last executing test programs:

27.697097084s ago: executing program 2 (id=739):
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x4a, 0x0, 0x0)
ioctl$UI_DEV_SETUP(0xffffffffffffffff, 0x5501, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000001c0), 0x3f, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(r1, 0x3309)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x40505330, &(0x7f00000001c0)={0x800000, 0x80, 0x7, 0x4, 0x3ffd, 0x7})
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, 0x0, 0x0)

26.786001583s ago: executing program 3 (id=740):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
mount$overlay(0x0, 0x0, &(0x7f0000000140), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat(0xffffffffffffff9c, 0x0, 0x1c1242, 0x836d9fb164f926b1)
r3 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x28, 0x19, 0x1, 0x0, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x14, 0x6, 0x0, 0x1, [@nested={0x10, 0x7f, 0x0, 0x1, [@nested={0xc, 0x13a, 0x0, 0x1, [@nested={0x8, 0xa0, 0x0, 0x1, [@nested={0x4, 0x61}]}]}]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd)
sendfile(r4, r4, 0x0, 0xe3aa6ea)

25.831517825s ago: executing program 1 (id=741):
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7c1c, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x11, 0x4, 0x4, 0x2}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r3, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

24.568445397s ago: executing program 3 (id=743):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x40, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xe}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x200000, 0xe, 0x7, 0x7, 0x9, 0x40, 0xffffffff, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x4040098}, 0x4000)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r6=>0x0})
r7 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r7, &(0x7f0000000140)="bad330fbc9b5544972e7a5ea0756", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x1a, r6, 0x1, 0xd8, 0x6, @random="98c8ca7122df"}, 0x14)
sendto$packet(r7, &(0x7f0000000480)="c1858aec1d0a21756f66b4805f3a", 0xe, 0x40000, &(0x7f0000000240)={0x11, 0xf8, r6, 0x1, 0x5, 0x6, @random="24f51e8e0a5a"}, 0x14)
r8 = socket$nl_route(0x10, 0x3, 0x0)
r9 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r10, {0x10}, {}, {0xe, 0x1}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xdb, 0x0, 0x3}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

23.913217999s ago: executing program 1 (id=744):
close(0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x1d, 0x2, 0x6)
r0 = syz_io_uring_setup(0x49b, &(0x7f0000000200)={0x0, 0x4661, 0x400, 0x7, 0x123}, 0x0, 0x0, &(0x7f0000000000))
io_uring_enter(r0, 0x40f6, 0x4f7c, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000000a300))
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

23.89327026s ago: executing program 0 (id=745):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = getpid()
syz_pidfd_open(r0, 0x0)
prlimit64(r0, 0xe, &(0x7f0000000380)={0x8, 0x1000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)
add_key$keyring(&(0x7f0000000200), 0x0, 0x0, 0x0, 0xffffffffffffffff)
add_key(&(0x7f0000000100)='dns_resolver\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc2}, &(0x7f0000000080)={0x0, "0afc50134014604ccb17b0018bcdd6f65120e48dcefcdb532cb1bc61ef73597be8691d9ded20b3a1c31f59cc41545f5d3f3d6cf66e1372dd286e41374d1e6d0f", 0x10}, 0x48, 0xfffffffffffffffd)
syz_mount_image$bfs(&(0x7f0000000040), &(0x7f0000000000)='./bus\x00', 0x98, &(0x7f00000004c0)=ANY=[], 0xff, 0xa4, &(0x7f00000000c0)="$eJzs0b+pAkEQB+C5e/C4A9EC7OFq0CKswBKMBEEsyFYswdTIwNTkZHFFuGDBQFH4Ptg/P4ZdBuZw3U9jHNFvI/q/eOiT1XoXJf/FKr+gzmeThj655/M8YhYRVaqn7bJZHvMaPF80xd9Hb+sbAAB4XTXIdXTdM53afGk/2RMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7kFAAD//z7jFwY=")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

20.903367179s ago: executing program 1 (id=747):
openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x0, 0x0)
pipe2(&(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80800)
splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7c1c, 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r3, &(0x7f00000003c0)={0xa, 0x4e24, 0x9, @mcast2, 0x80}, 0x1c)
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
syz_open_dev$MSR(&(0x7f0000000180), 0xfffffffffffffc00, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty, 0xac800000}}, 0x0, 0x0, 0x318, 0x1, 0x24}, 0x9c)

20.788947772s ago: executing program 0 (id=749):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000180)=0x10000000005)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001a400)=""/102384, 0x18ff0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@private0, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x9, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x7, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8)
sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x1c)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x20800001, 0x4)

20.480816592s ago: executing program 3 (id=750):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000))
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10)
listen(0xffffffffffffffff, 0xda90)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)

18.954306003s ago: executing program 2 (id=751):
r0 = io_uring_setup(0x937, &(0x7f00000002c0)={0x0, 0x32b6, 0x80, 0x0, 0x35d})
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2)
r5 = memfd_create(&(0x7f0000000140)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\x00'/47, 0x2)
ftruncate(r5, 0xffff)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
fcntl$addseals(r5, 0x409, 0x7)
r6 = ioctl$UDMABUF_CREATE(r4, 0x40187542, &(0x7f0000000000)={r5, 0x0, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r6, 0x40086200, &(0x7f00000001c0)=0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

18.653188593s ago: executing program 1 (id=752):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8000, 0x0, 0x9, 0x1, 0xfffffdffffffffff, 0xfa0f, 0xffffffff}, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0)
openat$sysfs(0xffffffffffffff9c, 0x0, 0xa0502, 0x100)
io_setup(0x1, &(0x7f00000016c0))
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c)
connect$inet6(r2, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
sendmmsg$inet6(r2, &(0x7f0000019680)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000019740)}], 0x1}}], 0x1, 0x48800)

18.252292506s ago: executing program 0 (id=753):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000280)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
r2 = socket$kcm(0x2a, 0x2, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890c, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
r5 = socket(0x400000000010, 0x3, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000200)=@newtfilter={0x30, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xffe0, 0xfff3}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20041090}, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

17.421713813s ago: executing program 2 (id=754):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020201"], 0x18)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000000000002}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, 0x0)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880)
sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000200)={0xa, 0x4e20, 0x4d7, @private2={0xfc, 0x2, '\x00', 0x1}, 0x3}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000400)="fc", 0x1}], 0x1}}], 0x1, 0x4c040)

16.758484565s ago: executing program 3 (id=756):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x40, 0x94)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
setxattr$incfs_metadata(0x0, 0x0, &(0x7f0000000800), 0x0, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, &(0x7f0000000000)=0x1, 0x4)
symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='./file1\x00')
symlink(&(0x7f0000000280)='./file1/file0\x00', &(0x7f00000002c0)='./file0\x00')
utimes(0x0, &(0x7f0000000100)={{}, {0x77359400}})
sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)

16.329655559s ago: executing program 2 (id=757):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00"/13], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200002000000007020000f8ffffffb703000008000000b704000000000000850000108200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8014}, 0x40000)
r1 = socket$kcm(0xa, 0x2, 0x0)
r2 = socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000340)=0x6)
ioctl$XFS_IOC_FSGROWFSRT(r2, 0x40105870, &(0x7f00000000c0)={0x9, 0x2})
setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e23, 0x3, 'rr\x00', 0x1, 0x80005, 0x70}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0xe20, 0x0, 0x8d, 0x2}}, 0x44)
sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0)

14.817155359s ago: executing program 3 (id=758):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@usrquota}, {@data_err_ignore}, {@nobarrier}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
openat(0xffffffffffffff9c, 0x0, 0xc042, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
write$cgroup_int(r2, &(0x7f00000000c0)=0x40000000000000, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGIFCONF(r4, 0x8912, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c)

14.080195954s ago: executing program 0 (id=759):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
connect$x25(r4, &(0x7f0000000a80), 0x12)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r5 = fsopen(&(0x7f0000000000)='cifs\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000040)='source', &(0x7f0000005fc0)='//\xf2/\x06\b/\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcf\xcb\x92\xf1\x83\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x92\xdby\xe9\xdc@.\xc1g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xcc\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xb5\xec\x99@\xd2\t\n\xb1o', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, 0x0, &(0x7f0000000400)='//\xf2/\x06\b\xa30\\\x00\x00\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\n\x8c<M\n\xc0`[\x82\xf6$\xa4\xbe\x1e\xd3\xe4\xd9L\x14\xed\xcfK\xcc\xeb,\x1a1\xa6\xf3e\xc2F\xc3\x00\xaa\xd5\xfc\x1bR\xa9\x8c\xb4&\x9f\xa2$\x06\x1a\xb0W#\xf4\xde6\x04c\xc0\xeec\xa0l\xd5d\xe5\xcd\xb2\xc10\x97w\x87\xe5\x06\x91W\rr\xf5\x97%\xe8pO\xeb]\xc2\x98C\xffK\xa0\xb3\\\x99{\xcdR\x92\x94\xf7\x1d\x01Q\x1a\xbd\x15b\x15h\xe2!\x00\xb9z)\x19\x00\xee\xd2)[p`\xb3\x03\xa7p\'X\xec\xcdoX\x05\xff\xff/\xd15)\xeatn\xa3\x88\x13i\xb6\x7ft\x95\xd7\x01o\xb2\xad\xb8\x89i@\f\xffS&\x8a\xc9\xfez\xc2\x90\xe7F\xa6\xdb\r\x03j,N\xe1lw\n\xad\xe8\xf0\xbd\xa1\x98\xce\xf9\x1eR\x9cc\xc5ke_\xa7\x11\"\x04\xd8.\xa0\x15\x83\xf1\x94\x00\x00\x00\x00\x00\x00\x00g\xc6\fc\xa26\xd8\xdf\xef\xf7\x9c\x1a\xef\x8am\x8b7\xcf\xc5\xa6\xf4\f\xabj%Y\xa9\xdd\x0e9e\xba\xec\x99@\xd2\t\n\xb1o', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r6 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe)
keyctl$update(0x2, r6, &(0x7f0000000140)="c4", 0x1)
write$UHID_SET_REPORT_REPLY(r0, &(0x7f00000007c0)=ANY=[], 0xffe0)

13.061254258s ago: executing program 0 (id=761):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setparam(r0, 0x0)
setuid(0x0)
bind$netlink(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x42, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
madvise(&(0x7f000042f000/0x800000)=nil, 0x80fd00, 0x15)

10.831301852s ago: executing program 4 (id=763):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
accept4(r0, &(0x7f00000003c0), 0x0, 0x800)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000020c0), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
connect$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x1, 0x0, 0x0, 0x0, 0x0, @remote}, 0x10)
r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000180)={'pcl812\x00', [0x8001, 0x4, 0x1, 0x0, 0x0, 0xcc7, 0x8, 0x7, 0x1, 0xff, 0x2, 0x1, 0x8, 0x2, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x9, 0xf27, 0x6, 0x800b, 0x8, 0x5, 0x6, 0x8, 0x10000, 0xfffffff4]})
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
mkdir(0x0, 0x0)
getsockopt$rose(r0, 0x104, 0x3, 0x0, &(0x7f0000000140))
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r2, 0xc0709411, 0x0)
pwritev(0xffffffffffffffff, 0x0, 0x0, 0x80040000, 0x5)

9.718712499s ago: executing program 0 (id=764):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
r4 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r4, 0x0, 0x0, 0x0)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r5 = syz_pidfd_open(r3, 0x0)
setns(r5, 0x24020000)
r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_pidfd_open(r6, 0x0)
mount(0x0, 0x0, 0x0, 0x2186a, 0x0)

9.646721131s ago: executing program 4 (id=765):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
ioctl$TIOCSIG(0xffffffffffffffff, 0x40045436, 0x14)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(&(0x7f00000004c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000140)='smb3\x00', 0x0, 0x0)
r4 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x271c, 0x0, &(0x7f0000000040))
munmap(&(0x7f0000006000/0x4000)=nil, 0x4000)
r5 = syz_create_resource$binfmt(0x0)
openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), r0)
syz_open_dev$ptys(0xc, 0x3, 0x1)

8.669770493s ago: executing program 4 (id=766):
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x80)
r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r5, &(0x7f0000001c00), 0x12)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[], 0x48)
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="030000000400000004000000b5"], 0x50)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x4, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r7, 0x0, 0xf, 0x0, &(0x7f0000000180)="c1dfb080cd21d308098ee68886dd96", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7.580985759s ago: executing program 4 (id=767):
r0 = socket(0x10, 0x4, 0x800008)
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
sendmsg$AUDIT_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, 0x3e9, 0x1, 0x70bd23, 0x25dfdbf9, {0xb, 0x1, 0x1, 0x0, 0xd, 0x80, 0x2, 0x7ffffffc, 0x0, 0x7, 0x9}}, 0x3c}}, 0x20040000)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
madvise(&(0x7f00002e5000/0x400000)=nil, 0x400000, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800002, 0xe)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r5 = dup(r4)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000240)={0x80, 0x6, 0x103, 0x0, 0xe0, 0x0, 0x0})

7.489100852s ago: executing program 1 (id=768):
socket$nl_route(0x10, 0x3, 0x0)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
r4 = mq_open(&(0x7f0000000480)='!sel\x00\x00\x00\x10\x00\x00\x00\x00\xd7\\P\xc1\xde.O\xcb]0y\x00\x00\x00\x00\x00\x00\x00\x00', 0x6e93ebbbcc0884f2, 0x196, &(0x7f0000000440)={0x2000000000002000, 0x1, 0x56, 0x3})
mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0)
mq_timedreceive(r4, &(0x7f0000000880)=""/202, 0xca, 0x200000200009, 0x0)

5.876984585s ago: executing program 1 (id=769):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
socket$nl_generic(0x10, 0x3, 0x10)
pipe(&(0x7f0000000040))
socket(0x10, 0x3, 0x0)
pipe(&(0x7f0000000100))
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet6(0xa, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$inet_udp(0x2, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000000c0), 0x111, 0x6}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000940), 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xa, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50)
r2 = socket$unix(0x1, 0x2, 0x0)
ppoll(&(0x7f0000000300)=[{r2, 0x4236}], 0x1, 0x0, 0x0, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20)
writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2)

