last executing test programs:

17.896984275s ago: executing program 4 (id=222):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe(&(0x7f0000000440))
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)

16.395195797s ago: executing program 4 (id=227):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x3]}, &(0x7f00000002c0), 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket(0x11, 0x2, 0x0)
bind$packet(r7, &(0x7f0000000500)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc408000400000000000000", 0x38}], 0x1)
writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004", @ANYRES16=r2], 0xb8}, 0x1, 0x0, 0x0, 0x40842}, 0x40)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r8, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r9 = syz_open_pts(r8, 0x80)
r10 = dup3(r9, r8, 0x80000)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
read(r10, &(0x7f0000000100)=""/213, 0xd5)
read$watch_queue(r10, &(0x7f0000001d40)=""/4095, 0xfdef)
syz_open_dev$hidraw(&(0x7f0000000080), 0xcac6, 0x418080)
ioctl$USBDEVFS_RELEASEINTERFACE(r10, 0x80045510, &(0x7f0000000340)=0xd9d5)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}, @nested={0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

12.576335842s ago: executing program 3 (id=239):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./bus\x00', 0x402280a, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$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")
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b80a000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
read$ptp(0xffffffffffffffff, &(0x7f0000000680)=""/130, 0x82)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1242, 0x836d9fb164f926b1)
chdir(&(0x7f0000000140)='./file0\x00')
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

11.343642866s ago: executing program 3 (id=241):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = epoll_create(0x8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x28203)
r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380070a, &(0x7f0000000280)={[{@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0xfb4}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x479, &(0x7f0000005d00)="$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")
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000005c0)={0x8000000c})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0)
epoll_wait(r0, &(0x7f0000000100), 0x0, 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
syz_usbip_server_init(0x1)
unshare(0x2c060000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setrlimit(0x5, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
ioctl$TIOCSTI(r5, 0x5412, 0x0)
openat$full(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x2f00, 0x4, 0xd097, 0x0, 0x3, 0xff7ffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7ffd, 0x3ff, 0x10001, 0x8, 0x5, 0x7, 0x10000, 0x7, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]})
close(0x3)

10.803618511s ago: executing program 0 (id=242):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x20000000)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)={0x3c, r4, 0x1, 0x70ad2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x3c}}, 0x0)

10.48352617s ago: executing program 4 (id=244):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r0, &(0x7f0000000440)='\x00', 0x1, 0x20004081, 0x0, 0x0)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r0, &(0x7f00000004c0)='<', 0x381, 0x805, 0x0, 0x0)

10.441453971s ago: executing program 0 (id=245):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket$inet(0x2, 0x5, 0x809)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10)
bind$tipc(r1, 0x0, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2})

10.337610974s ago: executing program 2 (id=246):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0x1, 0x0, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})

8.972302532s ago: executing program 4 (id=247):
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x1008205, &(0x7f0000000000), 0x1, 0x631, &(0x7f0000000c40)="$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")
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x67)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
pipe2(&(0x7f0000000040)={<r2=>0xffffffffffffffff}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r4 = fsmount(0xffffffffffffffff, 0x0, 0x8d)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r7 = fsopen(&(0x7f0000000000)='proc\x00', 0x0)
fsmount(r7, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r4, 0xc03864bc, &(0x7f0000000540)={0x1, 0x5, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x1, 0x5, 0x273f, 0xfffff01d, 0x9, 0x907, 0x7], &(0x7f00000004c0), &(0x7f0000000500)=[0xaf84, 0x6453, 0x0], 0x0, 0xc51})
r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x1aa)
getdents64(r8, &(0x7f0000004440)=""/4096, 0x1000)
openat$dsp(0xffffffffffffff9c, &(0x7f0000000240), 0x442403, 0x0)
splice(r2, 0x0, r1, 0x0, 0x9aa3, 0x1)
sendmsg$nl_route_sched(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x845}, 0x4000084)

