last executing test programs:

18.827570388s ago: executing program 3 (id=273):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x24}}], 0x20, 0x24000010}}], 0x1, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x40010062, 0x0)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000009000000440003800800010002000000140002007663616e3000000000000000000000000800030000000000140006"], 0x58}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0))
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)={0x38, 0x1403, 0x1, 0x70bd2a, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'wg1\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, 0x0, 0x0)
mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0)

17.717498559s ago: executing program 2 (id=275):
socket$netlink(0x10, 0x3, 0x0)
r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x10, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7020000140000e5b7030000000700008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x4000014)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000040), 0xfe, 0x4f2, &(0x7f0000000b00)="$eJzs3d9rHFsdAPDvTHbvbdpcN1d9uF6wLbaSFO0maWwbfKgKok8Ftb7XmGxDyCZbkk3bhKIp/gGCiAq+6JMvgn+AIP0TRCjou6gooq0++FAd2d3ZmKa7+UE3u97s5wMnc8782O85GebsnJlhJ4ChdTEiJiMiy7LsSkSU8vlpnmKnlRrrvXj+eKGRksiyO39LIsnntT/r7Xx6Lt/sTER87csR30xej7uxtb0yX61W1vPyVH01eZll21eXV+eXKkuVtdnZmRtzN+euz033pJ3jEXHri3/6wXd/9qVbv/r0w9/f/cvkt1oNbNnbjl5qNb3Y/F+0FSJi/SSCDUih2cKW6wOuCwAAB2uc7384Ij4REVeiFCPNszkAAADgNMk+NxYvk9b9PwAAAOB0SiNiLJK0nD/vOxZpWi63nuH9aJxNq7WN+qey0u71gvEopveWq5Xp/NmB8SgmjfJM/oxtu3xtX3k2It6NiO+XRpvl8kKtujjQKx8AAAAwPM7tG///s9Qa/wMAAACnzPigKwAAAACcOON/AAAAOP2M/wEAAOBU+8rt242Utd9/vfhga3Ol9uDqYmVjpby6uVBeqK3fLy/VakvN3+xbPezzqrXa/c/E2uajqXploz61sbV9d7W2uVa/u/zKK7ABAACAPnr3wtPfJRGx89nRNCKyZM+yYkQ2snflQv/rB5yc9Dgr//Hk6gH038igKwAMjFN6GF7FQVcAGLjD+oGuD+/8uvd1AQAATsbEx3bv/zdTw1v5smSgNQNOWn7/P3Gsw/Bx/x+Gl/t/MLyKB50BGBTAqZce4VB/8/v/WXasSgEAAD031kxJWs7HAWORpuVyxDvN1wIUk3vL1cp0RHwoIn5bKr7dKM80t0xcHgAAAAAAAAAAAAAAAAAAAAAAAACAI8qyJLIuRnfXAQAAAD7IItI/J/n7vyZKl8f2Xx94K/lXqTmNiIc/vvPDR/P1+vpMY/7fd+fXf5TPv9bvqxcAAABAJ+1xenscDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC99OL544V26mfcv34hIsY7xS/Emeb0TBQj4uw/kijs2S6JiJEexN95EhHvdYqfNKoV43kt9sdPI2J0wPHP9SA+DLOnjf7n852OvzQuNqedj79Cnt5U9/4v3e3/Rrr0f+90+sD09VnvP/vFVNf4TyLeL3Tuf9rxky7xLx2xjd/4+vZ2t2XZTyMmOn7/JK/EmkoK96c2travLq/OL1WWKmuzszM35m7OXZ+bnrq3XK3kfzvG+N7Hf/mfg9p/tkv88UPaf/mI7f/3s0fPP9LKFvctKsZPsmzyUuf9/16X+O3vvk/mu7tRnmjnd1r5vc7//DfnLxzQ/sUu7T9s/08esf1XvvqdPxxxVQCgDza2tlfmq9XK+vEyScTOG2wuM1yZ0ehj0Pk4aJ32SWwf6vPtPNT/xS44dmZwfRIAAHAy/nfSP+iaAAAAAAAAAAAAAAAAAAAAwPA67GfAogc/J7Y/5s5gmgoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcKD/BgAA//+6ychX")
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r0}, 0x0, &(0x7f0000000280)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_CREATE(0x600000000000000, &(0x7f0000000580)=@base={0xf, 0x4, 0x4, 0x20002, 0x0, 0x1, 0xfffffffd, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)
epoll_create1(0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))

15.62547026s ago: executing program 2 (id=278):
syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56)
setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000800)=0x16c, 0x4)
bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0))
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)

14.371805414s ago: executing program 2 (id=279):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000002040)=ANY=[@ANYBLOB="1e0000000000000005000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x200000000000002f, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sys_enter\x00', r1}, 0x10)
r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x4206, r2)
wait4(r2, 0x0, 0x2, 0x0)

14.257627696s ago: executing program 0 (id=280):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x11, 0x13, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000001480)='sys_enter\x00', r0}, 0x18)
exit(0x0)

13.933397562s ago: executing program 2 (id=281):
socket(0x10, 0x2, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x44, 0x86}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000080)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "8000", 0x30, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "f20700", 0x0, 0x2f, 0x0, @private2, @remote}}}}}}}, 0x0)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x3008c94, &(0x7f0000000400)={[{@dioread_lock}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@quota}, {@norecovery}, {@auto_da_alloc}, {@noquota}, {@grpquota}, {@barrier_val}, {@grpjquota}, {@jqfmt_vfsold}]}, 0x45, 0x7bf, &(0x7f0000000e00)="$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")

11.423312851s ago: executing program 2 (id=282):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @empty}})
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28)
sendto$inet6(r3, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137)
ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000000)={'wlan0\x00'})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1000}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x70bd26, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

11.386926771s ago: executing program 0 (id=283):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES32], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, 0x0, &(0x7f0000000280)={0x0, 0xa, 0x1, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x40, 0xb, 0x2, "479c"}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={0x40, 0x1c, 0x1, 0x6}, 0x0, 0x0})
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)

11.133634736s ago: executing program 1 (id=284):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0040, &(0x7f0000002a00)={[{@noblock_validity}, {@resgid={'resgid', 0x3d, 0xee00}}, {@acl}, {@noload}, {@journal_dev={'journal_dev', 0x3d, 0x8}}, {@nodiscard}]}, 0xfe, 0x472, &(0x7f0000000940)="$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")
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0)
bind$ax25(r1, &(0x7f0000000100)={{0x3, @bcast, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000300)='GPL\x00', 0x5, 0x0, 0x0, 0x41000}, 0x94)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_PORT_GET(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="20000000151401"], 0x20}}, 0x8000)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
ioctl$FS_IOC_GETFSMAP(r4, 0xc0c0583b, &(0x7f0000000240)={0x0, 0x2904c, 0x0, 0x10003, '\x00', [{}, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x200}]})

10.516459998s ago: executing program 3 (id=285):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b"], 0x48)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104000000000000000000000200", @ANYRES32=0x0, @ANYBLOB="0000000002000100240012800b00010065727370616e000014000280060002003000000008"], 0x44}}, 0x0)

9.647280585s ago: executing program 1 (id=286):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000540), &(0x7f0000000a40)=@udp6=r5, 0x2}, 0x20)

9.292908161s ago: executing program 2 (id=287):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1b00000000000000000000000080000000", @ANYRES32=0x0, @ANYRES32], 0x50)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
creat(&(0x7f0000000000)='./file0\x00', 0x6a)
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000200)='.\x00', 0x400)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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")

8.396583349s ago: executing program 1 (id=288):
syz_mount_image$fuse(&(0x7f00000001c0), 0x0, 0x322020, 0x0, 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x33, &(0x7f0000000040)=0x54, 0x56)
setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000014c0)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
close(0xffffffffffffffff)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000800)=0x16c, 0x4)
bind$inet(r5, &(0x7f0000deb000)={0x2, 0x4e23, @multicast2}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x240087f9, &(0x7f0000000100)={0x2, 0x4e23, @loopback}, 0x10)
splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfffd, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
getsockopt$inet6_buf(r0, 0x29, 0x6, 0xffffffffffffffff, &(0x7f00000001c0))
openat$kvm(0xffffffffffffff9c, 0x0, 0x2, 0x0)

8.291913421s ago: executing program 0 (id=289):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000200000006110600000000000c60000000000000095000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x15}, 0x48)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vxcan0\x00', <r2=>0x0})
r3 = epoll_create1(0x0)
r4 = epoll_create1(0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r6}, 0x10)
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000100)={0xa000000d})
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f0000000400)={0xa})
epoll_pwait(r3, &(0x7f0000000080)=[{}], 0x1, 0x4c6, 0x0, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1002}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x1}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00', r7}, 0x18)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, r1, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x34}}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xe7}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x4346b75d}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x2c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xe}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3d}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x4008054}, 0x80)
prlimit64(0x0, 0xe, 0x0, 0x0)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r8, 0xc0502100, &(0x7f0000000180)={<r9=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r8, 0xc0182101, &(0x7f00000000c0)={r9})

7.133688213s ago: executing program 1 (id=290):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
getrlimit(0xf, &(0x7f0000000000))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8032, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000300)=@abs={0x0, 0x0, 0xb}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9)
socket$nl_route(0x10, 0x3, 0x0)
r5 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x4000, &(0x7f0000000080)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x3f, 0x0, 0x0)
write$FUSE_NOTIFY_STORE(r6, &(0x7f0000000040)={0x28, 0x4, 0x0, {0x1, 0x80000000}}, 0x28)