5.641594193s ago: executing program 3 (id=770):
r0 = io_uring_setup(0x30aa, &(0x7f00000007c0)={0x0, 0x75f, 0x80, 0x1, 0x14c})
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x88a01, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r2 = add_key$user(&(0x7f00000000c0), &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000980)='*', 0x1, 0xfffffffffffffffc)
keyctl$read(0xb, r2, &(0x7f0000000340)=""/115, 0xffffffffffffff83)
r3 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x40102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2f)
ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000180)={r3, 0x1})
mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0)
syz_io_uring_setup(0x641a, &(0x7f0000000300)={0x0, 0x235d, 0x10100, 0x0, 0x400002d8}, 0x0, &(0x7f0000000100), &(0x7f0000000000))
r4 = socket(0xa, 0x3, 0x7)
sendmmsg(r4, &(0x7f0000001e40)=[{{&(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x6, @mcast2}, 0x80, 0x0}}, {{&(0x7f0000000340)=@l2tp6={0xa, 0x0, 0x100, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff, 0xffffffff}, 0x80, 0x0, 0x0, &(0x7f0000000240)=[{0x10, 0x29, 0x2}], 0x10}}], 0x2, 0x9090)
semctl$SETALL(0x0, 0x0, 0x11, 0x0)
semctl$GETPID(0x0, 0x2, 0xb, 0x0)
semctl$SEM_STAT_ANY(0x0, 0x1, 0x14, &(0x7f0000002040)=""/4080)
syz_usb_connect$uac3(0x5, 0x80, &(0x7f0000000080)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x582, 0x582, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0xc, 0x60, 0x7f, {0x8, 0xb, 0x0, 0x1}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x1, 0x9, {0xa, 0x25, 0x25, 0x8, 0x3, 0x9d72}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0xc, 0x3, {0xa, 0x25, 0x25, 0xffffffff, 0x2, 0x1}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0})
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000080)=0x74000000)

5.638822843s ago: executing program 2 (id=771):
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0x6d93, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc}, 0x50)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000200000005"], 0x50)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@rand_addr, @rand_addr, <r2=>0x0}, &(0x7f0000000300)=0xc)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x2050}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r3, r1}, 0xc)
sendmsg$sock(r0, &(0x7f0000000080)={&(0x7f00000000c0)=@in6={0xa, 0x4e27, 0x85, @empty, 0x207}, 0x80, 0x0}, 0x2404d001)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe2$watch_queue(0x0, 0x80)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_rdma(0x10, 0x3, 0x14)
syz_mount_image$cramfs(&(0x7f00000001c0), &(0x7f0000000180)='./file1\x00', 0x10080, &(0x7f00000006c0)=ANY=[@ANYRES16=0x0], 0x1, 0x14c, &(0x7f00000004c0)="$eJzsz09LInEYwPHvOP5ZdnUV1gV3D7sLe2hIzHHEbhEaSUI2UHjpEIFOFGiKQnisoFuHXoCHSugkHqJjh7IulkLY6xA6BB2LcYQyOnX+fS7DfJ+HB36zU10FH8hYZoqFUtmoVIzcv0U9nVw6PTv/bnYX8GWwUSiVzeWctX8Rh3Xza4f+jpWvPLC2kTcmssW8+d+PgwIkvpndgYq1+9Vsfms3MmzKf2j9tJr2QYsO2287JLxWM+89H8EYYOP13iNQrQWbjZuFTjsVGj9ZkdlLBf/+kEb7H2NfS/6quwMyGeP6ePDMau0+3A7dhZuNXreTntfTejeqaZNRNaKqsZ5+20nFtg+wz7m3YPndPacTyMCuBDUJGoN5/1LyAK3DJ73gdfmBh00fSG8nMDrJrgYc9Wm/z4asICEIgiAIgiAIgiAIn/QSAAD//7KQaFQ=")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file2\x00', 0x0, &(0x7f0000000240)=ANY=[], 0x11, 0x1a0, &(0x7f0000000440)="$eJzskL9rU1EUxz/n3psfFapGxaGCLViIr1ST96oOTsEpQh64CgYNaWyLiZo+l5YWskhBohn8B3Sqowo6iSg4FwfBQZ9LN2mG4CAOEnnJVfBv6P0M73u+Xx7nnHuWo3aUAX4PNuqUGKE5yEcEA0zLOFNqrK+t/261NxYuWd8V0ok+s34qWlu/VWs2G6szF2fI/RcAP0bZvyh6wXFFXyghnwcb9ZrcCBmWaKnFkFyFuYfoKm3vEVNmkmPX0QzzXS4r2pKvwKHCvdbdQrS2fmalVVtqLDVuB8HCheK5YvF8ULi50mwUXyHeA1E8YRMvJBMy4W2SqnJ/xxxgXhBvWcU6WT1dpbejT5+a76O8PYYI7/J9Ml/Jjt+WvZYsX+ao8BQd9jIwoTCMBpWRK+ql+OaT+ZlSZDtan63faS5uXVXyK71dkr2s+Luk8j7BnM9CchqO8J6tmNmYcsx2zO43puVNMqVr72k6yfe5dSc4aavOqp+GD2LCx4c1BDmYHLVTIbOVpMNb+6cVvvwtHA6Hw+FwOBwOh8OxD/gTAAD///wqYMM=")

5.386270911s ago: executing program 4 (id=772):
syz_mount_image$fuse(0x0, &(0x7f0000000700)='./file2\x00', 0x102a, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r0 = syz_open_procfs$pagemap(0xffffffffffffffff, &(0x7f0000000040))
readahead(r0, 0x4, 0x1)
socket$inet6_sctp(0xa, 0x1, 0x84)
getdents64(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil)
shmat(r4, &(0x7f0000ffd000/0x2000)=nil, 0x4000)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)

45.238418ms ago: executing program 4 (id=773):
r0 = socket$tipc(0x1e, 0x5, 0x0)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7)
getpid()
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$igmp(0x2, 0x3, 0x2)
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
recvmmsg$unix(r4, &(0x7f0000002fc0)=[{{0x0, 0x300, 0x0}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=""/4070, 0xfed}, {&(0x7f0000002140)=""/130, 0x82}], 0x2}}], 0x110, 0x42, 0x0)
connect$tipc(r0, 0x0, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0), 0x4)