8.351066299s ago: executing program 2 (id=248):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, 0x0, 0x0)
r2 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r2, 0x0, 0x0, 0x4000801, &(0x7f00000001c0)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @multicast}, 0x14)

8.29327683s ago: executing program 3 (id=249):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000001380)={0x2, 0x4e20, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, 0x0, 0x20000080)
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, 0x0, 0x20048050)
r6 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r6, 0x29, 0xc8, &(0x7f0000000340), 0x4)
setsockopt$MRT6_ADD_MIF(r6, 0x29, 0xca, 0x0, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000080), 0x952d80, 0x0)
socket(0x2b, 0x80801, 0x1)
r7 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r8, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
ioctl$sock_bt_hidp_HIDPCONNADD(r7, 0x400448c8, &(0x7f0000000280)={r8, r8, 0x9, 0x0, 0x0, 0x9, 0x8b, 0x6, 0x5508, 0xa35, 0x1, 0x1, 'syz0\x00'})

7.812627294s ago: executing program 1 (id=250):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x242, &(0x7f0000000800)="$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")
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

6.823912881s ago: executing program 2 (id=251):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$loop(0x0, 0xffff, 0x40)
ioctl$BLKGETSIZE64(r0, 0x80081272, 0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmsg$inet6(r1, &(0x7f0000000640)={&(0x7f00000000c0)={0xa, 0x4e22, 0x8, @ipv4={'\x00', '\xff\xff', @local}, 0x9}, 0x1c, 0x0}, 0x801)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000680)={0x2, 0x5, 0x7, 0xf8, 0x40, 0x40, 0x81, 0xb, 0x8, 0x4, 0x4, 0x8, 0x4, 0xdc}, 0xe)
dup(r1)
getdents64(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, 0x0, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
shmget(0x1, 0x4000, 0xa20, &(0x7f0000ffb000/0x4000)=nil)
r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
listen(r5, 0x3)
accept4$bt_l2cap(r5, &(0x7f0000000200), 0x0, 0x800)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e130100c900", @ANYBLOB=' '], 0x16)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x4, &(0x7f00000003c0)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

6.664008475s ago: executing program 3 (id=252):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe(&(0x7f0000000440))
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)

6.320588815s ago: executing program 0 (id=253):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890)
r3 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r3, &(0x7f0000002140)="800000800000210ee7decd7a0003407800810044cd72e07df87822049549d2992aadcd59f19a3be2a3c02aa6ca522fc9e04a5f967d74fa8931ab", 0x3a, 0x2004, &(0x7f00000001c0)={0x11, 0x8100, 0x0, 0x1, 0xd8, 0x6, @remote}, 0x14)

6.222632488s ago: executing program 2 (id=254):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x80000000003}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

5.303853733s ago: executing program 4 (id=255):
rt_sigprocmask(0x0, &(0x7f00000000c0)={[0x3]}, &(0x7f00000002c0), 0x8)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="120100009080e140fc044a500243010203010902120001000000000904"], 0x0)
syz_usb_control_io(r3, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000180)={0x40, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
r7 = socket(0x11, 0x2, 0x0)
bind$packet(r7, &(0x7f0000000500)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14)
writev(r4, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1)
writev(r4, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000010000100f7000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000144c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a3100000000200003801c0000800c00018006000100d10300000c0004", @ANYRES16=r2], 0xb8}, 0x1, 0x0, 0x0, 0x40842}, 0x40)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
write$binfmt_aout(r8, &(0x7f0000000300)=ANY=[], 0xff2e)
ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"})
r9 = syz_open_pts(r8, 0x80)
r10 = dup3(r9, r8, 0x80000)
openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000300), 0x100, 0x0)
read(r10, &(0x7f0000000100)=""/213, 0xd5)
read$watch_queue(r10, &(0x7f0000001d40)=""/4095, 0xfdef)
syz_open_dev$hidraw(&(0x7f0000000080), 0xcac6, 0x418080)
ioctl$USBDEVFS_RELEASEINTERFACE(r10, 0x80045510, &(0x7f0000000340)=0xd9d5)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000090000082502000000000000000109025c00020100f92a0904000001020900000524060001053408fa6e0d240f0100000000000d000a0006471a0100001905"], 0x0)
syz_emit_ethernet(0x3b6, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0)
r11 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002780)={0x34, 0x40, 0x107, 0x70bd2d, 0x25dfdbfe, {0x4, 0x7c}, [@nested={0x1c, 0x1c2, 0x0, 0x1, [@nested={0x18, 0x9, 0x0, 0x1, [@typed={0x12, 0x91, 0x0, 0x0, @str='/dev/qrtr-tun\x00'}]}]}, @nested={0x4, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)

