last executing test programs:

6m33.675523817s ago: executing program 2 (id=121):
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x35, 0x7, 0x5, 0x180, 0x4, 0x10, 0xf1, 0x50, 0x12, 0x5, 0x0, 0x29, 0x0, 0x6, 0x0, 0xbdb], 0xffff1001, 0x43100})
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x3000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe6, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x42, 0x5, 0x7d, 0x6, 0x4, 0x0, 0x2, 0x87}, {0x0, 0xdddd0000, 0x9, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x9}, {0x1, 0xeeee0000, 0x9, 0x6, 0x5, 0x42, 0xb, 0xff, 0x8, 0x7, 0xe}, {0x80a0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x9, 0xf7, 0x97}, {0xeeefa000, 0x3000, 0xe, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x7}, {0x6000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x6, 0x3, 0x8, 0x81, 0x40, 0x70}, {0xd000, 0x4000, 0xa, 0x5, 0xcd, 0x7, 0x1, 0x9, 0x5, 0xc, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x8000000, 0x7}, 0x80000031, 0x0, 0x0, 0x12024, 0x2, 0x0, 0x3000, [0x6800000000000000, 0x4, 0x3, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m32.042483812s ago: executing program 2 (id=128):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c)
close(r0)
syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000002340)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x24, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x20, 0x2, 0x0, 0xe7}}}}}}, 0x0)
write$FUSE_ATTR(0xffffffffffffffff, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
open_by_handle_at(r1, 0x0, 0x0)
openat2(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000200)={@local, @random="d8be17d19221", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x23, 0x28, 0x64, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2, 0x0, 0xe7}}}}}}, 0x0)

6m30.742497608s ago: executing program 2 (id=134):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x3, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newsa={0x138, 0x10, 0x1, 0xbffffffd, 0x25dfdbfd, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1, 0x1, 0x794, 0x4e23, 0x5, 0x2, 0x0, 0x20, 0x3a}, {@in=@broadcast, 0x4d4, 0x6c}, @in=@loopback, {0xffffffff, 0x9, 0x1ff, 0xffff, 0x8251d, 0xfffffffffffffffe, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x3, 0x1, 0x1ff}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3, 0x2, 0x1, 0xfd, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x10)

6m29.670032571s ago: executing program 2 (id=139):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x4002, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./bus\x00', 0x3010009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c2)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0/file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0)
capset(0x0, 0x0)
setrlimit(0x40000000000008, &(0x7f0000000000))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))

6m28.233131395s ago: executing program 2 (id=145):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000000)=""/172, 0xac)
syz_open_dev$tty1(0xc, 0x4, 0x2)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(0xffffffffffffffff)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r2, 0x4048aecb, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x181603, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_disconnect(r0)

6m25.146628105s ago: executing program 2 (id=152):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20010014)
sched_setscheduler(0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m24.911211119s ago: executing program 32 (id=152):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0xe8, 0x0, 0x0)
ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000300)={0xc9, 0x0, 0xc})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0)
sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000000}, 0x20010014)
sched_setscheduler(0x0, 0x2, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x1, 0x800}, 0x0, 0x0, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

6m23.809289674s ago: executing program 0 (id=156):
socket$nl_route(0x10, 0x3, 0x0)
socket$packet(0x11, 0x2, 0x300)
syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000100)='./file1\x00', 0x2000018, &(0x7f0000000000)=ANY=[], 0x0, 0x728, &(0x7f0000000b80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000440)=ANY=[], 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
quotactl$Q_QUOTAON(0xffffffff80000201, &(0x7f0000000180)=@loop={'/dev/loop', 0x0}, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0xee01, 0x0, 0x1000)

6m22.856429489s ago: executing program 0 (id=160):
ioctl$KVM_X86_SET_MSR_FILTER(0xffffffffffffffff, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x0, 0x8, 0x2, &(0x7f00000002c0)='p'}, {0x1, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7, 0x0}, {0x2, 0x0, 0x83f, 0x0}, {0x2, 0x0, 0x3, 0x0}, {0x0, 0x0, 0xff, 0x0}, {0x3, 0x0, 0x74, 0x0}, {0x2, 0x0, 0xfb5c, 0x0}, {0x3, 0x0, 0x8001, 0x0}, {0x2, 0x0, 0x200, 0x0}, {0x1, 0x0, 0xfffffffd, 0x0}, {0x0, 0x0, 0x39d7, 0x0}, {0x2, 0x0, 0xa, 0x0}, {0x3, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xd, 0x0}, {0x0, 0x0, 0x73bb, 0x0}]})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x40040e4}, 0x20080d1)
r0 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0), 0x410080, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e26, 0x2, @mcast1, 0x5}, 0x1c)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000440)={[0x0, 0x100000000, 0x0, 0x81, 0x100000, 0x0, 0x2004c8, 0x8000000, 0xfffffffffffffffe, 0x0, 0xa, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0x8000000, 0x200})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x4, 0x5, 0x6, 0x4004, 0x2, 0x4, 0xefffffffffffffff, 0x0, 0x0, 0x2000000, 0x0, 0x1c, 0x0, 0xffffffffffffffff, 0x6], 0x0, 0x41901})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

6m21.547534396s ago: executing program 0 (id=165):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000003c0), 0x3, 0x44a, &(0x7f00000018c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x20042, 0x0)
pwrite64(r1, &(0x7f0000000000)='2', 0x1, 0x4fed0)
write$nbd(r1, &(0x7f00000011c0)={0x67446698, 0x0, 0x0, 0x0, 0x4, "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"}, 0x10f)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x3ffe, 0xfffffdfd, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080)=0x9)
truncate(&(0x7f0000000040)='./file1\x00', 0x1001bfc)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001})

6m19.178505344s ago: executing program 0 (id=171):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x401, &(0x7f0000000100)={[], [{@smackfsroot={'smackfsroot', 0x3d, '$#})['}}, {@fsuuid={'fsuuid', 0x3d, {[0x61, 0x61, 0x30, 0x30, 0x32, 0x33, 0x35, 0x35], 0x2d, [0x33, 0x36, 0x66, 0x33], 0x2d, [0x62, 0x3, 0xf, 0x35], 0x2d, [0x35, 0x36, 0x34, 0x36], 0x2d, [0x63, 0x38, 0x64, 0x33, 0x33, 0x39, 0x32, 0x39]}}}]}, 0x0, 0x596, &(0x7f0000000d80)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='devpts\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, &(0x7f0000000500)=0x2)

6m17.659996143s ago: executing program 0 (id=175):
socket(0x1e, 0x4, 0x0)
socket(0x1e, 0x4, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffff}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x1, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

6m15.976505032s ago: executing program 0 (id=182):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6m15.427384244s ago: executing program 33 (id=182):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m24.936975065s ago: executing program 3 (id=772):
openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fcntl$setlease(r2, 0x400, 0x0)
mmap$snddsp(&(0x7f0000a72000/0x3000)=nil, 0x3000, 0x2000004, 0x4010, 0xffffffffffffffff, 0x1000)
mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x28, 0x1411, 0x1, 0x8070bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x28}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040084}, 0x40)
setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0)
r4 = syz_open_dev$vim2m(0x0, 0x3, 0x2)
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)

2m23.320231469s ago: executing program 3 (id=776):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000003c0)=0x2)
r4 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e1, &(0x7f0000000640)={'veth0_to_batadv\x00', 0x0, 0xf2b3})
timer_settime(r5, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
readv(r3, &(0x7f0000000600)=[{&(0x7f00000002c0)=""/135, 0x87}], 0x1)

2m20.986241226s ago: executing program 3 (id=780):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_80211_join_ibss(0x0, &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x3, &(0x7f0000000540)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xc, 0xb9, &(0x7f0000000140)=""/185, 0x40f00, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_vhci(0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmsg(r2, &(0x7f0000000c00)={&(0x7f0000000780)=@hci, 0x80, &(0x7f0000000b00)}, 0x40000164)
socket$inet_mptcp(0x2, 0x1, 0x106)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
setreuid(0x0, 0xee00)
ioctl$SG_IO(r3, 0x2285, &(0x7f0000000280)={0x53, 0xfffffffffffffffc, 0x6, 0x93, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000100)="28a0a15ac720", 0x0, 0x8, 0x10004, 0x2, 0x0})

2m18.212332108s ago: executing program 3 (id=786):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x7, 0x2, 0x7}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)

2m18.030374679s ago: executing program 4 (id=789):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
r5 = socket$kcm(0x11, 0x3, 0x0)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r8, {0xb, 0x4}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x7, 0x2, 0x2}, {0xffff, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)
r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r9)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r9, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r10=>0x0})
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r10, 0x18}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="03", 0x1}], 0x1}, 0x4)

2m14.391654902s ago: executing program 4 (id=796):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r3 = socket$can_raw(0x1d, 0x3, 0x1)
r4 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r4, &(0x7f0000000000), 0x10)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x37, 0x0, "4a8553ada03d7382480334deea90815d9df4fdd0840b387404d9b33a2e0b7cff541f02cc6a1482ebbd6d2732b0ed21c9ccedb3c51f9dc3d402810abe40b42c7c0352df734a8d3ea44b42da86129ca4f2"}, 0xd8)
setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000020, 0x0, 0x0)
dup3(r3, r4, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021100011800c000100636f756e74657200a80000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000007c0003807800008008000340000000026c000b80680001800c000100636f756e74657200580002800c0001"], 0x13c}}, 0x0)

2m12.679555421s ago: executing program 4 (id=800):
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009b23fd406d04c1088dee200009010902240001000000000904000000ff01000007"], 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff)
keyctl$invalidate(0x15, 0x0)
syz_usb_connect$hid(0x5, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x1b1c, 0x1c07, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x30, 0x4, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x1, 0x1, 0xee, {0x9, 0x21, 0x7, 0x40, 0x1, {0x22, 0xe14}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x7, 0xd}}, [{{0x9, 0x5, 0x2, 0x3, 0x418, 0xb4, 0x90}}]}}}]}}]}}, 0x0)
sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x80)
ioctl$USBDEVFS_ALLOC_STREAMS(0xffffffffffffffff, 0x8008551c, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f00000003c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000000c0)="b9da06ce171c2e7cc2a25d589ccd75d0275367048f46e1d1833f0b225d71e6ae", 0x20)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000002c0)=""/30, 0x1e}], 0x1}, 0x40010022)

2m11.33851016s ago: executing program 3 (id=802):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)
r5 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r5, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc)
connect$qrtr(r5, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002)

2m10.725106086s ago: executing program 3 (id=805):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0)
keyctl$get_keyring_id(0x0, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080)
pread64(r0, &(0x7f0000000040)=""/9, 0x7e, 0xfff)

2m9.490436258s ago: executing program 4 (id=808):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfffff000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
openat$dma_heap(0xffffffffffffff9c, 0x0, 0x141000, 0x0)
memfd_secret(0x80000)
r4 = socket$inet6_sctp(0xa, 0x801, 0x84)
connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
r5 = socket$netlink(0x10, 0x3, 0x4)
writev(r5, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600050000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1)
ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)

2m8.157723407s ago: executing program 4 (id=813):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b"], 0x15)
dup(0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x1a0)
r1 = fanotify_init(0x0, 0x8000)
fanotify_mark(r1, 0x105, 0x40001030, r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket$rds(0x15, 0x5, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_NL_MEDIA_GET(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r6, 0x1, 0x170bd2b, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x5, @mcast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x8000)

2m7.173428794s ago: executing program 4 (id=816):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)
r5 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r5, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc)
connect$qrtr(r5, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002)

1m55.619569159s ago: executing program 34 (id=805):
r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080), 0x1c0002, 0x0)
socket$kcm(0x10, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, 0x2}, 0x94)
r1 = add_key$user(&(0x7f00000001c0), &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000240)="b1", 0x1, 0xffffffffffffffff)
r2 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000140)=@secondary)
keyctl$KEYCTL_MOVE(0x1e, r1, 0xffffffffffffffff, r2, 0x0)
keyctl$get_keyring_id(0x0, r1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, 0x0, 0x0)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000540)={0x1c, 0x7, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48000}, 0x4000080)
pread64(r0, &(0x7f0000000040)=""/9, 0x7e, 0xfff)

1m51.68262676s ago: executing program 35 (id=816):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB='b *:* r'], 0x8)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r4 = openat$cgroup_devices(r0, &(0x7f0000000240)='devices.allow\x00', 0x2, 0x0)
write$cgroup_devices(r4, &(0x7f0000000280)={'b', ' *:* ', 'rm\x00'}, 0x9)
r5 = socket(0x2d, 0x2, 0x0)
connect$qrtr(r5, &(0x7f00000000c0)={0x2d, 0x0, 0x4000}, 0xc)
connect$qrtr(r5, &(0x7f0000000c80)={0x2d, 0xfffffffffffffffb, 0x1}, 0xc)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002)

4.127850279s ago: executing program 7 (id=1127):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000003680)=@filter={'filter\x00', 0x42, 0x4, 0x3f0, 0xffffffff, 0x210, 0x318, 0x318, 0xffffffff, 0xffffffff, 0x408, 0x408, 0x408, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @private, 0x0, 0x0, 'wg1\x00', 'nr0\x00'}, 0x74000002, 0xe8, 0x210, 0x1ba, {0x46010000, 0x2c000000000000}, [@common=@unspec=@limit={{0x48}, {0x0, 0xdf6, 0x0, 0x0, 0x0, 0x9}}, @common=@addrtype={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:removable_device_t:s0\x00'}}}, {{@uncond, 0x287, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450)

4.021991136s ago: executing program 7 (id=1129):
r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)='7', 0x1}, {&(0x7f0000000480)="00f6c010", 0x4}], 0x2}, 0x0)

3.580050941s ago: executing program 7 (id=1137):
syz_mount_image$v7(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x0, &(0x7f0000009e80), 0x1, 0x9dc3, &(0x7f0000009ec0)="$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")

3.142469847s ago: executing program 7 (id=1142):
socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a5301124060604050800040005000600f4ff040924030506030501f909240702020005cbad0924030601010303de0924040003030306"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0})

2.364396693s ago: executing program 6 (id=1158):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0x200000, &(0x7f00000000c0)=ANY=[], 0xbe, 0x1c0, &(0x7f0000000500)="$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")
truncate(&(0x7f0000000000)='./file2\x00', 0x57d5)

2.289602687s ago: executing program 5 (id=1161):
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)

2.24110154s ago: executing program 6 (id=1162):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x801, &(0x7f00000003c0)=ANY=[], 0x2, 0x185, &(0x7f00000001c0)="$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")

2.106506527s ago: executing program 6 (id=1165):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$nl_rdma(0x10, 0x3, 0x14)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x3, @pix={0x434c, 0x8, 0x584e4f53, 0x4, 0xc, 0x7, 0x0, 0x40000005, 0x1, 0x7, 0x2, 0x7}})
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10)
setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r4, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r4, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000040)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @info_reply={0x10, 0x0, 0x0, 0x3, 0xe}}}}}, 0x0)
r5 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10)
write(r5, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24)

2.045048161s ago: executing program 8 (id=1167):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x3c, 0x0, 0x8, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8917}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048840}, 0x44)

1.923363188s ago: executing program 8 (id=1169):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi3\x00', 0x2000, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0)

1.922956688s ago: executing program 5 (id=1170):
socketpair(0x1, 0x805, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000140)=""/85, 0x55}], 0x1)

1.907876589s ago: executing program 6 (id=1171):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)='7', 0x1}, {&(0x7f0000000480)="00f6c010", 0x4}], 0x2}, 0x0)

1.785873746s ago: executing program 5 (id=1173):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@empty, @rand_addr=' \x01\x00', @private0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6})

1.785659776s ago: executing program 8 (id=1174):
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}, {@nojournal_checksum}]}, 0x21, 0x4bd, &(0x7f00000006c0)="$eJzs3c9vVFsdAPDvvf1JKbQoCzUqiCgawkw7QENY4UZjCImRuHIBtR2apjOdpjNFWlmU/8FEElf6J7gwcWHCyr073bnBhQkq0Udf8hbzcu9MS1+Zgb7QN0M6n09ycu+5p8z3nLm55wxf6JwABtb5iNiOiNGIuB8RU+3rSbvErVbJfu7Vy8cLOy8fLyTRbN79T5K3Z9di35/JnGy/5nhE/PRHEb9I3oxb39xama9UyuvterFRXSvWN7euLFfnl8pL5dVSaW52bubG1eulIxvrueofXvxw+fbP/vynbzz/6/b3f5V1a7Ldtn8cR6k19JG9OJnhiLj9RQTrg6H2eEYPXO9wy/kApRHxpYi4kD//UzGU300A4DhrNqeiObW/DgAcd2meA0vSQjsXMBlpWii0cnhnYyKt1OqNyw9qG6uLrVzZdIykD5Yr5Zl2rnA6RpKsPpufv66XDtSvRsSZiPj12Im8XlioVRb7+cEHAAbYyQPr///HWus/AHDMjfe7AwBAz1n/AWDwWP8BYPBY/wFg8Fj/AWDwWP8BYPBY/wFgoPzkzp2sNHfa33+9+HBzY6X28Mpiub5SqG4sFBZq62uFpVptKf/Onuq7Xq9Sq63NXouNR8VGud4o1je37lVrG6uNe/n3et8rj/RkVADA25w59+zvSURs3zyRl9i3l4O1Go63tN8dAPpmqN8dAPrGbl8wuPwdH3jXfq1d/4vQ06PvC9Abl74q/w+DSv4fBpf8Pwwu+X8YXM1mYs9/ABgwcvyAf/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAz28yL0laaO8FPhlpWihEnIqI6RhJHixXyjMRcToi/jY2MpbVZ/vdaQDgPaX/SuKj9jaAFycPto4mH4/lx4j45W/v/ubRfKOxPptd/+/e9cbT9vVSzzsPABzC7jq9u47vevXy8cJu6WV/XvygtbloFnenXVotwzGcH8cj+3Ay8b+kXW9JImLoCOJvP4mIr3Qaf5LnRqbbO58ejJ/FPtXT+Oln4qd5W+uYvRdfPoK+wKB5ls0/tzo9f2mcz4+dn//xfIZ6f7vz384b81+6N/8NdZn/zh82xrW//Hi0W9uTiK8Nd4qf7MVPusS/eMj4//j6Ny90a2v+LuJSdI6/P1axUV0r1je3rixX55fKS+XVUmludm7mxtXrpWKeoy7uZqrf9O+bl093i5+Nf6JL/PzO35nsOv7vHHL8v//k/s+/9Zb43/t25/t/Nj92fv+zNfG7h4w/P/HHrtt3Z/EXu4z/Xff/8iHjP//n1uIhfxQA6IH65tbKfKVSXnfiZO9k95Peh9Kf7ifNqVZPP5T+HJ+Tfs5KQC+8fuj73RMAAAAAAAAAAAAAAKCbXvw6Ub/HCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPH1aQAAAP//sHnUnw==")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000340)={0x1, 0x1, 0x5, 0x0, 0x200000004, 0x4000000, 0x0, 0x2, 0x4040c405})