0s ago: executing program 2 (id=774):
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
poll(0x0, 0x0, 0x10)
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
r3 = open_tree(0xffffffffffffff9c, 0x0, 0x89901)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, &(0x7f0000001dc0)={0xf, 0x5, 0x0, {r3}}, 0x20)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
recvmsg(r4, 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="364000002600913e"], 0xfe33)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.157' (ED25519) to the list of known hosts.
[   58.519994][ T4171] cgroup: Unknown subsys name 'net'
[   58.650949][ T4171] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.256290][ T4171] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   62.231754][ T4196] chnl_net:caif_netlink_parms(): no params data found
[   62.291421][ T4187] chnl_net:caif_netlink_parms(): no params data found
[   62.311294][ T4184] chnl_net:caif_netlink_parms(): no params data found
[   62.373433][ T4188] chnl_net:caif_netlink_parms(): no params data found
[   62.440785][ T4196] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.448359][ T4196] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.457646][ T4196] device bridge_slave_0 entered promiscuous mode
[   62.466573][ T4191] chnl_net:caif_netlink_parms(): no params data found
[   62.498019][ T4196] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.505245][ T4196] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.513242][ T4196] device bridge_slave_1 entered promiscuous mode
[   62.541644][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.549056][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.557618][ T4187] device bridge_slave_0 entered promiscuous mode
[   62.590338][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.597591][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.606162][ T4187] device bridge_slave_1 entered promiscuous mode
[   62.649253][ T4196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.665271][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.672537][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.680863][ T4184] device bridge_slave_0 entered promiscuous mode
[   62.706465][ T4196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.718136][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.727640][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.735545][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.743438][ T4184] device bridge_slave_1 entered promiscuous mode
[   62.750644][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.757781][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.766256][ T4188] device bridge_slave_0 entered promiscuous mode
[   62.792424][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.801919][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.809332][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.817735][ T4188] device bridge_slave_1 entered promiscuous mode
[   62.880561][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.892858][ T4196] team0: Port device team_slave_0 added
[   62.899763][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.908253][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.916794][ T4191] device bridge_slave_0 entered promiscuous mode
[   62.926429][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   62.937965][ T4187] team0: Port device team_slave_0 added
[   62.945842][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   62.964259][ T4196] team0: Port device team_slave_1 added
[   62.970296][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.978415][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.987015][ T4191] device bridge_slave_1 entered promiscuous mode
[   62.995784][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.007041][ T4187] team0: Port device team_slave_1 added
[   63.054913][ T4188] team0: Port device team_slave_0 added
[   63.075260][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.082265][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.108725][ T4196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.128489][ T4188] team0: Port device team_slave_1 added
[   63.135095][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.142169][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.168255][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.182088][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.192168][ T4196] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.199656][ T4196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.226148][ T4196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.240192][ T4184] team0: Port device team_slave_0 added
[   63.253569][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.260942][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.287341][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.300812][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.323014][ T4184] team0: Port device team_slave_1 added
[   63.366866][ T4191] team0: Port device team_slave_0 added
[   63.373472][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.380944][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.407374][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.444148][ T4191] team0: Port device team_slave_1 added
[   63.457151][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.464289][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.491007][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.502828][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.510141][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.536510][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.552220][ T4196] device hsr_slave_0 entered promiscuous mode
[   63.559571][ T4196] device hsr_slave_1 entered promiscuous mode
[   63.583584][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.591025][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.617387][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.640185][ T4187] device hsr_slave_0 entered promiscuous mode
[   63.647502][ T4187] device hsr_slave_1 entered promiscuous mode
[   63.654604][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.662615][ T4187] Cannot create hsr debugfs directory
[   63.687901][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.695020][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.721551][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.750849][ T4188] device hsr_slave_0 entered promiscuous mode
[   63.757972][ T4188] device hsr_slave_1 entered promiscuous mode
[   63.765388][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.772977][ T4188] Cannot create hsr debugfs directory
[   63.780361][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.787626][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.814040][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.877268][ T4184] device hsr_slave_0 entered promiscuous mode
[   63.884616][ T4184] device hsr_slave_1 entered promiscuous mode
[   63.891499][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.899709][ T4184] Cannot create hsr debugfs directory
[   63.924619][   T23] Bluetooth: hci3: command 0x0409 tx timeout
[   63.924680][   T13] Bluetooth: hci4: command 0x0409 tx timeout
[   63.944495][   T13] Bluetooth: hci1: command 0x0409 tx timeout
[   63.950684][   T13] Bluetooth: hci0: command 0x0409 tx timeout
[   63.973090][ T4191] device hsr_slave_0 entered promiscuous mode
[   63.981555][ T4191] device hsr_slave_1 entered promiscuous mode
[   63.988397][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   63.996414][ T4191] Cannot create hsr debugfs directory
[   64.003915][   T13] Bluetooth: hci2: command 0x0409 tx timeout
[   64.287017][ T4187] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.302735][ T4187] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.319766][ T4187] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.338623][ T4187] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.380235][ T4196] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   64.400093][ T4196] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   64.426600][ T4196] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   64.446316][ T4196] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   64.466415][ T4184] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.483969][ T4184] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.499897][ T4184] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.528947][ T4184] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.612357][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.620280][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.631925][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.652899][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.675197][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.686577][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.697539][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   64.730097][ T4187] 8021q: adding VLAN 0 to HW filter on device team0
[   64.777437][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   64.788019][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   64.798915][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.806223][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.815847][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   64.827424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   64.836315][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.843422][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.852149][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   64.860620][ T4191] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.870995][ T4191] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.881351][ T4191] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.915229][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.925908][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   64.937798][ T4191] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.977653][ T4184] 8021q: adding VLAN 0 to HW filter on device team0
[   64.989520][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   64.997943][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.006051][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.015538][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.025453][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.034320][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.041420][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.049544][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.063317][ T4196] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.114046][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.126565][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.136330][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.147437][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.156637][ T1274] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.163873][ T1274] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.173248][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.182495][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.191926][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.201028][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.209742][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.218516][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.227623][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.249175][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.258399][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.268824][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.279363][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.290286][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.304547][ T4196] 8021q: adding VLAN 0 to HW filter on device team0
[   65.320426][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.330201][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.340233][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.349011][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.377370][ T4188] 8021q: adding VLAN 0 to HW filter on device team0
[   65.410588][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.421142][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.430238][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.437496][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.449704][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.459210][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.468434][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.478268][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.487344][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.497277][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.506015][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.516502][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.526364][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.533496][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.542197][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.552003][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.561788][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.595868][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.609227][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.619209][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.630437][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.639552][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   65.648845][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   65.658609][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   65.668283][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   65.677495][  T154] bridge0: port 1(bridge_slave_0) entered blocking state
[   65.684963][  T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[   65.700325][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.721744][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0
[   65.732831][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   65.748187][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   65.759439][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   65.769706][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   65.778753][  T154] bridge0: port 2(bridge_slave_1) entered blocking state
[   65.785906][  T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[   65.796746][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   65.805504][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   65.814911][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   65.830165][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   65.842001][ T4196] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   65.862366][ T4191] 8021q: adding VLAN 0 to HW filter on device team0
[   65.874766][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   65.884777][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   65.892742][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   65.901119][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   65.940561][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   65.973769][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   65.994364][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   66.004214][ T4226] Bluetooth: hci3: command 0x041b tx timeout
[   66.004543][    T7] Bluetooth: hci0: command 0x041b tx timeout
[   66.022512][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   66.032519][    T7] Bluetooth: hci1: command 0x041b tx timeout
[   66.039255][    T7] Bluetooth: hci4: command 0x041b tx timeout
[   66.041100][ T1287] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.052489][ T1287] bridge0: port 1(bridge_slave_0) entered forwarding state
[   66.066549][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.079092][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.087739][    T7] Bluetooth: hci2: command 0x041b tx timeout
[   66.096449][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   66.105675][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   66.114652][ T1287] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.121751][ T1287] bridge0: port 2(bridge_slave_1) entered forwarding state
[   66.129667][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.138644][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.149069][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.157687][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   66.171722][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.183497][ T4188] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.200563][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.214359][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.235151][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.242741][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.268083][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.287557][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   66.306553][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   66.352041][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   66.369275][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   66.382771][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   66.417922][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.426238][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.434487][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   66.443529][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   66.454658][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   66.463302][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   66.479549][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.518611][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   66.531873][ T4191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   66.544898][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.556589][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.570010][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.578041][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.586149][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   66.595258][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   66.617167][ T4196] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.660082][ T4187] device veth0_vlan entered promiscuous mode
[   66.691324][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.704394][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.713339][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.725490][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.735714][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.755312][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.775219][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   66.782830][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   66.806735][ T4187] device veth1_vlan entered promiscuous mode
[   66.844316][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0
[   66.869470][ T4184] device veth0_vlan entered promiscuous mode
[   66.908100][ T4187] device veth0_macvtap entered promiscuous mode