5.227278355s ago: executing program 1 (id=256):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
syz_mount_image$cramfs(&(0x7f0000000040), &(0x7f0000000000)='./file2\x00', 0x2200400, &(0x7f0000000080)=ANY=[@ANYRES8=0x0], 0xfe, 0x160, &(0x7f0000000200)="$eJzs0M+LEnEYx/H3d+brKKRYZCBBKXTIksAf1C3CiSQhGyi6dBJs+gGKkVDeUqJbB6Grh9q9Lgv7F+jqYdlFL7v/xF68LezRZWbcXZb1P9jndZvP830+D8yLp7OM4tzzVvPrN7fddj+k3zjV8tvD4bDk5RZ0ti7Mg/ejEnxGM9Iw74EXT2Lw8UvDNeqthvc9L0EYsK8tc5rx03t2QtPTkCfYz9yD8S3/ncHlzC0S8vdua7DjQZYDFv/hvgX2jSDz+o4AE5SylsfumPyuZFM3FXQG2c2NvdfT3cqjh8/cP4Vy/0E0aWZ/whq2iuxMPh2Yy63ZtPrKqTqzYqHwpJjLGzze9wu7ffTL6Hd4r0B7fQZ+n0Xyrn4HvxT89W/Nt1UMGP87dprhs3/d/WGmQaUG9VoytF5LXDcwM9qbLFjBnxBZNRJCCCGEEEIIIYQQQgghhBBCCHHVnQQAAP//A2lTBA==")
open(&(0x7f0000000140)='.\x00', 0x0, 0x112)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x10)
syz_mount_image$fuse(0x0, 0x0, 0x402280a, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{0x0}], 0x1)
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f00000094c0)='./file1\x00', 0x0, &(0x7f0000001940)=ANY=[], 0x1, 0xc25, &(0x7f0000002580)="$eJzs3V9oXNl9B/DfmStZY22aaLOJN2mz6UBKYpTa+F9sBZcgZxW1AccbIit0n6LRHzvDyiMjyY03bYPakhb6ErovpS9FNF1ayEPpQ7ePVZotJJRCCXlIHwqCJss+9EEPgdKWjcK9c0Ya2fJau15ZsvfzMePvnTu/OzrnntGdO6AzNwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiM9+7tKp0+mgWwEAPExXJr506myKgYNuBwDw8Fz1+R8AAAAAAAAAAAAAAA67FEUcixSDr2ykqep+R/1yq33r9uTY+O6bHU2RohZFVV/e6qfPnD33qfMXRrr55tu/0z4cz01cvdR4duHGzcW5paW52cZkuzWzMDu352d40O3vNFztgMaNF27NXru21Dhz8uyOh28PvTbwxLGhixdOnB/p1k6OjY9P9NT09b/tn36Xe83wOBJFNCPFG0Ovp2ZE1OLB98V9Xjv77WjVieGqE5Nj41VH5lvN9nL5YKrlqlpEo2ej0e4+eghj8UBGI1bK5pcNHi67N3Gzudicnp9rfLG5uNxabi20U63T2rI/jajFSIpYjYj1XSb59kcRH40UL53aSNMRUXT3wyericH3b09tH/q4B2U7G/0Rq7VHYMwOsYEo4kqk+Nmrx2Om3Gf5Fh+P+EKZr0S8XOZnIlL5wjgX8VOTxR8bfVHEv0WKhbSRZqvjQfe4cvnLjc+3ry301HaPK4/8+8PDdMiPTfUoYro64m+kt3+yAwAAAAAAAAAAAAAAAMA77WgU8e1I8UfP/E41rziqeenvuzjynud/s3fO+NP3eZ6y9mRErNT2Nie3P08dTrXy3z50jD2pRxHfyPP//uCgGwMAAAAAAAAAAAAAAAAAAPCuVsTzkeIrJ46n1aiu/XskqmuKt9rXG1eb0/Odq8J2r/3bvWb65ubmZiN1cjTnVM6VnKs513Ku54xa3j7naM6pnCs5V3Ou5VzPGUXePudozqmcKzlXc67lXM8ZfXn7nKM5p3Ku5FzNuZZzPWcckmv3AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8TmpRxM8jxbe+tpEiRcRoxFR0cm3goFsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJTqqYiTkWLt+Xp1f7UWcTUifr65udm9RcRGmQ/qoPsKAAAAAAAAAAAAAAAAAAAAh1Yq4mOR4qn/20iNiLg99NrAE8eGLl44cX6kiCJSWdJb/9zE1UuNZxdu3