last executing test programs:

4m7.619756752s ago: executing program 3 (id=341):
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = syz_open_dev$dri(0x0, 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, 0x0)
syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r6, 0x0, <r7=>0x0})
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000140)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_REPLACE(r1, 0x3ba0, &(0x7f0000000180)={0x48, 0xa, r7, 0x0, r8})
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8102)
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000000)='./file0\x00', 0x3000010, &(0x7f0000000040)={[{@nodiscard}, {@nouuid}]}, 0x0, 0xb9aa, &(0x7f000000c1c0)="$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")

4m5.175925627s ago: executing program 3 (id=344):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f0000000000)=0x6, 0x4)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}})
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xd, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000400000000000000900000085100000fbffffff180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000c2000000850000000600000018200000", @ANYRES32=r1], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x1f00, 0x20, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x141400, 0x42)
setsockopt$MRT_INIT(r0, 0x0, 0xc8, 0x0, 0x0)

4m4.663991891s ago: executing program 3 (id=348):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x7d6, 0x4, 0x10011, 0xffff, 0x7, 0x1, 0x2, 0x3, 0xbb, 0x0, 0x70, 0x2, 0x7, 0xa, 0xfffffff8], 0x1, 0x4})

4m4.476165102s ago: executing program 3 (id=351):
io_setup(0x8f0, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1)
vmsplice(0xffffffffffffffff, &(0x7f0000002a80)=[{0x0}], 0x1, 0x8)
socketpair(0x11, 0xa, 0x0, &(0x7f0000001080))
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000140)=[{0x6, 0x5, 0x3, 0x7fff0000}]})
close_range(r1, 0xffffffffffffffff, 0x0)

4m2.942794641s ago: executing program 3 (id=354):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
rseq(&(0x7f0000000400)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmctl$SHM_LOCK(0x0, 0xb)

4m1.437547581s ago: executing program 3 (id=359):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

3m45.709841129s ago: executing program 32 (id=359):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38)

8.550198445s ago: executing program 4 (id=1465):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x800, 0x0, 0x2, 0x0, 0x0, 0x8c}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')

7.452506922s ago: executing program 4 (id=1468):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000140)=0x200000000)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1018e58, &(0x7f0000000080), 0x6, 0x605, &(0x7f00000001c0)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sysfs$2(0x2, 0x8, &(0x7f0000000100))

6.16840948s ago: executing program 1 (id=1472):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

3.845457786s ago: executing program 1 (id=1478):
syz_mount_image$msdos(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0xa04416, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32], 0xff, 0x2be, &(0x7f0000000b80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x42, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff2, 0x4012011, r0, 0x0)
socket$alg(0x26, 0x5, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x3}}, 0x20)

3.656040767s ago: executing program 1 (id=1480):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x24000000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(0x0)
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

3.548351197s ago: executing program 1 (id=1482):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_open_dev$dri(0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12)
socket$packet(0x11, 0x2, 0x300)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
write$qrtrtun(r1, &(0x7f0000000400), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840)
unshare(0x10000)

3.400671328s ago: executing program 4 (id=1484):
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18)
connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18)
getpeername(r0, 0x0, &(0x7f0000000040))

2.511990924s ago: executing program 2 (id=1485):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')

2.511766054s ago: executing program 4 (id=1486):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x8, 0x80000)
fanotify_mark(r6, 0x105, 0x4800003a, r5, 0x0)
r7 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r7, 0xc1105517, &(0x7f0000000340)={{0xfffffff7, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0, 0x8})
r8 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r8, 0xc1105517, &(0x7f0000000a40)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00', 0x80001}, 0x6, 0x100, 0x2, 0x0, 0x0, 0x7, 'syz0\x00', 0x0})

2.362164715s ago: executing program 1 (id=1487):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

1.51801386s ago: executing program 4 (id=1488):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000500)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000240001800600050046230000060001000200000008000300ac1414aa0800060001000000fa0226ce3641ce4c733e02ad047f227b77ada00573cdca6aa40945b7e394ed93ce50fba39b2dee7f5fa8a086"], 0x38}}, 0x0)
r2 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETSTEERINGEBPF(r2, 0x400454da, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r4, 0x0)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r7, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}}, 0x800)

1.51733659s ago: executing program 0 (id=1496):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)={0x64, r1, 0x1, 0x20000006, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "408922a0bd"}, @NL80211_KEY_IDX={0x5, 0x2, 0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

1.462065981s ago: executing program 2 (id=1489):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$inet(r0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x18f)
mount$afs(0x0, 0x0, &(0x7f0000002880), 0x700, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0xa, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = add_key$fscrypt_v1(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xfffffffffffffff8)
keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, 0x0, &(0x7f00000003c0))
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={0xffffffffffffffff, 0xfeffff, 0x0, 0x0, &(0x7f0000000700), 0x0, 0xf0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000007c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000100)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x40080000, 0x0, 0x0, 0x7, 0x7f, 0x0, 0x0, 0x4}}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x62)
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xfffffffffffffffd, {0x0, 0x2, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3fffb, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
open(0x0, 0x14927e, 0x0)

1.344086331s ago: executing program 0 (id=1490):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x24000000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(0x0)
r1 = open(&(0x7f0000000580)='./bus\x00', 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

1.330706162s ago: executing program 2 (id=1491):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
ptrace(0x10, r0)

1.213305693s ago: executing program 0 (id=1492):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8)
sendto$inet6(r0, &(0x7f0000000100)="98", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000001600)={0x0, 0x6}, 0x8)

1.136043993s ago: executing program 2 (id=1493):
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d0000000400000007000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0xc)
pipe(&(0x7f0000000080)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
vmsplice(r4, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0xc)
vmsplice(r5, &(0x7f00000005c0)=[{&(0x7f0000000180)="04", 0x1}], 0x1, 0x6)

1.017312094s ago: executing program 0 (id=1494):
r0 = socket$kcm(0xa, 0x2, 0x0)
sendmsg$sock(r0, 0x0, 0x0)

918.665724ms ago: executing program 0 (id=1495):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x801, 0x0)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000480), 0x129540, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r2 = syz_open_dev$dri(0x0, 0x0, 0x0)
r3 = syz_open_dev$dri(0x0, 0x1, 0x400)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1})
r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
write$cgroup_int(r4, &(0x7f0000000080)=0x3, 0x12)
socket$packet(0x11, 0x2, 0x300)
ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0x806})
ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x0, <r5=>0xffffffffffffffff})
ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r5})
write$qrtrtun(r1, &(0x7f0000000400), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40c4}, 0x20040840)
unshare(0x10000)

187.494059ms ago: executing program 2 (id=1497):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'})
syz_init_net_socket$rose(0xb, 0x5, 0x0)
r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r2, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c)
connect$rose(r2, &(0x7f0000000240)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @null}, 0x1c)

91.317859ms ago: executing program 0 (id=1498):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000300)={{0x0, 0x2}})
openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r4, 0xc08c5332, &(0x7f00000003c0)={0x2, 0x3, 0x0, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f0000000280)={0x0, 0x0, {0x3}})
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000180)={@private2, 0x800, 0x0, 0x2, 0x1}, 0x20)
close_range(r4, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
rmdir(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00')

73.73627ms ago: executing program 4 (id=1499):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xf)
ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000000)={0x9, 0x9, 0xfff, 0x3a, 0x15, "0058c90a008000000000e7fffffff800"})
r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[@ANYBLOB="200617"], 0x0, 0x0, 0x0, 0x0}, 0x0)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000440)=[{0x0, 0x114}], 0x1}, 0x40014)

65.61753ms ago: executing program 1 (id=1500):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0})
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000440)=0x400, 0x4)
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x1, r2, 0x2a, r3}, 0x10)