[   66.928748][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.947413][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.957456][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.970632][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.980563][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.989582][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.010842][ T4187] device veth1_macvtap entered promiscuous mode
[   67.028037][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.039495][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.051623][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.063550][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.077998][ T4184] device veth1_vlan entered promiscuous mode
[   67.088813][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.097864][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.111575][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.158988][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.176282][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.187746][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.196616][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.205716][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.215909][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.228014][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.236456][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.258190][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.267668][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.280094][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   67.290314][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   67.305141][ T4188] device veth0_vlan entered promiscuous mode
[   67.313163][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.325904][ T4184] device veth0_macvtap entered promiscuous mode
[   67.338642][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.347902][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.357259][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.367544][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.377118][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.393141][ T4188] device veth1_vlan entered promiscuous mode
[   67.405322][ T4187] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.416144][ T4187] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.425473][ T4187] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.434353][ T4187] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.454150][ T4184] device veth1_macvtap entered promiscuous mode
[   67.470558][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0
[   67.502284][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.511227][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.529934][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   67.547199][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.559390][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0
[   67.574223][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.585205][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   67.593212][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   67.602310][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   67.620592][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   67.630018][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   67.645299][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   67.656198][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   67.667755][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1
[   67.677294][ T4196] device veth0_vlan entered promiscuous mode
[   67.689345][ T4188] device veth0_macvtap entered promiscuous mode
[   67.707127][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   67.716731][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   67.725983][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   67.758757][ T4188] device veth1_macvtap entered promiscuous mode
[   67.791616][ T4184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   67.801223][ T4184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   67.810814][ T4184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   67.820082][ T4184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   67.834921][ T4196] device veth1_vlan entered promiscuous mode
[   67.844275][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   67.855171][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   67.863398][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   67.872609][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   67.921724][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   67.941011][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   67.975110][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   67.985912][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   67.994389][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   68.023171][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.035071][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.046977][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.058201][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.070845][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.084159][ T4259] Bluetooth: hci4: command 0x040f tx timeout
[   68.090667][ T4259] Bluetooth: hci1: command 0x040f tx timeout
[   68.098602][ T4259] Bluetooth: hci0: command 0x040f tx timeout
[   68.105090][ T4259] Bluetooth: hci3: command 0x040f tx timeout
[   68.111771][ T4191] device veth0_vlan entered promiscuous mode
[   68.123123][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.134865][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.144706][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.155711][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.165206][ T4259] Bluetooth: hci2: command 0x040f tx timeout
[   68.174659][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.186383][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.196908][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.207416][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.219300][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.231858][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.249111][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.249475][ T4196] device veth0_macvtap entered promiscuous mode
[   68.271000][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.286782][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.296588][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.306036][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.317040][ T4191] device veth1_vlan entered promiscuous mode
[   68.343102][ T4196] device veth1_macvtap entered promiscuous mode
[   68.354188][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   68.362974][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   68.372305][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.382569][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.394580][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.403354][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.413581][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.425692][  T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.433996][  T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.478644][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.493151][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.494286][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   68.513307][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.527940][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.541039][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.561052][ T4191] device veth0_macvtap entered promiscuous mode
[   68.573027][ T4191] device veth1_macvtap entered promiscuous mode
[   68.591858][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   68.605916][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   68.622933][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   68.636045][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   68.656579][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.667302][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.678223][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.688769][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.698642][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.709932][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.722138][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.751510][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   68.763560][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   68.779316][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   68.796279][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.830779][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.844800][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.855843][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.861473][ T4261] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   68.866338][ T4196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   68.893887][ T4196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.905691][ T4196] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.934472][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   68.943234][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   68.962975][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   68.981873][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   68.993115][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.013858][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.029967][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.042246][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.068177][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   69.068517][ T4265] process 'syz.3.4' launched '/dev/fd/3' with NULL argv: empty string added
[   69.089837][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.116488][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0
[   69.148044][ T4196] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.160762][ T4196] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.197434][ T4196] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.207275][ T4196] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.245804][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   69.266230][ T4250] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   69.278628][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.316063][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.338088][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.351924][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.364370][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.378394][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.389188][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   69.400482][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   69.414731][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1
[   69.457212][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   69.479603][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   69.573471][ T4191] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   69.605727][ T4191] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   69.619652][ T4191] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   69.628953][ T4191] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   69.687432][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.705648][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.723862][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.854289][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.862155][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.888006][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   69.917545][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.947700][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.961094][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   69.990821][ T1274] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.019935][ T4240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.035557][ T1274] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.047344][ T4240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.130251][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.162980][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   70.164560][ T4224] Bluetooth: hci3: command 0x0419 tx timeout
[   70.186341][ T1287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.206382][ T1287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.220812][ T4224] Bluetooth: hci0: command 0x0419 tx timeout
[   70.231698][ T1274] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   70.250409][ T4224] Bluetooth: hci1: command 0x0419 tx timeout
[   70.256767][ T4227] Bluetooth: hci2: command 0x0419 tx timeout
[   70.279469][ T4224] Bluetooth: hci4: command 0x0419 tx timeout
[   70.494218][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #208!!!
[   70.572988][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!!
[   70.582261][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!!
[   70.591271][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!!
[   70.600229][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #12!!!
[   70.615830][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!!
[   70.625110][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #212!!!
[   70.634256][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!!
[   70.643467][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!!
[   70.655295][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10!!!
[   71.449935][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[   71.456707][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[   71.596056][ T4305] loop5: detected capacity change from 0 to 7
[   71.613202][ T4307] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12'.
[   71.632599][ T4305] Dev loop5: unable to read RDB block 7
[   71.652910][ T4305]  loop5: AHDI p1 p2 p3
[   71.681926][ T4305] loop5: partition table partially beyond EOD, truncated
[   71.718121][ T4305] loop5: p1 start 1818582900 is beyond EOD, truncated
[   71.732530][ T4305] loop5: p3 start 335544320 is beyond EOD, truncated
[   72.585280][ T4326] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[   73.119242][ T4337] device veth0 entered promiscuous mode
[   73.230488][ T4337] device veth0 left promiscuous mode
[   73.459995][ T4348] Zero length message leads to an empty skb
[   73.613054][ T4327] loop3: detected capacity change from 0 to 32768
[   73.822894][ T1325] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.861460][ T4327] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.17 (4327)
[   75.017584][ T4327] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   75.028415][ T4372] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   75.041350][ T4327] BTRFS info (device loop3): using free space tree
[   75.116934][ T4327] BTRFS info (device loop3): has skinny extents
[   75.354285][ T1325] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[   75.365485][ T1325] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.373530][ T1325] usb 2-1: Product: syz
[   75.377857][ T1325] usb 2-1: Manufacturer: syz
[   75.383103][ T1325] usb 2-1: SerialNumber: syz
[   76.356920][ T4327] BTRFS error (device loop3): open_ctree failed: -12
[   76.623175][ T4413] netlink: 24 bytes leftover after parsing attributes in process `syz.4.40'.
[   77.421392][ T1325] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[   77.570500][ T1325] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32
[   77.584485][ T4225] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   77.618061][ T1325] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[   77.665880][ T1325] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[   77.678286][ T4438] netlink: 4 bytes leftover after parsing attributes in process `syz.4.46'.
[   77.699934][ T1325] lan78xx: probe of 2-1:1.0 failed with error -32
[   78.063823][ T4225] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   78.793445][ T4225] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   78.850536][   T21] usb 2-1: USB disconnect, device number 2
[   78.894023][ T4225] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   78.919791][ T4225] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   78.927945][ T4225] usb 1-1: SerialNumber: syz
[   78.982454][ T4451] loop3: detected capacity change from 0 to 512
[   79.222740][ T4225] usb 1-1: 0:2 : does not exist
[   79.232981][ T4456] loop1: detected capacity change from 0 to 2048
[   79.464727][ T4225] usb 1-1: USB disconnect, device number 2
[   79.536749][ T4456]  loop1: p1 < >
[   79.567538][ T4447] loop4: detected capacity change from 0 to 32768
[   79.585663][ T4447] =======================================================
[   79.585663][ T4447] WARNING: The mand mount option has been deprecated and
[   79.585663][ T4447]          and is ignored by this kernel. Remove the mand
[   79.585663][ T4447]          option from the mount to silence this warning.
[   79.585663][ T4447] =======================================================
[   79.727825][ T4447] JBD2: Ignoring recovery information on journal
[   79.754064][ T4258] udevd[4258]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.849675][ T4447] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[   80.223774][ T4447] loop_set_status: loop4 () has still dirty pages (nrpages=5)
[   80.491542][ T4196] ocfs2: Unmounting device (7,4) on (node local)
[   80.803034][ T4470] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.811756][ T4470] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.441513][ T4492] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   83.517102][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   83.567962][ T4508] loop4: detected capacity change from 0 to 2048
[   83.662361][ T4470] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.009652][ T4508] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   86.350826][ T4470] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.360181][ T4470] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.370304][ T4470] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.379554][ T4470] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   86.520605][ T4472] netlink: 'syz.1.58': attribute type 1 has an invalid length.
[   86.551390][ T4476] 8021q: VLANs not supported on wg2
[   86.558808][ T4470] syz.0.57 (4470) used greatest stack depth: 19472 bytes left
[   86.643067][ T4542] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   86.660709][ T4542] overlayfs: failed to set xattr on upper
[   86.667829][ T4542] overlayfs: ...falling back to index=off,metacopy=off.
[   86.767903][ T4544] tipc: Failed to remove unknown binding: 66,0,0/0:2289261093/2289261094
[   86.789393][ T4544] tipc: Failed to remove unknown binding: 66,0,0/0:2289261093/2289261094
[   86.806044][ T1336] cfg80211: failed to load regulatory.db
[   88.590794][ T4563] sock: sock_set_timeout: `syz.2.84' (pid 4563) tries to set negative timeout
[   88.819336][ T4574] loop4: detected capacity change from 0 to 256
[   89.874309][ T4574] FAT-fs (loop4): Directory bread(block 64) failed
[   89.914174][ T4574] FAT-fs (loop4): Directory bread(block 65) failed
[   89.941539][ T4574] FAT-fs (loop4): Directory bread(block 66) failed
[   89.963046][ T4574] FAT-fs (loop4): Directory bread(block 67) failed