1.694762521s ago: executing program 1 (id=1175):
io_uring_setup(0x2d08, &(0x7f0000000000))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_LINK_GET(r0, 0x0, 0x48404)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r3 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r3, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01"], 0x7c}}, 0x0)
readv(r4, &(0x7f00000002c0)=[{&(0x7f00000000c0)=""/75, 0x4b}], 0x1)
close_range(r2, 0xffffffffffffffff, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080))

1.680898882s ago: executing program 5 (id=1176):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r4, r3, 0x0, 0x3a)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$ax25(0x3, 0x5, 0xc3)
socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010028bd7000070000000200"], 0x1c}, 0x1, 0x0, 0x0, 0x40089}, 0x8004)

1.370701411s ago: executing program 6 (id=1177):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000400), 0x12)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040), 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x74f, &(0x7f0000001040)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

1.370173141s ago: executing program 1 (id=1178):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0), 0x1, 0x22c, &(0x7f0000000000)="$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")

1.369797001s ago: executing program 8 (id=1179):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x300}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0x18, 0x4, @local}, {0xa, 0x4, @multicast}]}]}}}]}, 0x50}}, 0x0)

583.592666ms ago: executing program 1 (id=1180):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0xfd3649826d894c67, 0x0, 0x4, {{@in6=@private0={0xfc, 0x0, '\x00', 0x2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x100}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0x2}, 0x400}}, 0xb8}}, 0x4c050)

583.307606ms ago: executing program 7 (id=1181):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=ANY=[@ANYBLOB="58010000100001000400000800000000ac1414bb000000000000000000000000ac141412000000000000000000000000000201004e200050000020002d000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000ffff64010101fffffffc33000000ac1414aa0000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000101000000000000ffffffffffffffff000000805600000000000000000000000000000000000000000001000000000001040000090000000000000000000000000000000a0001009000000000000000480001007368613235360000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200017000a"], 0x158}}, 0x24000058)

583.144696ms ago: executing program 8 (id=1182):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800"], 0x48)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10)
setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r1, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)

579.479197ms ago: executing program 5 (id=1183):
r0 = syz_open_dev$loop(&(0x7f0000000280), 0x4, 0x28042)
ioctl$BLKGETZONESZ(r0, 0x80041284, &(0x7f00000002c0)=0x1)

510.334891ms ago: executing program 1 (id=1184):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@bridge_delneigh={0x30, 0x1e, 0x1, 0x0, 0x0, {0x7}, [@NDA_CACHEINFO={0x14}]}, 0x30}}, 0x0)

510.010411ms ago: executing program 1 (id=1185):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
r0 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r0, 0x0, 0x0)

323.514992ms ago: executing program 1 (id=1186):
setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, 0x0, 0x0)
setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd4, &(0x7f0000000040)=0x6, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmstat\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000200)={0x2020}, 0x2020)
r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x189900, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x5100, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20)

323.123762ms ago: executing program 5 (id=1187):
r0 = syz_usb_connect$uac1(0x2, 0x71, &(0x7f0000000240)=ANY=[@ANYBLOB="12010102000000406b1d010140000102030109025f00030100400209040000000101"], &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, &(0x7f0000000d80)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="00031c0000001c0355de09"], 0x0, 0x0, 0x0}, 0x0)

322.465882ms ago: executing program 6 (id=1196):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_procs(r2, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r3, &(0x7f0000000400), 0x12)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000180)=0x3, 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x20010, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000002040), 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file1\x00', 0x0, &(0x7f0000000000)={[{@nobarrier}, {@noinit_itable}, {@i_version}, {@init_itable}]}, 0x1, 0x74f, &(0x7f0000001040)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2440, 0x0)
ioctl$FS_IOC_ENABLE_VERITY(r4, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

298.129553ms ago: executing program 7 (id=1188):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
r2 = socket$kcm(0x11, 0x3, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x58, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {}, {0x7, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x28, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x5}, {{0x0, 0x0, 0x1}, {0x0, 0x0, 0x1}}}}]}]}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20041090}, 0x8000)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x3e}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000200)='7', 0x1}, {&(0x7f0000000480)="00f6c010", 0x4}], 0x2}, 0x0)