0s ago: executing program 2 (id=1501):
socket$nl_route(0x10, 0x3, 0x0)
syz_open_dev$ptys(0xc, 0x3, 0x0)
sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x24000000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f00000005c0), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$I2C_SMBUS(0xffffffffffffffff, 0x720, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
r1 = open(0x0, 0x84242, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r1, &(0x7f0000000180)={0xa0, 0x600, 0x0, {{0x4, 0x2, 0x5, 0x7, 0x3, 0x1, {0x400000080001, 0xff, 0x20ff, 0x8, 0xe, 0xd615, 0x9, 0x3, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x5, 0x6}}, {0x0, 0x13}}}, 0xa0)
sendfile(r1, r1, &(0x7f0000000080), 0x7f03)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts.
[   62.939934][ T5776] cgroup: Unknown subsys name 'net'
[   63.105061][ T5776] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   64.459348][ T5776] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.949382][ T5792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   65.959236][ T5800] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   65.979336][ T5800] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   65.987407][ T5800] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   65.999337][ T5792] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.005299][ T5799] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   66.007793][ T5792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.018020][ T5799] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.020855][ T5801] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   66.028887][ T5799] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   66.035796][ T5792] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.042242][ T5799] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.049645][ T5801] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.059679][ T5792] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   66.075129][ T5799] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.082649][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.087821][ T5792] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   66.090575][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   66.106313][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.109969][ T5792] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.120875][ T5801] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   66.121724][ T5792] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   66.139205][ T5792] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.148003][ T5792] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   66.522128][ T5786] chnl_net:caif_netlink_parms(): no params data found
[   66.600358][ T5789] chnl_net:caif_netlink_parms(): no params data found
[   66.710241][ T5788] chnl_net:caif_netlink_parms(): no params data found
[   66.721572][ T5786] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.729729][ T5786] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.737226][ T5786] bridge_slave_0: entered allmulticast mode
[   66.745107][ T5786] bridge_slave_0: entered promiscuous mode
[   66.756456][ T5786] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.763762][ T5786] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.771035][ T5786] bridge_slave_1: entered allmulticast mode
[   66.777822][ T5786] bridge_slave_1: entered promiscuous mode
[   66.850508][ T5786] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.862781][ T5786] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.930664][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.937821][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.945619][ T5789] bridge_slave_0: entered allmulticast mode
[   66.952442][ T5789] bridge_slave_0: entered promiscuous mode
[   66.964498][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.971805][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.979970][ T5789] bridge_slave_1: entered allmulticast mode
[   66.987095][ T5789] bridge_slave_1: entered promiscuous mode
[   67.000851][ T5786] team0: Port device team_slave_0 added
[   67.009239][ T5786] team0: Port device team_slave_1 added
[   67.079001][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.085989][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.112308][ T5786] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.128598][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.151397][ T5786] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.158495][ T5786] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.184582][ T5786] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.197601][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.237476][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.244769][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.252264][ T5788] bridge_slave_0: entered allmulticast mode
[   67.259903][ T5788] bridge_slave_0: entered promiscuous mode
[   67.267091][ T5787] chnl_net:caif_netlink_parms(): no params data found
[   67.294190][ T5789] team0: Port device team_slave_0 added
[   67.304190][ T5789] team0: Port device team_slave_1 added
[   67.310794][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.318358][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.325531][ T5788] bridge_slave_1: entered allmulticast mode
[   67.332440][ T5788] bridge_slave_1: entered promiscuous mode
[   67.404275][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.434222][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.441527][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.467649][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.481551][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.488622][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.515002][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.529598][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.548357][ T5786] hsr_slave_0: entered promiscuous mode
[   67.554672][ T5786] hsr_slave_1: entered promiscuous mode
[   67.608009][ T5788] team0: Port device team_slave_0 added
[   67.643847][ T5788] team0: Port device team_slave_1 added
[   67.705907][ T5787] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.713525][ T5787] bridge0: port 1(bridge_slave_0) entered disabled state
[   67.721405][ T5787] bridge_slave_0: entered allmulticast mode
[   67.728396][ T5787] bridge_slave_0: entered promiscuous mode
[   67.750710][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.757691][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.784269][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.796278][ T5787] bridge0: port 2(bridge_slave_1) entered blocking state
[   67.803757][ T5787] bridge0: port 2(bridge_slave_1) entered disabled state
[   67.811066][ T5787] bridge_slave_1: entered allmulticast mode
[   67.817710][ T5787] bridge_slave_1: entered promiscuous mode
[   67.826980][ T5789] hsr_slave_0: entered promiscuous mode
[   67.833428][ T5789] hsr_slave_1: entered promiscuous mode
[   67.841345][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   67.849416][ T5789] Cannot create hsr debugfs directory
[   67.866680][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.873844][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.899901][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.005536][ T5787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   68.019500][ T5787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   68.075979][ T5788] hsr_slave_0: entered promiscuous mode
[   68.083719][ T5788] hsr_slave_1: entered promiscuous mode
[   68.090478][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.098748][ T5788] Cannot create hsr debugfs directory
[   68.138703][ T5798] Bluetooth: hci1: command tx timeout
[   68.138715][   T51] Bluetooth: hci0: command tx timeout
[   68.179715][ T5787] team0: Port device team_slave_0 added
[   68.189460][ T5787] team0: Port device team_slave_1 added
[   68.218768][ T5798] Bluetooth: hci3: command tx timeout
[   68.228159][ T5798] Bluetooth: hci2: command tx timeout
[   68.267405][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_0
[   68.274536][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.301042][ T5787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   68.322440][ T5787] batman_adv: batadv0: Adding interface: batadv_slave_1
[   68.329944][ T5787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   68.356147][ T5787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   68.401351][ T5786] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.441023][ T5786] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.452768][ T5786] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.462717][ T5786] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.485277][ T5787] hsr_slave_0: entered promiscuous mode
[   68.492257][ T5787] hsr_slave_1: entered promiscuous mode
[   68.498639][ T5787] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   68.506211][ T5787] Cannot create hsr debugfs directory
[   68.676396][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.685926][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.705013][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.729668][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.826279][ T5788] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.852365][ T5788] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.865196][ T5788] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.896687][ T5788] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.970446][ T5786] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.977439][ T5787] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   69.001181][ T5787] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   69.011265][ T5787] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   69.021613][ T5787] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   69.052041][ T5786] 8021q: adding VLAN 0 to HW filter on device team0
[   69.067091][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.074553][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.105513][  T240] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.112698][  T240] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.172777][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.274746][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[   69.317569][ T5787] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.346629][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.353842][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.380453][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.396245][ T3485] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.403627][ T3485] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.442588][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[   69.463688][ T5787] 8021q: adding VLAN 0 to HW filter on device team0
[   69.488594][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.495750][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.528513][ T3485] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.535713][ T3485] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.562260][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.569475][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.601173][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.608377][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.625582][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.672975][ T5786] 8021q: adding VLAN 0 to HW filter on device batadv0
[   69.750682][ T5787] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.793807][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   69.889717][ T5786] veth0_vlan: entered promiscuous mode
[   69.910834][ T5786] veth1_vlan: entered promiscuous mode
[   69.976551][ T5786] veth0_macvtap: entered promiscuous mode
[   69.993709][ T5786] veth1_macvtap: entered promiscuous mode
[   70.035282][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.052163][ T5786] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.072545][ T5786] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.082716][ T5786] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.092958][ T5786] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.106621][ T5786] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.221120][ T5798] Bluetooth: hci0: command tx timeout
[   70.226004][   T51] Bluetooth: hci1: command tx timeout
[   70.240052][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.287825][ T5787] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.298349][   T51] Bluetooth: hci2: command tx timeout
[   70.298734][ T5798] Bluetooth: hci3: command tx timeout