5.74398293s ago: executing program 1 (id=291):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48)
r1 = bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYBLOB="0000000000007b8af8ff00000000bfa20000000000000703000000818432786dd10000000000000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
pipe2$9p(0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r7 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00007f5000/0x1000)=nil, 0x1000, 0xf, 0x11012, r1, 0x0)
ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000a40)=@urb_type_iso={0x0, {0xa, 0x1}, 0xdd6, 0x20, &(0x7f00000003c0)="4440364d6574d24cbafb35cacd3d873197abcbd2d7195c737113086632487463766ffe0f1035204900a17bb80f68230e88dc07202ea6b8861fd3b40bb22cb1577e92bbb80bfe378192b489ab5bc61511de8ddbde", 0x54, 0x1, 0x91, 0x66, 0x4, 0x5, &(0x7f0000000540)="5f0823a4172828d9f40211ab6e9ffeb4e35c867483fa35f6f3e128e20f98853f59163b7222e7f4ab8445b92ab032325a392801d0e402044e1670338bca0603b254ca4273b033ed3226d0aa2bf8df5cb3e491e4279d030377b24e373e15bdda6d7166bfea2bf38b72f78182755e08d5c4636be92acd588fbf276cafefeda70928ccd7fb1997721504f9c3fd2c653b1a8ad8ba68dad017eb11f92c85bf0d6c0cdc190809206821028f653b8658ac15f79e7e44646d280609afda687e669d42cc06053dd4bffae772b88945374c3db59c65b4a3", [{0xfffff737, 0x10001, 0x8000}, {0x5b2, 0x401, 0x7}, {0x4, 0xa, 0x3}, {0x3, 0x8, 0xfffffffe}, {0x2, 0x4, 0x5}, {0xb26, 0x3ff, 0x101}, {0x8, 0x0, 0x980000}, {0x1c0, 0x6, 0x6}, {0xfe01, 0x3, 0x1ff}, {0x3, 0xf, 0x3}, {0x9, 0xdb1, 0x8}, {0x6, 0x5, 0x5}, {0xfffffffe, 0x7d, 0x1}, {0x0, 0x1, 0x2}, {0x0, 0x5, 0x1000000}, {0x0, 0x522, 0x7}, {0x2, 0x4, 0x7}, {0x8001, 0x6, 0x829e}, {0x0, 0x9, 0x113f}, {0xff, 0x6, 0x5}, {0x5, 0xd, 0x3}, {0x10001, 0x6, 0x81}, {0x2, 0x8, 0x1}, {0x200, 0x1, 0x1}, {0x3, 0x32, 0x80}, {0x4, 0x0, 0x4}, {0x3, 0x0, 0x9}, {0x2, 0x4, 0x88}, {0x9, 0x8}, {0x9, 0xb, 0x2}, {0x2, 0x3, 0x80000001}, {0xf, 0x4, 0x1}, {0x9, 0x40, 0x7f}, {0x4, 0x5, 0x9}, {0xde, 0x135, 0x8}, {0x8001, 0xe086, 0x7}, {0x0, 0x2, 0x5}, {0x10001, 0xe, 0xfffffffb}, {0x3, 0x9, 0xff}, {0x0, 0x3b, 0xcd0f}, {0x4, 0x9, 0x1ff}, {0x5, 0x2, 0x91f}, {0x0, 0x8, 0x3}, {0x2, 0xfffffff7, 0x2}, {0x5, 0x5, 0xb}, {0x0, 0x1, 0x9}, {0x8, 0x10, 0x800}, {0x4, 0x9, 0xf}, {0x3, 0x8, 0xffff07e8}, {0x2, 0x2, 0x2}, {0x1, 0x69, 0x7b01}, {0x8, 0x5, 0x8000}, {0x97, 0x1, 0x8001}, {0xe2a, 0x6, 0xb}, {0x1, 0x1ff, 0x8}, {0x1, 0x2}, {0x8000, 0x2, 0x8}, {0xb4, 0x6, 0x1}, {0x6, 0xffffffff, 0x2}, {0x7, 0xffffffff, 0x8}, {0x67f3, 0x9, 0x924}, {0x0, 0x6, 0x7}, {0x591, 0x8, 0xd89}, {0x6, 0x2, 0x1}, {0xb5b2, 0xfffffffe, 0x7}, {0x6f1, 0x5, 0x5}, {0x5, 0x67, 0x4}, {0x331, 0x8, 0x8001}, {0xa3, 0x6e, 0x1}, {0x4, 0x1, 0x8d}, {0x5, 0x8}, {0x0, 0x0, 0x1}, {0x8e, 0x80000001, 0x1}, {0x0, 0x3, 0x6}, {0xbee1, 0x7fffffff, 0x482}, {0x3ff, 0xfc9, 0x100000}, {0x5b9, 0x7, 0x401}, {0x80000001, 0xf9, 0x1}, {0x200, 0x22, 0x8000}, {0x5, 0x4, 0x4000}, {0x2, 0x72f2, 0x6}, {0x6, 0x9, 0x7153}, {0x7f, 0x5, 0x8001}, {0x5, 0xa000000, 0xffffff01}, {0x3480, 0x0, 0xfffffffe}, {0x3, 0xffffddde, 0xb}, {0x1, 0x4, 0x2}, {0x1, 0xfffffffe, 0x6}, {0x8, 0x97, 0xf}, {0x1, 0x8000, 0x3}, {0x12f, 0x7, 0x1ff}, {0x3, 0x2392, 0x6}, {0xfff, 0x7, 0x1f}, {0xfff, 0x6, 0x4}, {0x549d, 0x15, 0xecf}, {0x0, 0x9, 0x80000000}, {0x3, 0xc1f, 0xc}, {0x7, 0x7ff, 0xff}, {0x4, 0xe, 0x80000000}, {0x5, 0x5, 0xffff8000}, {0x8, 0x8000, 0xfff}, {0x5, 0x8, 0x4}]})
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040))

4.462139234s ago: executing program 1 (id=292):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='netlink_extack\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socket$unix(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$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")
r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x143042, 0x0)
pwritev2(r3, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

4.454748514s ago: executing program 0 (id=293):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000006c0), 0x48200, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000006440)='attr\x00')
renameat(r1, &(0x7f00000001c0)='\xe9\x1fq\x89Y\x1e\x923aK/file0\x00', 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x69dfb000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x54)

4.289964067s ago: executing program 3 (id=294):
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00')
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000140)='./file0/file0/../file0\x00', 0x0, 0xa1c08, 0x0)
mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000240)='./file0/file0/../file0\x00', 0x0, 0x2000, 0x0)

4.037469852s ago: executing program 3 (id=295):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000)
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x802, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r4, 0x8955, &(0x7f0000000340)={{0x2, 0x4e23, @empty}, {0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x0, {0x2, 0x0, @empty}})
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x1, &(0x7f00000002c0)=@gcm_128={{0x304}, "45542f745866c700", "7ffdfd042f0fef2e31eea67362f87200", "960ffc3d", "faffffffffffffff"}, 0x28)
sendto$inet6(r3, &(0x7f00000003c0)="d963c9f4e85e727c5964e3143f0f99d23f309eef0a1296e6c7c3704cf6deb8acb341b47e1a60a4a00d725fff3e721fdddd4879fe34dfb940c7e0849e8f3915e8ae01004b9e756c98388bb387ed9f4aa6186f04f561ff629425615736d8b42877970000c03cf51f85a9fbf99e695e98733b538a9dbde6ffa337c9b26bdc72695f05003ec9de5f807dc76e91a7a3db133a8bb5ae4a3c44819aaf56496fbad213f21b1a0a32e2ac17d5069fde917155cb8b1208cd8e08a7c0f480000000", 0x11c259e35b9f2599, 0x0, 0x0, 0x3000137)
ioctl$SIOCSIFHWADDR(r1, 0x8931, &(0x7f0000000000)={'wlan0\x00'})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x14)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x8, 0x13, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4, 0xd}, {0xe, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x1000}, @TCA_FQ_PIE_MEMORY_LIMIT={0x8, 0x8, 0x3}]}}]}, 0x44}}, 0x0)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=@newsa={0xf0, 0x10, 0x1, 0x8000000, 0x0, {{@in=@private=0xa010101, @in6=@empty}, {@in=@local, 0x0, 0x33}, @in=@local, {}, {}, {0x10, 0xd29}, 0x70bd26, 0x0, 0xa, 0x1}}, 0xf0}}, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840)
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000480)={{0x4, 0x0, 0xfffc, 0x805}, 'syz0\x00', 0x40})
ioctl$UI_DEV_CREATE(r0, 0x5501)
write$input_event(r0, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f)

3.231344598s ago: executing program 0 (id=296):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="01000000040000000800000008"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r3}, &(0x7f00000001c0), &(0x7f0000000240)}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x4, 0x4, 0x12}, 0x50)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r4, &(0x7f0000000540), &(0x7f0000000a40)=@udp6=r5, 0x2}, 0x20)

1.534141461s ago: executing program 0 (id=297):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x9)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x1, 0xc32a4cddd557707a)
fallocate(r0, 0x0, 0x0, 0x9000f4)
r1 = open(&(0x7f0000000140)='./file1\x00', 0x141242, 0x40)
pwrite64(r1, &(0x7f0000000940)='2', 0x1, 0x8000c61)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
copy_file_range(r2, 0x0, r3, 0x0, 0xfffffbffa003e45b, 0x700000000000000)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001600), 0x0, 0x0)
ioctl$TCSBRKP(r6, 0x5425, 0x0)
ioctl$TCSETSW2(r6, 0x5425, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x1, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="2daa00000000000061109a000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x90)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)={0x94d9b528e14e6ff3, 0x38, 0x38}, 0x18)
mknodat$loop(r7, &(0x7f0000000080)='./file0\x00', 0x200, 0x1)
r8 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r8, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r8, 0x11b, 0x3, &(0x7f00000001c0)=0x800, 0x4)
r9 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r8, 0x11b, 0x6, &(0x7f0000000040)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r10=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r8, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r8, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10)
syz_emit_ethernet(0x1046, &(0x7f0000000000)=ANY=[@ANYBLOB="01c0c2000000", @ANYRESHEX=r7, @ANYRESOCT=0x0], 0x0)

1.363715224s ago: executing program 3 (id=298):
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000"], 0x48)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYRESOCT=r1, @ANYRESDEC=r1, @ANYBLOB="0000000000007b8af8ff00000000bfa20000000000000703000000818432786dd10000000000000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdir(&(0x7f0000000200)='./bus\x00', 0x10)
r6 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
ioctl$USBDEVFS_REAPURBNDELAY(r6, 0x4008550d, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0)