0s ago: executing program 8 (id=1189):
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000002c0), 0x980400, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="d5c2280baf4e05cfa1d1112770cf43a123827586f0f2675b130041ff58ba6533ea7947f2f65b1d458fe88a96133ea3927f41fa6976fad8c967c88679769ee674b80debcd1ec6ce1eb490888bd66a52141fa82f51882b22a8e36ff462b51560307cd0048156800ad137f359719a9c5d6ad6a8c999984f22461c4ca6614ca4cbbd5e9103a3459228e3bd35e3c1cd5f2a83fbefafe7c5a39617ba1d856f37977da077ffcf4d52f5bb3feffa9e100b0279cb635a61ae9f5f4491bb1c9f04c041818a1ae9a25cbca38c4b4754a8be4f52db20ca464b3b4faf0ea8ff193b414e7b7a4ec8aec2e77adc43d09c62d37fc0aa6296a56a9445f264a245d41e77de43c2694cc5885ebd454a3b78b60172e3e6a2fd79efa8b5fbbe827512aa0656920858da51616244ad32e53ed039a270c042662bc966a8fa05e23a51c76585a6f753e57c63b5a1dd11c4ce8773702c5c759471b79ee9bed600d99853afda9b675f071bdf6ff4eb99cb1ae0128ac1f8132f9b7bef82221276395e59f1323c9f9f6bb937a9db0bc2088670ffc3e6233ba73d4e324df7bc866e84e82ab707ab8aadd593913dd3533cddb396e804a63155ad6911962bc49bad21faba90b5570b62d98eb5328214a7198b36ea6df9a72dc248311040e01539112e1d6bcb4ed9d7fb70d22768ec6603e4727b6ed2616eb9108524985ccd70f1361f68b1fb7088829acdd59ec5af9e84409737f0d852a3c55993cb7398b5640c458bc036115b86de7b8e68f1cff882ee5707040571c3e5c9602c773459cfecad4917d8ba2902bd64a676e2c6e507d06dbc806c13c0fd18175087440ce7d7300dfe745b8e98ac63b400e449a3f2518c6112c9864fde68f580ebc2d72e4bbd03f16a7289be813c258b02f76ce901afdafc69046c947c9e801ac635b2a95cca291c052c7f8149c92aaeaab41edb34a70604a7538c4bb6486b983416843fe6a65d7b828d66deb991e71526b7627e71c6a795a02e787bc561ec4b65d4742a129c59bc71b323850cb416f3d32494d6dbfe3ea73cb473b093ae0b0ebbbd3e3251ece756b3cc381f05ea1b8c3f7fbcbb16fc446fc084725e6c3a608221aad8d8179112f9e5ee3697346a0dc0645e530df523cf4daea14764c25da2da863adebaccefc2c83a9257b3131ac2fe04a27bf3aea8979b6f3091b4fef99e203725368d297bad3b020273d0b606d2368e2ecb0776349cb86bbcbaa5c910636527e3cbeca06b4135170d8808c5f113fcd77ecb2f099d1e663617a46ffc5275c8fcc339d315ca1583f66fe7a7e6430405c0be889826c07fcafa17f04e08bc39570a1f499092d390c5dba82d259f652307ff941e9f1f569a48144da846f14452df295553de6ef4e9ba0cd98dd16cf89d8bead08eacd4eea71cc5f8232349f2d8519b1172c724d3bbc415c19c9e679b5a96bc9051cf6f243f243366622023ab1b7039a89152e7db97f291bb3f0213c445c25caf5f0a5a2b382c841cd8a490dc97d008966e94ed0b5ce07bcc0c13b39c349e4b596147a633f3a73ab6012a1582d3d283293bd7c01f99cdbad8e18d24867c39ed0dc3fc3cc800edd23af24b225acb2cca5aa264bcda40e1432cf2cc0050efdff48fd49ae4225a983d1b12facbaaba73294eb225fff64a677d0ed2cd71bab61b3fde8a1fdae638d2036283a8a4ff5a548d05cb706f56ce7e3f55a688fa6c70393c53c33be11f34a38f61f80c8e94e50fc9d7c3695d234705bb9e0b2a8316cf54d7963f548d49f153bf796d0970ed1264c19d79eb77fd0aad4844796cec73a08206b9eca76f2ad76318a20d52e7d3338eac40d03775cca0c2b29a451cb10bc141289c2703198e7137200a360463000fab97d0da72a7b4e8aadfa8a2e559a7d06bf49d6d4a932cb29994ef7ca0c1beabf05b898bb2338e89a67373d50614300f13523fe451d4058e5a522d364ec884099ee3c6e6db8d4ec1e5dc08d127b6301a308a1d6798878c28ef828b91b529a22b7519d249a189a7eb942b94ce26148ea8bf16a44261cd9691ba980ec2d0c710dbee41756cb39b88213ad5763239ae7636e983580c41a40b0f3a3af9fa6f995ed1981d073f63a623554bb01869bdfda190bc8d9507cc067b897e1c5f0d087cf8dfcb171169541fa3cce7c3a620544c74f2d3234935a0acf6c804c43992812925cbaaa24f497e7a00efb20c45c7acb80adb3322cbe0f08d1015b40f5ae1366003ebea977b7b95f803487d10aedca3fd018cfa7b267dae604ed0ada202cbebd731f86b7c6764911d4ff0c75a318ee43b1b556781ac58fbd773b2bd0dd693f9b12fa149bbe392cb2d6bf72015912f4a120e47654d42d14107c67b4502b5ad62044d0022c7f8b255a3e46da4bb8f9e44515e4076ce7b1aefd57c4e264b2cbee4a9e8612ce8517b028067644c927a9ce7564449c8fb0471a87b9b76f374c7c2559379a3004326bdc91be5ec52672dc5fac0883ec527f2a1248601bb9267c3123568b815b90b40ba06c250e3068dee2d7fc232141eaaa130443a5775d049464ec454a7c980d9eebaa4f67a75075a6bc28ded9a5f07fe658a2b9eafa37f14055155409d1aa50be6343d13d515d0531b84644d2f58c280d6d008dee95607f67eb74c900f664d97f411f4ac6afc18f11b6fb75e78b3ff25680ed3bbf5b20969678475b86faa02a751e4cec87735645753f245047371c9e6e2e7ab5a9ea3182b4c96934a21b9df3628b478f5ef705aeda49a0609d4b8f5bf34424581557d029438306002fd4e9cff5a2d4e7d5e23c2992032d314b8fbb46ccda250070fc1b679c9c8646c5fe22d8fe2e0fff73d8153fc46ef7885aeaa2d1eabbe455544d46fdef8e3ef9debfe589870942bcc7196e62736e927c311782b5e4da2889d530a7c1550bff4909d2055941655cbcc5c924a477c80fc3b8a904cd9e62f5fb005b5b00154db5becbe327c0f3ec8314ef3fb53977ec24ff7d15aa83a13b23ab99c5332306023005d2dfb70d3ea2aefababd019ae16d304c083e38997cc94bdeb746fc151849c98dc2a23554e6fe789d3aba8bf4e31133c7f93a3cdcd884271dfdd2c45be398a5349ef5d08456178dfafa31cb4c607f09394d71b3405b3d615c7c59c125db88f72380140345d24c56094711dd833221d6b7c5864d049585605c1301c31982d19e403b601b797fe99d0bbfe30d647a913da72b4c5306f6123e7c572828308a9a8f4c686d07125d0006229c2e890ff7d3c354dde61ccd3b26069a81a98e112e61a930f253d607cda5023f002a09df6b1371638d9661c5a06bed166434f07120ad21476de8ad47296af4b449d581cddc74f9be42a84596fb0634f330a856216a9b32b080c8b66e9f51a758b9ca2e1215ddfe633714ca512032f6547217b1a60fcdb27ac8a04bc7851718b38607bc92c13118a323c3221bad99a8639762abcc4a08654da9938aeb301c55546f5ae7f61439dd883a1b2dede156a57c805ab12337d5381a2fb25b32916a8827fc4de8e2ecc70eeebeb01659d6bf88055477b863fb897d5db275a0c222d261e7df79474858b721e57747fe8997faaf36f5f175b23dd3c5efb2b93fb5824da18d635cd7027a3b0b1c87e7c90a5681682b8a7c47dc82fdd3f329c7b60270100dec8ccdd310245b92f4b0bd9a92e1f2a5733b1b91966be15a4761b06f6fe3b05b60ee7964b4d028257c2210ca88031db0590190d3714c1b6ec86e2821dca03db2fc0c9f0ad9800d1773c8037e9b38c7eb7c99618b731e0526f8453c7e1bb67cffcc2d96cc297e1f917b13dd7dda2a8b12191ed107c1e076ffd4965b9415f830be97935cac23a87f07e26354273c2663c7ef19a27dfe08543fa057e1285c909051602981f5929078214058684bc80bed493f6ef853012cb654d180e414fd484f5cb2cfd06c9b753f417697ff42794649e05fcaa3d53ad0fdfbb0db57dc549115e59978b14dd621370d136176098af2f39a2de72482a29b616e8b308b3d9b46ac9abf3d57ff89fe59b5a97966cc4b97d06c20ee4fd765e1c2abce54dc271a7c7efe656648800c27a9988583b4b76572222cb28916b9ff5f6f649de93923179809405c879a90cb450f604cbe8af55cf2a6d844a59ab0393b394e09c79e1b3c403af6eba69330f6969f78a49eb7022e77a39363f11e07fcc69f670f63c11497352f3f5bfea0aee446da35428cebe28f1c2d23ef3ff97e16ceeb2f88ab19b2b69dcdcc81b947b483cc06c776c52232489f86f4c377eb38056042e2e9e0943fc0ef1490df472b9b244235598894a2ffc296f0a2e4257baca6a3ea8cfb1a22ea8295ab9e5faaa2a9e964ae7625dbf945cdbb369265f429d475ab69413cc5bcb89af57b1b966bd0076f799a401d4b46e5045aceb1ef36e5bbfb037bb7681f2a38ef1df9b84baa3598201d13a813165355bf052bb5e456dc0abdefed995b4eb37a39b313af800f6029243a6a7bec75a23389a90034cac8df6713b919028a14649d756d0093550278aad494de2dfeb76220fd3ee5be31f73839ace7f0d6da650e26f5ded30471ed55d2e814fc1b89102e5917b4e58840ecc211eaffa5a2937abeb882ccdf29308e3ac30e23d66ee79c29b4fb7e793a55e344cac298e30f1ca3333df8b58f43126a3404a61501ce06b75e6e6a4bf13dbfb05efd7b9b4219efd428c8f7f345884640d19f5515abcce05f315f00e65d9aa8022890a23da45ede06f455d66e0c96bbf7e9cc74eddca999a51174b4784eba8a9ebed13415de6bd0f160443d43b78181cfa381313a54e25f6751a38f290e5972ff7f70692e18c4737af2a7f6d4eac52ea594a22be4fd00fac1484e6d2d4d3196b49212b49598f5bc77b34d8a3633cf7212c869557d6eb27bf0d0a02555d9318194e9de9c9730ac72daee7cad6c2d4b248a8744515670766a8f1c739917fb859d98974532477989f4c24345f120f5320fdb8d8d56fa6ff2511e701bab399513cecb3e740e3761d02685a765f5267554d0f9243b51620197adc3b561b59c58f334307220db357c1121d7dbf593898b5d2c505f333445c084a6cbc6a7e5252724c83fcee85e304534780a01e7ecceb2ef53ffb6bc6cb9051b1400493ce55d62c01e972fff3cc7d0b68a2dd4d263c9191df1b629e323797f570083f122db3df6abb6fd6c4a351bb7500c7241e4392ac76e04259968e517a43e907cb0b0533d6750b9587a1a5d852639c6b789d333e848e3ad66cbf19c5ee5a641036cb7a858f822f657dec36cc134d6c1a629cfce1f1e24dbb73d09fba04f53b2c6309d71d92211a1f08535244eefcbb52e095626bcc78b950db1cb8facc3660fa705dceef155b00aef3291367ffcea06b5abe588bbdcea2637761308dc65509798b6a494dae4a75c1922c1234248dbfcabfaab3088a0dad09a135a45d75105314020f3ba8901dc39ee624a32e9f863ff55844974b44e57b30302cd0c349f3cc091befd5665f918c298ba89454fb811ce573e41f27490853a52abd6144e85d77de88c3f2e5506c8de40a3957e65936f3b294ce92610b63cec888cb16fe0e8a7af3dd142da96b57f602cc64ba69966724584c2872e5fc42348a324ff082a3ecfded82c3e5b7292d3726c4800176acab6a7a1479a0b5fea79f299e90ffdb1b3843e2349b8f8dc7881145b3796380474c2ceb57e27726c9e50b746a2b12a214fea9cfd6c668363fe6e402710665118928fedb2f4900322b0c7d2c348881ea52278dae765c14b51fd5e8f000602aa3978d83b76056410c2260931e35d841793c8a36b191f93c33c0e4e6367ef45a1cf5145d774861224afbb11a7b77bb94492ec49827f713f8309d80d22e17701046e04c5b277f7b423cbbada01e6d40beb56e755e583b8f3de4b67c4b5ac83771b805fa7af49de2fc8b9a223293d83e7eb4eea3a3af1d1221e5d458e7cab60eaf1b51550a1b125ce018d76096f16d922f4aba48a728ec1b7d4812fe2ca789261b6d8e0c8edb3ba9007649084899c4f6b7986c1cb4a98d412c801fb91675ee42e2bb511bff6700772d3c03a7cb6adb41cbddc33053f8f65c164e9bd47b931510046506b169216d0a04edc479bc51c28acc536ced3834a7a9ce8fb55b72fa186a559437bf41f04b733e05986c915bc19f1b2f99d3bae6c13873d32e3c809b71881c3075f8dd1746f36409ac7934c25236ee2752560fcdd5175037a6fc5f0da58a229418ce30f3e64f9eb6ff3fe4498f47fdd69ceac5e792c8c9f087316f334b7f75e3432d3f1d03ee97c8f16485ec906c94e6c9580f7d03d98a8da85ec118b77c6c1d3b2e99fbf4b45e66cb4f8817f786d1f90e1e5e250be8c240a9648a219a02e62acbd72d1b0c0b42c75065a35664ea6a03cb05ea179f2e8e50e3d7ed53d31cdc10cf5fce48781fa338e3ee819f410540f045cb0edd7b2d219993faaa97cf95aa6144e889a02069421291d05eade30693a751039fece452c22d1afba081d1c40178fed7684cae475fcc365484118a184670cd7aa2758bdb01058ea9b244d5241f627bc5be11c9395e3cb839b0eac7842a312e1fc8b4ddae2aa4ef907ca5c9b847785051323e16d5497c4424289496277475bba67da750fa05bd8be730e4aabaeb94641fa2263dd3d4eb511b4fa40b8cf8b16d7aded1163f2258add79b04e1eb888afa27d057de2523863fc2da38d44cc69ae2d455900eede5fce69d7e9f8707cdb2456a45dda14d257eee4982f86259b855a0293068aa4aeff9439bc06c8ed5a370fe46fa88fa9bb92872166ac69152d1cbb4720eec5b9a057890cbb838aef12091454fe721395b46f9fa29ec1829fedf65aaec1176bb9eb15511bd77e7d4fe7321b3e0dfda95e5c90c3663956477885d6d94b280f58edbc77e864dca73536cd4988bcde2a3edb91704ad59148d85a001e393cebdb56ee088fa1033cdc6fbcbea30e2974035bfe29cee1eace13e30950bb4658886dae7e565ffd7b71e41feecbcac35fd97c81a8fff9d2a1d43f183c6e984671e06645eb0a60228d1b6c12c28bc6eaa4b9125c57b48ced2e199ed3acf12dbe10af4a56f2f5dca829fd07fc3f7e0de6913c73be0ada3e43bcbe70de784de699d0b51d7a56a3eacaf5d7dcd77d73cfb82e04633574213e05dc98850d822bc6dc90dc3fd6184296287342e2243fe6f0cf94e6d02a1b900d0c718e2afbe7fea2fafa375f209fb9cef5d844b861a1029aa3dd7081e81fe6501bbb413dcd23e013f279ef87e082335ade324b7688054992ccc63fbf9153213ab6d07ed0b79945d19639aaa5dd10e53aafe57f1e323300246cb1d6ede1eb1f319ca6fe1b0cc8e733b34818425888110b6eabe2db302310d0a8bcdd5342146b29c535cc9a95a455c8926d77323a31b948d47dc611815a329654a252fd09dbcec5f3cd8bc7e465759eb8e72ff6fd4ef1f375e4e8762a58148622d14480b7bb9aca2eeab3367a7376c9c85e6ba1735e56a2fcc6baf92c8d21942883f318eab7a568fc7ff01885a7089aa7661b15d73799bc0b8f8ce6a3b61adb6949965a223850b6825616c036e099952e04fde7cf086b5e76d45b86ab78b322f9af580173f2e798a39df7cade0d365c9d46d3fb36970f8a99d7b20a1b275afff852126f21ac24ca8c34deb49ba511f4d9edb4f56941aaaa477253f9bfc9a25a2694bbbe3b917074dd4eb6f1be20395ac33dd932a7ccf0604d64257b5af3faf271c145c190a528e471a7f23a53b5f9ea1bd0cc36410e9c538e91dd01d162edde856087b60dcba2042e65b6ae7b81787bd3308db9eb025b6fd930a9eb74a30883b83cfa8be5270dd3ee3408db7f7b136adebb3ee30f0e0b8835a0ded325363e4a2991cafd4a73483954c0f5d3358b25780608fa48f3f527c7e617ec12eb017df33f5088676d8bc476da251e608394e3d8fc0883fd4d1804f8e07f5e12ffa4ee80365a88abf29936bf1b255539fef95f5cf3bebcd26817edb28e7b6adf4851dcfe8aa1aa097f67c51557326ccf9c46ee2780d491e87774324d4dc5e199b0cdef01094ea72bd5ad5fe1be6c9d545df3dc5de550665d220718a2c0baed2833cfb1428e2d1c2b9ea1e29f4b07fd6c51492643d4000716cd1e8a4f9d58b6b04b805d8962495323fd62949b17348418201664c6f2f651f99d73f8d17bb5e52dba2e6f94fa33f816d74bb6a45bd6cbdbd07f530406227c8fd11f390e805bbc17bc0e81076a27c0be023b64777afec0a7a0c3f53f03bc2ca72ae2873d68217a1a6905f414c2cb1b9561dfd07850a026da5f5775a66f8f3a6bc29b48c8a81b06ba30994ba8e7e233e3a3a5d886767ea6de91fbfc0a594c2375d62e71c7209d87d0f6c7a79a0d80da328e93f08650ec745495c771410913d094e4190075b7225761172eb420c82ab493548f6de38e17d3e687a89ce77c67c58b875c48c8a4d1664cbc6f67df357e040444fcd515d92d5823fc3ef6485208b6f3eda8cd09ea3b004f7eb06ac268ae8c3bf571aa3f619222a47540f9af340c80c587f7226e3d715b18c3ee41f64777d3a0a09f32190ad67922f6ecc63c956a715c3c42a6aaaf5e588d119210083ceaa414820b62fef87a678cd3f24f8fa3cdb6629b041cd7555974313f56d1b0e117ea925dc95e18b5d3f4ba9812f1067022945c3f5d547370d45853c4db3c9ca4436d7e649e1ac3ec02f9c1e9139849b46027d4b276cb0eb4b09848999f466f528290e47ba9540ceca89390db3fcbacb1d566e22e917f01f4442bd4dd0d350d057ffdf5b3549ca559901e6ff5147bdc25c11b23f1678f02c20e4e2e6f339b262e2b82eae0b15b4227f1d514f99ec78fbcf80c8f6f243536f2d7a809de05ae5e1d676fe950ad3513f801bbe4d16737def4b5ec4b62f8562cd5432bd372645202edeb286662d7e8d0dadac5b91c903c2756bdc4f5a7c931f2c3f7feace2b83f5459a196000e2ed1e1b2accaa9d637d5e408340161331c4b0047bf2ab31d317bb1c8f6e1b3d52f9f240bd971a447942dd4b73301781656aad9ce9b01aed907b7eb3a78397b97e601b04a4cb028d327ef32cf20c34e8dad9c9b1f981ab5c06a2b0271852e2a1016ee460d8568391c9ece5a2b8f29cbc6f2d6cc2e66c30c96df548e67dd6ad8c1ff09dfa22b2e8b2c52a3948c4febb0910c2d34c0604a5ef930cd53be69a4bed9c9ee057178ece02a6b4df4624191590952888bdfafd2dbeca128d500872a8b236fba9623672c4dc15f56a761ee0c54026112fc464f72d3039587f009b94930dac0dbe444a939b38c0f5bce7aa366bfc2bb909db231178228846f71a56ab219e28cef1b102c1bfadbe8f0916d10a573b8cb38cc2cc2ec496a410a4e82847006d2ed4bac927a63a00416d0bfce59cc69aaf78ddc9566f23582999a655c8ad3b217486fb5a037ce089baf344d55bbd475be4e90b10e92c9c1bae3202c2d63355549f0ac95058724fea81ff9cec027e7b93e2cee43af81c6978fee5faf6216118785251b8ca023115b2f87d5d4b10c29aa3616628ab40a8ef36668ef57d7f9be505eabc01947ca222362818a71b3d63e5725a4d8a2c619b1867f70daa07703360d026d6f65247330be1ba84ddaaa7779591ca261beda4f4c094af65c5c276fe3bfb89f067c8c54af67e78f61bdc114ed4aa869c3adf282d7a8e7272579e9fd9e47611e0dc89f97561110e0141c69b1fa114e27b3d1e2c825ea008a370e08cd0a0610edef20cdd8a7cda0922fff046edfd2ff391a10ffce5dd6045619ce9af6b03f4193d858a76b201ed5beb0f11321707b7b593b23adaee4a0c0caf39dfeebcbd2948030435dc94ca00990c728502ec4686194f0f454304a422023c1b2c5b1ebbcd8cd50fa2d11361e3bbdc306e2739e27de300eda27b1c1ea62d773104cea77c18037c6bcc76423621b45abbe789b384bfdfb46efa1627ff29d9d840bf6e1f05e7e13fae6383e42ce153dcb062fa0cefd0fe9298ddbe77fd78d7036b5a815504b48267203da08ca685bfe8ae89c031074bbe5d3d6dcc6a3a8a8a4d3102765c3b714867f4516df62f214351b97bb8b5697a9f9a9dd78627342b239c524a3943d1d70f8cdd7391f05e7395731a8fc05210c6733ea256040bbbb53389229b84dafaaa3db1d5eca2971d9e550149461f1a672eae2319a99beed48934520666bc54b63085a744b5fc9a9b089b16c50ae945f74adcd4c5d064a12a6e103ef59bcc035a755ad31836eb7d04e5900d3800c822b96b466a9f6611f46b8a7d6131f91c625a5604de5bf01e5ca5d99a714c8dc1160260010f8d55f9125ee453b61c911bdf0824caa804c76d6512802875c5433de9b2e8b6c579a67fec5d2bc64ed3d1c313854221b75c9a0ed42af6f5354e7b1d1bf8661baa1261e68fc20d14b5652d25a536f208bff2b90fefa163a232696e655bcf95bed39355ec865e272fed582aae18858f5096ece40b9108efb00147f9c2ced59bfe2a79826851850ed95b35908dfb4d9ab7da0668a1fa8933ac4f6534e9598481477791fd1a1c269011ac9fe81f0491790e8aac121ffc00e38a7619a1855e6899abc2c670375a3ba4ac0cf652da89a70628cee1a35ae17b3490102e3c88ca324d06fce2151bc9de49472cf6e76ccb16d2a9cbf4161812e2c7758d73631024190fe9b71935de6968b289d3503b497f3f4b6306446ae9c312f8f1c63c1f7e62652173d9ed48cb128815bd44a12061f9b73fbdc6674ab9e0d01807f7bcfa0aa59168420e5ad8b72d7b576e273a1d229934fce2867689a41cb17767cf9defe1a96515a677ba08e10e187a3ce2f1d78e6b43b0d46c36163a1967b203df4f53379ee98422e973ab5c090adff21b5cc84fc78358021f681a0f0fd744f687e4f6c295470bf8f548d2d3dc841481dd51db9124cacde83bc9fef44a3e69e1cb28579d897f3013ac6133395328247fdcc152e5563678258936576196ced017c79bb6a4ea501a44cb25e5af1697afbdb3abb316837470ffdbe985ac3967334a90731602d3fac4f5c2758f04ec9c161a7cf330b7c7549fb62e6c15d07a7203c94edd3a8141c91b2029d6a90b14322337e6610822d9d7bff58c10d9c6cff71822f6456a421a65fdaa5d2c793f256a4e7a39f0d85d65fb95479eff79345c0615c9bbb4fb3324f9360b70dc709b0200042e8461b8cee9ce30beab3e276df48f41f001262fc14153f9764e13b50397442e00d7b11266bde10a3b7f83818086ff0015409679e4472d9e0215804fa9d21cebfa5cb5099cf88750cbeaaf58c2743f2746ea4cb73760ba88a07b91b68553716d563af5d7702219d0c600916dc54242d825c6d68320baf234a39f0b9ea9e6a4a72c4d5829b2f28508f54b33c7e0394a43fe23e7940d9b04bbe790d903a2d2c979e0ea79931b934d094fa2d5948c05cf278c341d788f2061ff617c9fa4700b1e1f0fbfa1b8c42848f2ea01cd318a8748c3336622ead25527ddbcd8a12ba3a5183f4419deb13558ed0ec99e73448c21ede0dbee9c01fc7675e54c60d4dee29c0f8fe81af6fe7b726f5d3c50dac634aefbf1ca6aa4df1b340a4109acf30939f6094c8591218729788111bfde98cd96d4b04b25bcd1bcb7f826241995573bae00", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x78, 0x0, 0x7, {0xe, 0xcbff, 0x0, {0x5, 0x7, 0x9, 0x1af3, 0xa, 0x80000006, 0x5, 0x6, 0xffb, 0x6000, 0x11, 0xffffffffffffffff, 0x0, 0x800003, 0x1c00}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
getdents(0xffffffffffffffff, &(0x7f0000000180)=""/211, 0xd3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, 0x0)
fstat(0xffffffffffffffff, 0x0)
setresgid(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(0x0)
symlinkat(&(0x7f0000000400)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00')
readlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080)=""/29, 0x1d)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdedH\xe5+\xf0', 0xffffffffffffffff)

kernel console output (not intermixed with test programs):