[   70.348641][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.355717][ T5789] veth0_vlan: entered promiscuous mode
[   70.356660][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.369770][ T5789] veth1_vlan: entered promiscuous mode
[   70.412067][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.444298][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.460819][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.500168][ T5789] veth0_macvtap: entered promiscuous mode
[   70.511966][ T5789] veth1_macvtap: entered promiscuous mode
[   70.564411][ T5787] veth0_vlan: entered promiscuous mode
[   70.595085][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   70.607135][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.619380][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.638627][ T5788] veth0_vlan: entered promiscuous mode
[   70.652808][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   70.665237][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   70.679340][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.691256][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   70.702527][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.713372][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   70.726965][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.740042][ T5787] veth1_vlan: entered promiscuous mode
[   70.774001][ T5788] veth1_vlan: entered promiscuous mode
[   70.902720][ T5788] veth0_macvtap: entered promiscuous mode
[   70.915260][ T5788] veth1_macvtap: entered promiscuous mode
[   70.927832][ T5874] syz.1.5[5874]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[   70.947229][ T5874] loop1: detected capacity change from 0 to 512
[   71.008136][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.016012][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.032888][ T5787] veth0_macvtap: entered promiscuous mode
[   71.044649][ T5874] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.065320][ T5874] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   71.112637][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.134541][   T27] audit: type=1800 audit(1762394291.167:2): pid=5874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.5" name="file1" dev="loop1" ino=15 res=0 errno=0
[   71.138604][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.165330][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.176226][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.189218][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.223055][   T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.225956][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.235547][ T5787] veth1_macvtap: entered promiscuous mode
[   71.248258][   T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.263339][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.281192][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.297909][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   71.310773][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.323243][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.336329][ T5788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.347234][ T5788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.356632][ T5788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.366897][ T5788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.454468][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.554763][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.653599][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   71.767981][ T5882] loop2: detected capacity change from 0 to 128
[   71.800912][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[   71.807571][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   71.811011][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[   71.837057][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   72.002712][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.047082][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_0
[   72.070556][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.085651][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.128104][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.170112][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.195184][ T5787] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   72.227652][ T5787] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   72.245480][ T5787] batman_adv: batadv0: Interface activated: batadv_slave_1
[   72.318977][   T51] Bluetooth: hci0: command tx timeout
[   72.324503][ T5798] Bluetooth: hci1: command tx timeout
[   72.366649][ T5787] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.381411][   T51] Bluetooth: hci2: command tx timeout
[   72.389296][ T5798] Bluetooth: hci3: command tx timeout
[   72.406876][ T5787] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.442320][ T5787] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.471254][ T5787] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.525323][ T5884] loop1: detected capacity change from 0 to 32768
[   72.533375][ T5884] =======================================================
[   72.533375][ T5884] WARNING: The mand mount option has been deprecated and
[   72.533375][ T5884]          and is ignored by this kernel. Remove the mand
[   72.533375][ T5884]          option from the mount to silence this warning.
[   72.533375][ T5884] =======================================================
[   72.603868][ T5884] JBD2: Ignoring recovery information on journal
[   72.607316][ T3485] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.612822][ T5884] jbd2_journal_bmap: journal block not found at offset 32 on loop1-75
[   72.627419][ T5884] JBD2: bad block at offset 32
[   72.641983][ T3485] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.675138][ T5884] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   72.701576][ T3459] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.713164][ T3459] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.842785][ T5786] ocfs2: Unmounting device (7,1) on (node local)
[   73.856948][ T5896] loop3: detected capacity change from 0 to 2048
[   73.878879][  T240] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   73.913471][  T240] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   73.922088][ T5898] input: syz1 as /devices/virtual/input/input5
[   73.940510][ T5896] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=4096, location=4096
[   73.971583][ T5896] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[   74.037932][ T5896] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[   74.074792][  T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   74.083753][ T5896] UDF-fs: Scanning with blocksize 512 failed
[   74.132553][ T5896] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   74.136433][  T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   74.208091][ T5896] UDF-fs: Scanning with blocksize 1024 failed
[   74.279692][ T5896] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[   74.321598][ T5896] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   74.349794][ T5896] UDF-fs: Scanning with blocksize 2048 failed
[   74.379092][   T51] Bluetooth: hci1: command tx timeout
[   74.385846][   T51] Bluetooth: hci0: command tx timeout
[   74.394278][ T5896] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   74.417686][ T5902] loop1: detected capacity change from 0 to 512
[   74.437079][ T5896] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[   74.458368][ T5798] Bluetooth: hci2: command tx timeout
[   74.463833][ T5798] Bluetooth: hci3: command tx timeout
[   74.464259][ T5902] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   74.469762][ T5896] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[   74.490661][ T5896] UDF-fs: Scanning with blocksize 4096 failed
[   74.496751][ T5896] UDF-fs: warning (device loop3): udf_fill_super: No partition found (1)
[   74.724746][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   74.763402][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   74.789787][    T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!!
[   75.008450][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.018615][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.322269][ T5902] EXT4-fs (loop1): 1 orphan inode deleted
[   75.398882][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.407219][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   75.418637][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.426886][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[   75.579172][ T5902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.665450][ T5902] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   75.896035][ T5786] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.049378][ T5872] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   76.278594][ T5872] usb 1-1: config 0 has an invalid interface number: 40 but max is 0
[   76.293422][ T5872] usb 1-1: config 0 has no interface number 0
[   76.301816][ T5872] usb 1-1: config 0 interface 40 altsetting 3 bulk endpoint 0xA has invalid maxpacket 8
[   76.316916][ T5872] usb 1-1: config 0 interface 40 altsetting 3 bulk endpoint 0x87 has invalid maxpacket 1024
[   76.362114][ T5872] usb 1-1: config 0 interface 40 has no altsetting 0
[   76.553253][ T5872] usb 1-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=43.16
[   76.644209][ T5872] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.775564][ T5872] usb 1-1: Product: syz
[   76.987527][ T5872] usb 1-1: Manufacturer: syz
[   76.992538][ T5872] usb 1-1: SerialNumber: syz
[   77.044587][ T5921] loop3: detected capacity change from 0 to 32768
[   77.080271][ T5872] usb 1-1: config 0 descriptor??
[   77.130747][ T5913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   77.188568][ T5913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   77.231695][ T5921] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   77.261379][ T5933] loop1: detected capacity change from 0 to 128
[   78.101773][ T5913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   78.167799][ T5913] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   78.241747][ T5872] cdc_subset 1-1:0.40 usb0: register 'cdc_subset' at usb-dummy_hcd.0-1, ALi M5632, d6:d6:0b:00:b7:82
[   78.309073][   T27] audit: type=1800 audit(1762394298.327:3): pid=5921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.15" name="file1" dev="loop3" ino=17058 res=0 errno=0
[   78.468544][ T5788] ocfs2: Unmounting device (7,3) on (node local)
[   78.610402][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[   78.614153][ T5791] usb 1-1: USB disconnect, device number 2
[   78.642065][ T5791] cdc_subset 1-1:0.40 usb0: unregister 'cdc_subset' usb-dummy_hcd.0-1, ALi M5632
[   79.848347][ T5946] input: syz1 as /devices/virtual/input/input6
[   82.391007][   T42] cfg80211: failed to load regulatory.db
[   82.543406][ T5791] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   82.633506][ T5970] loop3: detected capacity change from 0 to 512
[   82.731342][ T5970] EXT4-fs (loop3): 1 orphan inode deleted
[   82.760001][ T5791] usb 1-1: config 0 has an invalid interface number: 40 but max is 0
[   82.768857][ T5791] usb 1-1: config 0 has no interface number 0
[   82.775562][ T5970] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.777959][ T5791] usb 1-1: config 0 interface 40 altsetting 3 bulk endpoint 0xA has invalid maxpacket 8
[   82.799645][ T5791] usb 1-1: config 0 interface 40 altsetting 3 bulk endpoint 0x87 has invalid maxpacket 1024
[   82.810026][ T5791] usb 1-1: config 0 interface 40 has no altsetting 0
[   82.830838][ T5970] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.841433][ T5791] usb 1-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=43.16
[   82.863166][ T5791] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.871306][ T5791] usb 1-1: Product: syz
[   82.875501][ T5791] usb 1-1: Manufacturer: syz
[   82.880715][ T5791] usb 1-1: SerialNumber: syz
[   82.903257][ T5791] usb 1-1: config 0 descriptor??
[   82.919537][ T5956] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   82.926992][ T5956] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   83.072677][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.195659][ T5791] cdc_subset: probe of 1-1:0.40 failed with error -71
[   83.922376][ T5791] usb 1-1: USB disconnect, device number 3
[   85.616694][ T6013] loop0: detected capacity change from 0 to 4096
[   86.048359][ T5872] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   86.172334][ T6011] loop3: detected capacity change from 0 to 32768
[   86.282204][ T6011] JBD2: Ignoring recovery information on journal