[   89.990317][ T4574] FAT-fs (loop4): Directory bread(block 68) failed
[   90.033449][ T4574] FAT-fs (loop4): Directory bread(block 69) failed
[   90.051436][ T4574] FAT-fs (loop4): Directory bread(block 70) failed
[   90.066141][ T4574] FAT-fs (loop4): Directory bread(block 71) failed
[   90.083417][ T4574] FAT-fs (loop4): Directory bread(block 72) failed
[   90.125403][ T4574] FAT-fs (loop4): Directory bread(block 73) failed
[   90.382194][ T4596] netlink: 12 bytes leftover after parsing attributes in process `syz.0.94'.
[   90.633444][ T4598] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   90.860480][ T4604] ufs: You didn't specify the type of your ufs filesystem
[   90.860480][ T4604] 
[   90.860480][ T4604] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[   90.860480][ T4604] 
[   90.860480][ T4604] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[   90.892625][ T4604] ufs: ufstype=old is supported read-only
[   90.902786][ T4604] blk_update_request: I/O error, dev loop9, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   90.972641][ T4224] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   91.731257][ T4588] ODEBUG: Out of memory. ODEBUG disabled
[   91.781703][ T4224] usb 2-1: config 0 has no interfaces?
[   91.815152][ T4598] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   91.990980][ T4598] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.030884][ T4224] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[   92.042758][   T26] audit: type=1326 audit(1774966216.248:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44802be819 code=0x7ffc0000
[   92.072312][ T4224] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[   92.102493][ T4224] usb 2-1: Product: syz
[   92.106768][ T4224] usb 2-1: Manufacturer: syz
[   92.111394][ T4224] usb 2-1: SerialNumber: syz
[   92.116107][   T26] audit: type=1326 audit(1774966216.278:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44802be819 code=0x7ffc0000
[   92.149543][ T4224] usb 2-1: config 0 descriptor??
[   92.198277][   T26] audit: type=1326 audit(1774966216.278:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44802be819 code=0x7ffc0000
[   92.199039][ T4598] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.235849][   T26] audit: type=1326 audit(1774966216.278:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f44802be819 code=0x7ffc0000
[   92.269037][   T26] audit: type=1326 audit(1774966216.348:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44802be819 code=0x7ffc0000
[   92.305399][ T4613] netlink: 'syz.4.99': attribute type 10 has an invalid length.
[   92.349602][   T26] audit: type=1326 audit(1774966216.348:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f44802be582 code=0x7ffc0000
[   92.394879][ T4613] team0: Port device wlan1 added
[   92.417014][   T26] audit: type=1326 audit(1774966216.348:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f44802be617 code=0x7ffc0000
[   92.517500][   T26] audit: type=1326 audit(1774966216.348:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f448027b511 code=0x7ffc0000
[   92.601707][   T26] audit: type=1326 audit(1774966216.348:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f44802bf609 code=0x7ffc0000
[   92.643340][ T4598] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   92.672812][   T26] audit: type=1326 audit(1774966216.348:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4608 comm="syz.0.98" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f448027b57b code=0x7ffc0000
[   92.703256][ T4598] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   92.741621][ T4598] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   92.770883][ T4598] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   92.928746][ T4622] loop0: detected capacity change from 0 to 256
[   93.037653][ T4225] usb 2-1: USB disconnect, device number 3
[   94.122124][ T4635] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   94.781987][ T4630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   94.798297][ T4635] FAT-fs (loop0): Filesystem has been set read-only
[   94.834648][ T4635] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   95.292694][ T4633] loop4: detected capacity change from 0 to 32768
[   95.529093][ T4633] XFS (loop4): Mounting V5 Filesystem
[   96.727295][ T4633] XFS (loop4): Ending clean mount
[   96.773838][ T4673] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[   96.797972][ T4633] XFS (loop4): Quotacheck needed: Please wait.
[   96.827246][ T4675] loop0: detected capacity change from 0 to 2048
[   96.889119][ T4633] XFS (loop4): Quotacheck: Done.
[   96.938946][ T4675] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.825639][ T4196] XFS (loop4): Unmounting Filesystem
[   98.311171][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.318660][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.583193][ T4689] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[   99.723319][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  100.655885][ T4677] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.140697][ T4730] loop0: detected capacity change from 0 to 256
[  102.895280][ T4732] loop0: detected capacity change from 0 to 32768
[  105.419342][ T4677] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.434264][ T4677] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.443195][ T4677] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  105.457281][ T4677] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  106.188777][ T4226] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  106.337959][ T4768] loop3: detected capacity change from 0 to 16
[  106.387378][ T4768] erofs: (device loop3): mounted with root inode @ nid 36.
[  106.431447][ T4768] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  106.579760][ T4226] usb 2-1: config 0 has an invalid interface number: 11 but max is 0
[  106.588578][ T4226] usb 2-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  106.606672][ T4226] usb 2-1: config 0 has no interface number 0
[  106.613141][ T4226] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1023, setting to 64
[  106.631031][ T4226] usb 2-1: config 0 interface 11 altsetting 253 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  106.651089][ T4226] usb 2-1: config 0 interface 11 has no altsetting 0
[  106.698304][ T4226] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  106.723678][ T4226] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.773290][ T4226] usb 2-1: config 0 descriptor??
[  106.814094][ T4758] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  106.851576][ T4226] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected
[  106.879611][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 87
[  107.106984][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81
[  107.125257][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82
[  107.148637][ T4785] vxcan1 speed is unknown, defaulting to 1000
[  107.446833][ T4786] loop2: detected capacity change from 0 to 256
[  107.546391][ T4785] vxcan1 speed is unknown, defaulting to 1000
[  107.568472][ T4785] vxcan1 speed is unknown, defaulting to 1000
[  108.191178][ T4785] infiniband syz2: set active
[  108.196453][ T4785] infiniband syz2: added vxcan1
[  108.210071][ T4785] infiniband syz2: Couldn't open port 1
[  108.235314][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1
[  108.253817][ T4785] RDS/IB: syz2: added
[  108.258598][ T4785] smc: adding ib device syz2 with port count 1
[  108.265091][ T4785] smc:    ib device syz2 port 1 has pnetid 
[  108.277713][ T4785] vxcan1 speed is unknown, defaulting to 1000
[  108.279104][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2
[  108.291846][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85
[  108.326154][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5
[  108.355027][ T1106] vxcan1 speed is unknown, defaulting to 1000
[  108.388824][ T4226] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  108.405124][ T4785] vxcan1 speed is unknown, defaulting to 1000
[  108.509793][ T4785] vxcan1 speed is unknown, defaulting to 1000
[  108.613780][ T4785] vxcan1 speed is unknown, defaulting to 1000
[  108.718067][ T4785] vxcan1 speed is unknown, defaulting to 1000
[  109.044564][ T4794] loop4: detected capacity change from 0 to 512
[  109.461386][ T4794] EXT4-fs error (device loop4): ext4_orphan_get:1400: inode #15: comm syz.4.149: inode has both inline data and extents flags
[  109.486473][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83
[  109.494768][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84
[  109.502722][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3
[  109.513941][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4
[  109.522224][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86
[  109.530248][ T4226] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6
[  109.545017][ T4225] vxcan1 speed is unknown, defaulting to 1000
[  109.554142][ T4226] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  109.589754][ T4794] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.149: couldn't read orphan inode 15 (err -117)
[  109.604788][ T4794] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  109.763916][ T1336] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  110.025813][ T4225] usb 2-1: USB disconnect, device number 4
[  110.054065][ T4225] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  110.096605][ T4225] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  110.115595][ T4225] keyspan 2-1:0.11: device disconnected
[  110.123824][ T1336] usb 3-1: config 0 has too many interfaces: 229, using maximum allowed: 32
[  110.132821][ T1336] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 229
[  110.233827][ T1336] usb 3-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[  110.243889][ T1336] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=31
[  110.252545][ T1336] usb 3-1: SerialNumber: syz
[  110.260049][ T1336] usb 3-1: config 0 descriptor??
[  110.266677][ T4804] tipc: Failed to remove unknown binding: 66,0,0/0:2745778324/2745778326
[  110.279671][ T4804] tipc: Failed to remove unknown binding: 66,0,0/0:2745778324/2745778325
[  110.290852][ T4804] tipc: Failed to remove unknown binding: 66,0,0/0:2745778324/2745778326
[  110.305063][ T4804] tipc: Failed to remove unknown binding: 66,0,0/0:2745778324/2745778325
[  110.356783][ T4806] netlink: 52 bytes leftover after parsing attributes in process `syz.0.154'.
[  110.373027][ T4806] netlink: 76 bytes leftover after parsing attributes in process `syz.0.154'.
[  110.384313][ T4806] netlink: 52 bytes leftover after parsing attributes in process `syz.0.154'.
[  110.473774][ T4259] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  110.513495][ T4797] netlink: 44 bytes leftover after parsing attributes in process `syz.2.150'.
[  110.530302][ T4225] usb 3-1: USB disconnect, device number 2
[  110.773370][ T4816] 
[  111.003882][ T4259] usb 5-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64
[  111.027003][ T4259] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.090585][ T4259] usb 5-1: Product: syz
[  111.105356][ T4259] usb 5-1: Manufacturer: syz
[  111.118645][ T4259] usb 5-1: SerialNumber: syz
[  111.278230][ T4259] usb 5-1: config 0 descriptor??
[  111.451944][ T4259] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state.
[  112.269722][ T4259] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  112.294123][ T4259] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0))
[  112.304325][ T4259] usb 5-1: media controller created
[  112.383756][ T4259] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  114.077462][ T4837] sched: RT throttling activated
[  114.851607][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz.3.168'.
[  114.867676][ T4259] DVB: Unable to find symbol mt352_attach()
[  114.937059][ T4259] DVB: Unable to find symbol nxt6000_attach()
[  114.943298][ T4259] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)'
[  114.977738][ T4855] bridge1: port 1(veth3) entered blocking state
[  114.986417][ T4259] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5
[  115.011463][ T4855] bridge1: port 1(veth3) entered disabled state
[  115.030676][ T4259] dvb-usb: schedule remote query interval to 1000 msecs.
[  115.044010][ T4855] device veth3 entered promiscuous mode
[  115.050873][ T4259] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected.
[  115.088291][ T4259] dvb-usb: bulk message failed: -22 (7/0)
[  115.096633][ T4259] dvb-usb: bulk message failed: -22 (7/0)
[  115.102508][ T4853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.169'.
[  115.143800][ T4259] usb 5-1: USB disconnect, device number 2
[  115.223173][ T4259] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected.
[  115.280038][ T4850] bridge1: port 2(veth0_to_bond) entered blocking state
[  115.290429][ T4850] bridge1: port 2(veth0_to_bond) entered disabled state
[  115.304656][ T4850] device veth0_to_bond entered promiscuous mode
[  115.468470][   T26] kauditd_printk_skb: 63 callbacks suppressed
[  115.468486][   T26] audit: type=1326 audit(1774966239.678:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.520190][ T4866] loop2: detected capacity change from 0 to 7
[  115.557976][ T4866]  loop2:
[  115.564658][ T4866] loop2: partition table partially beyond EOD, truncated
[  115.587068][   T26] audit: type=1326 audit(1774966239.678:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.638223][   T26] audit: type=1326 audit(1774966239.708:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.667334][   T26] audit: type=1326 audit(1774966239.708:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.794155][   T26] audit: type=1326 audit(1774966239.708:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.822888][   T26] audit: type=1326 audit(1774966239.708:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.855230][   T26] audit: type=1326 audit(1774966239.708:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.877963][   T26] audit: type=1326 audit(1774966239.708:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.901957][   T26] audit: type=1326 audit(1774966239.708:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  115.934994][ T4874] loop0: detected capacity change from 0 to 128
[  115.958609][   T26] audit: type=1326 audit(1774966239.708:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4865 comm="syz.3.172" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f23725da819 code=0x7ffc0000
[  116.164018][ T4225] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  116.322510][ T4881] loop4: detected capacity change from 0 to 64
[  116.445720][ T4225] usb 4-1: Using ep0 maxpacket: 32
[  116.583910][ T4225] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[  116.601601][ T4225] usb 4-1: config 4 has no interface number 0
[  116.620404][ T4225] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.670604][ T4225] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.738105][ T4225] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  116.758157][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.597549][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  117.626303][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  117.634388][ T4875] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  117.643941][ T4875] device bridge_slave_0 left promiscuous mode
[  117.651734][ T4875] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.736852][ T4225] hub 4-1:4.128: USB hub found
[  117.799024][ T4875] device bridge_slave_1 left promiscuous mode
[  117.849852][ T4875] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.919739][ T4875] device veth0_to_bond left promiscuous mode
[  117.950942][ T4875] bridge1: port 2(veth0_to_bond) entered disabled state
[  118.016546][ T4875] bond0: (slave bond_slave_0): Releasing backup interface
[  118.103448][ T4875] bond0: (slave bond_slave_1): Releasing backup interface
[  118.312203][ T4875] team0: Port device team_slave_0 removed
[  118.351229][ T4875] team0: Port device team_slave_1 removed
[  118.367126][ T4875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  118.375169][ T4875] batman_adv: batadv0: Removing interface: batadv_slave_0
[  118.387492][ T4875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  118.397342][ T4875] batman_adv: batadv0: Removing interface: batadv_slave_1
[  118.435841][ T4875] device veth3 left promiscuous mode
[  118.441491][ T4875] bridge1: port 1(veth3) entered disabled state
[  118.546288][ T4889] team0 (unregistering): Port device team_slave_0 removed
[  118.573805][ T4225] hub 4-1:4.128: config failed, can't read hub descriptor (err -22)
[  118.598868][ T4889] team0 (unregistering): Port device team_slave_1 removed
[  118.667982][ T4889] team0 (unregistering): Port device wlan1 removed
[  118.696045][ T4225] usb 4-1: USB disconnect, device number 2
[  118.972086][ T4907] device syzkaller0 entered promiscuous mode
[  119.106902][ T4909] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  119.494634][ T4916] loop1: detected capacity change from 0 to 32768
[  119.545208][ T4916] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.188 (4916)
[  119.567577][ T4916] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  119.576539][ T4916] BTRFS info (device loop1): enabling auto defrag
[  119.583040][ T4916] BTRFS info (device loop1): use no compression
[  119.590077][ T4916] BTRFS info (device loop1): max_inline at 4096
[  119.596449][ T4916] BTRFS info (device loop1): using free space tree
[  119.603238][ T4916] BTRFS info (device loop1): has skinny extents
[  119.886907][ T4916] BTRFS info (device loop1): enabling ssd optimizations
[  120.128938][ T4225] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  120.551397][ T4959] device syzkaller0 entered promiscuous mode
[  120.594662][ T4225] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  121.220021][ T4225] usb 5-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  121.229936][ T4225] usb 5-1: config 0 interface 0 has no altsetting 0
[  121.236634][ T4225] usb 5-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00
[  121.245875][ T4225] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.315298][ T4225] usb 5-1: config 0 descriptor??
[  121.681225][ T4966] netlink: 20 bytes leftover after parsing attributes in process `syz.0.207'.
[  121.717279][ T4966] IPv6: NLM_F_CREATE should be specified when creating new route
[  121.818035][ T4225] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0
[  121.845960][ T4225] hid-steam 0003:28DE:1102.0001: unknown main item tag 0x0
[  121.860367][ T4972] loop0: detected capacity change from 0 to 512
[  121.872810][ T4225] hid-steam 0003:28DE:1102.0001: : USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0
[  121.958644][ T4225] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  121.978090][ T4972] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.198: inode has both inline data and extents flags
[  121.997983][ T4225] hid-steam 0003:28DE:1102.0002: unknown main item tag 0x0
[  122.007893][ T4972] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.198: couldn't read orphan inode 15 (err -117)
[  122.040615][ T4972] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobarrier,,errors=continue. Quota mode: writeback.
[  122.059755][ T4225] hid-steam 0003:28DE:1102.0002: hidraw0: USB HID v0.01 Device [HID 28de:1102] on usb-dummy_hcd.4-1/input0