FycW1qam21MtlszC7Nze/1x9cut9q3bk2Pj+9KZ+zq6z+0/Wn924eaLi63rX13e9fHB+qXppeXF5szuD8fRqEVM9a4Zrho8OTZeNXq+1WxXm6baPRpYixjda2cAAAAAAAAAAAAAAAAAAAA4NAZTEZ+LFD/5z3OpO2+8rzPn/5c694qt2pd/b/u7AObvyK7e7w/Yy3Laa0OHq4n3jcmx8fGJntV9/XeXlm1KqYinI8UnXvpQNR8+xeCuc+PLuveWdTfO5bqhXynrVnZU1Ycnx8YbVxbaJy7Nzy/MNJeb0/NzjYmbzZn8xQEre+0GAAAAAAAAAAAAAAAAAAAA7GYwFfGjSPHff/vvqXvd+Tz/v69zr2f+/29UU+gr9bQzt1Rz+99bze3vLL/v4sjgR5+51/r9mP9ftimlIr4ZKc7+6EPV9fS78/+n7qgt6/4kUrz+zEdyXe1IWdfsdqfzjNda83Onytq/jBS/+ka3Nqra67n2qe3a02Xt0Ujx5xs7a7+aaz+wXXumrD0eKb73X7vXfnC79mxZ+5NI8Y9/0+jWDpa1v5trj23XnpxZmJ+9324tx/87keKvr/xW6vb5nuPf8/0PK3fklrvG/M2X36nxH+pZt5LH9Y/z+DfvM/7nI8V36h/JdZ19P50ff7L6f3v8PxEp/uNfd9Zey7Xv3649vdduHbRy/L8dKb77Fz/e6nMe//74+/+N7RHfOf6/3Lczt14lBzT+T/asG8rtmnnru+NdZ+nFr7/QnJ+fW7RgwYKFrYWDPjLxMJTv/38aKf7/WJG65zH5/f89nXvb53//843t9/+Ld+SWA3r/f3/Puov5rKW/L6K+fONm/9MR9aUXv36idaN5fe76XPvM6VOf/vT506dOn+8/0j25217a8757HJTj/4NI8cO/++HW55it87/K7uf/g3fklgMa/6d6+7TjvGbPu+JdqRz/v4oUT372x1ufN3eO/87z/+7n/+Mf25lbv38HNP4f6Fk3lNvVeov7AgAAAAAAAAAA4FEymIr4s0jx23/466k7h2gvf/83e0duOaC//zrWs272Ic1r2PNOBgA4RMrzvw9Gin/a/P7WXO6d53/xa93a3vO/ezkM1/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBHXYoifj9SDL6ykdYGyvsd9cut9q3bk2Pju292NEWKWhRVfXmrnz5z9tynzl8Y6eabb/9O+3A8N3H1UuPZhRs3F+eWluZmG5Pt1szC7Nyen+FBt7/TcLUDGjdeuDV77dpS48zJszsevj302sATx4YuXjhxfqRTO9CYHBsfn+ip6et/2z/9Luke649EEd+PFG8MvZ6+OxBRiwffF/d57ey3o1UnhqtOTI6NVx2ZbzXby+WDqZarahGNno1Gu/soj9t+jsUDGY1YKZtfNni47N7EzeZic3p+rvHF5uJya7m10E61TmvL/jSiFiMpYjUi1gfufrr+KOKbkeKlUxvpnwciiu5++OSViS+dOnv/9tT2oY97ULaz0R+xWnsExuwQG4gi/iFS/OzV4/G9gYi+6Nzi4xFfKPOViJfL/ExEKl8Y5yJ+usvriEdTXxRxLlIspI306kB5POgeVy5/ufH59rWFntruceWRf394mA75sakeRfygOuJvpH/xew0AAAAAAAAAAAAAAABwiBSxGim+cuJ4quYHb80pbrWvN642p+c70/q6c/+6c6Y3Nzc3G6mTozmncq7kXM25lnM9Z9Ty9jlHc07lXMm5mnMt53rOKPL2OUdzTuVcybmacy3nes7oy9vnHM05lXMl52rOtZzrOeOQzN0DAAAAAAAAAAAAAAAAAAAeL7Uoqqu4f+trG2lzoHN96ano5JrrgT72fhEAAP//gMd2Mw==")
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0xc0086c43, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, r2}, 0x50)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
read$ptp(r1, &(0x7f0000000680)=""/130, 0x82)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', 0x0, 0x8, &(0x7f0000000240))
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c1242, 0x836d9fb164f926b1)
chdir(&(0x7f0000000140)='./file0\x00')
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0)