[   86.291145][ T6011] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75
[   86.299809][ T6011] JBD2: bad block at offset 32
[   86.481435][ T6011] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   87.010370][ T5788] ocfs2: Unmounting device (7,3) on (node local)
[   87.067908][ T5872] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   87.080377][ T5872] usb 1-1: config 0 interface 0 altsetting 32 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.090933][ T5872] usb 1-1: config 0 interface 0 has no altsetting 0
[   87.097636][ T5872] usb 1-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[   87.143879][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.37'.
[   87.159873][ T5872] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.180073][ T5872] usb 1-1: config 0 descriptor??
[   88.150419][ T6032] fuse: Unknown parameter 'grou00000000000000000000'
[   88.180567][ T5872] usbhid 1-1:0.0: can't add hid device: -71
[   88.196559][ T5872] usbhid: probe of 1-1:0.0 failed with error -71
[   88.233892][ T5872] usb 1-1: USB disconnect, device number 4
[   88.287205][ T6036] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   88.553586][ T5778] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   90.416465][ T6044] sched: RT throttling activated
[   90.662583][ T5778] usb 4-1: config 0 has an invalid interface number: 40 but max is 0
[   90.690686][ T5778] usb 4-1: config 0 has no interface number 0
[   90.710824][ T5778] usb 4-1: config 0 interface 40 altsetting 3 bulk endpoint 0xA has invalid maxpacket 8
[   90.729879][ T5778] usb 4-1: config 0 interface 40 altsetting 3 bulk endpoint 0x87 has invalid maxpacket 1024
[   90.741328][ T5778] usb 4-1: config 0 interface 40 has no altsetting 0
[   90.771139][ T5778] usb 4-1: New USB device found, idVendor=0402, idProduct=5632, bcdDevice=43.16
[   90.781536][ T5778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.847363][ T5778] usb 4-1: Product: syz
[   90.866320][ T5778] usb 4-1: Manufacturer: syz
[   90.875826][ T5778] usb 4-1: SerialNumber: syz
[   90.951934][ T5778] usb 4-1: config 0 descriptor??
[   90.957624][ T6034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   90.983657][ T6051] loop0: detected capacity change from 0 to 512
[   91.003503][ T6051] EXT4-fs: inline encryption not supported
[   91.017505][ T6034] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   91.049237][ T6051] EXT4-fs: Ignoring removed orlov option
[   91.248186][ T6051] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c01c, mo2=0002]
[   91.300396][ T6051] EXT4-fs (loop0): orphan cleanup on readonly fs
[   91.331404][ T5778] cdc_subset: probe of 4-1:0.40 failed with error -71
[   91.345595][ T6051] EXT4-fs error (device loop0): ext4_validate_block_bitmap:439: comm syz.0.48: bg 0: block 248: padding at end of block bitmap is not set
[   91.373112][ T6051] Quota error (device loop0): write_blk: dquota write failed
[   91.387319][ T6051] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[   91.403831][ T6051] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.48: Failed to acquire dquot type 1
[   91.424556][ T6051] EXT4-fs (loop0): 1 truncate cleaned up
[   91.444340][ T6051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   91.478169][ T5778] usb 4-1: USB disconnect, device number 2
[   91.558388][ T6059] fuse: Unknown parameter 'grou00000000000000000000'
[   91.595583][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   91.907385][ T6068] Zero length message leads to an empty skb
[   93.544246][ T6085] loop0: detected capacity change from 0 to 512
[   93.609848][ T6085] EXT4-fs (loop0): 1 orphan inode deleted
[   93.617035][ T6085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   93.636207][    T8] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   93.652349][ T6085] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   93.777074][ T5787] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.825486][    T8] usb 4-1: Using ep0 maxpacket: 8
[   93.837577][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   93.857981][    T8] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[   93.879748][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.902739][ T6092] fuse: Unknown parameter 'grou00000000000000000000'
[   93.909994][    T8] usb 4-1: config 0 descriptor??
[   94.174433][    T8] iowarrior 4-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[   94.606142][ T6099] loop0: detected capacity change from 0 to 128
[   94.636533][ T5778] usb 4-1: USB disconnect, device number 3
[   95.472399][ T6124] iommufd_mock iommufd_mock1: Adding to iommu group 0
[   96.370254][ T6124] loop3: detected capacity change from 0 to 65536
[   96.429175][ T6124] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   96.505638][ T6124] XFS (loop3): Internal error !xlog_verify_bno(log, 0, nbblks) at line 81 of file fs/xfs/xfs_log_recover.c.  Caller xlog_alloc_buffer+0x118/0x200
[   96.520628][ T6124] CPU: 1 PID: 6124 Comm: syz.3.76 Not tainted syzkaller #0
[   96.527854][ T6124] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[   96.537950][ T6124] Call Trace:
[   96.541261][ T6124]  <TASK>
[   96.544231][ T6124]  dump_stack_lvl+0x16c/0x230
[   96.548931][ T6124]  ? show_regs_print_info+0x20/0x20
[   96.554155][ T6124]  ? __phys_addr+0xba/0x170
[   96.558675][ T6124]  ? __kasan_kmalloc_large+0x8b/0xa0
[   96.563992][ T6124]  xfs_corruption_error+0x122/0x170
[   96.569414][ T6124]  ? xlog_alloc_buffer+0x118/0x200
[   96.575305][ T6124]  xlog_alloc_buffer+0x159/0x200
[   96.580263][ T6124]  ? xlog_alloc_buffer+0x118/0x200
[   96.585402][ T6124]  xlog_do_recovery_pass+0x1aa/0xcf0
[   96.590706][ T6124]  ? lock_chain_count+0x20/0x20
[   96.595555][ T6124]  ? xlog_do_io+0x360/0x360
[   96.600255][ T6124]  ? xlog_verify_head+0xf3/0x440
[   96.605199][ T6124]  ? __kmem_cache_free+0xba/0x1f0
[   96.610238][ T6124]  xlog_verify_head+0x137/0x440
[   96.615125][ T6124]  xlog_find_tail+0x6c4/0xa00
[   96.619904][ T6124]  xlog_recover+0x4c/0x450
[   96.624384][ T6124]  xfs_log_mount+0x2c2/0x470
[   96.629092][ T6124]  xfs_mountfs+0xc48/0x1d20
[   96.633680][ T6124]  ? lockdep_softirqs_off+0x430/0x430
[   96.639051][ T6124]  ? xfs_default_resblks+0x70/0x70
[   96.644153][ T6124]  ? init_timer_key+0x161/0x2a0
[   96.649050][ T6124]  ? rcu_is_watching+0x15/0xb0
[   96.653899][ T6124]  ? trace_xfs_inode_timestamp_range+0x84/0x1d0
[   96.660162][ T6124]  xfs_fs_fill_super+0x112f/0x13a0
[   96.665283][ T6124]  get_tree_bdev+0x3e4/0x510
[   96.669868][ T6124]  ? vfs_parse_fs_string+0x160/0x160
[   96.675348][ T6124]  ? xfs_mount_set_dax_mode+0x100/0x100
[   96.680927][ T6124]  ? setup_bdev_super+0x660/0x660
[   96.685979][ T6124]  ? apparmor_capable+0x137/0x1a0
[   96.691090][ T6124]  ? bpf_lsm_capable+0x9/0x10
[   96.695769][ T6124]  ? security_capable+0x89/0xb0
[   96.700641][ T6124]  vfs_get_tree+0x8c/0x280
[   96.705092][ T6124]  do_new_mount+0x24b/0xa40
[   96.709616][ T6124]  __se_sys_mount+0x2da/0x3c0
[   96.714294][ T6124]  ? __x64_sys_mount+0xc0/0xc0
[   96.719046][ T6124]  ? lockdep_hardirqs_on+0x98/0x150
[   96.724241][ T6124]  ? __x64_sys_mount+0x20/0xc0
[   96.729277][ T6124]  do_syscall_64+0x55/0xb0
[   96.733692][ T6124]  ? clear_bhb_loop+0x40/0x90
[   96.738362][ T6124]  ? clear_bhb_loop+0x40/0x90
[   96.743033][ T6124]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[   96.748926][ T6124] RIP: 0033:0x7f615bb90e6a
[   96.753340][ T6124] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   96.773035][ T6124] RSP: 002b:00007f615c9ffe68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[   96.781465][ T6124] RAX: ffffffffffffffda RBX: 00007f615c9ffef0 RCX: 00007f615bb90e6a
[   96.789613][ T6124] RDX: 0000200000000800 RSI: 0000200000000000 RDI: 00007f615c9ffeb0
[   96.797607][ T6124] RBP: 0000200000000800 R08: 00007f615c9ffef0 R09: 0000000003000010
[   96.805609][ T6124] R10: 0000000003000010 R11: 0000000000000246 R12: 0000200000000000
[   96.813580][ T6124] R13: 00007f615c9ffeb0 R14: 000000000000b9aa R15: 0000200000000040
[   96.821694][ T6124]  </TASK>
[   96.826851][ T6124] XFS (loop3): Corruption detected. Unmount and run xfs_repair
[   96.834490][ T6124] XFS (loop3): Invalid block length (0x20040) for buffer
[   96.842062][ T6124] XFS (loop3): failed to locate log tail
[   96.847715][ T6124] XFS (loop3): log mount/recovery failed: error -12
[   96.870255][ T6124] XFS (loop3): log mount failed
[   97.383546][ T6143] loop3: detected capacity change from 0 to 2048
[   97.409199][ T6143] UDF-fs: bad mount option "iocharwetGcp855" or missing value
[   99.973923][ T6184] netlink: 68 bytes leftover after parsing attributes in process `syz.1.94'.
[  100.368014][ T1187] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  100.579603][ T1187] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  100.650257][ T1187] usb 4-1: config 0 has no interface number 0
[  100.692998][ T1187] usb 4-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  100.723365][ T1187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.753834][ T1187] usb 4-1: Product: syz
[  100.784278][ T1187] usb 4-1: Manufacturer: syz
[  100.804538][ T1187] usb 4-1: SerialNumber: syz
[  100.865509][ T1187] usb 4-1: config 0 descriptor??
[  101.466600][ T1187] dvb_usb_ec168: probe of 4-1:0.1 failed with error -71
[  101.476451][ T1187] usb 4-1: USB disconnect, device number 4
[  102.850175][ T6214] overlayfs: failed to resolve './file0': -2
[  103.053858][ T6222] fuse: Unknown parameter 'group_i00000000000000000000'
[  103.898976][ T6232] loop3: detected capacity change from 0 to 2048
[  103.914299][ T6232] UDF-fs: bad mount option "iocharwetGcp855" or missing value
[  103.959695][ T6236] netlink: 408 bytes leftover after parsing attributes in process `syz.1.118'.
[  104.844959][ T6248] overlayfs: failed to resolve './file0': -2
[  105.796006][ T6262] loop3: detected capacity change from 0 to 512
[  106.744614][ T6262] EXT4-fs: inline encryption not supported
[  106.778461][ T6262] EXT4-fs: Ignoring removed orlov option
[  106.876131][ T6262] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=842c01c, mo2=0002]
[  106.891471][ T6262] EXT4-fs (loop3): orphan cleanup on readonly fs
[  106.992168][ T6262] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.124: bg 0: block 248: padding at end of block bitmap is not set
[  107.082813][ T6262] Quota error (device loop3): write_blk: dquota write failed
[  107.100564][ T6262] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  107.120977][ T6262] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.124: Failed to acquire dquot type 1
[  107.163047][ T6262] EXT4-fs (loop3): 1 truncate cleaned up
[  107.187254][ T6262] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  107.273089][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.771121][ T6286] overlayfs: failed to resolve './file0': -2
[  107.977296][ T5798] Bluetooth: Frame is too long (len 16, expected len 4)
[  108.471034][ T6294] netlink: 408 bytes leftover after parsing attributes in process `syz.3.137'.
[  108.944889][ T6313] overlayfs: failed to resolve './file1': -2
[  109.254663][ T6323] netlink: 408 bytes leftover after parsing attributes in process `syz.0.150'.
[  110.199093][ T6334] loop3: detected capacity change from 0 to 1024
[  110.229368][ T6334] EXT4-fs: Ignoring removed nobh option
[  110.258813][ T6334] EXT4-fs: Ignoring removed bh option
[  110.280934][ T6334] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  110.352083][ T6339] overlayfs: failed to resolve './file1': -2
[  110.391841][ T6334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.468303][   T27] audit: type=1800 audit(1762394330.507:4): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.153" name="file1" dev="loop3" ino=15 res=0 errno=0
[  110.511567][ T6337] ceph: No mds server is up or the cluster is laggy
[  110.538546][    T8] libceph: connect (1)[c::]:6789 error -101
[  110.545515][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  113.127363][   T27] audit: type=1800 audit(1762394333.157:5): pid=6334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.153" name="file1" dev="loop3" ino=15 res=0 errno=0
[  113.547378][ T5872] libceph: connect (1)[c::]:6789 error -101
[  113.616226][ T5872] libceph: mon0 (1)[c::]:6789 connect error
[  113.647410][ T6334] EXT4-fs error (device loop3): mb_free_blocks:1938: group 0, inode 15: block 97:freeing already freed block (bit 6); block bitmap corrupt.
[  113.650705][ T6380] ceph: No mds server is up or the cluster is laggy
[  113.679699][ T5872] libceph: connect (1)[c::]:6789 error -101
[  113.685892][ T5872] libceph: mon0 (1)[c::]:6789 connect error
[  113.718226][ T6334] EXT4-fs (loop3): Remounting filesystem read-only