HANGE): team_slave_0: link becomes ready
[   80.947706][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.958250][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.970110][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.979451][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.989052][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   81.002047][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   81.037420][ T4197] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.054659][ T4195] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   81.080594][ T4195] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   81.089694][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   81.105474][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   81.115497][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   81.129464][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.140895][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.173243][ T4192] device veth0_macvtap entered promiscuous mode
[   81.194323][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.204270][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.224805][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.253978][ T4192] device veth1_macvtap entered promiscuous mode
[   81.285028][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.308455][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.317019][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.324982][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.334411][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.344385][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.353825][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.364067][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.375848][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.388529][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.403999][ T4188] device veth0_vlan entered promiscuous mode
[   81.433469][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.486804][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.506894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.523167][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1
[   81.541727][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   81.558190][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   81.573579][ T4188] device veth1_vlan entered promiscuous mode
[   81.605301][ T4192] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   81.626173][ T4192] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   81.639652][ T4192] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   81.659468][ T4192] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   81.686933][ T4197] device veth0_vlan entered promiscuous mode
[   81.695277][ T4253] Bluetooth: hci3: command 0x040f tx timeout
[   81.704919][ T4253] Bluetooth: hci2: command 0x040f tx timeout
[   81.720211][ T4253] Bluetooth: hci4: command 0x040f tx timeout
[   81.731727][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.748625][ T4253] Bluetooth: hci1: command 0x040f tx timeout
[   81.763463][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.785464][ T4253] Bluetooth: hci0: command 0x040f tx timeout
[   81.802415][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.817355][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.867408][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.881429][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.895707][ T4195] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.957832][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.971078][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.982682][ T4197] device veth1_vlan entered promiscuous mode
[   82.006202][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.021718][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   82.034514][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.046227][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.094954][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.106242][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.121964][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.132545][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.144821][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.156136][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.183832][ T4187] device veth0_vlan entered promiscuous mode
[   82.215345][ T4188] device veth0_macvtap entered promiscuous mode
[   82.258125][ T4187] device veth1_vlan entered promiscuous mode
[   82.275708][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.287310][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.298935][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.309564][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.324463][ T4197] device veth0_macvtap entered promiscuous mode
[   82.347212][ T4197] device veth1_macvtap entered promiscuous mode
[   82.368607][ T4188] device veth1_macvtap entered promiscuous mode
[   82.382958][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.399068][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.399092][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.418090][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.446747][ T4195] device veth0_vlan entered promiscuous mode
[   82.472213][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.482201][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.494683][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.543661][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.558126][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.572835][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.585015][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.596104][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.605557][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.615557][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.627020][ T4195] device veth1_vlan entered promiscuous mode
[   82.637869][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.650286][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.666152][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.684108][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.702939][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.727576][ T4197] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.744867][ T4197] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.763407][ T4197] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.778322][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.788255][ T4187] device veth0_macvtap entered promiscuous mode
[   82.798520][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   82.808900][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.832083][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.859177][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   82.879726][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.894347][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.906451][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.926617][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.956988][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.974316][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.987999][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.002608][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.017772][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.039667][ T4187] device veth1_macvtap entered promiscuous mode
[   83.055698][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   83.077298][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.091940][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.107446][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.122781][ T4197] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.145258][ T4197] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.160935][ T4197] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.179367][ T4197] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.235553][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.252444][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.263852][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.277522][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.335888][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.349633][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.361847][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.373932][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.384275][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.396929][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.412360][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.439477][ T4195] device veth0_macvtap entered promiscuous mode
[   83.458766][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.480302][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.492913][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.504232][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.518739][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.544288][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.558207][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.577013][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.597147][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.614919][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.628264][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.642748][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.674659][ T4195] device veth1_macvtap entered promiscuous mode
[   83.705792][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.725164][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.781948][ T1111] Bluetooth: hci4: command 0x0419 tx timeout
[   83.795956][ T1111] Bluetooth: hci2: command 0x0419 tx timeout
[   83.816354][ T1111] Bluetooth: hci3: command 0x0419 tx timeout
[   83.817148][ T4187] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.845774][ T4187] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.858909][ T4187] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.863262][ T1111] Bluetooth: hci0: command 0x0419 tx timeout
[   83.879418][ T4187] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.898824][ T1111] Bluetooth: hci1: command 0x0419 tx timeout
[   83.922294][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.946239][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.968869][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.991514][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.010291][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.037972][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.054491][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   84.070572][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.092609][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_0
[   84.123598][ T4305] device syzkaller0 entered promiscuous mode
[   84.136198][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   84.147112][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   84.167885][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.178397][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.198037][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.198195][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.219674][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.233565][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.246015][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.263154][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.277209][ T4195] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.291135][ T4195] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.308508][ T4195] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.366428][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.375419][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.386854][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.413346][ T1279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.439858][ T1279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.482375][ T4195] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.526793][ T4195] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.540149][ T4195] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.551509][ T4195] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.565372][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.607999][  T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.627375][  T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.667032][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.720175][  T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.772070][  T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.796561][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.820533][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.883426][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.902944][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.971300][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   85.070447][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!!
[   85.281653][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   85.294926][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #02!!!
[   85.306204][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!!
[   85.317743][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   85.339206][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   85.351935][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   85.364636][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #0a!!!
[   85.380191][    T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #10a!!!
[   85.430531][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   85.516780][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   85.983827][ T4324] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   86.072230][ T4323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.106262][ T4324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   86.116026][ T4323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.131022][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.161495][ T4324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   86.205584][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   86.564243][ T4344] binder: 4341:4344 ioctl c018620c 200000000240 returned -22
[   87.366723][ T4352] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   87.387294][ T4352] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   87.512698][ T4357] loop1: detected capacity change from 0 to 2048
[   87.533517][ T4360] process 'syz.2.11' launched './file0' with NULL argv: empty string added
[   87.575161][ T4357] =======================================================
[   87.575161][ T4357] WARNING: The mand mount option has been deprecated and
[   87.575161][ T4357]          and is ignored by this kernel. Remove the mand
[   87.575161][ T4357]          option from the mount to silence this warning.
[   87.575161][ T4357] =======================================================
[   87.730222][ T4357] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   87.931185][ T4357] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   92.416619][ T1108] cfg80211: failed to load regulatory.db
[   94.900356][    C1] sched: RT throttling activated
[   95.254897][ T4445] binder: BINDER_SET_CONTEXT_MGR already set
[   95.311950][ T4445] binder: 4444:4445 ioctl 4018620d 200000000040 returned -16
[   98.011232][ T4460] loop3: detected capacity change from 0 to 65536
[   99.331709][ T4473] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   99.381179][ T4460] XFS (loop3): Mounting V5 Filesystem
[   99.430758][   T26] audit: type=1326 audit(1769042201.604:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4471 comm="syz.2.38" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9547aafcb9 code=0x0
[   99.620572][ T1111] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   99.649043][ T4460] XFS (loop3): Ending clean mount
[   99.880580][ T1111] usb 5-1: Using ep0 maxpacket: 8
[  100.031585][ T1111] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  100.259980][ T4487] Bluetooth: (null): Out-of-order packet arrived (4 != 0)
[  100.285909][ T1111] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.465761][ T1111] pvrusb2: Hardware description: Terratec Grabster AV400
[  100.532077][ T1111] pvrusb2: **********
[  100.584133][ T1111] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  100.638537][ T1111] pvrusb2: Important functionality might not be entirely working.
[  100.690642][ T1111] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  100.757775][ T1111] pvrusb2: **********
[  100.832439][ T4197] XFS (loop3): Unmounting Filesystem
[  100.844275][ T2425] pvrusb2: Invalid write control endpoint
[  101.067714][ T2425] pvrusb2: Invalid write control endpoint
[  101.138339][ T4496] netlink: 136 bytes leftover after parsing attributes in process `syz.0.44'.
[  101.157966][ T4496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.44'.
[  101.224483][ T2425] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  101.279252][ T2425] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  101.337303][ T2425] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  101.349503][ T2425] pvrusb2: Device being rendered inoperable
[  101.376745][ T4476] pvrusb2: Attempted to execute control transfer when device not ok
[  102.575145][ T2425] cx25840 1-0044: Unable to detect h/w, assuming cx23887
[  102.608685][ T2425] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  102.673236][ T2425] pvrusb2: Attached sub-driver cx25840
[  102.790029][ T2425] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  104.309808][ T2425] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  105.112486][ T4493] bridge0: port 2(bridge_slave_1) entered disabled state
[  105.122622][ T4493] bridge0: port 1(bridge_slave_0) entered disabled state
[  107.057625][ T4547] loop2: detected capacity change from 0 to 512
[  107.265115][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  107.371683][ T4493] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  108.396102][ T4493] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.405543][ T4493] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.419196][ T4493] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.429184][ T4493] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  108.642198][ T4555] usb 5-1: USB disconnect, device number 2
[  108.667018][ T4493] syz.1.42 (4493) used greatest stack depth: 20400 bytes left
[  108.695303][ T4542] netlink: 'syz.3.41': attribute type 10 has an invalid length.
[  108.768585][ T4542] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  109.105732][ T4575] loop1: detected capacity change from 0 to 128
[  109.170978][ T4578] xt_hashlimit: max too large, truncated to 1048576
[  109.217445][ T4578] xt_hashlimit: overflow, try lower: 0/0
[  109.305601][ T4575] tipc: Started in network mode
[  109.390867][ T4575] tipc: Node identity 4, cluster identity 4711
[  109.463952][ T4575] tipc: Node number set to 4
[  109.590291][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  109.612977][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  110.532201][ T4585] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  110.650131][ T4585] device bridge_slave_0 left promiscuous mode
[  110.658223][ T4585] bridge0: port 1(bridge_slave_0) entered disabled state
[  110.755532][ T4585] device bridge_slave_1 left promiscuous mode
[  110.893239][ T4585] bridge0: port 2(bridge_slave_1) entered disabled state
[  111.144792][ T4603] xt_CONNSECMARK: invalid mode: 0
[  112.151001][ T4237] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  112.595177][ T4237] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xA3, skipping
[  112.828252][ T4237] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  112.842791][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.873684][ T4237] usb 4-1: config 0 descriptor??
[  112.889650][ T4585] bond0: (slave bond_slave_0): Releasing backup interface
[  112.909921][ T4592] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  113.009010][ T4585] bond0: (slave bond_slave_1): Releasing backup interface
[  113.203180][ T4237] ath6kl: Failed to submit usb control message: -71
[  113.231384][ T4237] ath6kl: unable to send the bmi data to the device: -71
[  113.239768][ T4237] ath6kl: Unable to send get target info: -71
[  114.032262][ T4619] loop1: detected capacity change from 0 to 512
[  114.093366][ T4619] EXT4-fs (loop1): Ignoring removed mblk_io_submit option
[  114.120978][ T4619] EXT4-fs (loop1): Unrecognized mount option "dax=inode.." or missing value
[  114.175658][ T4585] team0: Port device team_slave_0 removed
[  114.227708][ T4625] loop0: detected capacity change from 0 to 256
[  114.407552][ T4585] team0: Port device team_slave_1 removed
[  114.489192][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  114.554534][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_0
[  114.744356][ T4585] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  114.917379][ T4585] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.221562][ T4237] ath6kl: Failed to init ath6kl core: -71
[  115.244689][ T4586] team0: Mode changed to "loadbalance"
[  115.266903][ T4237] ath6kl_usb: probe of 4-1:0.0 failed with error -71
[  115.293254][ T4589] netlink: 4 bytes leftover after parsing attributes in process `syz.2.66'.
[  115.364632][ T4237] usb 4-1: USB disconnect, device number 2
[  115.549698][ T4631] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  115.577412][ T4631] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  115.591871][ T4631] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  115.624881][ T4632] sock: sock_set_timeout: `syz.0.76' (pid 4632) tries to set negative timeout
[  115.811177][ T4639] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.872934][ T4639] device batadv_slave_0 entered promiscuous mode
[  115.922760][ T4637] loop3: detected capacity change from 0 to 4096
[  116.109199][ T4647] loop1: detected capacity change from 0 to 512
[  116.204595][ T4647] EXT4-fs error (device loop1): ext4_orphan_get:1400: inode #15: comm syz.1.81: inode has both inline data and extents flags
[  116.224300][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.271624][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.283917][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.296278][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.307348][ T4647] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.81: couldn't read orphan inode 15 (err -117)
[  116.313018][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.334141][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.343787][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.353191][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.365831][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.377199][ T4637] ntfs3: loop3: ino=5, "/" directory corrupted
[  116.478743][ T4647] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  119.053126][ T4686] loop3: detected capacity change from 0 to 64
[  119.419356][ T4688] MPTCP: addr_signal error, rm_addr=1
[  120.146048][ T4692] device syzkaller0 entered promiscuous mode
[  121.829539][ T4317] attempt to access beyond end of device
[  121.829539][ T4317] loop3: rw=1048577, want=162, limit=64
[  121.902747][ T4317] Buffer I/O error on dev loop3, logical block 161, lost async page write
[  121.938319][ T4317] attempt to access beyond end of device
[  121.938319][ T4317] loop3: rw=1048577, want=163, limit=64