0s ago: executing program 3 (id=299):
r0 = syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000100)='./file1\x00', 0x1000803, &(0x7f0000002ac0)=ANY=[], 0x0, 0x1fb, &(0x7f0000000b00)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0, 0x0)
fadvise64(r1, 0xaa17, 0xff39, 0x3)
openat$incfs(r0, &(0x7f0000000040)='.log\x00', 0x103000, 0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.134' (ED25519) to the list of known hosts.
[   65.838937][ T5772] cgroup: Unknown subsys name 'net'
[   65.974025][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   67.468322][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   69.144952][ T5792] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   69.153796][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   69.162527][ T5792] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   69.170671][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   69.179015][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   69.186756][ T5792] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   69.194155][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   69.196851][ T5797] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   69.215880][ T5799] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   69.224867][ T5797] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   69.234528][ T5797] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   69.241845][ T5799] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   69.247708][ T5801] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   69.250661][ T5797] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   69.265922][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   69.270656][ T5797] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   69.274157][ T5801] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   69.280323][ T5797] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   69.290112][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   69.302193][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   69.310000][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   69.312853][ T5797] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   69.326812][ T5797] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   69.337601][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   69.694349][ T5785] chnl_net:caif_netlink_parms(): no params data found
[   69.891134][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   69.903178][ T5785] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.911697][ T5785] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.919143][ T5785] bridge_slave_0: entered allmulticast mode
[   69.926692][ T5785] bridge_slave_0: entered promiscuous mode
[   69.937037][ T5785] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.944208][ T5785] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.951467][ T5785] bridge_slave_1: entered allmulticast mode
[   69.958603][ T5785] bridge_slave_1: entered promiscuous mode
[   69.965813][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   70.043141][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   70.070067][ T5785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.087741][ T5785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.173809][ T5785] team0: Port device team_slave_0 added
[   70.202058][ T5785] team0: Port device team_slave_1 added
[   70.250085][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.257406][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.264578][ T5788] bridge_slave_0: entered allmulticast mode
[   70.272635][ T5788] bridge_slave_0: entered promiscuous mode
[   70.319590][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.326836][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.334212][ T5788] bridge_slave_1: entered allmulticast mode
[   70.342665][ T5788] bridge_slave_1: entered promiscuous mode
[   70.350615][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.357759][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.383703][ T5785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.395421][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.402834][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.410128][ T5786] bridge_slave_0: entered allmulticast mode
[   70.417194][ T5786] bridge_slave_0: entered promiscuous mode
[   70.436771][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   70.443934][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   70.451602][ T5787] bridge_slave_0: entered allmulticast mode
[   70.458827][ T5787] bridge_slave_0: entered promiscuous mode
[   70.476039][ T5785] batman_adv: batadv0: Adding interface: batadv_slave_1
[   70.483014][ T5785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.509168][ T5785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   70.520397][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.527948][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.535091][ T5786] bridge_slave_1: entered allmulticast mode
[   70.542152][ T5786] bridge_slave_1: entered promiscuous mode
[   70.560470][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   70.567716][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   70.574859][ T5787] bridge_slave_1: entered allmulticast mode
[   70.581874][ T5787] bridge_slave_1: entered promiscuous mode
[   70.631181][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.653643][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.666869][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.677995][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.689372][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   70.737971][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   70.810190][ T5785] hsr_slave_0: entered promiscuous mode
[   70.817384][ T5785] hsr_slave_1: entered promiscuous mode
[   70.831979][ T5788] team0: Port device team_slave_0 added
[   70.840687][ T5786] team0: Port device team_slave_0 added
[   70.849443][ T5786] team0: Port device team_slave_1 added
[   70.857474][ T5787] team0: Port device team_slave_0 added
[   70.866274][ T5787] team0: Port device team_slave_1 added
[   70.873672][ T5788] team0: Port device team_slave_1 added
[   70.943823][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   70.951306][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   70.978168][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   70.999833][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.007154][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.033712][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.050785][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.057832][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.083764][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.096470][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.103421][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.129431][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.141304][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   71.148658][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.174692][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   71.225866][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   71.232859][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   71.260607][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   71.301908][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[   71.303490][ T5796] Bluetooth: hci3: command tx timeout
[   71.308575][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[   71.375927][ T5796] Bluetooth: hci2: command tx timeout
[   71.381656][ T5796] Bluetooth: hci0: command tx timeout
[   71.387565][ T5797] Bluetooth: hci1: command tx timeout
[   71.394261][ T5786] hsr_slave_0: entered promiscuous mode
[   71.401540][ T5786] hsr_slave_1: entered promiscuous mode
[   71.407847][ T5786] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.415839][ T5786] Cannot create hsr debugfs directory
[   71.461836][ T5788] hsr_slave_0: entered promiscuous mode
[   71.468384][ T5788] hsr_slave_1: entered promiscuous mode
[   71.474668][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.482309][ T5788] Cannot create hsr debugfs directory
[   71.495438][ T5787] hsr_slave_0: entered promiscuous mode
[   71.502356][ T5787] hsr_slave_1: entered promiscuous mode
[   71.509549][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   71.517577][ T5787] Cannot create hsr debugfs directory
[   71.747610][ T5785] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   71.759299][ T5785] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   71.800154][ T5785] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   71.811272][ T5785] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   71.957295][ T5787] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   71.970176][ T5787] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   71.980379][ T5787] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   72.018338][ T5787] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   72.064059][ T5788] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   72.073933][ T5788] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   72.098253][ T5788] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   72.109559][ T5788] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   72.173070][ T5785] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.200553][ T5786] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   72.212689][ T5786] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   72.223296][ T5786] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   72.251020][ T5786] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   72.280446][ T5785] 8021q: adding VLAN 0 to HW filter on device team0
[   72.306545][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.313766][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.351266][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.358454][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.411672][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.456433][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   72.475149][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.482314][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.511166][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.531883][ T1070] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.539058][ T1070] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.593114][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   72.649037][ T5788] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   72.661864][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   72.681442][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.688566][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.698098][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.705184][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.785352][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   72.888070][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   72.933365][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[   72.940590][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[   72.958281][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[   72.965434][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[   72.991764][ T5785] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.024981][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.134629][ T5785] veth0_vlan: entered promiscuous mode
[   73.182271][ T5785] veth1_vlan: entered promiscuous mode
[   73.199879][ T5788] veth0_vlan: entered promiscuous mode
[   73.232401][ T5788] veth1_vlan: entered promiscuous mode
[   73.291190][ T5785] veth0_macvtap: entered promiscuous mode
[   73.320000][ T5788] veth0_macvtap: entered promiscuous mode
[   73.334691][ T5785] veth1_macvtap: entered promiscuous mode
[   73.365462][ T5788] veth1_macvtap: entered promiscuous mode
[   73.376311][ T5796] Bluetooth: hci3: command tx timeout
[   73.412997][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.431721][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.454526][ T5785] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.466409][ T5796] Bluetooth: hci0: command tx timeout
[   73.466429][ T5797] Bluetooth: hci1: command tx timeout
[   73.471809][ T5801] Bluetooth: hci2: command tx timeout