[  113.812552][ T5788] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.518193][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  115.704355][ T6420] fuse: Bad value for 'fd'
[  117.057565][ T6445] fuse: Bad value for 'fd'
[  117.454339][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  118.612619][ T6464] fuse: Bad value for 'fd'
[  118.926290][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  119.909815][ T6483] loop3: detected capacity change from 0 to 128
[  120.259063][ T6488] fuse: Bad value for 'fd'
[  120.369991][ T6493] netlink: 408 bytes leftover after parsing attributes in process `syz.3.218'.
[  120.815453][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  121.476303][ T6509] overlayfs: failed to clone upperpath
[  121.550081][ T6514] fuse: Bad value for 'fd'
[  121.594311][ T6516] netlink: 408 bytes leftover after parsing attributes in process `syz.1.228'.
[  121.704800][   T42] libceph: connect (1)[c::]:6789 error -101
[  121.718754][ T6518] ceph: No mds server is up or the cluster is laggy
[  121.758127][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  122.334338][ T6539] overlayfs: failed to clone upperpath
[  122.357577][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  122.478494][ T6545] fuse: Bad value for 'fd'
[  122.578094][  T787] libceph: connect (1)[c::]:6789 error -101
[  122.595971][  T787] libceph: mon0 (1)[c::]:6789 connect error
[  122.605622][ T6551] ceph: No mds server is up or the cluster is laggy
[  122.891345][   T42] libceph: connect (1)[c::]:6789 error -101
[  122.933438][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  123.209684][ T6561] netlink: 408 bytes leftover after parsing attributes in process `syz.1.243'.
[  123.346207][ T6567] netlink: 12 bytes leftover after parsing attributes in process `syz.1.246'.
[  123.359116][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.1.246'.
[  123.554815][ T6571] overlayfs: failed to clone upperpath
[  123.671674][ T6574] fuse: Invalid rootmode
[  123.978190][  T787] libceph: connect (1)[c::]:6789 error -101
[  123.999364][  T787] libceph: mon0 (1)[c::]:6789 connect error
[  124.024748][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  124.031864][ T6581] ceph: No mds server is up or the cluster is laggy
[  124.175151][ T6588] netlink: 408 bytes leftover after parsing attributes in process `syz.3.254'.
[  124.701508][ T6603] fuse: Invalid rootmode
[  125.719196][ T5791] libceph: connect (1)[c::]:6789 error -101
[  125.725299][ T5791] libceph: mon0 (1)[c::]:6789 connect error
[  125.753509][ T6619] ceph: No mds server is up or the cluster is laggy
[  126.880455][ T6636] fuse: Invalid rootmode
[  127.279564][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  127.858513][ T6648] capability: warning: `syz.1.274' uses 32-bit capabilities (legacy support in use)
[  127.915068][ T5791] libceph: connect (1)[c::]:6789 error -101
[  127.931873][ T6647] ceph: No mds server is up or the cluster is laggy
[  127.958708][ T5791] libceph: mon0 (1)[c::]:6789 connect error
[  128.117166][ T5798] Bluetooth: Wrong link type (-71)
[  128.257132][ T6665] overlayfs: failed to resolve './file0': -2
[  128.324928][ T6669] fuse: Bad value for 'rootmode'
[  128.759419][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  129.518330][ T5791] libceph: connect (1)[c::]:6789 error -101
[  129.537352][ T6681] ceph: No mds server is up or the cluster is laggy
[  129.561405][ T5791] libceph: mon0 (1)[c::]:6789 connect error
[  129.777694][ T6697] fuse: Bad value for 'rootmode'
[  130.987052][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  133.113578][ T6733] fuse: Bad value for 'rootmode'
[  133.187160][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  133.288764][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  133.779507][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  135.384635][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  136.058703][ T6777] overlayfs: failed to clone upperpath
[  136.218900][ T5791] libceph: connect (1)[c::]:6789 error -101
[  136.225066][ T5791] libceph: mon0 (1)[c::]:6789 connect error
[  136.249444][ T6787] ceph: No mds server is up or the cluster is laggy
[  136.918718][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  137.609320][ T6818] overlayfs: failed to clone upperpath
[  137.669380][ T6820] netlink: 72 bytes leftover after parsing attributes in process `syz.0.336'.
[  137.846264][    T8] libceph: connect (1)[c::]:6789 error -101
[  137.854984][ T6824] ceph: No mds server is up or the cluster is laggy
[  137.873705][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  138.345307][ T5798] Bluetooth: hci1: unexpected event 0x2f length: 509 > 260
[  140.619319][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  141.094083][ T6853] ref_ctr increment failed for inode: 0x1bc offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888023600000
[  141.117374][ T6859] overlayfs: failed to clone upperpath
[  141.322485][    T8] libceph: connect (1)[c::]:6789 error -101
[  141.338117][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  141.375507][ T6867] ceph: No mds server is up or the cluster is laggy
[  143.383741][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  144.182301][ T6897] overlayfs: failed to clone upperpath
[  147.147850][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  147.832887][   T27] audit: type=1326 audit(1762394367.837:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34de98f6c9 code=0x7ffc0000
[  147.915632][   T27] audit: type=1326 audit(1762394367.847:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34de98f6c9 code=0x7ffc0000
[  147.952932][   T27] audit: type=1326 audit(1762394367.867:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f34de9462a7 code=0x7ffc0000
[  147.984683][   T27] audit: type=1326 audit(1762394367.867:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f34de946306 code=0x7ffc0000
[  148.012084][   T27] audit: type=1326 audit(1762394367.867:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f34de98f2cb code=0x7ffc0000
[  148.038852][   T27] audit: type=1326 audit(1762394367.867:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34de98f6c9 code=0x7ffc0000
[  148.064716][   T27] audit: type=1326 audit(1762394367.867:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34de98f6c9 code=0x7ffc0000
[  148.087377][   T27] audit: type=1326 audit(1762394367.867:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34de98f6c9 code=0x7ffc0000
[  148.111322][   T27] audit: type=1326 audit(1762394367.867:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34de98f6c9 code=0x7ffc0000
[  148.134309][   T27] audit: type=1326 audit(1762394367.897:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6928 comm="syz.1.369" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f34de98f6c9 code=0x7ffc0000
[  150.579477][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  151.749698][ T6972] fuse: Bad value for 'user_id'
[  151.994452][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  153.866824][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  154.463263][ T5791] libceph: connect (1)[c::]:6789 error -101
[  154.498205][ T5791] libceph: mon0 (1)[c::]:6789 connect error
[  154.549025][ T7003] ceph: No mds server is up or the cluster is laggy
[  154.646182][ T7015] fuse: Bad value for 'user_id'
[  154.773707][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  156.194650][ T7039] batadv_slave_1: entered promiscuous mode
[  156.207195][ T7039] batadv_slave_1: left promiscuous mode
[  156.626038][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  159.374460][ T5798] Bluetooth: Unexpected continuation frame (len 16)
[  160.575120][   T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  160.588264][   T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  160.597125][   T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  160.606078][   T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  160.613941][   T51] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  160.627764][   T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  161.394748][ T7086] chnl_net:caif_netlink_parms(): no params data found
[  162.374351][ T7086] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.412507][ T7086] bridge0: port 1(bridge_slave_0) entered disabled state
[  162.438318][ T7086] bridge_slave_0: entered allmulticast mode
[  162.458066][ T7086] bridge_slave_0: entered promiscuous mode
[  162.482008][ T7086] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.495850][ T7086] bridge0: port 2(bridge_slave_1) entered disabled state
[  162.518113][ T7086] bridge_slave_1: entered allmulticast mode
[  162.534826][ T7086] bridge_slave_1: entered promiscuous mode
[  162.622900][ T7086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  162.656706][ T7086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  162.708237][   T51] Bluetooth: hci4: command tx timeout
[  162.770437][ T7086] team0: Port device team_slave_0 added
[  162.810462][ T7086] team0: Port device team_slave_1 added
[  162.955461][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  162.964320][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.040189][ T7086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  163.089548][ T7086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  163.096553][ T7086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  163.157974][ T7086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  163.332509][ T7086] hsr_slave_0: entered promiscuous mode
[  163.349388][ T7086] hsr_slave_1: entered promiscuous mode
[  163.355925][ T7086] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  163.365632][ T7086] Cannot create hsr debugfs directory
[  163.604024][ T7086] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  163.625056][ T7086] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  163.637153][ T7086] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  163.650332][ T7086] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  163.806225][ T7086] 8021q: adding VLAN 0 to HW filter on device bond0
[  163.860497][ T7086] 8021q: adding VLAN 0 to HW filter on device team0
[  163.879135][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state
[  163.886320][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state
[  163.924931][ T3459] bridge0: port 2(bridge_slave_1) entered blocking state
[  163.932159][ T3459] bridge0: port 2(bridge_slave_1) entered forwarding state
[  164.778914][   T51] Bluetooth: hci4: command tx timeout
[  166.408604][ T3485] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.434041][ T7165] batadv_slave_1: entered promiscuous mode
[  166.468186][ T7168] batadv_slave_1: left promiscuous mode
[  166.511223][ T3485] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.585530][ T7086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  166.653131][ T3485] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  166.685222][   T42] libceph: connect (1)[c::]:6789 error -101
[  166.735157][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  166.757240][ T7172] ceph: No mds server is up or the cluster is laggy
[  166.858313][   T51] Bluetooth: hci4: command tx timeout
[  166.891501][ T3485] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  167.366164][ T7086] veth0_vlan: entered promiscuous mode
[  167.425887][ T7086] veth1_vlan: entered promiscuous mode
[  167.578607][ T7193] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  167.890009][ T7086] veth0_macvtap: entered promiscuous mode
[  167.956984][ T7086] veth1_macvtap: entered promiscuous mode
[  168.035078][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.056811][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.076918][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.097587][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.162194][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.193162][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.223902][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  168.248261][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.269710][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  168.387545][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.437995][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.459418][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.527947][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.582894][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.624541][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.645656][ T7086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  168.667688][ T7086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  168.694885][ T7086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  168.707672][ T7219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.461'.