5.104410789s ago: executing program 3 (id=257):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0x2, 0x80805, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000240)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000003c0)=[r1], &(0x7f0000000080)=[0x2], &(0x7f0000000200), &(0x7f00000000c0), 0x0, 0x1})

5.0688156s ago: executing program 2 (id=258):
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x7ff}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x0)
ioctl$SNDRV_TIMER_IOCTL_GINFO(r3, 0xc0145401, &(0x7f0000000000)={{0x3, 0x2, 0x1, 0x0, 0x401}, 0x0, 0x0, 'id0\x00', 'timer0\x00'})

4.867169385s ago: executing program 0 (id=259):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x1, 0x0)
r0 = epoll_create(0x8)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000580), 0x28203)
r2 = syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380070a, &(0x7f0000000280)={[{@user_xattr}, {@journal_dev={'journal_dev', 0x3d, 0xfb4}}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x1}}]}, 0x2, 0x479, &(0x7f0000005d00)="$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")
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r2, &(0x7f00000005c0)={0x8000000c})
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, 0x0)
epoll_wait(r0, &(0x7f0000000100), 0x0, 0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x1)
syz_usbip_server_init(0x1)
unshare(0x2c060000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
setrlimit(0x5, 0x0)
syz_open_dev$ttys(0xc, 0x2, 0x0)
r5 = syz_open_dev$ptys(0xc, 0x3, 0x0)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000180)=0x3)
openat$full(0xffffffffffffff9c, 0x0, 0x1, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$kcm(0x2b, 0x1, 0x0)
r6 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi0\x00', 0x2180, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, &(0x7f0000000300)={'pcmmio\x00', [0x2f00, 0x4, 0xd097, 0x0, 0x3, 0xff7ffffe, 0x20000004, 0x6, 0xffe, 0x9, 0xc, 0x1, 0x7ffd, 0x3ff, 0x10001, 0x8, 0x5, 0x7, 0x10000, 0x7, 0x10000, 0x9, 0x800, 0x100101, 0x2, 0xffffffff, 0x7, 0x3, 0x4, 0x4, 0x70f]})
close(0x3)