[   73.493942][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   73.505232][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.518085][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   73.531289][ T5785] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.542053][ T5785] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.551814][ T5785] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.560790][ T5785] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.607371][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   73.624039][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   73.635482][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   73.647912][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   73.680285][ T5788] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   73.689897][ T5788] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   73.700427][ T5788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   73.709727][ T5788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   73.760463][ T5787] veth0_vlan: entered promiscuous mode
[   73.790288][ T5787] veth1_vlan: entered promiscuous mode
[   73.836072][   T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.844080][   T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.906488][   T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.921336][ T5787] veth0_macvtap: entered promiscuous mode
[   73.928936][   T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.938833][ T5786] veth0_vlan: entered promiscuous mode
[   73.949506][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.957184][ T5787] veth1_macvtap: entered promiscuous mode
[   73.963709][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.024001][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.035116][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.045360][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.057427][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.069388][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.094692][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.117821][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.127812][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.138513][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.149694][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.164295][ T5786] veth1_vlan: entered promiscuous mode
[   74.179197][ T1070] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.198308][ T1070] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.208947][ T5787] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   74.228726][ T5787] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   74.239747][ T5787] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   74.265770][ T5787] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   74.304586][ T5871] veth0: entered promiscuous mode
[   74.319485][ T5870] veth0: left promiscuous mode
[   74.327682][ T5786] veth0_macvtap: entered promiscuous mode
[   74.354019][ T5786] veth1_macvtap: entered promiscuous mode
[   74.444365][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.475034][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.489460][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.519898][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.540722][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   74.558196][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.571413][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   74.681139][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.694462][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.708038][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.725402][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.735457][ T5786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   74.747312][ T5786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   74.759828][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   74.769452][ T5875] netlink: 'syz.2.5': attribute type 3 has an invalid length.
[   74.774043][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.778181][ T5875] netlink: 'syz.2.5': attribute type 3 has an invalid length.
[   74.789353][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.792570][ T5875] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'.
[   75.285755][ T5880] usb usb1: check_ctrlrecip: process 5880 (syz.2.5) requesting ep 01 but needs 81
[   75.456408][ T5801] Bluetooth: hci3: command tx timeout
[   75.537061][ T5801] Bluetooth: hci2: command tx timeout
[   75.543987][ T5801] Bluetooth: hci0: command tx timeout
[   75.549894][ T5796] Bluetooth: hci1: command tx timeout
[   75.591333][ T5786] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   75.602828][ T5786] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   75.612022][ T5786] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   75.621576][ T5786] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   75.678032][ T3470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.706578][ T3470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   75.886990][ T3470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   75.902912][ T3470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.060364][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   76.076369][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   76.233814][ T5887] netlink: 64 bytes leftover after parsing attributes in process `syz.0.7'.
[   76.357707][ T5888] 9pnet_fd: Insufficient options for proto=fd
[   77.183218][ T5893] syz.2.9[5893]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   77.535721][ T5801] Bluetooth: hci3: command tx timeout
[   77.615940][ T5797] Bluetooth: hci2: command tx timeout
[   77.622010][ T5796] Bluetooth: hci1: command tx timeout
[   77.627811][ T5801] Bluetooth: hci0: command tx timeout
[   80.408227][ T5912] loop0: detected capacity change from 0 to 2048
[   81.028352][ T5912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   81.455590][    C0] sched: RT throttling activated
[   82.391268][ T5928] loop1: detected capacity change from 0 to 512
[   82.404713][ T5928] EXT4-fs: Ignoring removed nomblk_io_submit option
[   84.091931][ T5928] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal
[   84.537400][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.426252][ T5838] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   85.701853][ T5941] xt_TPROXY: Can be used only with -p tcp or -p udp
[   86.061260][ T5838] usb 4-1: config 0 has an invalid descriptor of length 125, skipping remainder of the config
[   86.086143][ T5838] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   86.095168][ T5838] usb 4-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[   86.115934][ T5838] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.159616][ T5838] usb 4-1: config 0 descriptor??
[   86.617084][ T5933] loop2: detected capacity change from 0 to 40427
[   86.768551][    T8] cfg80211: failed to load regulatory.db
[   86.790614][ T5933] F2FS-fs (loop2): Found nat_bits in checkpoint
[   86.886901][ T5950] netlink: 28 bytes leftover after parsing attributes in process `syz.1.18'.
[   88.956658][ T5933] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   90.482779][ T5851] usb 4-1: USB disconnect, device number 2
[   90.893065][ T5974] overlayfs: failed to resolve './file0': -2
[   90.953592][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[   90.962031][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state
[   90.972716][ T5974] bridge0: entered allmulticast mode
[   91.052733][ T5972] serio: Serial port ptm0
[   91.701692][ T5979] loop0: detected capacity change from 0 to 512
[   91.726553][ T5979] =======================================================
[   91.726553][ T5979] WARNING: The mand mount option has been deprecated and
[   91.726553][ T5979]          and is ignored by this kernel. Remove the mand
[   91.726553][ T5979]          option from the mount to silence this warning.
[   91.726553][ T5979] =======================================================
[   91.761502][    C0] vkms_vblank_simulate: vblank timer overrun
[   91.982038][ T5979] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.24: iget: bad extended attribute block 1
[   92.246499][ T5988] overlayfs: failed to resolve './file0': -2
[   93.179306][ T5994] netlink: 28 bytes leftover after parsing attributes in process `syz.1.27'.
[   93.220460][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state
[   93.228160][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state
[   93.237074][ T5990] bridge0: entered allmulticast mode
[   93.467231][ T5979] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.24: couldn't read orphan inode 15 (err -117)
[   93.507701][ T5979] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.952503][ T5999] ip6gretap1: entered allmulticast mode
[   93.959836][ T5999] bridge0: port 3(ip6gretap1) entered blocking state
[   93.966722][ T5999] bridge0: port 3(ip6gretap1) entered disabled state
[   93.976244][ T5999] ip6gretap1: entered promiscuous mode
[   93.982500][ T5999] bridge0: port 3(ip6gretap1) entered blocking state
[   93.989361][ T5999] bridge0: port 3(ip6gretap1) entered forwarding state
[   94.015469][ T5999] bridge0: port 4(syz_tun) entered blocking state
[   94.022285][ T5999] bridge0: port 4(syz_tun) entered disabled state
[   94.029111][ T5999] syz_tun: entered allmulticast mode
[   94.036652][ T5999] syz_tun: entered promiscuous mode
[   94.043649][ T5999] bridge0: port 4(syz_tun) entered blocking state
[   94.050515][ T5999] bridge0: port 4(syz_tun) entered forwarding state
[   95.451877][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.751475][ T6018] loop3: detected capacity change from 0 to 512
[   95.758896][ T6016] usb usb1: check_ctrlrecip: process 6016 (syz.0.35) requesting ep 01 but needs 81
[   96.866248][ T6021] overlayfs: failed to resolve './file0': -2
[   97.450254][ T6018] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   97.591363][ T6025] netlink: 28 bytes leftover after parsing attributes in process `syz.1.37'.
[   97.707315][ T6018] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   97.867318][ T6018] EXT4-fs (loop3): 1 truncate cleaned up
[   97.874245][ T6018] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.389530][ T6029] overlayfs: failed to resolve './file0': -2
[   98.666352][ T6029] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.674047][ T6029] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.683462][ T6029] bridge0: entered allmulticast mode
[   98.804455][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.455211][ T6040] cgroup: No subsys list or none specified
[  100.033976][ T6033] syz.2.39 (6033) used greatest stack depth: 17960 bytes left
[  100.065901][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  100.336377][ T6057] netlink: 'syz.2.46': attribute type 3 has an invalid length.
[  100.344197][ T6057] netlink: 'syz.2.46': attribute type 3 has an invalid length.
[  100.351922][ T6057] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'.
[  100.650859][ T6056] usb usb1: check_ctrlrecip: process 6056 (syz.2.46) requesting ep 01 but needs 81
[  101.230267][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  101.624501][ T6067] overlayfs: failed to resolve './file0': -2
[  102.459239][ T6069] loop2: detected capacity change from 0 to 512
[  102.489831][ T6069] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  102.578805][ T6069] EXT4-fs (loop2): 1 truncate cleaned up
[  102.599751][ T6069] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  102.780752][ T6076] loop3: detected capacity change from 0 to 512
[  102.866716][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  102.981461][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.632899][ T6086] overlayfs: failed to resolve './file0': -2
[  103.775863][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  103.800557][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.902949][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  103.946810][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  104.005300][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  104.160170][    T0] NOHZ tick-stop error: local softirq work is pending, handler #01!!!
[  104.294059][ T6087] bridge0: port 4(syz_tun) entered disabled state
[  104.300760][ T6087] bridge0: port 3(ip6gretap1) entered disabled state