[  168.755656][ T7222] netlink: 92 bytes leftover after parsing attributes in process `syz.0.461'.
[  168.869398][ T7086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  168.902169][ T7086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  168.911412][ T7086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  168.925307][ T7086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  168.940447][   T51] Bluetooth: hci4: command tx timeout
[  168.974412][ T7226] bridge1: entered promiscuous mode
[  168.980855][ T7226] bridge1: entered allmulticast mode
[  168.999433][ T7226] team0: Port device bridge1 added
[  169.036206][ T7229] bridge0: port 3(team0) entered blocking state
[  169.046803][ T7229] bridge0: port 3(team0) entered disabled state
[  169.065155][ T7229] team0: entered allmulticast mode
[  169.072236][ T7229] team_slave_0: entered allmulticast mode
[  169.086025][ T7229] team_slave_1: entered allmulticast mode
[  169.103888][ T7229] team0: entered promiscuous mode
[  169.110081][ T7229] team_slave_0: entered promiscuous mode
[  169.116682][ T7229] team_slave_1: entered promiscuous mode
[  169.135225][ T7229] bridge0: port 3(team0) entered blocking state
[  169.142201][ T7229] bridge0: port 3(team0) entered forwarding state
[  169.700843][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.756779][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.097688][  T240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  170.124355][  T240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.190918][ T3485] hsr_slave_0: left promiscuous mode
[  170.199268][ T3485] hsr_slave_1: left promiscuous mode
[  170.243500][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.263144][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.302040][ T3485] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.327919][ T3485] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.351014][ T3485] bridge_slave_1: left allmulticast mode
[  170.356725][ T3485] bridge_slave_1: left promiscuous mode
[  170.399611][ T3485] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.440394][ T3485] bridge_slave_0: left allmulticast mode
[  170.446107][ T3485] bridge_slave_0: left promiscuous mode
[  170.470735][ T3485] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.584578][ T3485] veth1_macvtap: left promiscuous mode
[  170.598227][ T3485] veth0_macvtap: left promiscuous mode
[  170.618144][ T3485] veth1_vlan: left promiscuous mode
[  170.634674][ T3485] veth0_vlan: left promiscuous mode
[  172.883918][ T3485] team0 (unregistering): Port device team_slave_1 removed
[  173.091138][ T3485] team0 (unregistering): Port device team_slave_0 removed
[  173.843184][ T3485] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  173.950028][ T3485] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  178.624765][ T3485] bond0 (unregistering): Released all slaves
[  180.119212][ T7385] xt_socket: unknown flags 0x50
[  181.057894][ T7397] netlink: 476 bytes leftover after parsing attributes in process `syz.2.511'.
[  183.805564][ T7432] netlink: 476 bytes leftover after parsing attributes in process `syz.2.521'.
[  183.953274][ T7439] loop4: detected capacity change from 0 to 1024
[  183.975833][ T7439] EXT4-fs: Ignoring removed orlov option
[  184.069410][ T7439] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  184.088135][ T7439] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.429077][ T7444] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1215: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  184.528362][ T7455] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.523: inode has both inline data and extents flags
[  185.038633][ T7086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  188.110661][ T7481] netlink: 476 bytes leftover after parsing attributes in process `syz.0.532'.
[  188.705050][ T7500] loop4: detected capacity change from 0 to 512
[  188.773478][ T7500] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  189.035279][ T7500] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  189.072207][ T7500] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.948758][ T7499] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.978570][ T7529] netlink: 476 bytes leftover after parsing attributes in process `syz.2.543'.
[  190.061407][   T27] kauditd_printk_skb: 14 callbacks suppressed
[  190.061421][   T27] audit: type=1326 audit(1762394410.097:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f8f6c9 code=0x7ffc0000
[  190.159048][   T27] audit: type=1326 audit(1762394410.097:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f8f6c9 code=0x7ffc0000
[  190.226902][   T27] audit: type=1326 audit(1762394410.127:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f1058f8f6c9 code=0x7ffc0000
[  190.302807][   T27] audit: type=1326 audit(1762394410.127:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f8f6c9 code=0x7ffc0000
[  190.399139][   T27] audit: type=1326 audit(1762394410.127:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7531 comm="syz.0.544" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1058f8f6c9 code=0x7ffc0000
[  191.582679][ T5105] Bluetooth: hci0: command 0x0406 tx timeout
[  191.588252][ T5801] Bluetooth: hci3: command 0x0406 tx timeout
[  191.588841][ T5105] Bluetooth: hci1: command 0x0406 tx timeout
[  194.266105][ T7647] overlayfs: failed to clone upperpath
[  194.628969][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  194.635315][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  197.495939][ T5792] Bluetooth: hci1: unexpected event for opcode 0x2023
[  199.329979][ T7716] netlink: 4 bytes leftover after parsing attributes in process `syz.0.595'.
[  199.338955][ T7716] bridge_slave_1: left allmulticast mode
[  199.344583][ T7716] bridge_slave_1: left promiscuous mode
[  199.350805][ T7716] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.362680][ T7716] bridge_slave_0: left allmulticast mode
[  199.368430][ T7716] bridge_slave_0: left promiscuous mode
[  199.374110][ T7716] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.217998][   T27] audit: type=1326 audit(1762394422.247:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7781 comm="syz.2.621" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3115f8f6c9 code=0x7fc00000
[  203.207824][ T7839] Driver unsupported XDP return value 0 on prog  (id 97) dev N/A, expect packet loss!
[  207.130155][ T7938] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  207.701322][ T7960] bridge0: port 4(syz_tun) entered blocking state
[  207.708709][ T7960] bridge0: port 4(syz_tun) entered disabled state
[  207.715316][ T7960] syz_tun: entered allmulticast mode
[  207.722192][ T7960] syz_tun: entered promiscuous mode
[  207.729035][ T7960] bridge0: port 4(syz_tun) entered blocking state
[  207.736488][ T7960] bridge0: port 4(syz_tun) entered forwarding state
[  209.570583][ T7983] netlink: 44 bytes leftover after parsing attributes in process `syz.4.684'.
[  210.161354][ T7991] netlink: 408 bytes leftover after parsing attributes in process `syz.4.686'.
[  211.447153][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz.0.694'.
[  211.466911][ T8022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.694'.
[  211.520328][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.694'.
[  211.741065][ T8028] netlink: 44 bytes leftover after parsing attributes in process `syz.1.695'.
[  211.768873][ T8031] netlink: 408 bytes leftover after parsing attributes in process `syz.0.696'.
[  214.412564][ T5792] Bluetooth: hci1: unexpected event for opcode 0x0000
[  214.619611][ T8070] netlink: 408 bytes leftover after parsing attributes in process `syz.0.706'.
[  214.698987][ T8073] netlink: 44 bytes leftover after parsing attributes in process `syz.1.705'.
[  217.581173][ T5792] Bluetooth: Frame is too long (len 16, expected len 4)
[  218.577986][ T5792] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  218.586773][ T5792] Bluetooth: hci1: Injecting HCI hardware error event
[  218.595671][ T5798] Bluetooth: hci1: hardware error 0x00
[  218.928996][ T8130] overlayfs: failed to clone upperpath
[  221.098228][ T5798] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  222.144049][ T8163] overlayfs: failed to clone upperpath
[  224.024933][ T8186] netlink: 8 bytes leftover after parsing attributes in process `syz.2.740'.
[  224.380796][ T8189] overlayfs: failed to clone upperpath
[  224.671074][ T8192] netlink: 408 bytes leftover after parsing attributes in process `syz.2.743'.
[  225.192817][ T8203] batadv_slave_1: entered promiscuous mode
[  225.199720][ T8203] batadv_slave_1: left promiscuous mode
[  227.792671][ T8212] overlayfs: failed to clone upperpath
[  229.387654][ T8242] netlink: 408 bytes leftover after parsing attributes in process `syz.0.760'.
[  229.834626][ T8251] overlayfs: failed to clone upperpath
[  231.729434][   T42] libceph: connect (1)[c::]:6789 error -101
[  231.833630][   T42] libceph: mon0 (1)[c::]:6789 connect error
[  232.103281][ T8265] ceph: No mds server is up or the cluster is laggy
[  232.246587][ T8274] netlink: 408 bytes leftover after parsing attributes in process `syz.0.769'.
[  233.252134][ T8281] overlayfs: failed to clone upperpath
[  234.748721][ T8309] netlink: 408 bytes leftover after parsing attributes in process `syz.4.783'.
[  234.947579][ T8317] overlayfs: failed to clone upperpath
[  235.483010][ T8336] netlink: 408 bytes leftover after parsing attributes in process `syz.2.794'.
[  235.769987][ T8346] overlayfs: failed to clone upperpath
[  236.026653][ T8357] netlink: 408 bytes leftover after parsing attributes in process `syz.2.805'.
[  236.361062][ T8369] overlayfs: failed to clone upperpath
[  237.973586][ T8386] netlink: 408 bytes leftover after parsing attributes in process `syz.0.816'.
[  238.313282][ T8401] overlayfs: failed to clone upperpath
[  239.498771][ T8415] netlink: 476 bytes leftover after parsing attributes in process `syz.4.827'.
[  240.076879][ T8439] netlink: 476 bytes leftover after parsing attributes in process `syz.1.839'.
[  240.265940][ T8450] batadv_slave_1: entered promiscuous mode
[  240.272617][ T8450] batadv_slave_1: left promiscuous mode
[  241.418784][ T8471] netlink: 476 bytes leftover after parsing attributes in process `syz.1.848'.
[  241.472595][ T8475] batadv_slave_1: entered promiscuous mode
[  241.493220][ T8475] batadv_slave_1: left promiscuous mode
[  242.723584][ T8503] netlink: 'syz.0.861': attribute type 1 has an invalid length.
[  242.943919][ T8503] 8021q: adding VLAN 0 to HW filter on device bond1
[  242.995930][ T8505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.861'.
[  243.336064][ T8505] bond1 (unregistering): Released all slaves
[  243.401315][ T8507] batadv_slave_1: entered promiscuous mode
[  243.410619][ T8507] batadv_slave_1: left promiscuous mode
[  243.736471][ T8518] overlayfs: failed to clone upperpath
[  244.509369][ T8536] batadv_slave_1: entered promiscuous mode
[  244.517515][ T8536] batadv_slave_1: left promiscuous mode
[  245.460664][ T8561] batadv_slave_1: entered promiscuous mode
[  245.467445][ T8561] batadv_slave_1: left promiscuous mode
[  247.051388][ T8589] netlink: 'syz.0.892': attribute type 1 has an invalid length.
[  247.097325][ T8593] batadv_slave_1: entered promiscuous mode
[  247.123430][ T8589] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  247.139793][ T8589] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  247.161914][ T8593] batadv_slave_1: left promiscuous mode
[  247.209592][ T8597] bond1: (slave bridge0): Enslaving as an active interface with a down link
[  247.296324][ T8589] bond1: (slave gretap1): making interface the new active one
[  247.306326][ T8589] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  247.477551][ T8589] macvlan2: entered promiscuous mode
[  247.513383][ T8589] macvlan2: entered allmulticast mode
[  247.520604][ T8589] bond1: entered promiscuous mode
[  247.525680][ T8589] gretap1: entered promiscuous mode
[  247.531749][ T8589] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  247.555896][ T8589] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[  247.568805][ T8589] bond1: left promiscuous mode
[  247.573745][ T8589] gretap1: left promiscuous mode
[  247.695506][ T8589] syz.0.892 (8589) used greatest stack depth: 19792 bytes left
[  252.861821][ T8682] netlink: 476 bytes leftover after parsing attributes in process `syz.0.929'.
[  254.306938][ T8708] netlink: 476 bytes leftover after parsing attributes in process `syz.0.939'.