[  121.957356][ T4317] Buffer I/O error on dev loop3, logical block 162, lost async page write
[  121.974942][ T4317] attempt to access beyond end of device
[  121.974942][ T4317] loop3: rw=1048577, want=164, limit=64
[  121.995326][ T4317] Buffer I/O error on dev loop3, logical block 163, lost async page write
[  122.006395][ T4317] attempt to access beyond end of device
[  122.006395][ T4317] loop3: rw=1048577, want=168, limit=64
[  122.024435][ T4317] Buffer I/O error on dev loop3, logical block 167, lost async page write
[  122.039070][ T4317] attempt to access beyond end of device
[  122.039070][ T4317] loop3: rw=1048577, want=170, limit=64
[  122.062951][ T4317] Buffer I/O error on dev loop3, logical block 169, lost async page write
[  122.149704][ T4317] attempt to access beyond end of device
[  122.149704][ T4317] loop3: rw=1048577, want=172, limit=64
[  122.184606][ T4706] Set syz0 is full, maxelem 0 reached
[  122.213546][ T4317] Buffer I/O error on dev loop3, logical block 171, lost async page write
[  122.223616][ T4317] attempt to access beyond end of device
[  122.223616][ T4317] loop3: rw=1048577, want=173, limit=64
[  122.235480][ T4317] Buffer I/O error on dev loop3, logical block 172, lost async page write
[  122.245142][ T4317] attempt to access beyond end of device
[  122.245142][ T4317] loop3: rw=1048577, want=174, limit=64
[  122.257765][ T4317] Buffer I/O error on dev loop3, logical block 173, lost async page write
[  122.272055][ T4317] attempt to access beyond end of device
[  122.272055][ T4317] loop3: rw=1048577, want=175, limit=64
[  122.301296][ T4317] Buffer I/O error on dev loop3, logical block 174, lost async page write
[  122.310060][ T4317] attempt to access beyond end of device
[  122.310060][ T4317] loop3: rw=1048577, want=176, limit=64
[  122.574924][ T4317] Buffer I/O error on dev loop3, logical block 175, lost async page write
[  122.989150][ T4710] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  123.021475][ T4710] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  123.500168][ T4725] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'.
[  124.919386][ T4739] device batadv_slave_1 entered promiscuous mode
[  124.928498][ T4739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.108'.
[  125.072824][ T4739] device batadv_slave_1 left promiscuous mode
[  126.058292][ T4751] loop4: detected capacity change from 0 to 4096
[  126.244209][ T4751] NILFS (loop4): invalid segment: Checksum error in segment payload
[  126.379142][ T4751] NILFS (loop4): trying rollback from an earlier position
[  127.298645][ T4751] NILFS (loop4): recovery complete
[  127.349471][ T4767] overlayfs: failed to resolve './file0': -2
[  127.369319][ T4769] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.787690][ T4772] loop2: detected capacity change from 0 to 8192
[  127.894910][ T4772] REISERFS (device loop2): found reiserfs format "3.6" with non-standard journal
[  127.912942][ T4772] REISERFS (device loop2): using journaled data mode
[  127.923762][ T4772] reiserfs: using flush barriers
[  127.955699][ T4772] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  127.977602][ T4772] REISERFS (device loop2): checking transaction log (loop2)
[  128.000602][ T4772] REISERFS (device loop2): Using r5 hash to sort names
[  128.019865][ T4772] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  128.036527][ T4772] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  128.190845][ T4772] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  128.238827][ T4772] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  128.256511][ T4772] REISERFS warning (device loop2): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  128.671298][ T4775] netlink: 8 bytes leftover after parsing attributes in process `syz.0.118'.
[  130.380057][ T4805] device syzkaller0 entered promiscuous mode
[  131.451098][ T4253] Bluetooth: hci0: command 0x0401 tx timeout
[  131.680634][ T4825] loop0: detected capacity change from 0 to 512
[  131.874783][ T4831] loop4: detected capacity change from 0 to 512
[  131.999712][ T4831] EXT4-fs (loop4): Ignoring removed nobh option
[  132.006709][ T4831] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  132.022012][ T4831] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  132.243501][ T4831] EXT4-fs (loop4): 1 truncate cleaned up
[  132.250281][ T4831] EXT4-fs (loop4): mounted filesystem without journal. Opts: debug_want_extra_isize=0x000000000000002e,min_batch_time=0x0000000000000fff,inode_readahead_blks=0x0000000000000080,nobh,errors=remount-ro,max_batch_time=0x0000000000000007,. Quota mode: none.
[  132.543630][ T4825] EXT4-fs error (device loop0): ext4_xattr_inode_iget:401: inode #11: comm syz.0.136: ea_inode with extended attributes
[  132.616845][ T4825] EXT4-fs error (device loop0): ext4_xattr_inode_iget:406: comm syz.0.136: error while reading EA inode 11 err=-117
[  132.632613][   T26] audit: type=1800 audit(1769042234.794:3): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.137" name="file1" dev="loop4" ino=15 res=0 errno=0
[  132.661281][ T4825] EXT4-fs (loop0): 1 orphan inode deleted
[  132.668134][ T4825] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000004c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  132.701115][ T4831] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.137: Invalid inode table block 175 in block_group 0
[  132.725601][ T4831] EXT4-fs (loop4): Remounting filesystem read-only
[  132.733335][ T4831] EXT4-fs error (device loop4): __ext4_get_inode_loc:4327: comm syz.4.137: Invalid inode table block 175 in block_group 0
[  132.751470][ T4831] EXT4-fs (loop4): Remounting filesystem read-only
[  132.759384][   T26] audit: type=1800 audit(1769042234.934:4): pid=4831 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.137" name="file1" dev="loop4" ino=15 res=0 errno=0
[  133.114188][ T4838] loop2: detected capacity change from 0 to 40427
[  133.289416][ T4838] F2FS-fs (loop2): invalid crc value
[  133.385195][ T4838] F2FS-fs (loop2): Found nat_bits in checkpoint
[  133.448225][ T4838] F2FS-fs (loop2): Start checkpoint disabled!
[  133.500603][ T4838] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  133.767962][ T4844] loop1: detected capacity change from 0 to 4096
[  133.843747][ T4844] ntfs3: loop1: Different NTFS' sector size (1024) and media sector size (512)
[  134.066510][ T4188] handle_bad_sector: 7 callbacks suppressed
[  134.066528][ T4188] attempt to access beyond end of device
[  134.066528][ T4188] loop2: rw=524288, want=45072, limit=40427
[  134.158659][ T4188] attempt to access beyond end of device
[  134.158659][ T4188] loop2: rw=0, want=45072, limit=40427
[  134.195199][ T4856] loop3: detected capacity change from 0 to 512
[  134.286862][ T4856] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  134.446094][ T4844] ntfs3: loop1: MftZone: unavailable
[  134.467022][ T4319] attempt to access beyond end of device
[  134.467022][ T4319] loop2: rw=2049, want=45120, limit=40427
[  134.527874][ T4860] ntfs3: loop1: MftZone: unavailable
[  134.566577][ T4860] ntfs3: loop1: no free space to extend mft
[  134.641542][ T4844] ntfs3: loop1: MftZone: unavailable
[  134.691235][ T4237] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  134.712275][ T4844] ntfs3: loop1: no free space to extend mft
[  134.752849][ T4860] ntfs3: loop1: MftZone: unavailable
[  134.760005][ T4860] ntfs3: loop1: no free space to extend mft
[  134.852734][ T4863] ntfs3: loop1: MftZone: unavailable
[  134.859229][ T4863] ntfs3: loop1: no free space to extend mft
[  135.060566][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  135.156056][ T4237] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  135.270010][ T4237] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  135.530886][ T4237] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  135.689792][ T4237] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.848313][ T4237] usb 1-1: config 0 descriptor??
[  136.726148][ T4237] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  136.869876][ T4237] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  137.005427][ T4237] usb 1-1: USB disconnect, device number 2
[  137.147906][ T4876] device syzkaller0 entered promiscuous mode
[  137.227570][ T4872] fido_id[4872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  138.505161][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  138.513635][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  138.544641][ T4887] loop0: detected capacity change from 0 to 764
[  138.590417][ T4554] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  139.691786][ T4554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  139.734149][ T4554] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  139.998069][ T4554] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  140.225456][ T4554] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.405512][ T4554] usb 2-1: config 0 descriptor??
[  140.498083][ T4554] usb 2-1: can't set config #0, error -71
[  140.546010][ T4554] usb 2-1: USB disconnect, device number 2
[  140.665334][ T4916] loop1: detected capacity change from 0 to 128
[  140.756272][ T4921] loop0: detected capacity change from 0 to 512
[  140.786291][ T4897] chnl_net:caif_netlink_parms(): no params data found
[  141.058275][ T4921] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  141.509995][ T4921] EXT4-fs (loop0): 1 truncate cleaned up
[  141.540786][ T4303] Bluetooth: hci1: command 0x0409 tx timeout
[  141.557250][ T4921] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  141.571742][ T4916] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[  141.602184][ T4916] FAT-fs (loop1): Filesystem has been set read-only
[  141.648672][ T4916] FAT-fs (loop1): error, invalid access to FAT (entry 0x0fff0000)
[  142.686740][ T4897] bridge0: port 1(bridge_slave_0) entered blocking state
[  142.740608][ T4897] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.763559][ T4897] device bridge_slave_0 entered promiscuous mode
[  142.831775][ T4897] bridge0: port 2(bridge_slave_1) entered blocking state
[  142.926764][ T4897] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.963748][ T4897] device bridge_slave_1 entered promiscuous mode
[  143.701345][ T4303] Bluetooth: hci1: command 0x041b tx timeout
[  143.763728][ T4897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  143.828851][ T4954] loop0: detected capacity change from 0 to 512
[  143.849929][ T4897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  143.898822][ T4954] EXT4-fs (loop0): Unrecognized mount option "smackfsroot=$#})[" or missing value
[  144.126463][ T4897] team0: Port device team_slave_0 added
[  145.169929][ T4976] fuse: Bad value for 'fd'
[  145.987803][ T1108] Bluetooth: hci1: command 0x040f tx timeout
[  146.139078][ T4897] team0: Port device team_slave_1 added
[  146.362072][ T4897] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.400504][ T4897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.593244][ T4897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.651424][ T4351] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.684723][ T4897] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.785775][ T4897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  147.287871][ T4897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  148.488653][ T4527] Bluetooth: hci1: command 0x0419 tx timeout
[  149.373715][ T4351] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  149.672503][ T4992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'.
[  149.697029][ T4992] netlink: 28 bytes leftover after parsing attributes in process `syz.4.185'.
[  149.818481][ T4992] device ip6gretap0 entered promiscuous mode
[  149.927554][ T4992] device syz_tun entered promiscuous mode
[  150.080866][ T4897] device hsr_slave_0 entered promiscuous mode
[  150.178165][ T4897] device hsr_slave_1 entered promiscuous mode
[  150.567116][ T4897] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  150.591096][ T4897] Cannot create hsr debugfs directory
[  150.625763][ T4351] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  150.681938][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready
[  150.806379][ T5016] loop4: detected capacity change from 0 to 128
[  150.884738][ T5016] VFS: Found a Xenix FS (block size = 512) on device loop4
[  150.924473][ T5016] attempt to access beyond end of device
[  150.924473][ T5016] loop4: rw=0, want=8767745, limit=128
[  150.936278][ T5016] buffer_io_error: 6 callbacks suppressed
[  150.936322][ T5016] Buffer I/O error on dev loop4, logical block 8767744, async page read
[  150.951153][ T5016] attempt to access beyond end of device
[  150.951153][ T5016] loop4: rw=0, want=13269810, limit=128
[  150.962741][ T5016] Buffer I/O error on dev loop4, logical block 13269809, async page read
[  150.972392][ T5016] attempt to access beyond end of device
[  150.972392][ T5016] loop4: rw=0, want=1158, limit=128
[  150.984048][ T5016] Buffer I/O error on dev loop4, logical block 1157, async page read
[  150.992693][ T5016] attempt to access beyond end of device
[  150.992693][ T5016] loop4: rw=0, want=3211265, limit=128
[  151.004021][ T5016] Buffer I/O error on dev loop4, logical block 3211264, async page read
[  151.012900][ T5016] attempt to access beyond end of device
[  151.012900][ T5016] loop4: rw=0, want=8768636, limit=128
[  151.024553][ T5016] Buffer I/O error on dev loop4, logical block 8768635, async page read
[  151.035196][ T5016] attempt to access beyond end of device
[  151.035196][ T5016] loop4: rw=0, want=13466418, limit=128
[  151.047382][ T5016] Buffer I/O error on dev loop4, logical block 13466417, async page read
[  151.056882][ T5016] attempt to access beyond end of device
[  151.056882][ T5016] loop4: rw=0, want=209286, limit=128
[  151.068625][ T5016] Buffer I/O error on dev loop4, logical block 209285, async page read
[  151.082574][ T5016] attempt to access beyond end of device
[  151.082574][ T5016] loop4: rw=0, want=8767745, limit=128
[  151.095515][ T5016] Buffer I/O error on dev loop4, logical block 8767744, async page read
[  151.105763][ T5016] attempt to access beyond end of device
[  151.105763][ T5016] loop4: rw=0, want=13269810, limit=128
[  151.117849][ T5016] Buffer I/O error on dev loop4, logical block 13269809, async page read
[  151.127165][ T5016] attempt to access beyond end of device
[  151.127165][ T5016] loop4: rw=0, want=1158, limit=128
[  151.138822][ T5016] Buffer I/O error on dev loop4, logical block 1157, async page read
[  151.169726][   T26] audit: type=1800 audit(1769042253.334:5): pid=5016 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.189" name="/" dev="loop4" ino=2 res=0 errno=0
[  151.637541][ T4351] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.663821][ T4187] sysv_free_block: trying to free block not in datazone
[  151.678619][ T4187] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  151.867028][ T5021] ODEBUG: Out of memory. ODEBUG disabled
[  152.730891][ T1108] Bluetooth: hci3: command 0x0409 tx timeout
[  154.373559][ T5011] chnl_net:caif_netlink_parms(): no params data found
[  154.686612][ T5041] device syzkaller0 entered promiscuous mode
[  154.695011][ T5045] loop4: detected capacity change from 0 to 8192
[  154.726897][ T4897] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  154.736119][ T5045] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal
[  154.794336][ T4897] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  154.810545][ T5045] REISERFS (device loop4): using ordered data mode
[  154.820753][ T4554] Bluetooth: hci3: command 0x041b tx timeout
[  154.990850][ T5045] reiserfs: using flush barriers
[  155.044962][ T5045] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  155.492646][ T4897] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  155.591170][ T5045] REISERFS (device loop4): checking transaction log (loop4)
[  155.711679][ T5045] REISERFS (device loop4): Using r5 hash to sort names
[  155.721551][ T5045] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  155.910014][ T4897] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  156.900661][ T4237] Bluetooth: hci3: command 0x040f tx timeout
[  157.096805][ T5011] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.109031][ T5011] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.283042][ T5011] device bridge_slave_0 entered promiscuous mode
[  157.323435][ T5011] bridge0: port 2(bridge_slave_1) entered blocking state
[  158.015118][ T5011] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.024698][ T5011] device bridge_slave_1 entered promiscuous mode
[  158.266213][ T5011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  158.371111][ T5098] netlink: 24 bytes leftover after parsing attributes in process `syz.3.204'.
[  158.436001][ T5011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  158.910730][ T4554] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  158.994589][ T5011] team0: Port device team_slave_0 added
[  159.002737][ T4237] Bluetooth: hci3: command 0x0419 tx timeout
[  159.030019][ T5011] team0: Port device team_slave_1 added
[  159.059720][ T4897] 8021q: adding VLAN 0 to HW filter on device bond0
[  159.072759][ T5011] batman_adv: batadv0: Adding interface: batadv_slave_0
[  159.080675][ T5011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.117196][ T5011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  159.151487][ T5011] batman_adv: batadv0: Adding interface: batadv_slave_1
[  159.158651][ T5011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  159.194310][ T5011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  159.220432][ T4554] usb 5-1: Using ep0 maxpacket: 16
[  159.283281][ T5011] device hsr_slave_0 entered promiscuous mode
[  159.306349][ T5011] device hsr_slave_1 entered promiscuous mode
[  159.314432][ T5011] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  159.323491][ T5011] Cannot create hsr debugfs directory
[  159.341734][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  159.350204][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  159.372947][ T4897] 8021q: adding VLAN 0 to HW filter on device team0
[  159.488179][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  159.514095][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  159.553655][ T1279] bridge0: port 1(bridge_slave_0) entered blocking state
[  159.560837][ T1279] bridge0: port 1(bridge_slave_0) entered forwarding state
[  159.569704][ T4554] usb 5-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3
[  159.581764][ T4554] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.607113][ T4554] usb 5-1: Product: syz
[  159.619787][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  159.629346][ T4554] usb 5-1: Manufacturer: syz
[  159.640018][ T4554] usb 5-1: SerialNumber: syz
[  159.649614][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  159.673769][ T4554] usb 5-1: config 0 descriptor??
[  159.712034][ T1279] bridge0: port 2(bridge_slave_1) entered blocking state
[  159.719584][ T1279] bridge0: port 2(bridge_slave_1) entered forwarding state
[  159.814842][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  159.857901][ T5125] loop3: detected capacity change from 0 to 32768
[  159.895441][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  159.952547][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  159.977298][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  159.997002][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  160.368567][ T5125] XFS (loop3): Mounting V5 Filesystem
[  160.616203][ T4554] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state.
[  160.887901][ T4554] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  160.955697][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  160.968602][ T4554] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T)
[  160.983375][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  161.027157][ T4554] usb 5-1: media controller created
[  161.041671][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  161.086313][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  161.128605][ T4554] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  161.143617][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  161.199080][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  161.209249][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  161.222286][ T4897] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  161.341199][ T4554] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T'
[  161.357180][ T4554] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected.
[  161.621969][ T5125] XFS (loop3): Ending clean mount
[  162.167313][ T4554] usb 5-1: USB disconnect, device number 3
[  162.332248][ T4554] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected.
[  163.148625][ T4197] XFS (loop3): Unmounting Filesystem
[  163.155694][ T4351] device hsr_slave_0 left promiscuous mode
[  163.177078][ T4351] device hsr_slave_1 left promiscuous mode
[  163.191542][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  163.235078][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_0
[  163.244509][ T4351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  163.254010][ T4351] batman_adv: batadv0: Removing interface: batadv_slave_1
[  163.280813][ T4351] device bridge_slave_1 left promiscuous mode
[  163.287998][ T4351] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.348641][ T4351] device bridge_slave_0 left promiscuous mode
[  163.357568][ T4351] bridge0: port 1(bridge_slave_0) entered disabled state
[  163.394115][ T4351] device veth1_macvtap left promiscuous mode
[  163.402176][ T4351] device veth0_macvtap left promiscuous mode
[  163.410591][ T4351] device veth1_vlan left promiscuous mode
[  163.417751][ T4351] device veth0_vlan left promiscuous mode
[  164.721216][ T4351] team0 (unregistering): Port device team_slave_1 removed
[  164.736616][ T4351] team0 (unregistering): Port device team_slave_0 removed
[  164.752044][ T4351] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  164.769865][ T4351] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  164.853876][ T4351] bond0 (unregistering): Released all slaves
[  164.981411][ T5179] device syzkaller0 left promiscuous mode
[  165.337943][ T5011] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  166.101168][ T5011] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  166.133129][ T5011] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  166.230427][ T5193] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'.
[  166.508806][ T5011] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  167.293400][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  167.304827][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  167.375923][ T4897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  167.629789][ T5011] 8021q: adding VLAN 0 to HW filter on device bond0
[  167.806634][ T5011] 8021q: adding VLAN 0 to HW filter on device team0
[  168.571908][ T5236] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[  168.718664][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  168.793865][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  168.816791][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  169.913731][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  169.948135][ T4275] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.955498][ T4275] bridge0: port 1(bridge_slave_0) entered forwarding state
[  170.868809][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  170.959333][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  171.101046][ T4275] bridge0: port 2(bridge_slave_1) entered blocking state