[  104.307681][ T6087] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.315232][ T6087] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.324265][ T6087] bridge0: entered allmulticast mode
[  104.422086][ T6076] EXT4-fs: Ignoring removed nomblk_io_submit option
[  104.456503][ T6076] EXT4-fs (loop3): Test dummy encryption mode enabled
[  104.478351][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[  104.490136][ T6074] input: syz0 as /devices/virtual/input/input5
[  104.506913][ T6076] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2867: Unable to expand inode 17. Delete some EAs or run e2fsck.
[  104.539413][ T6076] EXT4-fs (loop3): 1 truncate cleaned up
[  104.543747][ T6092] loop2: detected capacity change from 0 to 512
[  104.586471][ T6076] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.650653][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.53: iget: bad extended attribute block 1
[  104.740725][ T6092] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.53: couldn't read orphan inode 15 (err -117)
[  104.863465][ T6092] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  104.901143][ T6092] netlink: 16 bytes leftover after parsing attributes in process `syz.2.53'.
[  104.910457][ T6071] EXT4-fs error (device loop2): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 13: invalid block bitmap
[  104.935205][ T6092] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  105.025303][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.345865][ T6071] EXT4-fs error (device loop3): ext4_validate_block_bitmap:430: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  105.424483][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.507698][ T6106] netlink: 'syz.2.55': attribute type 3 has an invalid length.
[  105.516885][ T6106] netlink: 'syz.2.55': attribute type 3 has an invalid length.
[  105.524742][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.2.55'.
[  105.934271][ T6106] usb usb1: check_ctrlrecip: process 6106 (syz.2.55) requesting ep 01 but needs 81
[  105.943747][ T6106] usb usb1: usbfs: process 6106 (syz.2.55) did not claim interface 0 before use
[  106.589076][ T6114] loop3: detected capacity change from 0 to 128
[  106.805850][ T6119] overlayfs: failed to resolve './file0': -2
[  107.775373][ T6123] loop1: detected capacity change from 0 to 512
[  107.828479][ T6123] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  107.873975][ T6123] EXT4-fs (loop1): 1 truncate cleaned up
[  107.883243][ T6123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.935792][ T5851] usb 3-1: new full-speed USB device number 2 using dummy_hcd
[  107.993675][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.137881][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.291833][ T6130] loop3: detected capacity change from 0 to 128
[  108.360723][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  108.372788][ T5851] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  108.384127][ T5851] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  108.393492][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.411865][ T5851] usb 3-1: config 0 descriptor??
[  108.443449][ T6121] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  109.574906][ T5851] nzxt-smart2 0003:1E71:2019.0001: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.2-1/input0
[  109.644793][ T6141] loop0: detected capacity change from 0 to 512
[  109.832738][ T5851] usb 3-1: USB disconnect, device number 2
[  110.067127][ T6141] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.63: iget: bad extended attribute block 1
[  110.141304][ T6141] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.63: couldn't read orphan inode 15 (err -117)
[  110.197025][ T6141] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.223840][ T6137] input: syz0 as /devices/virtual/input/input6
[  110.282771][ T6142] fido_id[6142]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  110.333505][ T6130] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  110.341559][ T6141] netlink: 16 bytes leftover after parsing attributes in process `syz.0.63'.
[  110.352469][ T6141] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  110.478065][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.848306][ T6156] loop2: detected capacity change from 0 to 256
[  113.274352][ T6156] FAT-fs (loop2): Directory bread(block 64) failed
[  113.281583][ T6156] FAT-fs (loop2): Directory bread(block 65) failed
[  113.288812][ T6156] FAT-fs (loop2): Directory bread(block 66) failed
[  113.295454][ T6156] FAT-fs (loop2): Directory bread(block 67) failed
[  113.303096][ T6156] FAT-fs (loop2): Directory bread(block 68) failed
[  113.309833][ T6156] FAT-fs (loop2): Directory bread(block 69) failed
[  113.316989][ T6156] FAT-fs (loop2): Directory bread(block 70) failed
[  113.324116][ T6156] FAT-fs (loop2): Directory bread(block 71) failed
[  113.331278][ T6156] FAT-fs (loop2): Directory bread(block 72) failed
[  113.337971][ T6156] FAT-fs (loop2): Directory bread(block 73) failed
[  115.149045][ T6173] loop3: detected capacity change from 0 to 512
[  115.262855][ T6166] input: syz0 as /devices/virtual/input/input7
[  116.215776][ T6173] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  116.263140][ T6173] EXT4-fs (loop3): 1 truncate cleaned up
[  116.289267][ T6173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.295897][ T6179] loop2: detected capacity change from 0 to 32768
[  116.316417][ T6179] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.70 (6179)
[  116.341482][ T6179] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  116.352651][ T6179] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  116.361437][ T6179] BTRFS info (device loop2): metadata ratio 5
[  116.367595][ T6179] BTRFS info (device loop2): doing ref verification
[  116.374196][ T6179] BTRFS info (device loop2): use zlib compression, level 3
[  116.381688][ T6179] BTRFS info (device loop2): setting nodatasum
[  116.387919][ T6179] BTRFS info (device loop2): doing ref verification
[  116.394515][ T6179] BTRFS info (device loop2): metadata ratio 0
[  116.401388][ T6179] BTRFS info (device loop2): using free space tree
[  116.535778][ T6179] BTRFS info (device loop2): enabling ssd optimizations
[  116.542830][ T6179] BTRFS info (device loop2): auto enabling async discard
[  116.561728][ T6179] BTRFS info (device loop2): checking UUID tree
[  116.596718][   T11] BTRFS warning (device loop2): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  116.617884][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.673431][   T28] audit: type=1326 audit(1753752756.888:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  116.726345][ T6179] BTRFS: error (device loop2) in btrfs_fill_super:1172: errno=-5 IO failure
[  116.749893][ T6179] BTRFS error (device loop2: state E): commit super ret -30
[  116.850810][   T28] audit: type=1326 audit(1753752756.888:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  117.803798][   T28] audit: type=1326 audit(1753752756.898:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  117.852667][   T28] audit: type=1326 audit(1753752756.898:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  117.917872][   T28] audit: type=1326 audit(1753752756.898:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  118.008156][   T28] audit: type=1326 audit(1753752756.898:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  118.012549][ T6211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'.
[  118.046856][   T28] audit: type=1326 audit(1753752756.898:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  118.378055][   T28] audit: type=1326 audit(1753752756.898:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  118.575846][ T5903] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  118.745133][   T28] audit: type=1326 audit(1753752756.898:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  118.829975][   T28] audit: type=1326 audit(1753752756.898:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6198 comm="syz.1.71" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fb10b18e9a9 code=0x7ffc0000
[  118.928741][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  118.968634][ T6216] netlink: 16 bytes leftover after parsing attributes in process `syz.2.75'.
[  118.997705][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  119.036163][ T5903] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  119.064484][ T5903] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  119.084445][ T5903] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  119.103698][ T5903] usb 2-1: config 0 descriptor??
[  119.115411][ T6208] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  120.203732][ T5903] nzxt-smart2 0003:1E71:2019.0002: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.1-1/input0
[  120.442241][ T5903] usb 2-1: USB disconnect, device number 2
[  120.950064][ T6230] loop2: detected capacity change from 0 to 256
[  121.051680][ T6230] FAT-fs (loop2): Directory bread(block 64) failed
[  121.058502][ T6230] FAT-fs (loop2): Directory bread(block 65) failed
[  121.065644][ T6230] FAT-fs (loop2): Directory bread(block 66) failed
[  121.072297][ T6230] FAT-fs (loop2): Directory bread(block 67) failed
[  121.079522][ T6230] FAT-fs (loop2): Directory bread(block 68) failed
[  121.086231][ T6230] FAT-fs (loop2): Directory bread(block 69) failed
[  121.093389][ T6230] FAT-fs (loop2): Directory bread(block 70) failed
[  121.100134][ T6230] FAT-fs (loop2): Directory bread(block 71) failed
[  121.107911][ T6230] FAT-fs (loop2): Directory bread(block 72) failed
[  121.114554][ T6230] FAT-fs (loop2): Directory bread(block 73) failed
[  122.869320][ T6237] loop1: detected capacity change from 0 to 32768
[  122.907709][ T6237] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.81 (6237)
[  123.316601][ T6237] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.326943][ T6237] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  123.335764][ T6237] BTRFS info (device loop1): metadata ratio 5
[  123.341891][ T6237] BTRFS info (device loop1): doing ref verification
[  123.351176][ T6237] BTRFS info (device loop1): use zlib compression, level 3
[  123.361679][ T6237] BTRFS info (device loop1): setting nodatasum
[  123.368323][ T6237] BTRFS info (device loop1): doing ref verification
[  123.374954][ T6237] BTRFS info (device loop1): metadata ratio 0
[  123.381170][ T6237] BTRFS info (device loop1): using free space tree
[  123.449295][ T6237] BTRFS info (device loop1): enabling ssd optimizations
[  123.457254][ T6237] BTRFS info (device loop1): auto enabling async discard
[  123.469025][ T6237] BTRFS info (device loop1): checking UUID tree
[  123.477637][ T2933] BTRFS warning (device loop1): checksum verify failed on logical 5308416 mirror 1 wanted 0xd4609d39f93149eb642131fc554cdd928b1b5bc79f9afd76b642bc2169ff2654 found 0x947a0a1eec88a54dbf20a1a8d6b6dd946bccf52dadb115fb5db895743b8984fa level 0
[  123.504794][ T6237] BTRFS: error (device loop1) in btrfs_fill_super:1172: errno=-5 IO failure
[  123.519640][ T6237] BTRFS error (device loop1: state E): commit super ret -30
[  123.644180][ T6263] loop0: detected capacity change from 0 to 512
[  123.691348][ T6263] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.84: iget: bad extended attribute block 1
[  123.705669][ T5778] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by udevd (5778)
[  123.789252][ T6263] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.84: couldn't read orphan inode 15 (err -117)
[  123.889792][ T6263] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.003906][ T6263] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'.
[  124.014785][ T6263] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  124.273213][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.414491][ T6277] loop3: detected capacity change from 0 to 40427
[  126.437390][ T6277] F2FS-fs (loop3): heap/no_heap options were deprecated
[  126.466602][ T6277] F2FS-fs (loop3): invalid crc value
[  127.445920][ T6277] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4)
[  132.284657][ T6302] loop0: detected capacity change from 0 to 1024
[  132.313352][ T6302] EXT4-fs: Ignoring removed orlov option
[  132.345445][ T6302] EXT4-fs: Ignoring removed nomblk_io_submit option
[  132.383104][ T6302] EXT4-fs: Mount option(s) incompatible with ext2