[  255.713495][ T8729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.794561][ T8729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  255.832753][ T8729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  256.096258][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  256.103021][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  256.725777][ T8738] netlink: 476 bytes leftover after parsing attributes in process `syz.4.948'.
[  258.716806][ T8765] netlink: 476 bytes leftover after parsing attributes in process `syz.4.958'.
[  258.949623][ T8771] syz_tun: entered allmulticast mode
[  259.416065][ T5778] IPVS: starting estimator thread 0...
[  259.938015][ T8784] IPVS: using max 34 ests per chain, 81600 per kthread
[  260.076342][ T8789] process 'syz.4.967' launched '/dev/fd/5' with NULL argv: empty string added
[  260.374902][ T8799] netlink: 476 bytes leftover after parsing attributes in process `syz.2.972'.
[  262.047980][ T8828] netlink: 476 bytes leftover after parsing attributes in process `syz.1.983'.
[  262.791301][ T8836] overlayfs: failed to clone upperpath
[  263.042461][ T8844] netlink: 476 bytes leftover after parsing attributes in process `syz.4.992'.
[  263.477257][ T8856] overlayfs: failed to clone upperpath
[  263.790630][ T8873] netlink: 476 bytes leftover after parsing attributes in process `syz.1.1002'.
[  265.933073][ T8895] netlink: 476 bytes leftover after parsing attributes in process `syz.4.1011'.
[  267.150995][ T8921] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  267.221711][ T8926] netlink: 476 bytes leftover after parsing attributes in process `syz.0.1022'.
[  267.755781][ T8935] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1024'.
[  268.692217][ T8953] netlink: 476 bytes leftover after parsing attributes in process `syz.0.1032'.
[  270.548585][ T8977] netlink: 'syz.2.1041': attribute type 11 has an invalid length.
[  270.556555][ T8977] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1041'.
[  270.788706][ T8980] netlink: 476 bytes leftover after parsing attributes in process `syz.2.1042'.
[  272.228505][ T9003] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1051'.
[  272.242530][ T9002] overlayfs: failed to clone upperpath
[  273.951606][ T9023] xt_cgroup: invalid path, errno=-2
[  274.150627][ T9029] overlayfs: failed to clone upperpath
[  274.306101][ T9031] netlink: 468 bytes leftover after parsing attributes in process `syz.0.1063'.
[  274.709695][ T9039] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  275.486045][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1068'.
[  275.495733][ T9044] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1068'.
[  276.356229][ T9053] overlayfs: failed to resolve './file1': -2
[  276.845969][ T9075] overlayfs: failed to resolve './file1': -2
[  277.793070][ T9084] syz.1.1086 uses obsolete (PF_INET,SOCK_PACKET)
[  278.716386][ T9105] overlayfs: failed to resolve './file1': -2
[  280.360038][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1098'.
[  281.039837][ T9139] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1103'.
[  281.226017][ T9140] netlink: 592 bytes leftover after parsing attributes in process `syz.2.1103'.
[  281.454932][ T9142] overlayfs: failed to resolve './file0': -2
[  281.777695][ T9154] raw_sendmsg: syz.4.1110 forgot to set AF_INET. Fix it!
[  282.539306][ T9160] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  282.745353][ T9169] overlayfs: failed to resolve './file0': -2
[  284.123857][ T5798] Bluetooth: hci4: command 0x0406 tx timeout
[  284.496165][ T5792] Bluetooth: hci0: Malformed Event: 0x2f
[  285.542199][ T9202] overlayfs: failed to resolve './file0': -2
[  285.667174][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1129'.
[  287.684866][ T9224] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1133'.
[  287.706607][ T9224] netlink: 592 bytes leftover after parsing attributes in process `syz.1.1133'.
[  289.071837][ T9233] overlayfs: failed to clone upperpath
[  289.192460][ T9232] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1138'.
[  290.952488][ T9270] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1147'.
[  290.993598][ T9270] netlink: 592 bytes leftover after parsing attributes in process `syz.0.1147'.
[  297.175941][ T9329] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1166'.
[  297.647673][ T9340] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1171'.
[  299.479460][ T9361] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1179'.
[  299.499367][ T5792] Bluetooth: hci3: Malformed Event: 0x2f
[  306.987122][ T9434] bridge0: port 2(bridge_slave_1) entered disabled state
[  306.997001][ T9434] bridge0: port 1(bridge_slave_0) entered disabled state
[  307.562117][ T9434] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  307.596023][ T9434] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  307.782598][ T9434] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.791932][ T9434] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.803445][ T9434] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.812873][ T9434] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  307.902104][ T9437] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1204'.
[  312.152870][ T9553] syz.4.1243[9553] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  312.153024][ T9553] syz.4.1243[9553] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  314.032047][ T9590] overlayfs: missing 'lowerdir'
[  317.504358][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  317.510848][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  318.591765][ T9629] overlayfs: missing 'lowerdir'
[  318.651508][ T9631] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[  319.981990][ T9645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1265'.
[  320.237553][ T9647] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link
[  320.281588][ T9645] 8021q: adding VLAN 0 to HW filter on device bond1
[  321.081286][ T9655] overlayfs: failed to clone upperpath
[  321.558341][ T5792] Bluetooth: hci0: Malformed Event: 0x2f
[  323.020178][ T9678] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[  325.040058][ T9702] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  325.383594][ T9710] IPVS: set_ctl: invalid protocol: 29 0.0.0.0:20000
[  328.767898][   T27] audit: type=1326 audit(3909878196.722:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9740 comm="syz.0.1299" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1058f8f6c9 code=0x0
[  337.266687][ T9836] overlayfs: failed to clone upperpath
[  343.933223][ T9910] syz.2.1352 (9910) used greatest stack depth: 17960 bytes left
[  345.132040][ T9931] overlayfs: failed to clone upperpath
[  349.777901][ T9964] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1368'.
[  350.896158][ T5792] Bluetooth: hci0: unexpected event for opcode 0x2023
[  352.152281][ T9478] libceph: connect (1)[c::]:6789 error -101
[  352.301906][ T9478] libceph: mon0 (1)[c::]:6789 connect error
[  352.716300][ T9995] ceph: No mds server is up or the cluster is laggy
[  352.940851][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1380'.
[  354.003672][ T5792] Bluetooth: hci3: unexpected event for opcode 0x2023
[  354.271261][ T5792] Bluetooth: hci3: unexpected event for opcode 0x2023
[  355.491094][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1390'.
[  356.957470][ T9481] libceph: connect (1)[c::]:6789 error -101
[  357.042044][T10044] ceph: No mds server is up or the cluster is laggy
[  357.229253][ T9481] libceph: mon0 (1)[c::]:6789 connect error
[  359.326710][T10075] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1400'.
[  359.418401][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1401'.
[  360.608628][ T9481] libceph: connect (1)[c::]:6789 error -101
[  360.676750][ T9481] libceph: mon0 (1)[c::]:6789 connect error
[  360.901060][T10084] ceph: No mds server is up or the cluster is laggy
[  364.495018][T10117] trusted_key: encrypted_key: insufficient parameters specified
[  368.250918][T10171] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1428'.
[  370.203952][    C0] Unknown status report in ack skb
[  375.225951][ T5892] libceph: connect (1)[c::]:6789 error -101
[  375.242868][ T5892] libceph: mon0 (1)[c::]:6789 connect error
[  375.508737][ T5892] libceph: connect (1)[c::]:6789 error -101
[  375.536941][ T5892] libceph: mon0 (1)[c::]:6789 connect error
[  376.458402][T10256] ceph: No mds server is up or the cluster is laggy
[  376.472137][ T5892] libceph: connect (1)[c::]:6789 error -101
[  376.479179][ T5892] libceph: mon0 (1)[c::]:6789 connect error
[  378.448682][T10293] overlayfs: failed to clone upperpath
[  379.066195][ T1289] ieee802154 phy0 wpan0: encryption failed: -22
[  379.072781][ T1289] ieee802154 phy1 wpan1: encryption failed: -22
[  380.597072][    T8] libceph: connect (1)[c::]:6789 error -101
[  380.620484][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  380.919350][    T8] libceph: connect (1)[c::]:6789 error -101
[  380.933924][    T8] libceph: mon0 (1)[c::]:6789 connect error
[  381.460061][ T5892] libceph: connect (1)[c::]:6789 error -101
[  381.728053][ T5892] libceph: mon0 (1)[c::]:6789 connect error
[  381.737966][T10308] ceph: No mds server is up or the cluster is laggy
[  381.941185][T10323] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1477'.
[  381.980140][T10323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1477'.
[  382.111836][T10328] overlayfs: failed to clone upperpath
[  382.370678][   T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  382.383564][   T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  383.955334][ T9481] libceph: connect (1)[c::]:6789 error -101
[  383.961601][ T9481] libceph: mon0 (1)[c::]:6789 connect error
[  384.238236][ T9481] libceph: connect (1)[c::]:6789 error -101
[  384.259058][ T9481] libceph: mon0 (1)[c::]:6789 connect error
[  384.435644][T10363] overlayfs: failed to clone upperpath
[  384.771699][T10352] ceph: No mds server is up or the cluster is laggy
[  384.798491][ T9478] libceph: connect (1)[c::]:6789 error -101
[  384.814052][ T9478] libceph: mon0 (1)[c::]:6789 connect error
[  385.717113][T10384] overlayfs: failed to clone upperpath
[  385.829465][    C1] ------------[ cut here ]------------
[  385.834986][    C1] WARNING: CPU: 1 PID: 10384 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600
[  385.845197][    C1] Modules linked in:
[  385.849160][    C1] CPU: 1 PID: 10384 Comm: syz.2.1501 Not tainted syzkaller #0
[  385.856637][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  385.866777][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  385.873171][    C1] Code: 24 4c 89 e7 e8 9e cc d3 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 a3 96 f7 0f 0b e9 f6 f7 ff ff e8 bd a3 96 f7 <0f> 0b e9 48 fb ff ff e8 b1 a3 96 f7 48 c7 c7 60 07 24 8e 4c 89 e6
[  385.892851][    C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246
[  385.898992][    C1] RAX: ffffffff89eeebd3 RBX: ffffffff89eed9d6 RCX: ffff88801b34da00
[  385.906986][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  385.915018][    C1] RBP: 0000000000000000 R08: ffff88801b34da00 R09: 0000000000000003
[  385.923041][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805cfda3c0
[  385.931098][    C1] R13: dffffc0000000000 R14: ffff88805cfda8b0 R15: ffff88802e7ff824
[  385.939143][    C1] FS:  00007f3116e6e6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  385.948130][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  385.954735][    C1] CR2: 000000110c328bb7 CR3: 000000007bd12000 CR4: 00000000003506e0
[  385.962772][    C1] Call Trace:
[  385.966071][    C1]  <IRQ>
[  385.968979][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  385.974557][    C1]  ieee80211_beacon_get_tim+0xb8/0x560
[  385.980092][    C1]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  385.986883][    C1]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  385.992504][    C1]  __iterate_interfaces+0x243/0x500
[  385.997758][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  386.004026][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  386.011304][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  386.017569][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  386.024659][    C1]  mac80211_hwsim_beacon+0xbb/0x1b0
[  386.029999][    C1]  __hrtimer_run_queues+0x51e/0xc40
[  386.035410][    C1]  ? hw_scan_work+0xf40/0xf40
[  386.040120][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  386.045221][    C1]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  386.051319][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  386.056514][    C1]  handle_softirqs+0x280/0x820
[  386.061315][    C1]  ? __irq_exit_rcu+0xc7/0x190
[  386.066069][    C1]  ? do_softirq+0x180/0x180