4.821502786s ago: executing program 1 (id=260):
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)

4.480704696s ago: executing program 3 (id=261):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x0, 0x442f, &(0x7f0000016540)="$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")
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f0000000340)=ANY=[], 0x700, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, 0x0, 0x0)

2.810181372s ago: executing program 1 (id=262):
socket(0xa, 0x3, 0x3a)
socket$inet6(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$read(0xb, r3, 0x0, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffeb1, &(0x7f0000000240)=0x6)
r4 = syz_open_dev$sndctrl(0x0, 0x0, 0x8801)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)=ANY=[@ANYBLOB="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"], 0x33}, 0x1, 0x0, 0x0, 0xc13d988464ab0c39}, 0x20040041)
r5 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r5, 0x107, 0x11, &(0x7f00000000c0)=0x40, 0x4)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b00)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f0000001340)={{0x0, 0x0, 0x0, 0x8, 'syz0\x00'}, 0x3, 0x0, 0x8, 0x0, 0x2, 0x0, 'syz1\x00', &(0x7f0000000180)=['\x00', '-[\'\x00'], 0x5})
write$binfmt_format(0xffffffffffffffff, &(0x7f0000000280)='-1\x00', 0x3)
openat$nvram(0xffffffffffffff9c, 0x0, 0x400, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xa, 0x3, 0x4, 0x8, 0x0, 0x1}, 0x50)
mkdirat(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', 0x48)
mount$afs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000002c0), 0x0, 0x0)
umount2(&(0x7f0000000340)='./file0/file0\x00', 0xe)

1.658791624s ago: executing program 0 (id=263):
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
socket$inet(0x2, 0x5, 0x809)
r1 = socket$tipc(0x1e, 0x5, 0x0)
bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0)
bind$tipc(r1, 0x0, 0x0)
r2 = socket$kcm(0x2d, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, 0x0, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000340)={r2})

1.522086478s ago: executing program 1 (id=264):
syz_mount_image$ext4(&(0x7f00000002c0)='ext2\x00', &(0x7f0000000040)='./bus\x00', 0x200000, &(0x7f00000001c0), 0x1, 0x460, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x88040, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)

1.285503344s ago: executing program 2 (id=265):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0x8a4, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r0, 0x0, 0x0, 0x720, 0x0, 0x0)

214.760034ms ago: executing program 0 (id=266):
syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00fc403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a736464bb62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1ca202650fe2628e15341e45dce6c0de2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b340b5c73055fc6e601843a59f3cdeb36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3"], 0x1, 0x242, &(0x7f0000000800)="$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")
connect$inet(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
ioctl$CEC_ADAP_S_LOG_ADDRS(0xffffffffffffffff, 0xc05c6104, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102392, 0x18ff8)
rmdir(&(0x7f0000000380)='./file0/../file0\x00')

3.38159ms ago: executing program 1 (id=267):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='rdma.current\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pipe(&(0x7f0000000440))
r2 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r2, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=268):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0x4c, 0x0, &(0x7f00000007c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x1000, 0x1}, @flat=@weak_binder={0x77622a85, 0x1100, 0x80000000003}, @flat=@handle={0x73682a85, 0x1000, 0x2}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

no interfaces have a carrier
[   49.379538][ T3934] 8021q: adding VLAN 0 to HW filter on device bond0
[   49.407138][ T3934] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK

syzkaller
Warning: Permanently added '10.128.1.143' (ED25519) to the list of known hosts.
syzkaller login: [   71.994655][ T4257] cgroup: Unknown subsys name 'net'
[   72.123366][ T4257] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   73.645760][ T4257] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k FS
[   75.105497][ T4281] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.112440][ T4280] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.115170][ T4281] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   75.123815][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.136264][ T4283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.136587][ T4285] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.144361][ T4283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   75.152068][ T4285] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   75.159089][ T4283] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.168092][ T4285] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.173712][ T4283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   75.185999][ T4285] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   75.193404][ T4285] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   75.201256][ T4285] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   75.207588][ T4283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   75.209065][ T4285] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.223336][ T4283] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   75.223825][ T4285] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   75.237671][ T4283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.239522][ T4285] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   75.245425][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   75.254711][ T4285] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   75.267102][ T4285] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   75.274580][ T4285] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   75.312055][   T48] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   75.343108][ T4278] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.346995][ T4280] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   75.353708][ T4278] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   75.364623][ T4278] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.367912][ T4280] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   75.747087][ T4282] chnl_net:caif_netlink_parms(): no params data found
[   75.816277][ T4270] chnl_net:caif_netlink_parms(): no params data found
[   75.914143][ T4272] chnl_net:caif_netlink_parms(): no params data found
[   75.992456][ T4269] chnl_net:caif_netlink_parms(): no params data found
[   76.013022][ T4271] chnl_net:caif_netlink_parms(): no params data found
[   76.040031][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.048073][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.056357][ T4282] device bridge_slave_0 entered promiscuous mode
[   76.071075][ T4270] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.078903][ T4270] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.087429][ T4270] device bridge_slave_0 entered promiscuous mode
[   76.100914][ T4270] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.112353][ T4270] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.120474][ T4270] device bridge_slave_1 entered promiscuous mode
[   76.149163][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.156331][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.164641][ T4282] device bridge_slave_1 entered promiscuous mode
[   76.233110][ T4272] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.240594][ T4272] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.249492][ T4272] device bridge_slave_0 entered promiscuous mode
[   76.271348][ T4270] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.287989][ T4272] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.295114][ T4272] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.303704][ T4272] device bridge_slave_1 entered promiscuous mode
[   76.322704][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.334412][ T4270] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.373916][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.399184][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.406389][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.415766][ T4271] device bridge_slave_0 entered promiscuous mode
[   76.423488][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.432815][ T4269] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.441186][ T4269] device bridge_slave_0 entered promiscuous mode
[   76.456232][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.463560][ T4269] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.471925][ T4269] device bridge_slave_1 entered promiscuous mode
[   76.501961][ T4272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.515511][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.522907][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.532167][ T4271] device bridge_slave_1 entered promiscuous mode
[   76.549380][ T4270] team0: Port device team_slave_0 added
[   76.558606][ T4269] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.569727][ T4272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.591578][ T4282] team0: Port device team_slave_0 added
[   76.599628][ T4282] team0: Port device team_slave_1 added
[   76.613138][ T4270] team0: Port device team_slave_1 added
[   76.624884][ T4269] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.686968][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.700644][ T4272] team0: Port device team_slave_0 added
[   76.707400][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.714384][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.740695][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.770781][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.781455][ T4272] team0: Port device team_slave_1 added
[   76.795268][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.804656][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.831612][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.843694][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.850807][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.876984][ T4270] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.891006][ T4269] team0: Port device team_slave_0 added
[   76.923187][ T4270] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.930293][ T4270] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.956567][ T4270] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.969716][ T4269] team0: Port device team_slave_1 added
[   76.987195][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.994195][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.020455][ T4272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.055184][ T4271] team0: Port device team_slave_0 added
[   77.078823][ T4272] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.086102][ T4272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.112526][ T4272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.137258][ T4271] team0: Port device team_slave_1 added
[   77.155819][ T4282] device hsr_slave_0 entered promiscuous mode
[   77.163226][ T4282] device hsr_slave_1 entered promiscuous mode
[   77.171821][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.179403][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.205681][ T4269] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.218605][ T4269] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.225593][ T4269] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.252249][ T4269] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.276898][ T4270] device hsr_slave_0 entered promiscuous mode
[   77.284853][ T4270] device hsr_slave_1 entered promiscuous mode
[   77.291793][ T4270] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.299917][ T4270] Cannot create hsr debugfs directory