[  132.739716][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.747089][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.709987][ T6305] xt_CT: No such helper "snmp"
[  136.342119][ T6316] loop2: detected capacity change from 0 to 512
[  136.405692][ T6316] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  136.480705][ T6316] EXT4-fs (loop2): 1 truncate cleaned up
[  136.511308][ T6316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.692356][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.115837][ T5852] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  137.154576][ T6327] loop1: detected capacity change from 0 to 512
[  137.175411][ T6327] EXT4-fs: Ignoring removed nomblk_io_submit option
[  137.211271][ T6327] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  137.290544][ T6327] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.340218][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  137.372356][ T6327] ext4 filesystem being mounted at /30/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  137.393253][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  137.447947][ T5852] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  137.493994][ T5852] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  137.523574][   T28] kauditd_printk_skb: 35 callbacks suppressed
[  137.523591][   T28] audit: type=1800 audit(1753752777.748:47): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.99" name="file2" dev="loop1" ino=16 res=0 errno=0
[  138.242225][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.344330][ T5852] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.394758][ T5852] usb 3-1: config 0 descriptor??
[  138.409818][ T6324] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  138.646673][ T6340] loop3: detected capacity change from 0 to 16
[  138.689623][ T6340] erofs: (device loop3): erofs_read_inode: unsupported chunk format ffff of nid 36
[  138.841547][ T5852] nzxt-smart2 0003:1E71:2019.0003: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.2-1/input0
[  138.868564][ T6342] overlayfs: failed to resolve './file0': -2
[  139.020603][ T6339] xt_TPROXY: Can be used only with -p tcp or -p udp
[  139.088402][ T5778] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  139.290973][ T5852] usb 3-1: USB disconnect, device number 3
[  139.378200][ T6348] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  140.596100][ T6359] loop3: detected capacity change from 0 to 512
[  140.640078][ T6359] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.107: iget: bad extended attribute block 1
[  140.668098][ T6359] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.107: couldn't read orphan inode 15 (err -117)
[  140.751625][ T6363] syz.2.106 uses obsolete (PF_INET,SOCK_PACKET)
[  141.070298][ T6359] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.225439][ T6359] netlink: 16 bytes leftover after parsing attributes in process `syz.3.107'.
[  142.252015][ T6359] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  142.461840][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.530855][ T6368] loop2: detected capacity change from 0 to 4096
[  142.611497][ T6368] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  143.558785][ T6377] capability: warning: `syz.3.111' uses deprecated v2 capabilities in a way that may be insecure
[  143.733056][ T6380] loop3: detected capacity change from 0 to 1024
[  143.786806][ T6380] EXT4-fs: Ignoring removed orlov option
[  143.808667][ T6380] EXT4-fs: Ignoring removed nomblk_io_submit option
[  143.827305][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.933681][ T6383] overlayfs: failed to resolve './file0': -2
[  144.212167][ T6380] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.803550][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.206275][ T6395] overlayfs: failed to resolve './file0': -2
[  146.702721][ T6398] loop0: detected capacity change from 0 to 512
[  147.404855][ T6398] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.418238][ T6398] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.431735][ T6398] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.147098][ T6423] loop0: detected capacity change from 0 to 256
[  150.203540][ T6423] FAT-fs (loop0): Directory bread(block 64) failed
[  150.210411][ T6423] FAT-fs (loop0): Directory bread(block 65) failed
[  150.217126][ T6423] FAT-fs (loop0): Directory bread(block 66) failed
[  150.223683][ T6423] FAT-fs (loop0): Directory bread(block 67) failed
[  150.230371][ T6423] FAT-fs (loop0): Directory bread(block 68) failed
[  150.236994][ T6423] FAT-fs (loop0): Directory bread(block 69) failed
[  150.243609][ T6423] FAT-fs (loop0): Directory bread(block 70) failed
[  150.250186][ T6423] FAT-fs (loop0): Directory bread(block 71) failed
[  150.257083][ T6423] FAT-fs (loop0): Directory bread(block 72) failed
[  150.263716][ T6423] FAT-fs (loop0): Directory bread(block 73) failed
[  150.757435][ T6417] loop2: detected capacity change from 0 to 1024
[  150.814384][ T6417] EXT4-fs: Ignoring removed orlov option
[  150.877161][ T6417] EXT4-fs: Ignoring removed nomblk_io_submit option
[  150.981740][ T6417] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.600563][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.698058][ T6436] loop3: detected capacity change from 0 to 512
[  151.717822][ T6436] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  151.749953][ T6436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  151.760763][ T6436] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.125: corrupted in-inode xattr: e_value size too large
[  151.789382][ T6436] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.125: couldn't read orphan inode 15 (err -117)
[  151.804449][ T6436] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.085978][ T5851] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  152.317927][ T6443] overlayfs: failed to resolve './file0': -2
[  153.547968][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  153.574639][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  153.585676][ T5851] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  153.596817][ T5851] usb 2-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  153.607107][ T5851] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.401672][ T5851] usb 2-1: config 0 descriptor??
[  154.559655][ T6459] loop2: detected capacity change from 0 to 1024
[  154.587561][ T6459] EXT4-fs: Ignoring removed oldalloc option
[  154.629379][ T5851] usb 2-1: can't set config #0, error -71
[  154.636818][ T5851] usb 2-1: USB disconnect, device number 3
[  154.643801][ T6459] EXT4-fs: Ignoring removed bh option
[  154.655651][ T6459] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  154.726702][ T6461] loop0: detected capacity change from 0 to 512
[  154.830301][ T6461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.843235][ T6461] ext4 filesystem being mounted at /32/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.855747][ T6461] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.951133][ T6459] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.116861][   T28] audit: type=1800 audit(1753752796.228:48): pid=6470 uid=60929 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.133" name="file1" dev="loop2" ino=15 res=0 errno=0
[  156.197613][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.358199][ T6484] overlayfs: failed to resolve './file0': -2
[  159.947071][    T8] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  160.259594][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  160.302420][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1088, setting to 64
[  160.329819][    T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  160.346356][    T8] usb 3-1: New USB device found, idVendor=1e71, idProduct=2019, bcdDevice= 0.00
[  160.361456][    T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.387207][    T8] usb 3-1: config 0 descriptor??
[  160.395388][ T6495] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  160.960419][    T8] nzxt-smart2 0003:1E71:2019.0004: hidraw0: USB HID v0.07 Device [HID 1e71:2019] on usb-dummy_hcd.2-1/input0
[  161.131606][    T8] usb 3-1: USB disconnect, device number 4
[  161.211573][ T6505] fido_id[6505]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  161.749264][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.479381][ T6514] loop2: detected capacity change from 0 to 512
[  162.553524][ T6514] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.148: iget: bad extended attribute block 1
[  162.655855][ T6514] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.148: couldn't read orphan inode 15 (err -117)
[  162.713731][ T6514] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.830541][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.2.148'.
[  162.840832][ T6514] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  163.867801][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.508876][ T6535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.154'.
[  164.522689][ T6535] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'.
[  164.578040][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'.
[  164.664471][ T6537] loop2: detected capacity change from 0 to 256
[  164.680837][ T6537] FAT-fs (loop2): "posix" option is obsolete, not supported now
[  166.660995][ T6547] loop3: detected capacity change from 0 to 512
[  166.805181][ T6547] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  166.867276][ T6547] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  166.878188][ T6547] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.156: corrupted in-inode xattr: e_value size too large
[  166.899835][ T6547] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.156: couldn't read orphan inode 15 (err -117)
[  166.922941][ T6547] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.539250][ T6551] loop1: detected capacity change from 0 to 512
[  167.610061][ T6551] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.158: iget: bad extended attribute block 1
[  167.692556][ T6551] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.158: couldn't read orphan inode 15 (err -117)
[  167.758235][ T6551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.435009][ T6554] netlink: 16 bytes leftover after parsing attributes in process `syz.1.158'.
[  168.452773][ T6554] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  168.627387][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.649744][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.489318][ T6584] loop3: detected capacity change from 0 to 1024
[  170.577895][ T6584] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  170.749029][ T6584] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  170.773256][ T6584] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.375157][ T6593] 9pnet_fd: Insufficient options for proto=fd
[  172.532313][ T6600] loop2: detected capacity change from 0 to 512
[  172.552852][ T5903] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  172.702973][ T6600] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  172.759855][ T6600] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  172.776064][ T6600] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.169: corrupted in-inode xattr: e_value size too large
[  172.795953][ T6600] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.169: couldn't read orphan inode 15 (err -117)
[  172.816820][ T6600] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.020719][ T5903] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.313610][ T5903] usb 4-1: config 0 has no interfaces?
[  173.338564][ T5903] usb 4-1: New USB device found, idVendor=1457, idProduct=5118, bcdDevice=cf.91
[  173.421607][ T5903] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.469744][ T5903] usb 4-1: config 0 descriptor??
[  173.507729][ T5903] usb 4-1: can't set config #0, error -71
[  173.526795][ T5903] usb 4-1: USB disconnect, device number 3
[  173.610888][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.986006][ T6604] loop1: detected capacity change from 0 to 2048
[  174.108309][ T6604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.411550][ T6610] Illegal XDP return value 1465253931 on prog  (id 76) dev N/A, expect packet loss!
[  174.518428][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.864437][ T6618] bridge0: port 3(syz_tun) entered blocking state
