133]  ? vscnprintf+0x59/0x80
[  513.642016][  T133]  panic+0x318/0x764
[  513.645933][  T133]  ? check_panic_on_warn+0x1d/0xa0
[  513.651046][  T133]  ? memcpy_page_flushcache+0xfc/0xfc
[  513.656423][  T133]  ? _raw_spin_unlock_irqrestore+0xd9/0x130
[  513.662321][  T133]  ? _raw_spin_unlock+0x40/0x40
[  513.667185][  T133]  ? print_report+0x4a3/0x4f0
[  513.671863][  T133]  check_panic_on_warn+0x7e/0xa0
[  513.676804][  T133]  ? jfs_lazycommit+0x7da/0xb60
[  513.681655][  T133]  end_report+0x66/0x110
[  513.685893][  T133]  kasan_report+0x143/0x160
[  513.690404][  T133]  ? jfs_lazycommit+0x7da/0xb60
[  513.695339][  T133]  jfs_lazycommit+0x7da/0xb60
[  513.700009][  T133]  ? _raw_spin_unlock_irqrestore+0x8b/0x130
[  513.705925][  T133]  ? lockdep_hardirqs_on+0x94/0x130
[  513.711128][  T133]  ? txFreelock+0x580/0x580
[  513.715639][  T133]  ? do_task_dead+0xd0/0xd0
[  513.720154][  T133]  ? _raw_spin_unlock+0x40/0x40
[  513.725009][  T133]  ? __kthread_parkme+0x168/0x1c0
[  513.730039][  T133]  kthread+0x28d/0x320
[  513.734103][  T133]  ? txFreelock+0x580/0x580
[  513.738614][  T133]  ? kthread_blkcg+0xd0/0xd0
[  513.743212][  T133]  ret_from_fork+0x1f/0x30
[  513.747634][  T133]  </TASK>
[  514.869123][  T133] Shutting down cpus with NMI
[  514.874129][  T133] Kernel Offset: disabled
[  514.878480][  T133] Rebooting in 86400 seconds..