[  122.184204][ T4225] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' connected
[  122.211191][ T4225] input: Steam Controller as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:28DE:1102.0001/input/input6
[  122.320400][ T4225] usb 5-1: USB disconnect, device number 3
[  122.492981][ T4975] fido_id[4975]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory
[  122.846291][ T4225] hid-steam 0003:28DE:1102.0001: Steam Controller 'XXXXXXXXXX' disconnected
[  123.081849][ T4993] loop3: detected capacity change from 0 to 16
[  123.129756][ T4999] tipc: Started in network mode
[  123.138761][ T4999] tipc: Node identity ac14140f, cluster identity 4711
[  123.157608][ T4993] erofs: (device loop3): erofs_read_inode: unsupported chunk format ffff of nid 36
[  123.188670][ T4999] tipc: New replicast peer: 255.255.255.255
[  123.220565][ T4999] tipc: Enabled bearer <udp:syz2>, priority 10
[  123.236682][ T5002] netlink: 12 bytes leftover after parsing attributes in process `syz.1.195'.
[  123.254754][ T4996] pit: kvm: requested 14247 ns i8254 timer period limited to 200000 ns
[  123.292086][ T4996] pit: kvm: requested 20114 ns i8254 timer period limited to 200000 ns
[  123.321428][ T5002] tipc: Disabling bearer <udp:syz2>
[  123.334818][ T4996] pit: kvm: requested 10895 ns i8254 timer period limited to 200000 ns
[  123.365270][ T4999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.195'.
[  123.377999][ T4996] pit: kvm: requested 181866 ns i8254 timer period limited to 200000 ns
[  123.667344][ T5010] netlink: 'syz.4.205': attribute type 10 has an invalid length.
[  123.689742][ T5010] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  123.711411][ T5010] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'.
[  123.736449][ T5011] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  123.830167][ T5010] 8021q: adding VLAN 0 to HW filter on device bond1
[  123.858066][ T5013] netlink: 8 bytes leftover after parsing attributes in process `syz.4.205'.
[  123.867267][ T5013] netlink: 4 bytes leftover after parsing attributes in process `syz.4.205'.
[  123.901474][ T5013] bond1: (slave bond0): Error -16 calling set_mac_address
[  124.011922][ T5013] syz.4.205 (5013) used greatest stack depth: 19152 bytes left
[  124.935735][ T5022] loop4: detected capacity change from 0 to 2048
[  125.100452][ T5022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  125.118876][ T5027] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  128.119344][ T5055] tipc: Started in network mode
[  128.149934][ T5055] tipc: Node identity ac14140f, cluster identity 4711
[  128.158033][ T5055] tipc: New replicast peer: 255.255.255.255
[  128.171971][ T5055] tipc: Enabled bearer <udp:syz2>, priority 10
[  128.231324][ T5049] device syzkaller0 entered promiscuous mode
[  128.240277][ T5060] netlink: 12 bytes leftover after parsing attributes in process `syz.3.219'.
[  128.253793][ T5060] tipc: Disabling bearer <udp:syz2>
[  128.271014][ T5055] netlink: 4 bytes leftover after parsing attributes in process `syz.3.219'.
[  128.395181][ T5064] syz.2.221 uses obsolete (PF_INET,SOCK_PACKET)
[  129.482566][ T5079] loop2: detected capacity change from 0 to 1024
[  132.023890][ T5106] device syzkaller0 entered promiscuous mode
[  132.045889][ T5104] device syzkaller0 entered promiscuous mode
[  132.564513][ T5122] loop1: detected capacity change from 0 to 128
[  132.761631][ T5128] attempt to access beyond end of device
[  132.761631][ T5128] loop1: rw=2049, want=337, limit=128
[  132.821262][ T5122] attempt to access beyond end of device
[  132.821262][ T5122] loop1: rw=524288, want=337, limit=128
[  132.872610][ T5122] attempt to access beyond end of device
[  132.872610][ T5122] loop1: rw=0, want=153, limit=128
[  132.889586][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  132.896019][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  132.913893][ T5122] attempt to access beyond end of device
[  132.913893][ T5122] loop1: rw=0, want=153, limit=128
[  132.951846][ T5128] attempt to access beyond end of device
[  132.951846][ T5128] loop1: rw=0, want=151, limit=128
[  133.010644][ T5122] attempt to access beyond end of device
[  133.010644][ T5122] loop1: rw=0, want=146, limit=128
[  133.060066][ T5122] Buffer I/O error on dev loop1, logical block 145, async page read
[  133.093788][ T5122] attempt to access beyond end of device
[  133.093788][ T5122] loop1: rw=0, want=147, limit=128
[  133.119340][ T5122] Buffer I/O error on dev loop1, logical block 146, async page read
[  133.139213][ T5122] attempt to access beyond end of device
[  133.139213][ T5122] loop1: rw=0, want=148, limit=128
[  133.153695][ T5122] Buffer I/O error on dev loop1, logical block 147, async page read
[  133.182458][ T5122] attempt to access beyond end of device
[  133.182458][ T5122] loop1: rw=0, want=149, limit=128
[  133.212572][ T5131] netlink: 'syz.0.252': attribute type 3 has an invalid length.
[  133.226581][ T5122] Buffer I/O error on dev loop1, logical block 148, async page read
[  133.240221][ T5131] netlink: 'syz.0.252': attribute type 3 has an invalid length.
[  133.252022][ T5122] attempt to access beyond end of device
[  133.252022][ T5122] loop1: rw=0, want=150, limit=128
[  133.269534][ T5122] Buffer I/O error on dev loop1, logical block 149, async page read
[  133.280129][ T5122] Buffer I/O error on dev loop1, logical block 150, async page read
[  133.298137][ T5122] Buffer I/O error on dev loop1, logical block 151, async page read
[  133.310944][ T5122] Buffer I/O error on dev loop1, logical block 152, async page read
[  133.322177][ T5122] Buffer I/O error on dev loop1, logical block 145, async page read
[  133.346855][ T5122] Buffer I/O error on dev loop1, logical block 146, async page read
[  133.560167][ T5135] device syzkaller0 entered promiscuous mode
[  134.747605][ T5153] device ip6gre1 entered promiscuous mode
[  135.167243][ T5169] loop4: detected capacity change from 0 to 512
[  135.326490][ T5169] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  135.770505][ T5169] EXT4-fs (loop4): mounted filesystem without journal. Opts: nouid32,errors=remount-ro,user_xattr,nodiscard,dioread_nolock,. Quota mode: writeback.
[  135.965495][ T5169] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  140.092258][ T5213] device syzkaller0 entered promiscuous mode
[  140.242539][ T5221] loop3: detected capacity change from 0 to 1024
[  140.284283][ T5223] device ip6gre1 entered promiscuous mode
[  140.292059][ T1336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.304403][ T5221] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  140.320398][ T1336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.320517][ T5223] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.337193][ T1336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  140.384557][ T5221] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,delalloc,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  141.852954][ T5236] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  142.187922][ T4229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  142.222890][ T1336] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  142.408160][ T5235] device bridge_slave_0 left promiscuous mode
[  142.415778][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.434059][ T5235] device bridge_slave_1 left promiscuous mode
[  142.441818][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.482105][ T5235] bond0: (slave bond_slave_0): Releasing backup interface
[  142.534380][ T5235] bond0: (slave bond_slave_1): Releasing backup interface
[  142.566048][ T5235] team0: Port device team_slave_0 removed
[  142.617680][ T5235] team0: Port device team_slave_1 removed
[  142.641855][ T5235] batman_adv: batadv0: Removing interface: batadv_slave_0
[  142.657343][ T5235] batman_adv: batadv0: Removing interface: batadv_slave_1
[  142.679521][ T5240] team0: Mode changed to "loadbalance"
[  142.686017][ T5238] netlink: 4 bytes leftover after parsing attributes in process `syz.2.273'.
[  142.695629][ T4229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  143.158877][ T5251] loop1: detected capacity change from 0 to 40427
[  143.402591][ T5251] F2FS-fs (loop1): invalid crc value
[  143.664348][ T4229] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  143.682164][ T5251] F2FS-fs (loop1): Found nat_bits in checkpoint
[  143.736294][ T5251] F2FS-fs (loop1): Start checkpoint disabled!
[  143.819534][ T5251] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  144.050118][   T26] kauditd_printk_skb: 7 callbacks suppressed
[  144.050135][   T26] audit: type=1800 audit(1774966268.258:92): pid=5260 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.277" name="bus" dev="loop1" ino=10 res=0 errno=0
[  144.723788][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  145.638809][ T5283] netlink: 4 bytes leftover after parsing attributes in process `syz.3.284'.
[  147.919590][ T5286] netlink: 24 bytes leftover after parsing attributes in process `syz.4.287'.
[  148.007379][ T4530] handle_bad_sector: 699 callbacks suppressed
[  148.007401][ T4530] attempt to access beyond end of device
[  148.007401][ T4530] loop1: rw=2049, want=40976, limit=40427
[  148.232227][ T5290] Invalid argument reading file caps for ./file0
[  148.271999][ T5293] device syzkaller0 entered promiscuous mode
[  148.453784][ T4228] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  148.464653][ T5296] loop4: detected capacity change from 0 to 512
[  148.523652][ T5296] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  148.662547][ T5296] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,,errors=continue. Quota mode: writeback.
[  148.918516][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.979311][ T4228] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  149.099475][ T4228] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  149.240560][ T4228] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  149.320837][ T4228] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.403020][ T4228] usb 3-1: config 0 descriptor??
[  150.547062][ T4228] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving
[  150.938330][ T4228] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  150.953971][ T4228] usb 3-1: USB disconnect, device number 3
[  151.201317][ T5313] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off.
[  151.231242][ T5313] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  152.099554][ T5315] fido_id[5315]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  152.420766][ T5324] device syzkaller0 entered promiscuous mode
[  153.747358][ T5220] Set syz1 is full, maxelem 65536 reached
[  154.003725][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  154.902066][ T5353] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  154.948912][ T5353] device syzkaller0 entered promiscuous mode
[  154.992634][ T5353] tipc: Resetting bearer <eth:syzkaller0>
[  155.034337][ T5351] tipc: Resetting bearer <eth:syzkaller0>
[  155.584431][ T5351] tipc: Disabling bearer <eth:syzkaller0>
[  155.652570][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  157.225479][ T5390] loop2: detected capacity change from 0 to 40427
[  157.312715][ T5390] F2FS-fs (loop2): invalid crc value
[  157.326410][ T5390] F2FS-fs (loop2): Found nat_bits in checkpoint
[  157.370095][ T5390] F2FS-fs (loop2): Start checkpoint disabled!
[  157.396854][ T5390] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  158.477360][   T26] audit: type=1800 audit(1774966282.688:93): pid=5416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.314" name="bus" dev="loop2" ino=10 res=0 errno=0
[  159.409449][ T1287] attempt to access beyond end of device
[  159.409449][ T1287] loop2: rw=2049, want=40976, limit=40427
[  161.966852][ T5431] Invalid argument reading file caps for ./file0
[  162.024849][ T5433] loop3: detected capacity change from 0 to 1024
[  163.298696][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'.
[  163.993077][ T5449] netlink: 24 bytes leftover after parsing attributes in process `syz.1.327'.
[  164.944347][ T5468] loop0: detected capacity change from 0 to 512
[  164.969282][ T4398] hfsplus: b-tree write err: -5, ino 3
[  165.477918][ T5468] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e018, mo2=0002]
[  165.652617][ T5468] System zones: 1-12
[  165.824618][ T5468] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #12: comm syz.0.332: missing EA_INODE flag
[  165.904317][ T5468] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.332: error while reading EA inode 12 err=-117
[  165.961367][ T5468] EXT4-fs (loop0): 1 orphan inode deleted
[  165.999260][ T5468] EXT4-fs (loop0): mounted filesystem without journal. Opts: debug,nogrpid,,errors=continue. Quota mode: writeback.
[  167.175646][   T26] audit: type=1800 audit(1774966291.388:94): pid=5468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.332" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=15 res=0 errno=0
[  167.217133][    C0] vkms_vblank_simulate: vblank timer overrun
[  167.314030][ T5468] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 36: comm syz.0.332: lblock 0 mapped to illegal pblock 36 (length 1)
[  167.461612][ T5504] device syzkaller0 entered promiscuous mode
[  167.471504][ T5504] 0: reclassify loop, rule prio 0, protocol 800
[  167.608810][ T5506] Invalid argument reading file caps for ./file0
[  169.618365][ T5514] loop0: detected capacity change from 0 to 4096
[  169.696252][ T5514] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  169.825069][ T5518] device syzkaller0 entered promiscuous mode
[  170.433822][ T4987] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  170.723764][ T4987] usb 3-1: Using ep0 maxpacket: 16
[  170.844697][ T4987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  171.123893][ T4987] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  171.153050][ T4987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.243103][ T4987] usb 3-1: Product: syz
[  171.399403][ T5538] binder: BINDER_SET_CONTEXT_MGR already set
[  171.407326][ T4987] usb 3-1: Manufacturer: syz
[  171.412211][ T5538] binder: 5536:5538 ioctl 4018620d 200000000040 returned -16
[  171.420416][ T4987] usb 3-1: SerialNumber: syz
[  171.427522][ T4987] usb 3-1: config 0 descriptor??
[  171.714270][ T5538] binder: 5536:5538 ioctl c0306201 2000000003c0 returned -14
[  171.923749][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  172.338422][ T4987] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  172.387766][ T4987] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  172.673666][ T5553] netlink: 'syz.3.352': attribute type 12 has an invalid length.
[  172.723993][ T4987] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  172.805642][ T5553] netlink: 14585 bytes leftover after parsing attributes in process `syz.3.352'.
[  173.276184][ T4987] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  173.421432][ T4987] em28xx 3-1:0.0: board has no eeprom
[  173.818024][ T5558] device syzkaller0 entered promiscuous mode
[  175.503802][ T5543] em28xx 3-1:0.0: failed to get i2c transfer status from bridge register (error=-5)
[  175.572950][ T4987] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  175.580981][ T4987] em28xx 3-1:0.0: dvb set to bulk mode.
[  175.596619][ T4987] usb 3-1: USB disconnect, device number 4
[  175.606791][ T4985] em28xx 3-1:0.0: Binding DVB extension
[  175.613974][ T4987] em28xx 3-1:0.0: Disconnecting em28xx
[  175.659742][ T4985] em28xx 3-1:0.0: Registering input extension
[  175.676011][ T4987] em28xx 3-1:0.0: Closing input extension
[  175.708464][ T5581] Invalid argument reading file caps for ./file0
[  176.281730][ T4987] em28xx 3-1:0.0: Freeing device
[  176.378145][ T5590] loop4: detected capacity change from 0 to 512
[  176.509563][ T5590] EXT4-fs (loop4): Ignoring removed nobh option
[  176.592923][ T5590] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,nogrpid,noquota,nobh,,errors=continue. Quota mode: writeback.
[  176.672810][ T5590] ext4 filesystem being mounted at /86/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  176.707269][   T26] audit: type=1800 audit(1774966291.919:95): pid=5590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.358" name="file1" dev="loop4" ino=15 res=0 errno=0
[  176.982900][ T5601] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'.
[  177.009562][ T5602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.360'.
[  177.041155][ T5608] device syzkaller0 entered promiscuous mode
[  180.072670][ T5638] device syzkaller0 entered promiscuous mode
[  180.369151][ T5640] loop2: detected capacity change from 0 to 4096
[  180.591957][ T5640] ntfs: (device loop2): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match.  Run ntfsfix or chkdsk.
[  180.604112][ T5640] ntfs: (device loop2): load_system_files(): $MFTMirr does not match $MFT.  Mounting read-only.  Run ntfsfix and/or chkdsk.
[  180.622271][ T5640] ntfs: (device loop2): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn.
[  180.634031][ T5640] ntfs: (device loop2): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  180.647371][ T5640] ntfs: (device loop2): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  180.667763][ T5640] ntfs: volume version 3.1.
[  180.679953][ T5640] ntfs: (device loop2): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty.
[  180.693365][ T5640] ntfs: (device loop2): load_system_files(): Failed to load $LogFile.  Will not be able to remount read-write.  Mount in Windows.
[  180.711120][ T5640] ntfs: (device loop2): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5.
[  180.722442][ T5640] ntfs: (device loop2): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys.
[  183.285570][ T5652] loop2: detected capacity change from 0 to 256
[  183.391783][ T5652] FAT-fs (loop2): Unrecognized mount option "�������k	�~�5���8�w��MWVX���$~���%�4�"�5�D���*Z�n}�Q�.F2�(cI�[f��V��v�L�<J��_" or missing value
[  183.614245][ T5662] loop0: detected capacity change from 0 to 1024
[  184.738974][ T5662] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  186.145335][ T5678] device syzkaller0 entered promiscuous mode
[  186.204678][ T5662] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,delalloc,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  186.292914][ T5672] loop2: detected capacity change from 0 to 4096
[  186.871923][ T4229] Bluetooth: hci0: command 0x0406 tx timeout
[  186.878224][ T4229] Bluetooth: hci4: command 0x0406 tx timeout
[  186.885163][ T4229] Bluetooth: hci3: command 0x0406 tx timeout
[  186.945997][ T4229] Bluetooth: hci2: command 0x0406 tx timeout
[  186.972266][ T4229] Bluetooth: hci1: command 0x0406 tx timeout
[  187.169242][ T5688] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.191673][ T5690] loop3: detected capacity change from 0 to 128
[  187.216521][ T5672] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  187.280506][ T5672] NILFS (loop2): mounting fs with errors
[  188.763245][ T5723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'.
[  188.830806][ T5723] netlink: 28 bytes leftover after parsing attributes in process `syz.1.398'.
[  188.851647][ T5723] device bridge0 entered promiscuous mode
[  189.130726][ T5723] device ip6gretap0 entered promiscuous mode
[  189.340543][ T1287] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  189.730214][ T5728] device syzkaller0 entered promiscuous mode