[  174.872298][ T6618] bridge0: port 3(syz_tun) entered disabled state
[  174.881673][ T6618] syz_tun: entered allmulticast mode
[  174.897861][ T6618] syz_tun: entered promiscuous mode
[  175.812294][ T6622] loop0: detected capacity change from 0 to 512
[  175.831380][ T6622] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  176.558096][ T6622] EXT4-fs (loop0): 1 truncate cleaned up
[  176.621625][ T6622] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.866265][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.473281][ T6656] loop3: detected capacity change from 0 to 512
[  180.518716][ T6656] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  180.682193][ T6656] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  180.715811][ T6656] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2244: inode #15: comm syz.3.184: corrupted in-inode xattr: e_value size too large
[  180.744307][ T6656] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.184: couldn't read orphan inode 15 (err -117)
[  180.768749][ T6656] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  181.853722][ T6662] loop2: detected capacity change from 0 to 256
[  182.401441][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.369738][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.571689][ T6683] input: syz0 as /devices/virtual/input/input8
[  189.131271][ T6723] loop1: detected capacity change from 0 to 2048
[  189.733168][ T6723] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.460954][ T6730] input: syz0 as /devices/virtual/input/input9
[  192.928127][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.125880][ T6746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.208'.
[  194.182482][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.238649][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.857921][ T6766] netlink: 'syz.0.212': attribute type 3 has an invalid length.
[  194.866751][ T6766] netlink: 'syz.0.212': attribute type 3 has an invalid length.
[  194.874665][ T6766] netlink: 12 bytes leftover after parsing attributes in process `syz.0.212'.
[  195.681263][ T6762] loop3: detected capacity change from 0 to 512
[  195.736561][ T6762] EXT4-fs: Ignoring removed mblk_io_submit option
[  195.774951][ T6762] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -13
[  195.830623][ T6762] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #13: comm syz.3.213: attempt to clear invalid blocks 2 len 1
[  195.942893][ T6762] EXT4-fs (loop3): Remounting filesystem read-only
[  195.963660][ T6762] EXT4-fs (loop3): 1 truncate cleaned up
[  195.993590][ T6762] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.015866][ T6777] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  196.175953][   T42] Bluetooth: hci4: Frame reassembly failed (-84)
[  196.335698][ T5103] Bluetooth: hci1: command 0x0406 tx timeout
[  196.342016][ T5799] Bluetooth: hci3: command 0x0406 tx timeout
[  197.399083][ T5103] Bluetooth: hci0: command 0x0406 tx timeout
[  197.405241][ T5103] Bluetooth: hci2: command 0x0406 tx timeout
[  197.565334][ T6782] loop1: detected capacity change from 0 to 1024
[  197.676526][ T6782] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.861006][ T6785] fuse: Bad value for 'fd'
[  198.426656][ T5789] Bluetooth: hci4: Opcode 0x1003 failed: -110
[  198.544578][ T5786] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.642934][ T6781] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.838212][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.2.220'.
[  202.184539][ T6814] loop0: detected capacity change from 0 to 256
[  202.419206][ T6814] FAT-fs (loop0): Directory bread(block 64) failed
[  202.426128][ T6814] FAT-fs (loop0): Directory bread(block 65) failed
[  202.433245][ T6814] FAT-fs (loop0): Directory bread(block 66) failed
[  202.439954][ T6814] FAT-fs (loop0): Directory bread(block 67) failed
[  202.447026][ T6814] FAT-fs (loop0): Directory bread(block 68) failed
[  202.453668][ T6814] FAT-fs (loop0): Directory bread(block 69) failed
[  202.460883][ T6814] FAT-fs (loop0): Directory bread(block 70) failed
[  202.467636][ T6814] FAT-fs (loop0): Directory bread(block 71) failed
[  202.474736][ T6814] FAT-fs (loop0): Directory bread(block 72) failed
[  202.481504][ T6814] FAT-fs (loop0): Directory bread(block 73) failed
[  204.068187][ T6819] loop2: detected capacity change from 0 to 512
[  204.513027][ T6819] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  204.551675][ T6819] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  204.569108][ T6819] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2244: inode #15: comm syz.2.228: corrupted in-inode xattr: e_value size too large
[  204.585994][ T6819] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.228: couldn't read orphan inode 15 (err -117)
[  204.609104][ T6819] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  205.933461][ T6830] netlink: 12 bytes leftover after parsing attributes in process `syz.3.231'.
[  206.629241][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.405474][ T6840] loop2: detected capacity change from 0 to 2048
[  208.633293][ T6840] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.496967][ T6853] Zero length message leads to an empty skb
[  210.787277][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  211.674671][ T6859] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[  211.685844][ T6859] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[  211.695751][ T6859] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  212.266795][ T6869] loop2: detected capacity change from 0 to 16
[  212.392203][ T6869] erofs: (device loop2): mounted with root inode @ nid 36.
[  212.449374][ T6869] erofs: (device loop2): z_erofs_readahead: readahead error at folio 2 @ nid 89
[  212.487113][ T5797] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[8192]
[  212.545310][ T6869] erofs: (device loop2): z_erofs_lz4_decompress_mem: failed to decompress -33 in[4096, 0] out[4096]
[  212.615942][   T28] audit: type=1800 audit(1753752852.788:49): pid=6869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.240" name="file3" dev="loop2" ino=89 res=0 errno=0
[  213.377873][ T6879] overlayfs: failed to resolve './file0': -2
[  213.491620][ T6881] netlink: 12 bytes leftover after parsing attributes in process `syz.0.242'.
[  213.799509][ T6878] loop2: detected capacity change from 0 to 512
[  213.914623][ T6878] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.984572][ T6878] ext4 filesystem being mounted at /63/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  215.090754][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.448220][ T6904] netlink: 'syz.2.249': attribute type 3 has an invalid length.
[  216.457118][ T6904] netlink: 'syz.2.249': attribute type 3 has an invalid length.
[  216.465100][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'.
[  216.580184][ T6906] usb usb1: check_ctrlrecip: process 6906 (syz.2.249) requesting ep 01 but needs 81
[  220.127215][ T6935] 9pnet_fd: Insufficient options for proto=fd
[  220.855756][ T6940] input: syz0 as /devices/virtual/input/input10
[  221.230546][ T6949] loop1: detected capacity change from 0 to 512
[  221.289106][ T6952] loop2: detected capacity change from 0 to 16
[  221.303846][ T6952] erofs: Unknown parameter '
[  221.303846][ T6952] '
[  221.345744][ T6949] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.407417][ T6949] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.434006][ T6949] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  226.379901][ T6977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.269'.
[  227.042730][ T6980] 9pnet_fd: Insufficient options for proto=fd
[  227.322344][ T6984] input: syz0 as /devices/virtual/input/input11
[  227.694307][ T6989] loop0: detected capacity change from 0 to 512
[  227.730426][ T6989] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #15: comm syz.0.274: iget: bad extended attribute block 1
[  227.743925][ T6989] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.274: couldn't read orphan inode 15 (err -117)
[  227.766459][ T6991] netlink: 8 bytes leftover after parsing attributes in process `syz.3.273'.
[  227.800256][ T6989] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  228.283298][ T6993] (null): rxe_set_mtu: Set mtu to 1024
[  228.338481][ T6993] wg1 speed is unknown, defaulting to 1000
[  228.372975][ T6993] wg1 speed is unknown, defaulting to 1000
[  228.415630][ T6993] wg1 speed is unknown, defaulting to 1000
[  228.470115][ T6995] netlink: 16 bytes leftover after parsing attributes in process `syz.0.274'.
[  228.489585][ T6995] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  228.781219][ T5788] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.181300][ T6997] loop2: detected capacity change from 0 to 512
[  230.088847][ T6997] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  230.097270][ T6997] EXT4-fs (loop2): orphan cleanup on readonly fs
[  230.104114][ T6997] Quota error (device loop2): v2_read_file_info: Block with free entry 1 out of range (1, 6).
[  230.114992][ T6997] EXT4-fs warning (device loop2): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  230.130403][ T6997] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  230.139760][ T6997] EXT4-fs error (device loop2): ext4_validate_block_bitmap:439: comm syz.2.275: bg 0: block 40: padding at end of block bitmap is not set
[  230.154370][ T6997] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6642: Corrupt filesystem
[  230.165200][ T6997] EXT4-fs (loop2): 1 truncate cleaned up
[  230.171920][ T6997] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  230.404699][ T5787] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.484401][ T6993] infiniband syz0: set active
[  230.491046][ T5852] wg1 speed is unknown, defaulting to 1000
[  230.500665][ T6993] infiniband syz0: added wg1
[  230.523426][ T6993] syz0: rxe_create_cq: returned err = -12
[  230.532989][ T6993] infiniband syz0: Couldn't create ib_mad CQ
[  230.541707][ T6993] infiniband syz0: Couldn't open port 1
[  230.608328][ T6993] RDS/IB: syz0: added
[  230.617400][ T6993] smc: adding ib device syz0 with port count 1
[  230.638274][ T6993] smc:    ib device syz0 port 1 has pnetid 
[  230.651520][   T27] wg1 speed is unknown, defaulting to 1000
[  230.673383][ T6993] wg1 speed is unknown, defaulting to 1000
[  230.802678][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.971923][ T6993] wg1 speed is unknown, defaulting to 1000
[  232.303818][ T6993] wg1 speed is unknown, defaulting to 1000
[  232.494444][ T7007] loop1: detected capacity change from 0 to 40427
[  232.534905][ T7007] F2FS-fs (loop1): invalid crc value
[  232.735736][ T7007] F2FS-fs (loop1): Found nat_bits in checkpoint
[  232.828805][ T7024] loop2: detected capacity change from 0 to 2048
[  233.249908][ T7024] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  234.448103][ T6993] wg1 speed is unknown, defaulting to 1000
[  235.039759][ T5785] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  235.985457][ T7035] netlink: 16 bytes leftover after parsing attributes in process `syz.1.284'.
[  236.622483][ T7031] input: syz0 as /devices/virtual/input/input12
[  238.317471][ T7050] loop2: detected capacity change from 0 to 512
[  238.414284][ T7050] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  238.581615][ T7050] ext4 filesystem being mounted at /74/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  239.105177][ T7050] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.158587][ T7072] overlayfs: failed to resolve './file0': -2
[  243.838205][ T7084] input: syz0 as /devices/virtual/input/input13
[  245.018830][ T7091] loop1: detected capacity change from 0 to 512
[  245.049788][ T7091] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  245.106447][ T7091] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8002c118, mo2=0002]
[  245.116469][ T7091] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2244: inode #15: comm syz.1.292: corrupted in-inode xattr: e_value size too large
[  245.154067][ T7091] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.292: couldn't read orphan inode 15 (err -117)
[  245.183971][ T7091] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.528223][ T7100] loop3: detected capacity change from 0 to 16
[  246.562764][ T7100] erofs: (device loop3): mounted with root inode @ nid 36.