[  171.103344][ T5254] loop3: detected capacity change from 0 to 128
[  171.108794][ T4275] bridge0: port 2(bridge_slave_1) entered forwarding state
[  171.154310][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  171.187403][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  171.249167][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  171.305397][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  171.367688][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  171.857969][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  171.910715][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  171.932288][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  171.961262][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  172.000833][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  172.124361][ T5254] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 53)
[  172.133764][    C1] vcan0: j1939_tp_rxtimer: 0xffff888061579000: rx timeout, send abort
[  172.208358][ T5254] FAT-fs (loop3): Filesystem has been set read-only
[  172.236544][ T5011] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  172.248768][ T5011] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  172.277184][ T5257] netlink: 4 bytes leftover after parsing attributes in process `syz.4.231'.
[  172.289565][ T5254] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 53)
[  173.053431][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  173.062191][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  173.435728][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  173.456742][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  174.475317][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  174.494310][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  174.518738][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  174.547294][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  174.589849][ T5289] netlink: 'syz.1.236': attribute type 10 has an invalid length.
[  174.661008][ T5289] team0: Port device netdevsim0 added
[  174.672279][ T4897] device veth0_vlan entered promiscuous mode
[  174.716665][ T5011] 8021q: adding VLAN 0 to HW filter on device batadv0
[  174.748785][ T4897] device veth1_vlan entered promiscuous mode
[  174.765630][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  174.815795][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  174.880905][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  174.894230][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  174.919344][ T4897] device veth0_macvtap entered promiscuous mode
[  174.964605][ T5312] netlink: 'syz.1.240': attribute type 10 has an invalid length.
[  175.000052][ T5308] netlink: 4 bytes leftover after parsing attributes in process `syz.1.240'.
[  175.014153][ T5312] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  175.054440][ T4897] device veth1_macvtap entered promiscuous mode
[  175.136428][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  175.166660][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.218780][ T4897] batman_adv: batadv0: Interface activated: batadv_slave_0
[  175.232679][ T5317] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready
[  175.252983][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  175.270826][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  175.311563][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  175.345980][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  175.381915][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.409502][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.445177][ T4897] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  175.476850][ T4897] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  175.609627][ T4897] batman_adv: batadv0: Interface activated: batadv_slave_1
[  175.661773][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  175.704355][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  175.827447][ T4897] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  175.898097][ T4897] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  175.974816][ T4897] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  176.068711][ T4897] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  176.428057][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  176.493606][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  176.786357][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  176.836565][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  176.858710][ T5338] loop4: detected capacity change from 0 to 2048
[  176.882726][ T5011] device veth0_vlan entered promiscuous mode
[  176.920848][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  176.958143][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  176.958343][ T5338] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  177.001658][ T4317] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.009861][ T4317] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.009891][ T5011] device veth1_vlan entered promiscuous mode
[  177.105564][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  177.153458][ T4317] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  177.172946][ T4317] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  177.202134][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  177.234708][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  177.275067][ T1279] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  177.303730][ T5011] device veth0_macvtap entered promiscuous mode
[  177.351064][ T5011] device veth1_macvtap entered promiscuous mode
[  177.433766][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.485528][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.532833][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  177.592407][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.633479][ T5011] batman_adv: batadv0: Interface activated: batadv_slave_0
[  177.658798][ T5359] loop3: detected capacity change from 0 to 1024
[  177.673614][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  177.686374][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  177.724499][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  177.761434][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  177.782345][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.820786][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.903991][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  177.957089][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  177.987253][ T5011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  178.026442][ T5011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  178.063049][ T5011] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.085469][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  178.095240][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  178.189734][ T5011] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.298942][ T5011] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.390018][ T5011] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.399390][ T5011] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  179.709106][ T5343] EXT4-fs error (device loop4): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 234: padding at end of block bitmap is not set
[  179.961513][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  179.969919][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.013008][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  180.093768][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  180.120586][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  180.131521][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  180.391532][ T5359] loop3: detected capacity change from 0 to 32768
[  180.522994][ T5359] (syz.3.248,5359,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  180.584913][ T5386] overlayfs: failed to get index nlink (file1/bus, err=0)
[  180.625752][ T5359] (syz.3.248,5359,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  180.826784][ T5359] JBD2: Ignoring recovery information on journal
[  180.963443][ T5359] JBD2: recovery failed
[  180.980885][ T5359] (syz.3.248,5359,1):ocfs2_journal_load:1105 ERROR: Failed to load journal!
[  180.990012][ T5359] (syz.3.248,5359,1):ocfs2_check_volume:2437 ERROR: ocfs2 journal load failed! -5
[  181.009932][ T5359] (syz.3.248,5359,1):ocfs2_check_volume:2493 ERROR: status = -5
[  181.040460][ T5359] (syz.3.248,5359,1):ocfs2_mount_volume:1824 ERROR: status = -5
[  181.068562][ T5359] (syz.3.248,5359,1):ocfs2_fill_super:1177 ERROR: status = -5
[  182.168457][ T5409] sch_tbf: burst 4398 is lower than device lo mtu (65550) !
[  182.267363][ T5409] netlink: 12 bytes leftover after parsing attributes in process `syz.1.254'.
[  184.165188][ T5438] blk_update_request: I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.165521][ T5438] F2FS-fs (loop9): Unable to read 1th superblock
[  184.165817][ T5438] blk_update_request: I/O error, dev loop9, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  184.165891][ T5438] F2FS-fs (loop9): Unable to read 2th superblock
[  189.496290][ T5481] loop6: detected capacity change from 0 to 8192
[  190.742621][ T5508] tipc: Started in network mode
[  190.748143][ T5508] tipc: Node identity fa6a6df7ab59, cluster identity 4711
[  190.889492][ T5508] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  190.955393][ T5511] device syzkaller0 entered promiscuous mode
[  191.111924][ T5508] tipc: Resetting bearer <eth:syzkaller0>
[  191.203600][ T5507] tipc: Resetting bearer <eth:syzkaller0>
[  191.251976][ T5507] tipc: Disabling bearer <eth:syzkaller0>
[  192.657332][ T5540] netlink: 24 bytes leftover after parsing attributes in process `syz.3.286'.
[  193.148002][ T5543] netlink: 4 bytes leftover after parsing attributes in process `syz.6.283'.
[  193.457082][ T5566] netlink: 256 bytes leftover after parsing attributes in process `syz.3.291'.
[  193.720827][ T5566] unsupported nlmsg_type 40
[  193.775641][ T5568] device syzkaller0 entered promiscuous mode
[  196.987895][ T5600] loop3: detected capacity change from 0 to 1764
[  198.571665][ T5626] loop4: detected capacity change from 0 to 512
[  198.604284][ T5626] EXT4-fs (loop4): Ignoring removed oldalloc option
[  198.701137][ T5626] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  199.048328][ T5639] syz.6.306 sent an empty control message without MSG_MORE.
[  199.239111][ T5626] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  199.902744][ T5626] EXT4-fs (loop4): 1 truncate cleaned up
[  199.908492][ T5626] EXT4-fs (loop4): mounted filesystem without journal. Opts: max_batch_time=0x0000000000000004,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,user_xattr,oldalloc,nombcache,,errors=continue. Quota mode: none.
[  199.945521][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  199.952397][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  200.215854][ T5649] syz.3.308 uses obsolete (PF_INET,SOCK_PACKET)
[  202.764690][ T4253] Bluetooth: hci4: command 0x0406 tx timeout
[  202.770964][ T4253] Bluetooth: hci2: command 0x0406 tx timeout
[  203.001094][ T5683] capability: warning: `syz.5.317' uses deprecated v2 capabilities in a way that may be insecure
[  203.152139][ T5692] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  203.677033][ T5711] netlink: 'syz.4.321': attribute type 1 has an invalid length.
[  203.684981][ T5711] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.321'.
[  204.624316][   T26] audit: type=1326 audit(1769042306.804:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  204.695004][   T26] audit: type=1326 audit(1769042306.804:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  204.722598][   T26] audit: type=1326 audit(1769042306.804:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  204.745796][   T26] audit: type=1326 audit(1769042306.804:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  204.768925][   T26] audit: type=1326 audit(1769042306.804:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  204.800918][   T26] audit: type=1326 audit(1769042306.804:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  204.882300][ T5725] tipc: Started in network mode
[  204.900899][ T5725] tipc: Node identity aaaaaaaaaa34, cluster identity 4711
[  204.908361][   T26] audit: type=1326 audit(1769042306.804:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  205.043520][ T5725] tipc: Enabled bearer <eth:macvlan0>, priority 10
[  205.058575][ T5731] Zero length message leads to an empty skb
[  205.067722][   T26] audit: type=1326 audit(1769042306.804:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  205.067764][   T26] audit: type=1326 audit(1769042306.804:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  205.067799][   T26] audit: type=1326 audit(1769042306.804:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5716 comm="syz.3.325" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f038a53acb9 code=0x7ffc0000
[  206.438061][ T4555] tipc: Node number set to 10398378
[  207.216143][ T5764] "syz.5.333" (5764) uses obsolete ecb(arc4) skcipher
[  207.630671][ T5760] loop6: detected capacity change from 0 to 8192
[  208.449076][ T5760] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  208.459208][ T5760] REISERFS (device loop6): using ordered data mode
[  208.466276][ T5760] reiserfs: using flush barriers
[  208.478032][ T5760] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  208.497039][ T5760] REISERFS (device loop6): checking transaction log (loop6)
[  209.397804][ T5760] REISERFS (device loop6): Using tea hash to sort names
[  209.408042][ T5760] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  213.008464][ T5809] loop5: detected capacity change from 0 to 1024
[  213.491836][ T5809] EXT4-fs (loop5): Ignoring removed nomblk_io_submit option
[  213.593554][ T5809] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  213.924296][ T5809] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  213.962937][ T5809] System zones: 0-1, 3-36
[  215.650634][ T5809] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  216.056766][   T26] kauditd_printk_skb: 15 callbacks suppressed
[  216.056782][   T26] audit: type=1804 audit(1769042318.234:31): pid=5840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.344" name="/newroot/24/bus/bus" dev="loop5" ino=18 res=1 errno=0
[  216.706617][ T5852] device syzkaller0 entered promiscuous mode
[  219.318580][ T5888] loop6: detected capacity change from 0 to 32768
[  220.165395][   T26] audit: type=1800 audit(1769042322.094:32): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.359" name="file1" dev="loop6" ino=7 res=0 errno=0
[  223.740357][ T5927] device syzkaller0 entered promiscuous mode
[  227.851735][ T5961] device syzkaller0 entered promiscuous mode
[  232.862894][ T6031] "syz.6.386" (6031) uses obsolete ecb(arc4) skcipher
[  234.095752][   T26] audit: type=1326 audit(1769042336.274:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  234.341228][   T26] audit: type=1326 audit(1769042336.304:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  234.721299][   T26] audit: type=1326 audit(1769042336.304:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  235.727976][   T26] audit: type=1326 audit(1769042336.304:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  235.908696][   T26] audit: type=1326 audit(1769042336.304:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  235.970441][   T26] audit: type=1326 audit(1769042336.304:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  237.044001][   T26] audit: type=1326 audit(1769042336.304:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  237.208504][   T26] audit: type=1326 audit(1769042336.494:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  237.395563][   T26] audit: type=1326 audit(1769042336.614:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  237.530418][   T26] audit: type=1326 audit(1769042336.694:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6044 comm="syz.5.392" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f63ade54cb9 code=0x7ffc0000
[  237.867714][ T6093] loop5: detected capacity change from 0 to 1024
[  238.038299][ T6093] hfsplus: bad catalog folder entry
[  240.507435][ T6100] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  242.056541][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz.5.408'.
[  243.081464][ T6120] loop3: detected capacity change from 0 to 8192
[  246.658654][ T6180] loop4: detected capacity change from 0 to 1024
[  246.760972][ T6180] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[  246.768549][ T6180] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  246.796825][ T6180] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  246.905207][ T6185] blk_update_request: I/O error, dev loop11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  246.916972][ T6185] F2FS-fs (loop11): Unable to read 1th superblock
[  246.924839][ T6185] blk_update_request: I/O error, dev loop11, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  246.936192][ T6185] F2FS-fs (loop11): Unable to read 2th superblock
[  247.179164][ T6180] System zones: 0-1, 3-36
[  247.773619][ T6180] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  248.503434][   T26] kauditd_printk_skb: 11 callbacks suppressed
[  248.503449][   T26] audit: type=1804 audit(1769042350.684:54): pid=6194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.420" name="/newroot/78/bus/bus" dev="loop4" ino=18 res=1 errno=0
[  249.181453][ T6214] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  249.482160][ T6224] loop3: detected capacity change from 0 to 512
[  249.631200][ T6224] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  250.396323][ T6224] EXT4-fs (loop3): 1 truncate cleaned up
[  250.420543][ T6224] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  252.356992][ T6256] loop4: detected capacity change from 0 to 128
[  252.503582][ T4237] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  252.546973][ T6256] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[  252.590400][ T6256] FAT-fs (loop4): Filesystem has been set read-only
[  252.685791][ T6256] FAT-fs (loop4): error, invalid access to FAT (entry 0x0fff0000)
[  252.824379][ T6267] blk_update_request: I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  252.835723][ T6267] F2FS-fs (loop3): Unable to read 1th superblock
[  252.843305][ T6267] blk_update_request: I/O error, dev loop3, sector 8 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  252.854627][ T6267] F2FS-fs (loop3): Unable to read 2th superblock
[  253.760900][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.820123][ T4237] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.975980][ T4237] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  254.114150][ T4237] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.343360][ T4237] usb 4-1: config 0 descriptor??
[  255.039218][ T4237] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0
[  255.409201][ T4237] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  255.761276][ T4237] cp2112 0003:10C4:EA90.0002: Part Number: 0x82 Device Version: 0xFE
[  256.699212][ T4237] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71
[  256.743321][ T4237] usb 4-1: USB disconnect, device number 3
[  257.584368][ T6300] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  257.611763][ T6300] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  258.263516][ T6293] fido_id[6293]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  261.372832][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  261.379462][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  261.445968][ T6320] netlink: 4 bytes leftover after parsing attributes in process `syz.6.448'.
[  263.461702][ T4555] Bluetooth: hci1: command 0x0406 tx timeout
[  264.982330][ T6359] loop6: detected capacity change from 0 to 128
[  266.435277][ T6373] netlink: 44 bytes leftover after parsing attributes in process `syz.4.461'.
[  267.104906][ T6381] netlink: 'syz.3.466': attribute type 10 has an invalid length.
[  267.430639][ T6381] team0: Port device netdevsim0 added
[  271.202677][ T6415] kvm [6413]: vcpu0, guest rIP: 0x18e disabled perfctr wrmsr: 0xc2 data 0x20a0eef
[  273.801615][ T6455] netlink: 4 bytes leftover after parsing attributes in process `syz.6.484'.
[  273.930506][ T4176] Bluetooth: hci3: command 0x0406 tx timeout
[  274.677260][ T6476] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  280.432784][ T6547] loop3: detected capacity change from 0 to 64
[  280.605578][ T6549] device syzkaller0 entered promiscuous mode
[  280.783879][ T6557] Core dump to core aborted: cannot preserve file permissions
[  285.405695][ T6596] 8021q: adding VLAN 0 to HW filter on device bond1
[  285.622181][ T6606] device veth0 entered promiscuous mode
[  285.643576][ T6606] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  285.786065][ T4319] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  286.888415][ T6641] vcan0: tx drop: invalid da for name 0x00000000000000ee
[  291.350935][ T6681] netlink: 4 bytes leftover after parsing attributes in process `syz.3.540'.
[  291.657969][ T6686] "syz.1.538" (6686) uses obsolete ecb(arc4) skcipher
[  294.875350][ T6718] 8021q: adding VLAN 0 to HW filter on device bond1
[  295.059987][ T6718] device veth0 entered promiscuous mode
[  295.116998][ T6718] bond1: (slave macvlan2): Enslaving as a backup interface with an up link
[  295.338536][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  296.204517][ T6747] netlink: 'syz.1.565': attribute type 1 has an invalid length.
[  296.212315][ T6747] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.565'.
[  297.317646][ T6749] loop5: detected capacity change from 0 to 64
[  297.371958][ T6753] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  298.271811][ T6760] netlink: 'syz.3.558': attribute type 1 has an invalid length.
[  298.315431][ T6763] Core dump to core aborted: cannot preserve file permissions
[  298.433414][ T6762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.556'.
[  301.299997][ T6791] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  304.768359][ T6839] tipc: Started in network mode
[  304.840391][ T6839] tipc: Node identity e6c06f6e937a, cluster identity 4711
[  304.847692][ T6839] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  305.821429][ T6842] device syzkaller0 entered promiscuous mode
[  305.866792][ T4176] tipc: Node number set to 1975152494
[  305.879636][ T6839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.580'.
[  305.924532][ T6839] tipc: Resetting bearer <eth:syzkaller0>
[  305.958011][ T6838] tipc: Resetting bearer <eth:syzkaller0>
[  306.021111][ T6838] tipc: Disabling bearer <eth:syzkaller0>
[  306.337140][ T6858] lo speed is unknown, defaulting to 1000
[  306.473813][ T6858] lo speed is unknown, defaulting to 1000
[  306.662278][ T6858] lo speed is unknown, defaulting to 1000
[  307.012419][ T6858] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  307.027429][ T6858] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  307.059885][ T6858] lo speed is unknown, defaulting to 1000
[  307.067812][ T6858] lo speed is unknown, defaulting to 1000
[  307.077791][ T6858] lo speed is unknown, defaulting to 1000
[  307.086831][ T6858] lo speed is unknown, defaulting to 1000
[  307.094114][ T6858] lo speed is unknown, defaulting to 1000
[  307.116850][ T6858] lo speed is unknown, defaulting to 1000
[  312.607012][ T6933] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  312.972395][ T6937] loop3: detected capacity change from 0 to 128
[  313.072907][ T6938] device syzkaller0 entered promiscuous mode