[  192.534845][ T5764] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.410'.
[  192.581255][ T5768] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'.
[  192.598272][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.411'.
[  192.610023][ T5769] netlink: 28 bytes leftover after parsing attributes in process `syz.4.411'.
[  192.631163][ T5769] device bridge0 entered promiscuous mode
[  192.666156][ T5769] device ip6gretap0 entered promiscuous mode
[  192.691624][ T5769] debugfs: Directory 'hsr1' with parent 'hsr' already present!
[  192.717231][ T5769] Cannot create hsr debugfs directory
[  192.732121][ T5771] netlink: 4 bytes leftover after parsing attributes in process `syz.0.409'.
[  192.874663][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  193.902898][ T5785] loop0: detected capacity change from 0 to 2048
[  194.034919][ T5785] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  194.331717][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  194.341268][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  194.606639][ T5793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[  195.060230][ T5793] netlink: 28 bytes leftover after parsing attributes in process `syz.1.416'.
[  203.115129][ T5881] netlink: 'syz.3.440': attribute type 10 has an invalid length.
[  203.180360][ T5881] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  203.225641][ T4530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.233901][ T4530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.314283][ T5888] device syzkaller0 entered promiscuous mode
[  203.666890][ T5898] netlink: 24 bytes leftover after parsing attributes in process `syz.1.448'.
[  203.997530][ T5903] loop0: detected capacity change from 0 to 4096
[  205.649192][ T5917] block device autoloading is deprecated and will be removed.
[  205.649301][ T5916] block device autoloading is deprecated and will be removed.
[  205.933174][ T5923] device syzkaller0 entered promiscuous mode
[  206.346501][ T5927] netlink: 'syz.0.456': attribute type 10 has an invalid length.
[  206.585649][ T5927] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  207.764046][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  210.333954][ T5981] loop3: detected capacity change from 0 to 2048
[  210.391910][ T5981] hpfs: hpfs_map_sector(): read error
[  210.476213][ T5986] device syzkaller0 entered promiscuous mode
[  210.747757][ T5986] 0: reclassify loop, rule prio 0, protocol 800
[  214.075622][ T5993] md: could not open device unknown-block(0,0).
[  214.097777][ T5993] md: md_import_device returned -6
[  214.155794][ T6010] loop3: detected capacity change from 0 to 256
[  214.526267][ T6018] device syzkaller0 entered promiscuous mode
[  214.590859][ T6020] device syzkaller0 entered promiscuous mode
[  217.697813][ T6045] device syzkaller0 entered promiscuous mode
[  219.745685][ T6064] loop1: detected capacity change from 0 to 4096
[  219.948683][ T6073] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.915822][ T6096] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready
[  226.049529][ T6115] loop4: detected capacity change from 0 to 164
[  226.223440][ T6118] sctp: [Deprecated]: syz.3.501 (pid 6118) Use of struct sctp_assoc_value in delayed_ack socket option.
[  226.223440][ T6118] Use struct sctp_sack_info instead
[  229.259859][ T6133] device syzkaller0 entered promiscuous mode
[  232.551008][ T6170] device syzkaller0 entered promiscuous mode
[  232.766833][ T6174] device syzkaller0 entered promiscuous mode
[  232.936347][ T6180] device syzkaller0 entered promiscuous mode
[  233.114536][ T6195] Option '    ' to dns_resolver key: bad/missing value
[  234.755302][ T6201] device syzkaller0 entered promiscuous mode
[  234.949690][ T6222] netlink: 'syz.1.527': attribute type 2 has an invalid length.
[  235.186059][ T6224] netlink: 'syz.4.526': attribute type 3 has an invalid length.
[  235.194721][ T6224] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.526'.
[  235.844452][ T6221] IPVS: sh: FWM 3 0x00000003 - no destination available
[  235.993395][ T6231] loop2: detected capacity change from 0 to 1024
[  238.718661][ T4398] hfsplus: b-tree write err: -5, ino 3
[  238.837198][ T6237] device syzkaller0 entered promiscuous mode
[  241.456172][ T6269] loop0: detected capacity change from 0 to 1024
[  241.495646][ T6269] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  241.631794][ T6269] EXT4-fs (loop0): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,delalloc,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  241.661533][    C1] vkms_vblank_simulate: vblank timer overrun
[  242.229107][ T6280] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  242.990283][ T6277] loop3: detected capacity change from 0 to 40427
[  243.043616][ T6277] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  243.051579][ T6277] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  243.079118][ T6277] F2FS-fs (loop3): invalid crc value
[  243.154229][ T6277] F2FS-fs (loop3): Found nat_bits in checkpoint
[  243.210625][ T6277] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  243.217924][ T6277] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  243.247787][ T6286] device syzkaller0 entered promiscuous mode
[  244.247186][ T6292] 8021q: adding VLAN 0 to HW filter on device bond1
[  244.317998][ T6294] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  244.375387][ T6294] bond1: (slave macvlan2): Enslaving as a backup interface with a down link
[  244.404490][ T6297] netlink: 'syz.0.547': attribute type 1 has an invalid length.
[  244.514157][ T6297] 8021q: adding VLAN 0 to HW filter on device bond1
[  244.569472][ T6302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.630568][ T6302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.672994][ T6302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.697154][ T6302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.752087][ T6302] bond1: (slave geneve2): making interface the new active one
[  244.790905][ T6302] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  244.977746][ T4398] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  249.821510][ T6352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.561'.
[  250.036052][ T6352] device macvtap1 entered promiscuous mode
[  250.085169][ T6352] device bond0 entered promiscuous mode
[  250.091001][ T6352] device bond_slave_0 entered promiscuous mode
[  250.154153][ T6352] device bond_slave_1 entered promiscuous mode
[  250.266247][ T6359] loop1: detected capacity change from 0 to 256
[  250.292133][ T6352] device wlan1 entered promiscuous mode
[  250.409504][ T6352] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  256.249424][ T1423] ieee802154 phy0 wpan0: encryption failed: -22
[  256.255862][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  256.396030][ T6397] loop4: detected capacity change from 0 to 4096
[  256.559224][ T6402] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  256.600495][ T6403] device syzkaller0 entered promiscuous mode
[  258.720354][ T6428] loop1: detected capacity change from 0 to 164
[  265.612939][ T6513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.593'.
[  266.000507][  T146] block nbd0: Receive control failed (result -1)
[  266.050130][ T6521] loop2: detected capacity change from 0 to 7
[  266.061217][ T6521] Dev loop2: unable to read RDB block 7
[  266.067524][ T6521]  loop2: AHDI p1 p2 p3
[  266.071831][ T6521] loop2: partition table partially beyond EOD, truncated
[  266.080398][ T6521] loop2: p1 start 1601398130 is beyond EOD, truncated
[  266.087620][ T6521] loop2: p2 start 1702059890 is beyond EOD, truncated
[  270.983696][ T4225] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  271.693582][ T4225] usb 4-1: Using ep0 maxpacket: 16
[  271.733900][ T4225] usb 4-1: no configurations
[  271.738597][ T4225] usb 4-1: can't read configurations, error -22
[  271.974013][ T4225] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  272.253729][ T4225] usb 4-1: Using ep0 maxpacket: 16
[  272.327140][ T4225] usb 4-1: no configurations
[  272.356072][ T4225] usb 4-1: can't read configurations, error -22
[  272.443437][ T4225] usb usb4-port1: attempt power cycle
[  275.900341][ T6614] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(7)
[  275.907485][ T6614] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  275.976026][ T6614] vhci_hcd vhci_hcd.0: Device attached
[  276.025404][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'.
[  276.076242][ T6619] netlink: 24 bytes leftover after parsing attributes in process `syz.0.616'.
[  277.345030][ T6623] IPVS: Scheduler module ip_vs_sip not found
[  277.358483][ T6615] vhci_hcd: connection closed
[  277.361489][ T4296] vhci_hcd: stop threads
[  277.361575][ T4296] vhci_hcd: release socket
[  277.362683][ T4296] vhci_hcd: disconnect device
[  277.423831][ T1325] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  277.424025][ T1325] usb 41-1: enqueue for inactive port 0
[  277.503782][ T1325] vhci_hcd: vhci_device speed not set
[  278.227814][ T6638] device syzkaller0 entered promiscuous mode
[  281.949686][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  282.124311][ T6669] netlink: 32 bytes leftover after parsing attributes in process `syz.2.630'.
[  285.806958][ T6710] device syzkaller0 entered promiscuous mode
[  287.457660][ T6733] loop4: detected capacity change from 0 to 512
[  287.536639][ T6733] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  287.593626][ T6733] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  287.635519][ T6733] EXT4-fs (loop4): 1 truncate cleaned up
[  287.641502][ T6733] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,max_batch_time=0x0000000000000002,stripe=0x0000000000000008,block_validity,bsdgroups,nombcache,,errors=continue. Quota mode: none.
[  288.574572][ T6750] loop3: detected capacity change from 0 to 512
[  288.980284][ T6750] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  289.314106][ T6750] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  289.571050][ T6750] EXT4-fs (loop3): 1 truncate cleaned up
[  290.065634][ T6750] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,stripe=0x00000000000000dc,nomblk_io_submit,noload,abort,auto_da_alloc,,errors=continue. Quota mode: none.
[  290.806959][   T26] kauditd_printk_skb: 5 callbacks suppressed
[  290.806978][   T26] audit: type=1800 audit(1774966406.009:96): pid=6770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.647" name="file1" dev="loop3" ino=15 res=0 errno=0
[  293.738348][ T6810] loop0: detected capacity change from 0 to 8192
[  293.987608][ T6816] loop1: detected capacity change from 0 to 512
[  294.216244][ T6816] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  294.708317][ T6823] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  294.721304][ T6816] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  294.760198][ T6823] tipc: Resetting bearer <eth:syzkaller0>
[  295.904749][ T6830] tipc: Started in network mode
[  295.961111][ T6830] tipc: Node identity 3e0ec888c596, cluster identity 4711
[  296.070518][ T6830] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  296.144230][ T1325] tipc: Node number set to 2886997007
[  296.187855][ T6835] device syzkaller0 entered promiscuous mode
[  297.044440][ T6835] tipc: Resetting bearer <eth:syzkaller0>
[  297.162102][ T6835] tipc: Disabling bearer <eth:syzkaller0>
[  297.190419][ T6853] loop3: detected capacity change from 0 to 256
[  298.749766][ T6869] loop2: detected capacity change from 0 to 128
[  298.852713][ T6867] device syzkaller0 entered promiscuous mode
[  299.044539][ T6869] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  299.070838][ T6869] ext4 filesystem being mounted at /145/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  299.931186][ T6886] device syzkaller0 entered promiscuous mode
[  299.953047][ T6886] tc action pedit offset 64 out of bounds
[  300.007170][ T6885] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  300.046984][ T6885] device syzkaller0 entered promiscuous mode
[  300.114166][ T6885] tipc: Resetting bearer <eth:syzkaller0>
[  300.181310][ T6884] tipc: Resetting bearer <eth:syzkaller0>
[  300.198575][ T6884] tipc: Disabling bearer <eth:syzkaller0>
[  301.305664][ T6905] device syzkaller0 entered promiscuous mode
[  301.408220][ T6903] loop2: detected capacity change from 0 to 4096
[  302.293464][ T6903] EXT4-fs (loop2): mounted filesystem without journal. Opts: nolazytime,barrier=0x0000000000000000,,errors=continue. Quota mode: writeback.
[  303.100829][   T26] audit: type=1800 audit(1774966418.309:97): pid=6903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.679" name="file1" dev="loop2" ino=15 res=0 errno=0
[  308.866486][ T6979] vivid-004: disconnect
[  309.017854][ T6966] vivid-004: reconnect
[  309.612358][ T6982] netlink: 12 bytes leftover after parsing attributes in process `syz.2.701'.
[  309.657628][ T6982] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  309.667380][ T6982] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  309.676554][ T6982] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  309.685558][ T6982] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  309.796347][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'.
[  309.817621][ T6988] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  309.826089][ T6990] device syzkaller0 entered promiscuous mode
[  309.839080][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'.
[  309.857706][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.2.701'.
[  309.886015][ T6986] tipc: Resetting bearer <eth:syzkaller0>
[  309.905425][ T6985] tipc: Resetting bearer <eth:syzkaller0>
[  309.975575][ T6985] tipc: Disabling bearer <eth:syzkaller0>
[  311.105894][ T7009] netlink: 14 bytes leftover after parsing attributes in process `syz.2.710'.
[  311.161819][ T7009] bond1: (slave macvlan2): Releasing backup interface
[  311.376482][ T7007] loop3: detected capacity change from 0 to 32768
[  311.393884][ T7012] netlink: 220 bytes leftover after parsing attributes in process `syz.2.710'.
[  311.404565][ T7009] bond0 (unregistering): Released all slaves
[  311.458331][ T7007] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  311.467335][ T7007] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  311.761205][ T7007] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  312.308695][ T1336] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  312.316457][ T1336] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  312.459447][ T1336] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 142ms
[  312.481373][ T1336] gfs2: fsid=syz:syz.0: jid=0: Done
[  312.507644][ T7007] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  312.706577][ T7007] gfs2: fsid=syz:syz.0: found 1 quota changes
[  315.017673][ T7026] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  315.017673][ T7026]   inode = 11 2339
[  315.017673][ T7026]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 465
[  315.090339][ T7036] loop2: detected capacity change from 0 to 128
[  315.154981][ T7033] attempt to access beyond end of device
[  315.154981][ T7033] loop3: rw=12288, want=6755399441055888, limit=32768
[  315.203223][ T7026] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  315.218031][ T7026] gfs2: fsid=syz:syz.0: The quotad daemon is withdrawing.
[  315.429308][ T7036] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  315.442475][ T7036] hpfs: filesystem error: improperly stopped
[  315.449221][ T7036] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  315.457381][ T7036] hpfs: You really don't want any checks? You are crazy...
[  315.470018][ T7036] hpfs: hpfs_map_sector(): read error
[  315.479320][ T7036] hpfs: code page support is disabled
[  315.494156][ T7036] hpfs: hpfs_map_4sectors(): unaligned read
[  315.501372][ T7036] hpfs: hpfs_map_4sectors(): unaligned read
[  315.538566][ T7036] hpfs: filesystem error: unable to find root dir
[  316.501370][ T7046] hpfs: hpfs_map_4sectors(): unaligned read
[  316.522180][ T7046] hpfs: hpfs_map_4sectors(): unaligned read
[  317.081883][ T7051] vxcan1 speed is unknown, defaulting to 1000
[  317.207679][ T1423] ieee802154 phy1 wpan1: encryption failed: -22
[  319.268153][ T7054] Set syz1 is full, maxelem 6117 reached
[  319.891125][ T7070] orangefs_mount: mount request failed with -4
[  320.918949][ T7026] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_quota_cleanup, file = fs/gfs2/quota.c, line = 1485
[  321.007855][ T7026] CPU: 1 PID: 7026 Comm: gfs2_quotad Not tainted syzkaller #0
[  321.015404][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  321.025506][ T7026] Call Trace:
[  321.028942][ T7026]  <TASK>
[  321.031909][ T7026]  dump_stack_lvl+0x188/0x250
[  321.036628][ T7026]  ? schedule_preempt_disabled+0x20/0x20
[  321.042290][ T7026]  ? show_regs_print_info+0x20/0x20
[  321.047518][ T7026]  ? load_image+0x400/0x400
[  321.052053][ T7026]  ? preempt_schedule_thunk+0x16/0x18
[  321.057466][ T7026]  gfs2_assert_warn_i+0x18f/0x2c0
[  321.062527][ T7026]  gfs2_quota_cleanup+0x4b4/0x6a0
[  321.067729][ T7026]  gfs2_make_fs_ro+0x440/0x620
[  321.072523][ T7026]  ? __might_sleep+0xf0/0xf0
[  321.077144][ T7026]  ? gfs2_dinode_out+0xb00/0xb00
[  321.082119][ T7026]  ? _raw_spin_unlock+0x24/0x40
[  321.087011][ T7026]  ? gfs2_glock_nq+0xcb0/0x1550
[  321.091900][ T7026]  ? init_wait_entry+0xd0/0xd0
[  321.096797][ T7026]  gfs2_withdraw+0x610/0x1490
[  321.101523][ T7026]  ? gfs2_lm+0x240/0x240
[  321.105799][ T7026]  ? __schedule+0x11f7/0x43c0
[  321.110510][ T7026]  ? gfs2_freeze_lock+0x52/0xc0
[  321.115515][ T7026]  ? gfs2_consist_inode_i+0xc0/0xe0
[  321.120771][ T7026]  gfs2_inode_refresh+0xb64/0xff0
[  321.125855][ T7026]  ? do_promote+0x71a/0xab0
[  321.130416][ T7026]  ? gfs2_inode_metasync+0xf0/0xf0
[  321.135582][ T7026]  ? __lock_acquire+0x7d10/0x7d10
[  321.140655][ T7026]  inode_go_lock+0x127/0x470
[  321.145282][ T7026]  do_promote+0x741/0xab0
[  321.149655][ T7026]  finish_xmote+0x4df/0xb00
[  321.154237][ T7026]  do_xmote+0x7b6/0x1120
[  321.158609][ T7026]  gfs2_glock_nq+0xc7a/0x1550
[  321.163336][ T7026]  do_sync+0x4ab/0xc40
[  321.167453][ T7026]  ? slot_put+0x1e0/0x1e0
[  321.171814][ T7026]  ? __lock_acquire+0x7d10/0x7d10
[  321.176864][ T7026]  ? do_raw_spin_lock+0x128/0x2f0
[  321.181952][ T7026]  ? do_sync+0x4a3/0xc40
[  321.186378][ T7026]  ? do_raw_spin_unlock+0x11d/0x230
[  321.191612][ T7026]  gfs2_quota_sync+0x32c/0x700
[  321.196426][ T7026]  gfs2_quotad+0x403/0x890
[  321.200892][ T7026]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  321.206040][ T7026]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  321.211962][ T7026]  ? init_wait_entry+0xd0/0xd0
[  321.216952][ T7026]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  321.223081][ T7026]  ? __kthread_parkme+0x157/0x1b0
[  321.228146][ T7026]  kthread+0x436/0x520
[  321.232230][ T7026]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  321.237536][ T7026]  ? kthread_blkcg+0xd0/0xd0
[  321.242137][ T7026]  ret_from_fork+0x1f/0x30
[  321.246616][ T7026]  </TASK>
[  321.532381][ T7091] loop2: detected capacity change from 0 to 32768
[  321.540315][ T7026] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  321.551720][ T7026] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  321.559648][ T7026] gfs2: fsid=syz:syz.0: File system withdrawn