[  246.639260][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 26 @ nid 36
[  246.685734][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 25 @ nid 36
[  246.695415][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 24 @ nid 36
[  246.702856][ T7093] loop0: detected capacity change from 0 to 40427
[  246.713171][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 23 @ nid 36
[  246.741635][ T7101] erofs: (device loop3): erofs_find_target_block: corrupted dir block 8200 @ nid 36
[  246.759440][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 22 @ nid 36
[  246.807492][ T7093] F2FS-fs (loop0): Found nat_bits in checkpoint
[  246.815753][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 21 @ nid 36
[  246.839037][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 20 @ nid 36
[  246.888200][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 18 @ nid 36
[  246.905875][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 16 @ nid 36
[  246.920884][ T7100] erofs: (device loop3): z_erofs_readahead: readahead error at folio 12 @ nid 36
[  246.943635][ T7100] syz.3.299: attempt to access beyond end of device
[  246.943635][ T7100] loop3: rw=524288, sector=720, nr_sectors = 16 limit=16
[  246.976977][ T7100] syz.3.299: attempt to access beyond end of device
[  246.976977][ T7100] loop3: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  247.005639][ T7093] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  247.020671][ T7100] syz.3.299: attempt to access beyond end of device
[  247.020671][ T7100] loop3: rw=524288, sector=16, nr_sectors = 8 limit=16
[  247.073551][ T7100] syz.3.299: attempt to access beyond end of device
[  247.073551][ T7100] loop3: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[  247.126714][ T7100] ==================================================================
[  247.134854][ T7100] BUG: KASAN: slab-out-of-bounds in z_erofs_transform_plain+0x38c/0x460
[  247.143255][ T7100] Read of size 4095 at addr ffff88801b320400 by task syz.3.299/7100
[  247.151275][ T7100] 
[  247.153642][ T7100] CPU: 1 PID: 7100 Comm: syz.3.299 Not tainted 6.6.100-syzkaller #0
[  247.161655][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  247.171753][ T7100] Call Trace:
[  247.175069][ T7100]  <TASK>
[  247.178035][ T7100]  dump_stack_lvl+0x16c/0x230
[  247.182760][ T7100]  ? __lock_acquire+0x7c80/0x7c80
[  247.187826][ T7100]  ? show_regs_print_info+0x20/0x20
[  247.193080][ T7100]  ? load_image+0x3b0/0x3b0
[  247.197638][ T7100]  ? __virt_addr_valid+0x469/0x540
[  247.202785][ T7100]  print_report+0xac/0x200
[  247.207275][ T7100]  ? z_erofs_transform_plain+0x38c/0x460
[  247.212925][ T7100]  kasan_report+0x117/0x150
[  247.217445][ T7100]  ? z_erofs_transform_plain+0x38c/0x460
[  247.223095][ T7100]  kasan_check_range+0x288/0x290
[  247.228052][ T7100]  ? z_erofs_transform_plain+0x38c/0x460
[  247.233704][ T7100]  __asan_memcpy+0x29/0x70
[  247.238137][ T7100]  z_erofs_transform_plain+0x38c/0x460
[  247.243625][ T7100]  ? z_erofs_lz4_decompress+0x1720/0x1720
[  247.249376][ T7100]  z_erofs_decompress_queue+0x16fb/0x2650
[  247.255121][ T7100]  ? z_erofs_onlinepage_endio+0x350/0x350
[  247.260849][ T7100]  ? slab_free_freelist_hook+0x130/0x1b0
[  247.266512][ T7100]  ? bio_truncate+0x6f0/0x6f0
[  247.271206][ T7100]  ? z_erofs_decompressqueue_endio+0x5a0/0x5a0
[  247.277376][ T7100]  z_erofs_runqueue+0x18a3/0x19d0
[  247.282423][ T7100]  ? z_erofs_do_read_page+0x3680/0x3680
[  247.287990][ T7100]  ? _raw_spin_unlock+0x28/0x40
[  247.292872][ T7100]  ? lockref_put_or_lock+0x72/0xb0
[  247.297993][ T7100]  z_erofs_readahead+0xa7c/0xd50
[  247.302949][ T7100]  ? z_erofs_read_folio+0x540/0x540
[  247.308159][ T7100]  ? __mod_lruvec_page_state+0xa5/0x420
[  247.313717][ T7100]  ? folio_add_lru+0x320/0xd50
[  247.318591][ T7100]  ? blk_start_plug+0x6e/0x1a0
[  247.323369][ T7100]  read_pages+0x177/0x840
[  247.327714][ T7100]  ? __lock_acquire+0x7c80/0x7c80
[  247.332754][ T7100]  ? page_cache_ra_unbounded+0x770/0x770
[  247.338401][ T7100]  ? folio_add_lru+0xd50/0xd50
[  247.343238][ T7100]  ? folio_add_lru+0x54f/0xd50
[  247.348012][ T7100]  ? filemap_add_folio+0x192/0x3c0
[  247.353143][ T7100]  page_cache_ra_unbounded+0x692/0x770
[  247.358625][ T7100]  force_page_cache_ra+0x2c1/0x320
[  247.363754][ T7100]  generic_fadvise+0x44f/0x730
[  247.368534][ T7100]  ? dump_task+0x5f0/0x5f0
[  247.372962][ T7100]  ? __fget_files+0x28/0x4d0
[  247.377573][ T7100]  ? __fdget+0x180/0x210
[  247.381836][ T7100]  __x64_sys_fadvise64+0x140/0x180
[  247.386972][ T7100]  do_syscall_64+0x55/0xb0
[  247.391399][ T7100]  ? clear_bhb_loop+0x40/0x90
[  247.396080][ T7100]  ? clear_bhb_loop+0x40/0x90
[  247.400764][ T7100]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  247.406682][ T7100] RIP: 0033:0x7fb794b8e9a9
[  247.411115][ T7100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.430729][ T7100] RSP: 002b:00007fb79594a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  247.439149][ T7100] RAX: ffffffffffffffda RBX: 00007fb794db5fa0 RCX: 00007fb794b8e9a9
[  247.447133][ T7100] RDX: 000000000000ff39 RSI: 000000000000aa17 RDI: 0000000000000004
[  247.455118][ T7100] RBP: 00007fb794c10d69 R08: 0000000000000000 R09: 0000000000000000
[  247.463098][ T7100] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  247.471083][ T7100] R13: 0000000000000000 R14: 00007fb794db5fa0 R15: 00007ffdac7b6fb8
[  247.479073][ T7100]  </TASK>
[  247.482101][ T7100] 
[  247.484427][ T7100] The buggy address belongs to the physical page:
[  247.490845][ T7100] page:ffffea00006cc800 refcount:2 mapcount:0 mapping:ffff88805f3897d0 index:0x1 pfn:0x1b320
[  247.501004][ T7100] memcg:ffff88807c00a000
[  247.505263][ T7100] aops:z_erofs_cache_aops ino:0
[  247.510125][ T7100] flags: 0xfff40000008028(uptodate|lru|private|node=0|zone=1|lastcpupid=0x7ff)
[  247.519072][ T7100] page_type: 0xffffffff()
[  247.523413][ T7100] raw: 00fff40000008028 ffffea0000b145c8 ffffea000091e088 ffff88805f3897d0
[  247.532000][ T7100] raw: 0000000000000001 ffff88805f0422f0 00000002ffffffff ffff88807c00a000
[  247.540607][ T7100] page dumped because: kasan: bad access detected
[  247.547031][ T7100] page_owner tracks the page as allocated
[  247.552745][ T7100] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x192840(GFP_NOWAIT|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 7101, tgid 7099 (syz.3.299), ts 246739551618, free_ts 241860378301
[  247.574639][ T7100]  post_alloc_hook+0x1cd/0x210
[  247.579436][ T7100]  get_page_from_freelist+0x195c/0x19f0
[  247.585010][ T7100]  __alloc_pages+0x1e3/0x460
[  247.589623][ T7100]  z_erofs_do_read_page+0x20c0/0x3680
[  247.595010][ T7100]  z_erofs_read_folio+0x213/0x540
[  247.600048][ T7100]  filemap_read_folio+0x167/0x760
[  247.605088][ T7100]  do_read_cache_folio+0x470/0x7e0
[  247.610213][ T7100]  erofs_bread+0x16f/0x630
[  247.614640][ T7100]  erofs_namei+0x28c/0xf00
[  247.619064][ T7100]  erofs_lookup+0x135/0x310
[  247.623577][ T7100]  path_openat+0x10b8/0x3190
[  247.628177][ T7100]  do_filp_open+0x1c5/0x3d0
[  247.632693][ T7100]  do_sys_openat2+0x12c/0x1c0
[  247.637383][ T7100]  __x64_sys_openat+0x139/0x160
[  247.642253][ T7100]  do_syscall_64+0x55/0xb0
[  247.646690][ T7100]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  247.652626][ T7100] page last free stack trace:
[  247.657311][ T7100]  free_unref_page_prepare+0x7ce/0x8e0
[  247.662792][ T7100]  free_unref_page+0x32/0x2e0
[  247.667493][ T7100]  ringbuf_map_free+0xc0/0x110
[  247.672276][ T7100]  bpf_map_free_deferred+0xda/0x100
[  247.677503][ T7100]  process_scheduled_works+0xa45/0x15b0
[  247.683068][ T7100]  worker_thread+0xa55/0xfc0
[  247.687672][ T7100]  kthread+0x2fa/0x390
[  247.691742][ T7100]  ret_from_fork+0x48/0x80
[  247.696162][ T7100]  ret_from_fork_asm+0x11/0x20
[  247.700939][ T7100] 
[  247.703274][ T7100] Memory state around the buggy address:
[  247.708906][ T7100]  ffff88801b320f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  247.716966][ T7100]  ffff88801b320f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  247.725034][ T7100] >ffff88801b321000: 00 00 00 00 00 fc fc 00 00 00 00 00 fc fc 00 00
[  247.733094][ T7100]                                   ^
[  247.738466][ T7100]  ffff88801b321080: 00 00 00 fc fc 00 00 00 00 00 fc fc 00 00 00 00
[  247.746533][ T7100]  ffff88801b321100: 00 fc fc 00 00 00 00 00 fc fc 00 00 00 00 00 fc
[  247.754611][ T7100] ==================================================================
[  247.970409][ T7093] syz.0.297: attempt to access beyond end of device
[  247.970409][ T7093] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  247.983089][ T7100] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  247.983107][ T7100] CPU: 0 PID: 7100 Comm: syz.3.299 Not tainted 6.6.100-syzkaller #0
[  247.983131][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[  247.983154][ T7100] Call Trace:
[  247.983163][ T7100]  <TASK>
[  247.983171][ T7100]  dump_stack_lvl+0x16c/0x230
[  247.983205][ T7100]  ? show_regs_print_info+0x20/0x20
[  247.983230][ T7100]  ? load_image+0x3b0/0x3b0
[  247.983280][ T7100]  panic+0x2c0/0x710
[  247.983310][ T7100]  ? bpf_jit_dump+0xd0/0xd0
[  247.983341][ T7100]  ? _raw_spin_unlock_irqrestore+0xfa/0x110
[  247.983374][ T7100]  ? _raw_spin_unlock+0x40/0x40
[  247.983422][ T7100]  ? print_memory_metadata+0x314/0x400
[  247.983446][ T7100]  ? z_erofs_transform_plain+0x38c/0x460
[  247.983469][ T7100]  check_panic_on_warn+0x84/0xa0
[  247.983496][ T7100]  ? z_erofs_transform_plain+0x38c/0x460
[  247.983516][ T7100]  end_report+0x6f/0x140
[  247.983542][ T7100]  kasan_report+0x128/0x150
[  247.983568][ T7100]  ? z_erofs_transform_plain+0x38c/0x460
[  247.983594][ T7100]  kasan_check_range+0x288/0x290
[  247.983632][ T7100]  ? z_erofs_transform_plain+0x38c/0x460
[  247.983652][ T7100]  __asan_memcpy+0x29/0x70
[  247.983679][ T7100]  z_erofs_transform_plain+0x38c/0x460
[  247.983704][ T7100]  ? z_erofs_lz4_decompress+0x1720/0x1720
[  247.983725][ T7100]  z_erofs_decompress_queue+0x16fb/0x2650
[  247.983761][ T7100]  ? z_erofs_onlinepage_endio+0x350/0x350
[  247.983786][ T7100]  ? slab_free_freelist_hook+0x130/0x1b0
[  247.983829][ T7100]  ? bio_truncate+0x6f0/0x6f0
[  247.983853][ T7100]  ? z_erofs_decompressqueue_endio+0x5a0/0x5a0
[  247.983882][ T7100]  z_erofs_runqueue+0x18a3/0x19d0
[  247.983936][ T7100]  ? z_erofs_do_read_page+0x3680/0x3680
[  247.983979][ T7100]  ? _raw_spin_unlock+0x28/0x40
[  247.984011][ T7100]  ? lockref_put_or_lock+0x72/0xb0
[  247.984043][ T7100]  z_erofs_readahead+0xa7c/0xd50
[  247.984075][ T7100]  ? z_erofs_read_folio+0x540/0x540
[  247.984095][ T7100]  ? __mod_lruvec_page_state+0xa5/0x420
[  247.984123][ T7100]  ? folio_add_lru+0x320/0xd50
[  247.984148][ T7100]  ? blk_start_plug+0x6e/0x1a0
[  247.984171][ T7100]  read_pages+0x177/0x840
[  247.984203][ T7100]  ? __lock_acquire+0x7c80/0x7c80
[  247.984232][ T7100]  ? page_cache_ra_unbounded+0x770/0x770
[  247.984264][ T7100]  ? folio_add_lru+0xd50/0xd50
[  247.984286][ T7100]  ? folio_add_lru+0x54f/0xd50
[  247.984309][ T7100]  ? filemap_add_folio+0x192/0x3c0
[  247.984345][ T7100]  page_cache_ra_unbounded+0x692/0x770
[  247.984388][ T7100]  force_page_cache_ra+0x2c1/0x320
[  247.984425][ T7100]  generic_fadvise+0x44f/0x730
[  247.984457][ T7100]  ? dump_task+0x5f0/0x5f0
[  247.984483][ T7100]  ? __fget_files+0x28/0x4d0
[  247.984518][ T7100]  ? __fdget+0x180/0x210
[  247.984565][ T7100]  __x64_sys_fadvise64+0x140/0x180
[  247.984592][ T7100]  do_syscall_64+0x55/0xb0
[  247.984612][ T7100]  ? clear_bhb_loop+0x40/0x90
[  247.984629][ T7100]  ? clear_bhb_loop+0x40/0x90
[  247.984647][ T7100]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  247.984676][ T7100] RIP: 0033:0x7fb794b8e9a9
[  247.984693][ T7100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.984709][ T7100] RSP: 002b:00007fb79594a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  247.984729][ T7100] RAX: ffffffffffffffda RBX: 00007fb794db5fa0 RCX: 00007fb794b8e9a9
[  247.984744][ T7100] RDX: 000000000000ff39 RSI: 000000000000aa17 RDI: 0000000000000004
[  247.984755][ T7100] RBP: 00007fb794c10d69 R08: 0000000000000000 R09: 0000000000000000
[  247.984767][ T7100] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  247.984778][ T7100] R13: 0000000000000000 R14: 00007fb794db5fa0 R15: 00007ffdac7b6fb8
[  247.984800][ T7100]  </TASK>
[  247.985117][ T7100] Kernel Offset: disabled