[  313.422126][ T6933] tipc: Resetting bearer <eth:syzkaller0>
[  314.194910][ T6937] ufs: You didn't specify the type of your ufs filesystem
[  314.194910][ T6937] 
[  314.194910][ T6937] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  314.194910][ T6937] 
[  314.194910][ T6937] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  315.199463][ T6932] tipc: Resetting bearer <eth:syzkaller0>
[  315.347593][ T6932] tipc: Disabling bearer <eth:syzkaller0>
[  315.372785][ T6937] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  316.800734][ T6964] loop5: detected capacity change from 0 to 2048
[  317.062685][ T6964] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[  317.124448][ T6964] ext4 filesystem being mounted at /67/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.353986][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.625'.
[  322.370816][ T7062] raw_sendmsg: syz.6.631 forgot to set AF_INET. Fix it!
[  322.490363][ T1108] Bluetooth: hci3: command 0x0405 tx timeout
[  322.961736][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  322.968178][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  325.349388][ T7095] netlink: 68 bytes leftover after parsing attributes in process `syz.5.639'.
[  326.990015][ T7122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  337.472798][ T7281] mip6: mip6_destopt_init_state: state's mode is not 2: 0
[  337.485142][ T7281] CIFS mount error: No usable UNC path provided in device string!
[  337.485142][ T7281] 
[  337.495839][ T7281] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  346.661569][ T7365] netlink: 24 bytes leftover after parsing attributes in process `syz.6.702'.
[  352.289680][ T7430] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  352.392379][ T7434] PKCS7: Unknown OID: [4] 0.38.35.0.951690.11253
[  352.399426][ T7434] PKCS7: Only support pkcs7_signedData type
[  361.230427][ T7504] xt_hashlimit: max too large, truncated to 1048576
[  370.047186][ T7589] overlayfs: failed to clone upperpath
[  370.226332][ T7596] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  371.051474][ T7605] netlink: 68 bytes leftover after parsing attributes in process `syz.5.759'.
[  371.477671][ T7608] vcan0: tx drop: invalid sa for name 0xfffffffffffffffd
[  376.586769][ T7651] blk_update_request: I/O error, dev loop13, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[  376.598979][ T7651] FAT-fs (loop13): unable to read boot sector
[  378.391523][ T7669] Process accounting resumed
[  380.914483][ T7680] serio: Serial port ttyS3
[  381.499073][ T7692] netlink: 24 bytes leftover after parsing attributes in process `syz.4.781'.
[  384.343351][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  384.349749][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  388.929710][ T7773] netlink: 72 bytes leftover after parsing attributes in process `syz.4.796'.
[  390.692163][ T7785] netlink: 24 bytes leftover after parsing attributes in process `syz.5.799'.
[  390.890803][ T7790] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  394.581954][ T7834] tipc: Started in network mode
[  394.587120][ T7834] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711
[  394.606742][ T7834] tipc: Enabled bearer <udp:syz0>, priority 10
[  396.287510][ T4176] tipc: Node number set to 4269801488
[  403.983935][ T7915] "syz.5.831" (7915) uses obsolete ecb(arc4) skcipher
[  407.852018][ T7953] netlink: 24 bytes leftover after parsing attributes in process `syz.5.840'.
[  409.349848][ T4377] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  409.767031][ T7967] lo speed is unknown, defaulting to 1000
[  409.816788][ T4377] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.163848][ T4377] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  410.843731][ T4377] team0: Port device netdevsim0 removed
[  410.859015][ T4377] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  411.153465][ T7376] device syz_tun left promiscuous mode
[  411.290321][ T1108] Bluetooth: hci4: command 0x0409 tx timeout
[  412.113680][ T7967] chnl_net:caif_netlink_parms(): no params data found
[  413.309693][ T4303] Bluetooth: hci0: command 0x0409 tx timeout
[  413.652433][ T1108] Bluetooth: hci4: command 0x041b tx timeout
[  414.516225][ T7997] lo speed is unknown, defaulting to 1000
[  416.197447][ T4377] tipc: Disabling bearer <eth:macvlan0>
[  416.279417][ T4303] Bluetooth: hci4: command 0x040f tx timeout
[  416.290637][ T4303] Bluetooth: hci0: command 0x041b tx timeout
[  416.310666][ T4377] tipc: Left network mode
[  418.493793][ T4303] Bluetooth: hci0: command 0x040f tx timeout
[  418.530275][ T4303] Bluetooth: hci4: command 0x0419 tx timeout
[  418.597059][ T7967] bridge0: port 1(bridge_slave_0) entered blocking state
[  418.761672][ T7967] bridge0: port 1(bridge_slave_0) entered disabled state
[  418.770086][ T7967] device bridge_slave_0 entered promiscuous mode
[  418.945045][ T8053] IPVS: rr: SCTP 172.20.20.187:0 - no destination available
[  419.019963][ T7967] bridge0: port 2(bridge_slave_1) entered blocking state
[  419.145153][ T7967] bridge0: port 2(bridge_slave_1) entered disabled state
[  419.171939][ T7967] device bridge_slave_1 entered promiscuous mode
[  419.294961][ T7967] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  419.379139][ T7967] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  421.027083][ T4176] Bluetooth: hci0: command 0x0419 tx timeout
[  421.262640][ T8092] netlink: 24 bytes leftover after parsing attributes in process `syz.5.869'.
[  422.130889][ T7967] team0: Port device team_slave_0 added
[  422.158393][ T7967] team0: Port device team_slave_1 added
[  422.174323][ T7997] chnl_net:caif_netlink_parms(): no params data found
[  422.311355][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_0
[  422.524403][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.277556][ T7967] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  423.444624][ T7967] batman_adv: batadv0: Adding interface: batadv_slave_1
[  423.455604][ T7967] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  423.491280][ T7967] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  424.329266][ T8113] overlayfs: failed to clone upperpath
[  425.673578][ T7997] bridge0: port 1(bridge_slave_0) entered blocking state
[  427.040728][ T7997] bridge0: port 1(bridge_slave_0) entered disabled state
[  427.078897][ T7997] device bridge_slave_0 entered promiscuous mode
[  427.165003][ T7997] bridge0: port 2(bridge_slave_1) entered blocking state
[  427.175050][ T7997] bridge0: port 2(bridge_slave_1) entered disabled state
[  427.206158][ T7997] device bridge_slave_1 entered promiscuous mode
[  427.235277][ T7967] device hsr_slave_0 entered promiscuous mode
[  427.314887][ T7967] device hsr_slave_1 entered promiscuous mode
[  427.330020][ T7967] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  427.340323][ T7967] Cannot create hsr debugfs directory
[  427.471011][ T7997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  427.513266][ T7997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  427.541665][ T4377] bond0: (slave wlan1): Releasing backup interface
[  427.635043][ T7997] team0: Port device team_slave_0 added
[  427.746570][ T7997] team0: Port device team_slave_1 added
[  427.767692][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_0
[  427.774807][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  427.801034][ T7997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  427.838002][ T7997] batman_adv: batadv0: Adding interface: batadv_slave_1
[  428.186810][ T7997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  428.562904][ T7997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  430.885150][ T4377] device hsr_slave_0 left promiscuous mode
[  430.916116][ T4377] device hsr_slave_1 left promiscuous mode
[  430.947177][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  431.237158][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_0
[  431.617990][ T4377] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  431.650436][ T4377] batman_adv: batadv0: Removing interface: batadv_slave_1
[  431.677051][ T4377] device bridge_slave_1 left promiscuous mode
[  431.700247][ T4377] bridge0: port 2(bridge_slave_1) entered disabled state
[  431.723130][ T4377] device bridge_slave_0 left promiscuous mode
[  431.749145][ T4377] bridge0: port 1(bridge_slave_0) entered disabled state
[  431.860602][ T4377] device veth1_macvtap left promiscuous mode
[  431.887252][ T4377] device veth0_macvtap left promiscuous mode
[  431.917731][ T4377] device veth1_vlan left promiscuous mode
[  431.927849][ T4377] device veth0_vlan left promiscuous mode
[  432.613270][ T4377] team0 (unregistering): Port device team_slave_1 removed
[  432.763743][ T4377] team0 (unregistering): Port device team_slave_0 removed
[  432.787512][ T4377] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  433.590777][ T4377] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  433.833482][ T4377] bond0 (unregistering): Released all slaves
[  433.945986][ T7997] device hsr_slave_0 entered promiscuous mode
[  433.968653][ T7997] device hsr_slave_1 entered promiscuous mode
[  433.990997][ T7997] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  434.000974][ T7997] Cannot create hsr debugfs directory
[  434.022778][ T8179] netlink: 'syz.6.884': attribute type 4 has an invalid length.
[  434.030701][ T8179] netlink: 17 bytes leftover after parsing attributes in process `syz.6.884'.
[  434.135253][ T4176] lo speed is unknown, defaulting to 1000
[  438.181835][ T8212] netlink: 16 bytes leftover after parsing attributes in process `syz.6.890'.
[  438.442864][ T7967] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  439.204923][ T7967] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  439.267448][ T7967] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  439.303754][ T7967] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  440.538171][ T8252] lo speed is unknown, defaulting to 1000
[  440.575855][ T8252] lo speed is unknown, defaulting to 1000
[  440.589812][ T7997] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  440.681310][ T7997] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  440.721393][ T8252] lo speed is unknown, defaulting to 1000
[  440.758605][ T7997] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  440.775190][ T8252] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  440.791648][ T7997] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  440.895037][ T8252] lo speed is unknown, defaulting to 1000
[  440.914193][ T8252] lo speed is unknown, defaulting to 1000
[  440.927572][ T8252] lo speed is unknown, defaulting to 1000
[  440.955462][ T7967] 8021q: adding VLAN 0 to HW filter on device bond0
[  440.981302][ T8252] lo speed is unknown, defaulting to 1000
[  441.003022][ T8252] lo speed is unknown, defaulting to 1000
[  441.022367][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  441.036138][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  441.057889][ T7967] 8021q: adding VLAN 0 to HW filter on device team0
[  441.071327][ T8252] lo speed is unknown, defaulting to 1000
[  441.103187][ T8252] lo speed is unknown, defaulting to 1000
[  441.142393][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  441.158635][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  441.188863][ T4323] bridge0: port 1(bridge_slave_0) entered blocking state
[  441.196058][ T4323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  441.247842][ T8252] lo speed is unknown, defaulting to 1000
[  441.264822][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  441.288915][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  441.319347][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  441.337571][ T4323] bridge0: port 2(bridge_slave_1) entered blocking state
[  441.344783][ T4323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  441.397477][ T7997] 8021q: adding VLAN 0 to HW filter on device bond0
[  441.428560][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  441.442041][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  441.478753][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  441.504681][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  441.528410][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  441.548003][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  441.570667][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  441.595905][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  441.655174][ T7997] 8021q: adding VLAN 0 to HW filter on device team0
[  441.757565][ T7967] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  441.807832][ T7967] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  441.823295][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  441.842371][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  441.866997][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  442.011471][ T4325] bridge0: port 1(bridge_slave_0) entered blocking state
[  442.018665][ T4325] bridge0: port 1(bridge_slave_0) entered forwarding state
[  442.515213][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  442.652544][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  442.741140][ T4325] bridge0: port 2(bridge_slave_1) entered blocking state
[  442.748272][ T4325] bridge0: port 2(bridge_slave_1) entered forwarding state
[  443.020735][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  444.251452][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  444.301785][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  444.341263][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  444.566457][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  444.611638][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  446.310215][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  446.561050][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  446.582364][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  446.748713][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  446.782935][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  447.144980][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  447.426173][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  447.778812][ T7997] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  447.806643][ T7997] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  447.862322][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  447.908495][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  450.521829][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  450.703288][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  451.665054][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  451.722278][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  451.779412][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  451.936695][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  451.954127][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  452.012390][ T7967] 8021q: adding VLAN 0 to HW filter on device batadv0
[  453.153707][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  453.170546][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  453.227272][ T7997] 8021q: adding VLAN 0 to HW filter on device batadv0
[  454.557764][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  454.629227][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  454.867391][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  454.955246][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  455.041384][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  455.071651][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  455.105534][ T7967] device veth0_vlan entered promiscuous mode
[  455.174351][ T7967] device veth1_vlan entered promiscuous mode
[  456.012094][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  456.030785][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  456.061105][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  456.279764][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  456.297762][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  456.341299][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  456.359226][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  456.379522][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  456.389135][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  456.402693][ T7997] device veth0_vlan entered promiscuous mode
[  456.418062][ T7967] device veth0_macvtap entered promiscuous mode
[  456.467378][ T7997] device veth1_vlan entered promiscuous mode
[  456.648670][ T7967] device veth1_macvtap entered promiscuous mode
[  456.669606][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.694785][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.707197][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  456.731260][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  456.751764][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.761450][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  457.650726][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  457.689810][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  457.721361][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  457.799061][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  457.879246][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  457.893906][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.904829][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.917204][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  457.927844][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  457.938200][ T7967] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  458.044395][ T7967] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  458.060054][ T7967] batman_adv: batadv0: Interface activated: batadv_slave_1
[  458.129554][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  458.154114][ T4325] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  458.187949][ T7967] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  458.229114][ T7967] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  458.327079][ T7967] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  458.337852][ T7967] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  459.334859][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  459.354115][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  459.369865][ T7997] device veth0_macvtap entered promiscuous mode
[  460.191050][ T7997] device veth1_macvtap entered promiscuous mode
[  460.441341][  T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  460.825014][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  460.877182][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  460.914065][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  460.956450][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  460.990476][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  461.004373][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.032291][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_0
[  461.049919][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  461.081341][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  461.125709][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.137202][ T4325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.150392][ T4325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  461.164773][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.210501][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.248632][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.280226][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.327433][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.365555][ T7997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  461.405496][ T7997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  461.442618][ T7997] batman_adv: batadv0: Interface activated: batadv_slave_1
[  461.484496][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  461.515469][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  461.558729][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  461.649841][ T7997] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  461.676184][ T7997] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  461.698278][ T7997] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  461.742170][ T7997] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  461.794699][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  461.845381][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  462.052480][ T4522] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  464.399558][  T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.422740][ T8508] loop7: detected capacity change from 0 to 2048
[  464.440435][  T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.518076][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  464.676987][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  464.747675][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  464.785765][ T8508] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[  464.801254][ T7207] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  464.814138][ T8524] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  464.850818][ T8508] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  465.439263][ T8524] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  465.455761][ T8508] fs-verity: sha512 using implementation "sha512-avx2"
[  467.639945][ T8560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.953'.
[  468.970395][ T8575] loop8: detected capacity change from 0 to 512
[  469.027940][ T8575] FAT-fs (loop8): bogus logical sector size 65526
[  469.040256][ T8575] FAT-fs (loop8): Can't find a valid FAT filesystem
[  469.187626][ T8579] loop7: detected capacity change from 0 to 2048
[  470.431232][ T8589] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING
[  470.581251][ T8579] EXT4-fs (loop7): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[  470.728365][ T8600] loop8: detected capacity change from 0 to 2048
[  470.824957][ T8579] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  471.809958][ T8600] EXT4-fs (loop8): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000000040000,nolazytime,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none.
[  471.868404][ T8593] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1163: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  471.884989][ T8593] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  471.898270][ T8593] EXT4-fs (loop8): This should not happen!! Data will be lost
[  471.898270][ T8593] 
[  471.907997][ T8593] EXT4-fs (loop8): Total free blocks count 0
[  471.914256][ T8593] EXT4-fs (loop8): Free/Dirty block details
[  471.920490][ T8600] EXT4-fs error (device loop8): ext4_iget_extra_inode:4566: inode #12: comm syz.8.955: corrupted in-inode xattr
[  471.932454][ T8593] EXT4-fs (loop8): free_blocks=2415919104
[  471.932569][ T8593] EXT4-fs (loop8): dirty_blocks=64
[  471.932585][ T8593] EXT4-fs (loop8): Block reservation details
[  471.932599][ T8593] EXT4-fs (loop8): i_reserved_data_blocks=4
[  472.198310][  T155] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 65537 with max blocks 33 with error 28
[  472.243978][  T155] EXT4-fs (loop8): This should not happen!! Data will be lost
[  472.243978][  T155] 
[  472.356086][ T8616] netlink: 24 bytes leftover after parsing attributes in process `syz.7.964'.
[  472.476842][ T8620] loop8: detected capacity change from 0 to 1024
[  472.595211][ T8620] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  473.236792][ T8632] o2cb: This node has not been configured.