[  386.070585][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  386.075778][    C1]  __irq_exit_rcu+0xc7/0x190
[  386.080408][    C1]  ? irq_exit_rcu+0x20/0x20
[  386.084904][    C1]  irq_exit_rcu+0x9/0x20
[  386.089159][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  386.094789][    C1]  </IRQ>
[  386.097751][    C1]  <TASK>
[  386.100680][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  386.106672][    C1] RIP: 0010:finish_task_switch+0x26a/0x920
[  386.112506][    C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 70 25 1c 09 e8 1b a3 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  386.132168][    C1] RSP: 0018:ffffc9000cd6f158 EFLAGS: 00000282
[  386.138264][    C1] RAX: e3c0adba4b458500 RBX: 0000000000000000 RCX: e3c0adba4b458500
[  386.146297][    C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6b00
[  386.154317][    C1] RBP: ffffc9000cd6f1b0 R08: ffffffff90da8637 R09: 1ffffffff21b50c6
[  386.162347][    C1] R10: dffffc0000000000 R11: fffffbfff21b50c7 R12: ffff88801b34da00
[  386.170343][    C1] R13: dffffc0000000000 R14: ffff88801b273c00 R15: ffff8880b8f3ccc8
[  386.178359][    C1]  ? finish_task_switch+0x265/0x920
[  386.183573][    C1]  __schedule+0x14da/0x44d0
[  386.188115][    C1]  ? __lock_acquire+0x1320/0x7c80
[  386.193138][    C1]  ? asan.module_dtor+0x20/0x20
[  386.198005][    C1]  ? mark_lock+0x94/0x320
[  386.202329][    C1]  ? lock_chain_count+0x20/0x20
[  386.207172][    C1]  ? preempt_schedule+0xab/0xc0
[  386.212050][    C1]  preempt_schedule_common+0x82/0xc0
[  386.217326][    C1]  preempt_schedule+0xab/0xc0
[  386.222020][    C1]  ? schedule_preempt_disabled+0x20/0x20
[  386.227755][    C1]  preempt_schedule_thunk+0x1a/0x30
[  386.232978][    C1]  ? unwind_next_frame+0x200a/0x2970
[  386.238348][    C1]  unwind_next_frame+0x200f/0x2970
[  386.243486][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  386.248797][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  386.254084][    C1]  ? stack_trace_save+0xe0/0xe0
[  386.258974][    C1]  arch_stack_walk+0x144/0x190
[  386.263733][    C1]  ? slab_free_freelist_hook+0x130/0x1b0
[  386.269418][    C1]  stack_trace_save+0x9c/0xe0
[  386.274089][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  386.279278][    C1]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  386.285169][    C1]  kasan_set_track+0x4e/0x70
[  386.289776][    C1]  ? kasan_set_track+0x4e/0x70
[  386.294525][    C1]  ? kasan_save_free_info+0x2e/0x50
[  386.299738][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  386.305036][    C1]  ? __kmem_cache_free+0xba/0x1f0
[  386.310076][    C1]  kasan_save_free_info+0x2e/0x50
[  386.315137][    C1]  ____kasan_slab_free+0x126/0x1e0
[  386.320268][    C1]  slab_free_freelist_hook+0x130/0x1b0
[  386.325735][    C1]  ? ovl_free_fs+0x3b7/0x610
[  386.330357][    C1]  __kmem_cache_free+0xba/0x1f0
[  386.335222][    C1]  ovl_free_fs+0x3b7/0x610
[  386.339661][    C1]  ovl_fill_super+0x253/0x3560
[  386.344426][    C1]  ? ida_alloc_range+0x79e/0x830
[  386.349395][    C1]  ? virtio_fs_zero_page_range+0x140/0x140
[  386.355193][    C1]  ? sget_fc+0x7f0/0x8d0
[  386.359455][    C1]  ? __lock_acquire+0x7c80/0x7c80
[  386.364469][    C1]  ? down_write+0x162/0x1f0
[  386.369020][    C1]  ? down_read_killable+0x340/0x340
[  386.374220][    C1]  ? sget_fc+0x7f0/0x8d0
[  386.378483][    C1]  ? kill_litter_super+0xb0/0xb0
[  386.383421][    C1]  ? virtio_fs_zero_page_range+0x140/0x140
[  386.389265][    C1]  get_tree_nodev+0xb5/0x140
[  386.393846][    C1]  vfs_get_tree+0x8c/0x280
[  386.398277][    C1]  do_new_mount+0x24b/0xa40
[  386.402769][    C1]  __se_sys_mount+0x2da/0x3c0
[  386.407475][    C1]  ? __x64_sys_mount+0xc0/0xc0
[  386.412271][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  386.417464][    C1]  ? __x64_sys_mount+0x20/0xc0
[  386.422248][    C1]  do_syscall_64+0x55/0xb0
[  386.426666][    C1]  ? clear_bhb_loop+0x40/0x90
[  386.431378][    C1]  ? clear_bhb_loop+0x40/0x90
[  386.436049][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  386.441968][    C1] RIP: 0033:0x7f3115f8f6c9
[  386.446389][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  386.466035][    C1] RSP: 002b:00007f3116e6e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  386.474473][    C1] RAX: ffffffffffffffda RBX: 00007f31161e5fa0 RCX: 00007f3115f8f6c9
[  386.482470][    C1] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  386.490512][    C1] RBP: 00007f3116011f91 R08: 0000200000000380 R09: 0000000000000000
[  386.498583][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  386.506558][    C1] R13: 00007f31161e6038 R14: 00007f31161e5fa0 R15: 00007ffec51fa648
[  386.514590][    C1]  </TASK>
[  386.517686][    C1] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  386.524973][    C1] CPU: 1 PID: 10384 Comm: syz.2.1501 Not tainted syzkaller #0
[  386.532411][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  386.542446][    C1] Call Trace:
[  386.545716][    C1]  <IRQ>
[  386.548554][    C1]  dump_stack_lvl+0x16c/0x230
[  386.553222][    C1]  ? show_regs_print_info+0x20/0x20
[  386.558407][    C1]  ? load_image+0x3b0/0x3b0
[  386.563014][    C1]  panic+0x2c0/0x710
[  386.566889][    C1]  ? bpf_jit_dump+0xd0/0xd0
[  386.571386][    C1]  __warn+0x2e0/0x470
[  386.575347][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  386.581050][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  386.586750][    C1]  report_bug+0x2be/0x4f0
[  386.591064][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  386.596763][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  386.602460][    C1]  ? __ieee80211_beacon_get+0x1235/0x1600
[  386.608173][    C1]  handle_bug+0xcf/0x120
[  386.612426][    C1]  exc_invalid_op+0x1a/0x50
[  386.616920][    C1]  asm_exc_invalid_op+0x1a/0x20
[  386.621761][    C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600
[  386.628080][    C1] Code: 24 4c 89 e7 e8 9e cc d3 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 c9 a3 96 f7 0f 0b e9 f6 f7 ff ff e8 bd a3 96 f7 <0f> 0b e9 48 fb ff ff e8 b1 a3 96 f7 48 c7 c7 60 07 24 8e 4c 89 e6
[  386.647685][    C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246
[  386.653751][    C1] RAX: ffffffff89eeebd3 RBX: ffffffff89eed9d6 RCX: ffff88801b34da00
[  386.661712][    C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  386.669666][    C1] RBP: 0000000000000000 R08: ffff88801b34da00 R09: 0000000000000003
[  386.677618][    C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88805cfda3c0
[  386.685572][    C1] R13: dffffc0000000000 R14: ffff88805cfda8b0 R15: ffff88802e7ff824
[  386.693536][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  386.699079][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  386.704907][    C1]  ? __ieee80211_beacon_get+0x1233/0x1600
[  386.710626][    C1]  ? __ieee80211_beacon_get+0x36/0x1600
[  386.716217][    C1]  ieee80211_beacon_get_tim+0xb8/0x560
[  386.721671][    C1]  ? ieee80211_beacon_get_template_ema_list+0x90/0x90
[  386.728424][    C1]  mac80211_hwsim_beacon_tx+0x3c7/0x780
[  386.733967][    C1]  __iterate_interfaces+0x243/0x500
[  386.739158][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  386.745381][    C1]  ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180
[  386.752565][    C1]  ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0
[  386.758789][    C1]  ieee80211_iterate_active_interfaces_atomic+0xdb/0x180
[  386.765802][    C1]  mac80211_hwsim_beacon+0xbb/0x1b0
[  386.770988][    C1]  __hrtimer_run_queues+0x51e/0xc40
[  386.776171][    C1]  ? hw_scan_work+0xf40/0xf40
[  386.780833][    C1]  ? hrtimer_interrupt+0x9c0/0x9c0
[  386.785926][    C1]  ? ktime_get_update_offsets_now+0x3d2/0x3f0
[  386.791980][    C1]  hrtimer_run_softirq+0x187/0x2b0
[  386.797087][    C1]  handle_softirqs+0x280/0x820
[  386.801833][    C1]  ? __irq_exit_rcu+0xc7/0x190
[  386.806576][    C1]  ? do_softirq+0x180/0x180
[  386.811061][    C1]  ? irqtime_account_irq+0xb6/0x1c0
[  386.816249][    C1]  __irq_exit_rcu+0xc7/0x190
[  386.820820][    C1]  ? irq_exit_rcu+0x20/0x20
[  386.825309][    C1]  irq_exit_rcu+0x9/0x20
[  386.829533][    C1]  sysvec_apic_timer_interrupt+0xa4/0xc0
[  386.835151][    C1]  </IRQ>
[  386.838062][    C1]  <TASK>
[  386.840984][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  386.846944][    C1] RIP: 0010:finish_task_switch+0x26a/0x920
[  386.852741][    C1] Code: 0f 84 37 01 00 00 48 85 db 0f 85 56 01 00 00 e9 f6 04 00 00 4c 8b 75 d0 4c 89 e7 e8 70 25 1c 09 e8 1b a3 2f 00 fb 4c 8b 65 c0 <49> 8d bc 24 f8 15 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 28 84 c0
[  386.872350][    C1] RSP: 0018:ffffc9000cd6f158 EFLAGS: 00000282
[  386.878404][    C1] RAX: e3c0adba4b458500 RBX: 0000000000000000 RCX: e3c0adba4b458500
[  386.886361][    C1] RDX: dffffc0000000000 RSI: ffffffff8aaabce0 RDI: ffffffff8afc6b00
[  386.894336][    C1] RBP: ffffc9000cd6f1b0 R08: ffffffff90da8637 R09: 1ffffffff21b50c6
[  386.902308][    C1] R10: dffffc0000000000 R11: fffffbfff21b50c7 R12: ffff88801b34da00
[  386.910270][    C1] R13: dffffc0000000000 R14: ffff88801b273c00 R15: ffff8880b8f3ccc8
[  386.918244][    C1]  ? finish_task_switch+0x265/0x920
[  386.923434][    C1]  __schedule+0x14da/0x44d0
[  386.927936][    C1]  ? __lock_acquire+0x1320/0x7c80
[  386.932972][    C1]  ? asan.module_dtor+0x20/0x20
[  386.937810][    C1]  ? mark_lock+0x94/0x320
[  386.942135][    C1]  ? lock_chain_count+0x20/0x20
[  386.946975][    C1]  ? preempt_schedule+0xab/0xc0
[  386.951813][    C1]  preempt_schedule_common+0x82/0xc0
[  386.957123][    C1]  preempt_schedule+0xab/0xc0
[  386.961791][    C1]  ? schedule_preempt_disabled+0x20/0x20
[  386.967411][    C1]  preempt_schedule_thunk+0x1a/0x30
[  386.972598][    C1]  ? unwind_next_frame+0x200a/0x2970
[  386.977882][    C1]  unwind_next_frame+0x200f/0x2970
[  386.982984][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  386.988252][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  386.993514][    C1]  ? stack_trace_save+0xe0/0xe0
[  386.998347][    C1]  arch_stack_walk+0x144/0x190
[  387.003092][    C1]  ? slab_free_freelist_hook+0x130/0x1b0
[  387.008728][    C1]  stack_trace_save+0x9c/0xe0
[  387.013393][    C1]  ? stack_trace_snprint+0xf0/0xf0
[  387.018484][    C1]  ? _raw_spin_unlock_irqrestore+0xae/0x110
[  387.024364][    C1]  kasan_set_track+0x4e/0x70
[  387.028933][    C1]  ? kasan_set_track+0x4e/0x70
[  387.033674][    C1]  ? kasan_save_free_info+0x2e/0x50
[  387.038851][    C1]  ? ____kasan_slab_free+0x126/0x1e0
[  387.044139][    C1]  ? __kmem_cache_free+0xba/0x1f0
[  387.049159][    C1]  kasan_save_free_info+0x2e/0x50
[  387.054343][    C1]  ____kasan_slab_free+0x126/0x1e0
[  387.059439][    C1]  slab_free_freelist_hook+0x130/0x1b0
[  387.064887][    C1]  ? ovl_free_fs+0x3b7/0x610
[  387.069459][    C1]  __kmem_cache_free+0xba/0x1f0
[  387.074319][    C1]  ovl_free_fs+0x3b7/0x610
[  387.078741][    C1]  ovl_fill_super+0x253/0x3560
[  387.083492][    C1]  ? ida_alloc_range+0x79e/0x830
[  387.088439][    C1]  ? virtio_fs_zero_page_range+0x140/0x140
[  387.094230][    C1]  ? sget_fc+0x7f0/0x8d0
[  387.098467][    C1]  ? __lock_acquire+0x7c80/0x7c80
[  387.103473][    C1]  ? down_write+0x162/0x1f0
[  387.107963][    C1]  ? down_read_killable+0x340/0x340
[  387.113151][    C1]  ? sget_fc+0x7f0/0x8d0
[  387.117377][    C1]  ? kill_litter_super+0xb0/0xb0
[  387.122296][    C1]  ? virtio_fs_zero_page_range+0x140/0x140
[  387.128085][    C1]  get_tree_nodev+0xb5/0x140
[  387.132662][    C1]  vfs_get_tree+0x8c/0x280
[  387.137065][    C1]  do_new_mount+0x24b/0xa40
[  387.141903][    C1]  __se_sys_mount+0x2da/0x3c0
[  387.146649][    C1]  ? __x64_sys_mount+0xc0/0xc0
[  387.151410][    C1]  ? lockdep_hardirqs_on+0x98/0x150
[  387.156591][    C1]  ? __x64_sys_mount+0x20/0xc0
[  387.161339][    C1]  do_syscall_64+0x55/0xb0
[  387.165739][    C1]  ? clear_bhb_loop+0x40/0x90
[  387.170398][    C1]  ? clear_bhb_loop+0x40/0x90
[  387.175056][    C1]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  387.180929][    C1] RIP: 0033:0x7f3115f8f6c9
[  387.185327][    C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  387.204940][    C1] RSP: 002b:00007f3116e6e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  387.213338][    C1] RAX: ffffffffffffffda RBX: 00007f31161e5fa0 RCX: 00007f3115f8f6c9
[  387.221296][    C1] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000
[  387.229277][    C1] RBP: 00007f3116011f91 R08: 0000200000000380 R09: 0000000000000000
[  387.237241][    C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  387.245194][    C1] R13: 00007f31161e6038 R14: 00007f31161e5fa0 R15: 00007ffec51fa648
[  387.253197][    C1]  </TASK>
[  387.256353][    C1] Kernel Offset: disabled
[  387.260699][    C1] Rebooting in 86400 seconds..