[  321.565812][ T7026] CPU: 1 PID: 7026 Comm: gfs2_quotad Not tainted syzkaller #0
[  321.573399][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  321.583494][ T7026] Call Trace:
[  321.586812][ T7026]  <TASK>
[  321.589779][ T7026]  dump_stack_lvl+0x188/0x250
[  321.594513][ T7026]  ? kobject_uevent_env+0x371/0x890
[  321.599752][ T7026]  ? show_regs_print_info+0x20/0x20
[  321.605075][ T7026]  ? load_image+0x400/0x400
[  321.609613][ T7026]  ? kobject_uevent_env+0x371/0x890
[  321.614839][ T7026]  ? lockref_put_or_lock+0x6e/0xb0
[  321.620129][ T7026]  gfs2_withdraw+0x1149/0x1490
[  321.624956][ T7026]  ? gfs2_lm+0x240/0x240
[  321.629236][ T7026]  ? __schedule+0x11f7/0x43c0
[  321.633964][ T7026]  ? gfs2_consist_inode_i+0xc0/0xe0
[  321.639207][ T7026]  gfs2_inode_refresh+0xb64/0xff0
[  321.644269][ T7026]  ? do_promote+0x71a/0xab0
[  321.648818][ T7026]  ? gfs2_inode_metasync+0xf0/0xf0
[  321.653961][ T7026]  ? __lock_acquire+0x7d10/0x7d10
[  321.659043][ T7026]  inode_go_lock+0x127/0x470
[  321.663701][ T7026]  do_promote+0x741/0xab0
[  321.668076][ T7026]  finish_xmote+0x4df/0xb00
[  321.672640][ T7026]  do_xmote+0x7b6/0x1120
[  321.676922][ T7026]  gfs2_glock_nq+0xc7a/0x1550
[  321.681743][ T7026]  do_sync+0x4ab/0xc40
[  321.685884][ T7026]  ? slot_put+0x1e0/0x1e0
[  321.690262][ T7026]  ? __lock_acquire+0x7d10/0x7d10
[  321.695320][ T7026]  ? do_raw_spin_lock+0x128/0x2f0
[  321.700399][ T7026]  ? do_sync+0x4a3/0xc40
[  321.704673][ T7026]  ? do_raw_spin_unlock+0x11d/0x230
[  321.710084][ T7026]  gfs2_quota_sync+0x32c/0x700
[  321.714892][ T7026]  gfs2_quotad+0x403/0x890
[  321.719381][ T7026]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  321.724531][ T7026]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  321.730471][ T7026]  ? init_wait_entry+0xd0/0xd0
[  321.735292][ T7026]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  321.741223][ T7026]  ? __kthread_parkme+0x157/0x1b0
[  321.746263][ T7026]  kthread+0x436/0x520
[  321.750343][ T7026]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  321.755467][ T7026]  ? kthread_blkcg+0xd0/0xd0
[  321.760204][ T7026]  ret_from_fork+0x1f/0x30
[  321.764652][ T7026]  </TASK>
[  321.778543][ T7091] sysfs: cannot create duplicate filename '/fs/gfs2/syz:syz'
[  321.786062][ T7091] CPU: 1 PID: 7091 Comm: syz.2.728 Not tainted syzkaller #0
[  321.793492][ T7091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  321.803588][ T7091] Call Trace:
[  321.806918][ T7091]  <TASK>
[  321.810046][ T7091]  dump_stack_lvl+0x188/0x250
[  321.814960][ T7091]  ? show_regs_print_info+0x20/0x20
[  321.820223][ T7091]  ? load_image+0x400/0x400
[  321.824798][ T7091]  sysfs_create_dir_ns+0x26a/0x290
[  321.829971][ T7091]  ? sysfs_warn_dup+0xa0/0xa0
[  321.834705][ T7091]  ? do_raw_spin_unlock+0x11d/0x230
[  321.839958][ T7091]  kobject_add_internal+0x6e0/0xd90
[  321.845219][ T7091]  kobject_init_and_add+0x128/0x190
[  321.850479][ T7091]  ? lockdep_softirqs_off+0x430/0x430
[  321.855924][ T7091]  ? kobject_add+0x230/0x230
[  321.860567][ T7091]  ? __init_swait_queue_head+0xa5/0x150
[  321.866207][ T7091]  gfs2_sys_fs_add+0x24f/0x4b0
[  321.871054][ T7091]  ? gfs2_recover_set+0x240/0x240
[  321.876368][ T7091]  ? snprintf+0xe5/0x140
[  321.880665][ T7091]  ? __free_pages+0x95/0x1a0
[  321.885314][ T7091]  ? vscnprintf+0x80/0x80
[  321.889789][ T7091]  gfs2_fill_super+0x120f/0x1f00
[  321.894788][ T7091]  ? gfs2_reconfigure+0xd30/0xd30
[  321.899960][ T7091]  ? sb_set_blocksize+0xa5/0xe0
[  321.904875][ T7091]  get_tree_bdev+0x3f1/0x610
[  321.909513][ T7091]  ? gfs2_reconfigure+0xd30/0xd30
[  321.914580][ T7091]  gfs2_get_tree+0x4d/0x1e0
[  321.919134][ T7091]  vfs_get_tree+0x88/0x270
[  321.923594][ T7091]  do_new_mount+0x24a/0xa40
[  321.928159][ T7091]  __se_sys_mount+0x2e3/0x3d0
[  321.932972][ T7091]  ? __x64_sys_mount+0xc0/0xc0
[  321.937822][ T7091]  ? lockdep_hardirqs_on+0x94/0x140
[  321.943072][ T7091]  ? __x64_sys_mount+0x1c/0xc0
[  321.947999][ T7091]  do_syscall_64+0x4c/0xa0
[  321.952472][ T7091]  ? clear_bhb_loop+0x30/0x80
[  321.957211][ T7091]  ? clear_bhb_loop+0x30/0x80
[  321.961943][ T7091]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  321.968025][ T7091] RIP: 0033:0x7f5ba85bea8a
[  321.972514][ T7091] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  321.992261][ T7091] RSP: 002b:00007f5ba6816e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  322.000735][ T7091] RAX: ffffffffffffffda RBX: 00007f5ba6816ee0 RCX: 00007f5ba85bea8a
[  322.008847][ T7091] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f5ba6816ea0
[  322.016862][ T7091] RBP: 00002000000124c0 R08: 00007f5ba6816ee0 R09: 0000000000000000
[  322.024913][ T7091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500
[  322.032922][ T7091] R13: 00007f5ba6816ea0 R14: 00000000000125c7 R15: 0000200000000180
[  322.041047][ T7091]  </TASK>
[  322.044760][ T7091] kobject_add_internal failed for syz:syz with -EEXIST, don't try to register things with the same name in the same directory.
[  322.058706][ T7091] gfs2: fsid=syz:syz: error -17 adding sysfs files
[  322.982421][ T7106] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  322.998407][ T7106] device syzkaller0 entered promiscuous mode
[  323.108679][ T7106] tipc: Resetting bearer <eth:syzkaller0>
[  323.134700][ T7110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.717'.
[  323.239381][ T7110] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  323.250934][ T7101] tipc: Resetting bearer <eth:syzkaller0>
[  323.415484][ T7116] loop2: detected capacity change from 0 to 2048
[  324.083523][ T7101] tipc: Disabling bearer <eth:syzkaller0>
[  324.139437][ T4224] tipc: Node number set to 2886997007
[  324.146132][ T7116] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2362, location=2362
[  324.173800][ T7116] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  324.186715][ T7116] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  324.209702][ T7116] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  324.221679][ T7119] device syzkaller0 entered promiscuous mode
[  324.273787][ T7119] tc action pedit offset must be on 32 bit boundaries
[  330.423935][ T7154] loop4: detected capacity change from 0 to 64
[  330.433872][ T7151] loop0: detected capacity change from 0 to 64
[  330.556587][ T7151] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  336.148853][ T7236] loop3: detected capacity change from 0 to 40427
[  336.188826][ T7233] loop4: detected capacity change from 0 to 4096
[  336.275234][ T7236] F2FS-fs (loop3): invalid crc value
[  336.301369][ T7236] F2FS-fs (loop3): Found nat_bits in checkpoint
[  336.344743][ T7236] F2FS-fs (loop3): Start checkpoint disabled!
[  336.355582][ T7236] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  337.373916][ T7244] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  337.505517][ T6493] attempt to access beyond end of device
[  337.505517][ T6493] loop3: rw=2049, want=40984, limit=40427
[  341.480027][ T7270] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0)
[  342.521888][ T7274] loop3: detected capacity change from 0 to 1024
[  342.822080][ T7274] EXT4-fs (loop3): Ignoring removed oldalloc option
[  342.835893][ T7274] EXT4-fs (loop3): Ignoring removed bh option
[  342.844834][ T7280] Malformed UNC in devname
[  342.844834][ T7280] 
[  342.852093][ T7280] CIFS: VFS: Malformed UNC in devname
[  343.703697][ T7274] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  344.110810][ T7274] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,usrquota,data_err=ignore,nobarrier,oldalloc,grpquota,noload,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback.
[  346.890714][ T7303] loop2: detected capacity change from 0 to 8
[  347.620619][ T7303] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  349.127746][ T7303] cramfs: Error -5 while decompressing!
[  349.134202][ T7303] cramfs: ffffffff964030c2(26)->ffff8880569f3000(4096)
[  349.141313][ T7303] cramfs: Error -3 while decompressing!
[  349.147024][ T7303] cramfs: ffffffff964030dc(16)->ffff8880569f4000(4096)
[  349.154277][ T7303] cramfs: Error -5 while decompressing!
[  349.159951][ T7303] cramfs: ffffffff964030c2(26)->ffff8880569f3000(4096)
[  349.171319][   T26] audit: type=1800 audit(1774966464.379:98): pid=7303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.771" name="file2" dev="loop2" ino=348 res=0 errno=0
[  349.456610][ T4258] udevd[4258]: incorrect cramfs checksum on /dev/loop2
[  349.571919][ T4266] udevd[4266]: incorrect cramfs checksum on /dev/loop2
[  350.003632][ T4987] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  350.423770][ T4987] usb 4-1: unable to get BOS descriptor or descriptor too short
[  352.413714][ T7026] ==================================================================
[  352.421844][ T7026] BUG: KASAN: use-after-free in __lock_acquire+0x106/0x7d10
[  352.429179][ T7026] Read of size 8 at addr ffff888024a7cbb0 by task gfs2_quotad/7026
[  352.437186][ T7026] 
[  352.439534][ T7026] CPU: 0 PID: 7026 Comm: gfs2_quotad Not tainted syzkaller #0
[  352.447017][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  352.457184][ T7026] Call Trace:
[  352.460503][ T7026]  <TASK>
[  352.463453][ T7026]  dump_stack_lvl+0x188/0x250
[  352.468163][ T7026]  ? show_regs_print_info+0x20/0x20
[  352.473396][ T7026]  ? load_image+0x400/0x400
[  352.477924][ T7026]  ? _raw_spin_lock_irqsave+0xbc/0x100
[  352.483421][ T7026]  ? __lock_acquire+0x13bc/0x7d10
[  352.488487][ T7026]  ? verify_lock_unused+0x140/0x140
[  352.493720][ T7026]  print_address_description+0x60/0x2d0
[  352.499295][ T7026]  ? __lock_acquire+0x106/0x7d10
[  352.504268][ T7026]  kasan_report+0xdf/0x130
[  352.508719][ T7026]  ? __lock_acquire+0x106/0x7d10
[  352.513683][ T7026]  __lock_acquire+0x106/0x7d10
[  352.518497][ T7026]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  352.524517][ T7026]  ? lock_chain_count+0x20/0x20
[  352.529403][ T7026]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  352.534897][ T7026]  ? verify_lock_unused+0x140/0x140
[  352.540170][ T7026]  ? lockdep_hardirqs_off+0x70/0x100
[  352.545611][ T7026]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  352.551582][ T7026]  ? lockdep_hardirqs_on+0x94/0x140
[  352.556986][ T7026]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  352.562914][ T7026]  ? _raw_spin_unlock+0x40/0x40
[  352.567824][ T7026]  lock_acquire+0x19e/0x400
[  352.572369][ T7026]  ? finish_wait+0xb5/0x1d0
[  352.576908][ T7026]  ? timer_delete_sync+0x20/0x20
[  352.581885][ T7026]  ? __mod_timer+0x91e/0xd00
[  352.586504][ T7026]  ? read_lock_is_recursive+0x10/0x10
[  352.591992][ T7026]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  352.597477][ T7026]  ? lockdep_hardirqs_off+0x70/0x100
[  352.602863][ T7026]  _raw_spin_lock_irqsave+0xb0/0x100
[  352.608197][ T7026]  ? finish_wait+0xb5/0x1d0
[  352.612746][ T7026]  ? _raw_spin_lock+0x40/0x40
[  352.617452][ T7026]  ? update_process_times+0x200/0x200
[  352.622986][ T7026]  finish_wait+0xb5/0x1d0
[  352.627349][ T7026]  gfs2_quotad+0x710/0x890
[  352.631810][ T7026]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  352.636952][ T7026]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  352.642875][ T7026]  ? init_wait_entry+0xd0/0xd0
[  352.647670][ T7026]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  352.653590][ T7026]  ? __kthread_parkme+0x157/0x1b0
[  352.658738][ T7026]  kthread+0x436/0x520
[  352.662837][ T7026]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  352.667986][ T7026]  ? kthread_blkcg+0xd0/0xd0
[  352.672607][ T7026]  ret_from_fork+0x1f/0x30
[  352.677065][ T7026]  </TASK>
[  352.680103][ T7026] 
[  352.682457][ T7026] Allocated by task 7007:
[  352.686803][ T7026]  __kasan_kmalloc+0xb5/0xf0
[  352.691434][ T7026]  gfs2_fill_super+0x17d/0x1f00
[  352.696320][ T7026]  get_tree_bdev+0x3f1/0x610
[  352.701027][ T7026]  gfs2_get_tree+0x4d/0x1e0
[  352.705561][ T7026]  vfs_get_tree+0x88/0x270
[  352.710019][ T7026]  do_new_mount+0x24a/0xa40
[  352.714567][ T7026]  __se_sys_mount+0x2e3/0x3d0
[  352.719276][ T7026]  do_syscall_64+0x4c/0xa0
[  352.723724][ T7026]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  352.729656][ T7026] 
[  352.732020][ T7026] Freed by task 4187:
[  352.736014][ T7026]  kasan_set_track+0x4b/0x70
[  352.740632][ T7026]  kasan_set_free_info+0x1f/0x40
[  352.745603][ T7026]  ____kasan_slab_free+0xd5/0x110
[  352.750657][ T7026]  slab_free_freelist_hook+0xea/0x170
[  352.756070][ T7026]  kfree+0xef/0x2a0
[  352.759907][ T7026]  generic_shutdown_super+0x130/0x300
[  352.765307][ T7026]  kill_block_super+0x7c/0xe0
[  352.770101][ T7026]  deactivate_locked_super+0x93/0xf0
[  352.775411][ T7026]  cleanup_mnt+0x42d/0x4e0
[  352.779871][ T7026]  task_work_run+0x125/0x1a0
[  352.784605][ T7026]  exit_to_user_mode_loop+0x10f/0x130
[  352.790024][ T7026]  exit_to_user_mode_prepare+0xee/0x180
[  352.795603][ T7026]  syscall_exit_to_user_mode+0x16/0x40
[  352.801114][ T7026]  do_syscall_64+0x58/0xa0
[  352.805563][ T7026]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  352.811518][ T7026] 
[  352.813986][ T7026] The buggy address belongs to the object at ffff888024a7c000
[  352.813986][ T7026]  which belongs to the cache kmalloc-8k of size 8192
[  352.828161][ T7026] The buggy address is located 2992 bytes inside of
[  352.828161][ T7026]  8192-byte region [ffff888024a7c000, ffff888024a7e000)
[  352.841653][ T7026] The buggy address belongs to the page:
[  352.847425][ T7026] page:ffffea0000929e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24a78
[  352.857637][ T7026] head:ffffea0000929e00 order:3 compound_mapcount:0 compound_pincount:0
[  352.866192][ T7026] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  352.874241][ T7026] raw: 00fff00000010200 ffffea00007b1e00 0000000300000003 ffff888016c42280
[  352.882942][ T7026] raw: 0000000000000000 0000000000020002 00000001ffffffff 0000000000000000
[  352.891552][ T7026] page dumped because: kasan: bad access detected
[  352.898032][ T7026] page_owner tracks the page as allocated
[  352.903763][ T7026] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 6644, ts 278188179488, free_ts 277214223305
[  352.925413][ T7026]  get_page_from_freelist+0x1bbd/0x1ca0
[  352.930997][ T7026]  __alloc_pages+0x1ee/0x480
[  352.935630][ T7026]  new_slab+0xc0/0x4b0
[  352.939807][ T7026]  ___slab_alloc+0x80a/0xdd0
[  352.944427][ T7026]  __kmalloc_node_track_caller+0x1fc/0x3a0
[  352.950350][ T7026]  __alloc_skb+0x22c/0x750
[  352.954801][ T7026]  netlink_dump+0x19f/0xcf0
[  352.959331][ T7026]  netlink_recvmsg+0x672/0xe20
[  352.964119][ T7026]  ____sys_recvmsg+0x2cd/0x5e0
[  352.968909][ T7026]  ___sys_recvmsg+0x21a/0x5c0
[  352.973610][ T7026]  do_recvmmsg+0x382/0x850
[  352.978054][ T7026]  __x64_sys_recvmmsg+0x195/0x250
[  352.983101][ T7026]  do_syscall_64+0x4c/0xa0
[  352.987540][ T7026]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  352.993489][ T7026] page last free stack trace:
[  352.998182][ T7026]  free_unref_page_prepare+0x637/0x6c0
[  353.003669][ T7026]  free_unref_page+0x8f/0x2a0
[  353.008574][ T7026]  __unfreeze_partials+0x1a5/0x200
[  353.013715][ T7026]  put_cpu_partial+0x12d/0x190
[  353.018509][ T7026]  qlist_free_all+0x35/0x90
[  353.023040][ T7026]  kasan_quarantine_reduce+0x150/0x160
[  353.028521][ T7026]  __kasan_slab_alloc+0x2f/0xd0
[  353.033424][ T7026]  slab_post_alloc_hook+0x4c/0x380
[  353.038565][ T7026]  kmem_cache_alloc+0x100/0x290
[  353.043438][ T7026]  getname_flags+0xb5/0x500
[  353.047965][ T7026]  __x64_sys_symlinkat+0x78/0xa0
[  353.052958][ T7026]  do_syscall_64+0x4c/0xa0
[  353.057397][ T7026]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  353.063317][ T7026] 
[  353.065656][ T7026] Memory state around the buggy address:
[  353.071299][ T7026]  ffff888024a7ca80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.079386][ T7026]  ffff888024a7cb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.087476][ T7026] >ffff888024a7cb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.095560][ T7026]                                      ^
[  353.101208][ T7026]  ffff888024a7cc00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.109326][ T7026]  ffff888024a7cc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  353.117406][ T7026] ==================================================================
[  353.125547][ T7026] Disabling lock debugging due to kernel taint
[  353.131729][ T7026] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  353.139034][ T7026] CPU: 0 PID: 7026 Comm: gfs2_quotad Tainted: G    B             syzkaller #0
[  353.147910][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  353.158108][ T7026] Call Trace:
[  353.161500][ T7026]  <TASK>
[  353.164451][ T7026]  dump_stack_lvl+0x188/0x250
[  353.169155][ T7026]  ? show_regs_print_info+0x20/0x20
[  353.174385][ T7026]  ? load_image+0x400/0x400
[  353.178933][ T7026]  panic+0x2e5/0x810
[  353.182951][ T7026]  ? bpf_jit_dump+0xd0/0xd0
[  353.187510][ T7026]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  353.193433][ T7026]  ? _raw_spin_unlock+0x40/0x40
[  353.198318][ T7026]  ? __lock_acquire+0x106/0x7d10
[  353.203288][ T7026]  check_panic_on_warn+0x80/0xa0
[  353.208264][ T7026]  ? __lock_acquire+0x106/0x7d10
[  353.213414][ T7026]  end_report+0x6d/0xf0
[  353.217638][ T7026]  kasan_report+0x102/0x130
[  353.222169][ T7026]  ? __lock_acquire+0x106/0x7d10
[  353.227144][ T7026]  __lock_acquire+0x106/0x7d10
[  353.231971][ T7026]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  353.238076][ T7026]  ? lock_chain_count+0x20/0x20
[  353.242965][ T7026]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  353.248543][ T7026]  ? verify_lock_unused+0x140/0x140
[  353.253835][ T7026]  ? lockdep_hardirqs_off+0x70/0x100
[  353.259167][ T7026]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  353.265103][ T7026]  ? lockdep_hardirqs_on+0x94/0x140
[  353.270338][ T7026]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  353.276358][ T7026]  ? _raw_spin_unlock+0x40/0x40
[  353.281256][ T7026]  lock_acquire+0x19e/0x400
[  353.285808][ T7026]  ? finish_wait+0xb5/0x1d0
[  353.290357][ T7026]  ? timer_delete_sync+0x20/0x20
[  353.295432][ T7026]  ? __mod_timer+0x91e/0xd00
[  353.300071][ T7026]  ? read_lock_is_recursive+0x10/0x10
[  353.305506][ T7026]  ? _raw_spin_lock_irqsave+0x8b/0x100
[  353.310997][ T7026]  ? lockdep_hardirqs_off+0x70/0x100
[  353.316413][ T7026]  _raw_spin_lock_irqsave+0xb0/0x100
[  353.321716][ T7026]  ? finish_wait+0xb5/0x1d0
[  353.326247][ T7026]  ? _raw_spin_lock+0x40/0x40
[  353.330964][ T7026]  ? update_process_times+0x200/0x200
[  353.336382][ T7026]  finish_wait+0xb5/0x1d0
[  353.340730][ T7026]  gfs2_quotad+0x710/0x890
[  353.345188][ T7026]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  353.350307][ T7026]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  353.356199][ T7026]  ? init_wait_entry+0xd0/0xd0
[  353.360969][ T7026]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  353.366876][ T7026]  ? __kthread_parkme+0x157/0x1b0
[  353.372021][ T7026]  kthread+0x436/0x520
[  353.376123][ T7026]  ? gfs2_wake_up_statfs+0xc0/0xc0
[  353.381245][ T7026]  ? kthread_blkcg+0xd0/0xd0
[  353.385855][ T7026]  ret_from_fork+0x1f/0x30
[  353.390299][ T7026]  </TASK>
[  353.393677][ T7026] Kernel Offset: disabled
[  353.405866][ T7026] Rebooting in 86400 seconds..