[  473.243133][ T8632] o2cb: Cluster check failed. Fix errors before retrying.
[  473.250393][ T8632] (syz.8.965,8632,1):user_dlm_register:675 ERROR: status = -22
[  473.257979][ T8632] (syz.8.965,8632,1):dlmfs_mkdir:430 ERROR: Error -22 could not register domain "file1"
[  481.675882][ T8711] netlink: 32 bytes leftover after parsing attributes in process `syz.7.984'.
[  482.221677][ T8723] device bridge1 entered promiscuous mode
[  482.247729][ T8723] team0: Port device bridge1 added
[  482.955616][ T8727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  482.964406][ T8727] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  483.016842][ T8727] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  485.043181][ T8733] 9pnet_virtio: no channels available for device syz
[  486.663722][ T8745] loop8: detected capacity change from 0 to 8
[  487.896403][ T8767] netlink: 24 bytes leftover after parsing attributes in process `syz.6.998'.
[  489.686844][ T8792] loop8: detected capacity change from 0 to 8
[  490.020366][ T8792] Dev loop8: unable to read RDB block 8
[  490.026373][ T8792]  loop8: unable to read partition table
[  490.032258][ T8792] loop8: partition table beyond EOD, truncated
[  490.038484][ T8792] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  491.974691][ T8793] loop8: detected capacity change from 0 to 4096
[  492.099065][ T8802] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  492.127673][ T8793] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  492.779976][ T8797] device batadv_slave_1 entered promiscuous mode
[  493.835159][ T8795] device batadv_slave_1 left promiscuous mode
[  493.853928][ T8793] NILFS (loop8): mounting fs with errors
[  493.914729][ T8810] loop7: detected capacity change from 0 to 128
[  494.326240][ T8810] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  494.562333][ T8821] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1010'.
[  494.580285][ T8810] hpfs: filesystem error: improperly stopped
[  494.586407][ T8810] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2
[  496.306497][ T8835] netlink: 4096 bytes leftover after parsing attributes in process `syz.5.1012'.
[  496.317003][ T8835] openvswitch: netlink: ct_state flags 00030000 unsupported
[  500.005795][ T8870] netlink: 'syz.6.1021': attribute type 3 has an invalid length.
[  500.014548][ T8870] netlink: 201372 bytes leftover after parsing attributes in process `syz.6.1021'.
[  500.132713][ T8867] loop7: detected capacity change from 0 to 128
[  500.254286][ T8867] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  500.310736][ T8867] ext4 filesystem being mounted at /16/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  500.342616][    C1] vkms_vblank_simulate: vblank timer overrun
[  500.515012][ T8878] loop8: detected capacity change from 0 to 2048
[  501.432150][ T8878] EXT4-fs (loop8): mounted filesystem without journal. Opts: nouid32,acl,,errors=continue. Quota mode: none.
[  501.446052][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1026'.
[  501.799219][ T8901] autofs4:pid:8901:autofs_fill_super: called with bogus options
[  504.933299][ T8947] x_tables: duplicate underflow at hook 1
[  506.354198][ T8962] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1040'.
[  506.422194][ T8973] netlink: 388 bytes leftover after parsing attributes in process `syz.6.1043'.
[  507.140732][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  507.149063][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  507.633839][ T9000] loop7: detected capacity change from 0 to 64
[  507.674248][ T9000] hfs: unable to parse mount options
[  508.234671][ T9009] bridge0: port 3(hsr0) entered blocking state
[  508.241659][ T9009] bridge0: port 3(hsr0) entered disabled state
[  508.250589][ T9009] device hsr0 entered promiscuous mode
[  508.257530][ T9009] bridge0: port 3(hsr0) entered blocking state
[  508.264287][ T9009] bridge0: port 3(hsr0) entered forwarding state
[  509.250995][ T9016] loop8: detected capacity change from 0 to 128
[  509.497241][ T9016] UBIFS error (pid: 9016): cannot open "/dev/loop8", error -22
[  509.600215][ T9023] device veth1_vlan left promiscuous mode
[  511.069078][ T9032] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1054'.
[  511.242036][ T9037] loop7: detected capacity change from 0 to 8192
[  511.471946][ T9037] REISERFS (device loop7): found reiserfs format "3.5" with non-standard journal
[  511.493086][ T9037] REISERFS (device loop7): using ordered data mode
[  511.500614][ T9037] reiserfs: using flush barriers
[  511.512955][ T9037] REISERFS (device loop7): journal params: device loop7, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  511.814693][ T9058] CIFS mount error: No usable UNC path provided in device string!
[  511.814693][ T9058] 
[  511.824840][ T9058] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  512.021830][ T9037] REISERFS (device loop7): checking transaction log (loop7)
[  514.643300][ T9102] loop8: detected capacity change from 0 to 1024
[  514.710659][ T4176] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  514.755577][ T9102] hfsplus: request for non-existent node 3 in B*Tree
[  514.770588][ T9102] hfsplus: request for non-existent node 3 in B*Tree
[  515.093966][ T9123] block device autoloading is deprecated and will be removed.
[  515.170631][ T4176] usb 8-1: unable to get BOS descriptor or descriptor too short
[  515.260473][ T4176] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  515.276790][ T4176] usb 8-1: config 1 interface 2 altsetting 17 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  515.290432][ T4176] usb 8-1: config 1 interface 2 has no altsetting 0
[  515.471926][ T4176] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  515.486459][ T4176] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.497060][ T4176] usb 8-1: Product: syz
[  515.506914][ T4176] usb 8-1: Manufacturer: syz
[  515.520107][ T4176] usb 8-1: SerialNumber: syz
[  515.956022][ T4176] usb 8-1: unknown interface protocol 0x2, assuming v1
[  515.966596][ T4176] usb 8-1: cannot find UAC_HEADER
[  516.002301][ T4176] snd-usb-audio: probe of 8-1:1.2 failed with error -22
[  516.013820][ T4176] usb 8-1: USB disconnect, device number 2
[  516.113522][ T4296] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[  516.312313][ T9177] udevd[9177]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  516.490525][ T4296] usb 9-1: config index 0 descriptor too short (expected 1307, got 27)
[  516.498865][ T4296] usb 9-1: config 0 has an invalid interface number: 0 but max is -1
[  516.520196][ T4296] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 0
[  516.529162][ T4296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt
[  516.560082][ T4296] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  516.721839][ T4176] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  516.810399][ T4296] usb 9-1: language id specifier not provided by device, defaulting to English
[  517.124899][ T4176] usb 8-1: config 127 has an invalid interface number: 190 but max is 0
[  517.140618][ T4176] usb 8-1: config 127 has no interface number 0
[  517.154085][ T4176] usb 8-1: config 127 interface 190 has no altsetting 0
[  517.168858][ T4176] usb 8-1: New USB device found, idVendor=0bc2, idProduct=331a, bcdDevice= 9.b5
[  517.181130][ T4176] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  517.340429][ T4296] usb 9-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=c3.de
[  517.349534][ T4296] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  517.358807][ T4296] usb 9-1: Manufacturer: 牢
[  517.374492][ T4296] usb 9-1: config 0 descriptor??
[  517.421950][ T4296] hub 9-1:0.0: bad descriptor, ignoring hub
[  517.428649][ T4296] hub: probe of 9-1:0.0 failed with error -5
[  517.440737][ T4296] input: 牢 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input5
[  517.470355][ T4176] usb 8-1: string descriptor 0 read error: -71
[  517.490676][ T4176] usb 8-1: bad CDC descriptors
[  517.512464][ T4176] usb 8-1: bad CDC descriptors
[  517.517991][ T4176] usb-storage 8-1:127.190: USB Mass Storage device detected
[  517.572139][ T4176] usb-storage 8-1:127.190: Quirks match for vid 0bc2 pid 331a: 10000000
[  517.624292][ T4554] usb 9-1: USB disconnect, device number 2
[  517.648378][ T4176] usb 8-1: USB disconnect, device number 3
[  518.175052][ T9265] capability: warning: `syz.1.1126' uses 32-bit capabilities (legacy support in use)
[  518.572170][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1135'.
[  518.749693][ T9299] loop7: detected capacity change from 0 to 128
[  518.762472][ T9298] loop8: detected capacity change from 0 to 512
[  518.860225][ T9299] VFS: could not find a valid V7 on loop7.
[  518.909615][ T9298] EXT4-fs (loop8): orphan cleanup on readonly fs
[  518.938885][ T9298] EXT4-fs error (device loop8): ext4_map_blocks:629: inode #11: block 1: comm syz.8.1136: lblock 0 mapped to illegal pblock 1 (length 1)
[  518.961432][ T9302] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1138'.
[  519.011986][ T9298] EXT4-fs warning (device loop8): ext4_expand_extra_isize_ea:2806: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  519.025687][ T9298] EXT4-fs error (device loop8): ext4_xattr_inode_update_ref:984: inode #11: comm syz.8.1136: EA inode 11 ref wraparound: ref_count=0 ref_change=-1
[  519.150002][ T9298] EXT4-fs warning (device loop8): ext4_xattr_inode_dec_ref_all:1177: inode #11: comm syz.8.1136: ea_inode dec ref err=-117
[  519.175368][ T9298] EXT4-fs (loop8): 1 orphan inode deleted
[  519.188154][ T9298] EXT4-fs (loop8): mounted filesystem without journal. Opts: nodioread_nolock,journal_dev=0x00000000000000ff,debug_want_extra_isize=0x000000000000005c,nouid32,resgid=0x0000000000000000,acl,init_itable=0x0000000000008d55,,errors=continue. Quota mode: none.
[  519.410268][ T4296] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  519.667826][ T4296] usb 8-1: Using ep0 maxpacket: 8
[  519.692339][ T9330] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1150'.
[  519.830488][ T4296] usb 8-1: unable to get BOS descriptor or descriptor too short
[  519.968548][ T4296] usb 8-1: config 4 has an invalid interface number: 147 but max is 0
[  519.997796][ T4296] usb 8-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  520.019045][ T9354] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1159'.
[  520.038823][ T4296] usb 8-1: config 4 has no interface number 0
[  520.122953][ T9364] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1163'.
[  520.210561][ T4296] usb 8-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  520.226041][ T4296] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.258673][ T4296] usb 8-1: Product: syz
[  520.267966][ T4296] usb 8-1: Manufacturer: syz
[  520.290257][ T4296] usb 8-1: SerialNumber: syz
[  520.515414][ T9399] loop8: detected capacity change from 0 to 512
[  520.663403][ T9399] EXT4-fs (loop8): mounted filesystem without journal. Opts: errors=remount-ro,nojournal_checksum,. Quota mode: writeback.
[  520.676936][ T9399] ext4 filesystem being mounted at /39/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  520.710511][ T4296] usb 8-1: Found UVC 0.02 device syz (04f2:b746)
[  520.717057][ T4296] usb 8-1: No valid video chain found.
[  520.725666][ T4296] usb 8-1: USB disconnect, device number 4
[  520.744594][ T9406] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1175'.
[  522.728677][    C0] ------------[ cut here ]------------
[  522.735290][    C0] WARNING: CPU: 0 PID: 9449 at net/mac80211/tx.c:4859 __ieee80211_beacon_get+0x179f/0x2000
[  522.745442][    C0] Modules linked in:
[  522.749448][    C0] CPU: 0 PID: 9449 Comm: syz.8.1189 Not tainted syzkaller #0
[  522.756912][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  522.767070][    C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000
[  522.773487][    C0] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d c0 2a f8 0f 0b e9 03 ef ff ff e8 01 c0 2a f8 <0f> 0b e9 76 f2 ff ff e8 15 89 6d 00 89 d9 80 e1 07 80 c1 03 38 c1
[  522.793208][    C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246
[  522.799326][    C0] RAX: ffffffff894e5f9f RBX: ffff888057fc2298 RCX: ffff88802a7d1dc0
[  522.807415][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  522.815471][    C0] RBP: ffffc90000007b08 R08: ffff88802a7d1dc0 R09: 0000000000000003
[  522.823540][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880621ede00
[  522.831597][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f2c
[  522.839628][    C0] FS:  00007f6c88f3c6c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  522.848702][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  522.855974][    C0] CR2: 00007f6c88f1bd58 CR3: 000000005f41e000 CR4: 00000000003506f0
[  522.864059][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  522.872118][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  522.880306][    C0] Call Trace:
[  522.883720][    C0]  <IRQ>
[  522.886616][    C0]  ? ieee80211_beacon_get_template+0x30/0x30
[  522.892704][    C0]  ? verify_lock_unused+0x140/0x140
[  522.897973][    C0]  ? __lock_acquire+0x13bc/0x7d10
[  522.903176][    C0]  ? verify_lock_unused+0x140/0x140
[  522.908440][    C0]  ieee80211_beacon_get_tim+0x48/0x840
[  522.913987][    C0]  mac80211_hwsim_beacon_tx+0xf4/0x920
[  522.919582][    C0]  __iterate_interfaces+0x243/0x500
[  522.924852][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  522.931339][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  522.937632][    C0]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  522.944731][    C0]  mac80211_hwsim_beacon+0x9b/0x180
[  522.949981][    C0]  ? hw_scan_work+0xed0/0xed0
[  522.954739][    C0]  __hrtimer_run_queues+0x4eb/0xb70
[  522.960009][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  522.965220][    C0]  hrtimer_run_softirq+0x176/0x240
[  522.970422][    C0]  handle_softirqs+0x339/0x830
[  522.975238][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  522.980293][    C0]  ? do_softirq+0x210/0x210
[  522.984848][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  522.990109][    C0]  __irq_exit_rcu+0x13b/0x230
[  522.994862][    C0]  ? irq_exit_rcu+0x20/0x20
[  522.999414][    C0]  irq_exit_rcu+0x5/0x20
[  523.003736][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  523.009414][    C0]  </IRQ>
[  523.012421][    C0]  <TASK>
[  523.015391][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  523.021452][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[  523.027999][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 8f 0b 8d f7 65 8b 05 10 18 3d 76 85 c0 74 3c 48 c7 04 24 0e 36
[  523.047692][    C0] RSP: 0018:ffffc90002dbf5c0 EFLAGS: 00000206
[  523.053844][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 6d891ad8959b9e00
[  523.061897][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001
[  523.070040][    C0] RBP: ffffc90002dbf650 R08: ffffffff901d1177 R09: 1ffffffff203a22e
[  523.078107][    C0] R10: dffffc0000000000 R11: fffffbfff203a22f R12: dffffc0000000000
[  523.086153][    C0] R13: 0000000000000000 R14: ffff8880502d8ec0 R15: 1ffff920005b7eb8
[  523.094294][    C0]  ? _raw_spin_unlock+0x40/0x40
[  523.099205][    C0]  ? __wake_up_common+0x2a4/0x4e0
[  523.104338][    C0]  __wake_up_sync_key+0x128/0x190
[  523.109498][    C0]  ? __wake_up_locked_key_bookmark+0x20/0x20
[  523.115575][    C0]  ? sock_load_diag_module+0x130/0x130
[  523.123031][    C0]  __unix_dgram_recvmsg+0x4c0/0xd90
[  523.129099][    C0]  ? unix_unhash+0x10/0x10
[  523.133614][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  523.138868][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  523.145159][    C0]  ? unix_dgram_recvmsg+0xb2/0xd0
[  523.150286][    C0]  ? unix_dgram_sendmsg+0x18a0/0x18a0
[  523.155711][    C0]  ____sys_recvmsg+0x2cd/0x5e0
[  523.160706][    C0]  ? __sys_recvmsg_sock+0x40/0x40
[  523.165785][    C0]  ? import_iovec+0x6f/0xa0
[  523.170374][    C0]  ___sys_recvmsg+0x21a/0x5c0
[  523.175214][    C0]  ? __sys_recvmsg+0x280/0x280
[  523.180051][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  523.185188][    C0]  ? __might_fault+0xb3/0x110
[  523.189909][    C0]  do_recvmmsg+0x382/0x850
[  523.194435][    C0]  ? __sys_recvmmsg+0x290/0x290
[  523.199355][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  523.204480][    C0]  __x64_sys_recvmmsg+0x195/0x250
[  523.209552][    C0]  ? do_recvmmsg+0x850/0x850
[  523.214225][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  523.219478][    C0]  do_syscall_64+0x4c/0xa0
[  523.223963][    C0]  ? clear_bhb_loop+0x30/0x80
[  523.228677][    C0]  ? clear_bhb_loop+0x30/0x80
[  523.233435][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  523.239365][    C0] RIP: 0033:0x7f6c8ad01cb9
[  523.243995][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  523.263808][    C0] RSP: 002b:00007f6c88f3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  523.272319][    C0] RAX: ffffffffffffffda RBX: 00007f6c8af7d090 RCX: 00007f6c8ad01cb9
[  523.280368][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  523.288558][    C0] RBP: 00007f6c8ad6fbf7 R08: 0000000000000000 R09: 0000000000000000
[  523.296636][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  523.304690][    C0] R13: 00007f6c8af7d128 R14: 00007f6c8af7d090 R15: 00007ffc8539e868
[  523.312765][    C0]  </TASK>
[  523.315840][    C0] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  523.323245][    C0] CPU: 0 PID: 9449 Comm: syz.8.1189 Not tainted syzkaller #0
[  523.330657][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  523.340836][    C0] Call Trace:
[  523.344138][    C0]  <IRQ>
[  523.347024][    C0]  dump_stack_lvl+0x188/0x250
[  523.351751][    C0]  ? show_regs_print_info+0x20/0x20
[  523.356993][    C0]  ? load_image+0x400/0x400
[  523.361593][    C0]  panic+0x2e5/0x810
[  523.365532][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  523.370086][    C0]  ? __ieee80211_beacon_get+0x179f/0x2000
[  523.375849][    C0]  __warn+0x248/0x2b0
SYZFAIL: failed to send rpc
fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe)
[  523.380014][    C0]  ? __ieee80211_beacon_get+0x179f/0x2000
[  523.387506][    C0]  report_bug+0x1b7/0x2e0
[  523.391894][    C0]  handle_bug+0x3a/0x70
[  523.396085][    C0]  exc_invalid_op+0x16/0x40
[  523.400742][    C0]  asm_exc_invalid_op+0x16/0x20
[  523.405636][    C0] RIP: 0010:__ieee80211_beacon_get+0x179f/0x2000
[  523.412010][    C0] Code: 2a f8 0f 0b 4f 89 64 2f 04 4f 89 64 2f 0c 43 c6 44 2f 14 f8 e9 19 fe ff ff e8 0d c0 2a f8 0f 0b e9 03 ef ff ff e8 01 c0 2a f8 <0f> 0b e9 76 f2 ff ff e8 15 89 6d 00 89 d9 80 e1 07 80 c1 03 38 c1
[  523.431745][    C0] RSP: 0018:ffffc900000078e0 EFLAGS: 00010246
[  523.437862][    C0] RAX: ffffffff894e5f9f RBX: ffff888057fc2298 RCX: ffff88802a7d1dc0
[  523.446010][    C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000
[  523.454024][    C0] RBP: ffffc90000007b08 R08: ffff88802a7d1dc0 R09: 0000000000000003
[  523.462042][    C0] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880621ede00
[  523.470052][    C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 1ffff92000000f2c
[  523.478082][    C0]  ? __ieee80211_beacon_get+0x179f/0x2000
[  523.483875][    C0]  ? ieee80211_beacon_get_template+0x30/0x30
[  523.489894][    C0]  ? verify_lock_unused+0x140/0x140
[  523.495145][    C0]  ? __lock_acquire+0x13bc/0x7d10
[  523.500215][    C0]  ? verify_lock_unused+0x140/0x140
[  523.505489][    C0]  ieee80211_beacon_get_tim+0x48/0x840
[  523.511007][    C0]  mac80211_hwsim_beacon_tx+0xf4/0x920
[  523.516510][    C0]  __iterate_interfaces+0x243/0x500
[  523.521748][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  523.528032][    C0]  ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0
[  523.534326][    C0]  ieee80211_iterate_active_interfaces_atomic+0xb3/0x140
[  523.541400][    C0]  mac80211_hwsim_beacon+0x9b/0x180
[  523.546644][    C0]  ? hw_scan_work+0xed0/0xed0
[  523.551375][    C0]  __hrtimer_run_queues+0x4eb/0xb70
[  523.556631][    C0]  ? hrtimer_interrupt+0x8d0/0x8d0
[  523.561793][    C0]  hrtimer_run_softirq+0x176/0x240
[  523.566950][    C0]  handle_softirqs+0x339/0x830
[  523.571774][    C0]  ? __irq_exit_rcu+0x13b/0x230
[  523.576674][    C0]  ? do_softirq+0x210/0x210
[  523.581221][    C0]  ? irqtime_account_irq+0xb2/0x1b0
[  523.586896][    C0]  __irq_exit_rcu+0x13b/0x230
[  523.591611][    C0]  ? irq_exit_rcu+0x20/0x20
[  523.596164][    C0]  irq_exit_rcu+0x5/0x20
[  523.600443][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  523.606119][    C0]  </IRQ>
[  523.609086][    C0]  <TASK>
[  523.612059][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  523.618181][    C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xbc/0x120
[  523.624729][    C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 <e8> 8f 0b 8d f7 65 8b 05 10 18 3d 76 85 c0 74 3c 48 c7 04 24 0e 36
[  523.644374][    C0] RSP: 0018:ffffc90002dbf5c0 EFLAGS: 00000206
[  523.650487][    C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 6d891ad8959b9e00
[  523.658495][    C0] RDX: dffffc0000000000 RSI: ffffffff8a2b2780 RDI: 0000000000000001
[  523.666524][    C0] RBP: ffffc90002dbf650 R08: ffffffff901d1177 R09: 1ffffffff203a22e
[  523.674536][    C0] R10: dffffc0000000000 R11: fffffbfff203a22f R12: dffffc0000000000
[  523.682549][    C0] R13: 0000000000000000 R14: ffff8880502d8ec0 R15: 1ffff920005b7eb8
[  523.690583][    C0]  ? _raw_spin_unlock+0x40/0x40
[  523.695487][    C0]  ? __wake_up_common+0x2a4/0x4e0
[  523.700608][    C0]  __wake_up_sync_key+0x128/0x190
[  523.705676][    C0]  ? __wake_up_locked_key_bookmark+0x20/0x20
[  523.711709][    C0]  ? sock_load_diag_module+0x130/0x130
[  523.717232][    C0]  __unix_dgram_recvmsg+0x4c0/0xd90
[  523.722493][    C0]  ? unix_unhash+0x10/0x10
[  523.726958][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  523.732212][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  523.738426][    C0]  ? unix_dgram_recvmsg+0xb2/0xd0
[  523.743501][    C0]  ? unix_dgram_sendmsg+0x18a0/0x18a0
[  523.748924][    C0]  ____sys_recvmsg+0x2cd/0x5e0
[  523.753753][    C0]  ? __sys_recvmsg_sock+0x40/0x40
[  523.758841][    C0]  ? import_iovec+0x6f/0xa0
[  523.763401][    C0]  ___sys_recvmsg+0x21a/0x5c0
[  523.768126][    C0]  ? __sys_recvmsg+0x280/0x280
[  523.772953][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  523.778136][    C0]  ? __might_fault+0xb3/0x110
[  523.782871][    C0]  do_recvmmsg+0x382/0x850
[  523.787359][    C0]  ? __sys_recvmmsg+0x290/0x290
[  523.792356][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  523.797437][    C0]  __x64_sys_recvmmsg+0x195/0x250
[  523.802517][    C0]  ? do_recvmmsg+0x850/0x850
[  523.807155][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  523.812402][    C0]  do_syscall_64+0x4c/0xa0
[  523.816947][    C0]  ? clear_bhb_loop+0x30/0x80
[  523.821667][    C0]  ? clear_bhb_loop+0x30/0x80
[  523.826394][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  523.832340][    C0] RIP: 0033:0x7f6c8ad01cb9
[  523.836806][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  523.856453][    C0] RSP: 002b:00007f6c88f3c028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  523.864924][    C0] RAX: ffffffffffffffda RBX: 00007f6c8af7d090 RCX: 00007f6c8ad01cb9
[  523.872944][    C0] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000003
[  523.880961][    C0] RBP: 00007f6c8ad6fbf7 R08: 0000000000000000 R09: 0000000000000000
[  523.888981][    C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  523.897015][    C0] R13: 00007f6c8af7d128 R14: 00007f6c8af7d090 R15: 00007ffc8539e868
[  523.905187][    C0]  </TASK>
[  523.908609][    C0] Kernel Offset: disabled
[  523.912977][    C0] Rebooting in 86400 seconds..