[   77.307284][ T4280] Bluetooth: hci2: command 0x0409 tx timeout
[   77.374038][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   77.381408][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.388392][ T4280] Bluetooth: hci1: command 0x0409 tx timeout
[   77.408877][ T4278] Bluetooth: hci3: command 0x0409 tx timeout
[   77.414129][ T4281] Bluetooth: hci0: command 0x0409 tx timeout
[   77.427520][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   77.444364][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   77.451606][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.477840][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   77.488571][ T4280] Bluetooth: hci4: command 0x0409 tx timeout
[   77.504658][ T4272] device hsr_slave_0 entered promiscuous mode
[   77.511867][ T4272] device hsr_slave_1 entered promiscuous mode
[   77.518836][ T4272] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.526490][ T4272] Cannot create hsr debugfs directory
[   77.553284][ T4269] device hsr_slave_0 entered promiscuous mode
[   77.560120][ T4269] device hsr_slave_1 entered promiscuous mode
[   77.566924][ T4269] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.574720][ T4269] Cannot create hsr debugfs directory
[   77.688801][ T4271] device hsr_slave_0 entered promiscuous mode
[   77.695765][ T4271] device hsr_slave_1 entered promiscuous mode
[   77.702825][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   77.710641][ T4271] Cannot create hsr debugfs directory
[   78.003916][ T4282] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   78.019279][ T4282] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   78.033805][ T4282] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   78.044581][ T4282] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   78.079517][ T4270] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   78.091688][ T4270] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   78.114458][ T4270] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   78.125302][ T4270] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   78.179104][ T4272] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   78.214496][ T4272] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   78.240246][ T4272] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   78.257771][ T4272] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   78.277314][ T4271] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   78.292024][ T4271] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   78.323476][ T4271] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   78.333343][ T4271] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   78.420615][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.469172][ T4269] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   78.478610][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.492149][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.504693][ T4282] 8021q: adding VLAN 0 to HW filter on device team0
[   78.522298][ T4269] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   78.534765][ T4269] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   78.545013][ T4269] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   78.560719][ T4270] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.571584][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.580734][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.591583][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.598962][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.638155][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.647595][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.656211][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.684445][ T4270] 8021q: adding VLAN 0 to HW filter on device team0
[   78.705697][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.716245][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.726395][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.733569][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.755422][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.768538][ T4272] 8021q: adding VLAN 0 to HW filter on device bond0
[   78.775899][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   78.787553][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   78.796226][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[   78.803393][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[   78.812709][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.821874][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   78.858118][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.868397][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   78.879890][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   78.889226][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   78.898410][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   78.907140][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   78.914234][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   78.922162][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   78.932192][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.940637][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.948662][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   78.959024][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   78.968162][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   78.976118][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   78.998407][ T4272] 8021q: adding VLAN 0 to HW filter on device team0
[   79.007468][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.022900][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.036351][ T4271] 8021q: adding VLAN 0 to HW filter on device team0
[   79.060327][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.071316][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.080919][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.090887][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.099832][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.107056][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.115420][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.124555][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.133609][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.141854][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.171435][ T4282] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.187495][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.199982][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.210083][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.218802][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.225894][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.235252][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.244669][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   79.253856][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   79.262606][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.269777][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.278722][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   79.287691][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   79.296121][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.303286][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.313036][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.322589][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.331504][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   79.364170][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.384840][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   79.392994][ T4280] Bluetooth: hci2: command 0x041b tx timeout
[   79.413891][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   79.423945][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.434106][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.469226][ T4281] Bluetooth: hci1: command 0x041b tx timeout
[   79.469405][ T4280] Bluetooth: hci0: command 0x041b tx timeout
[   79.475366][ T4281] Bluetooth: hci3: command 0x041b tx timeout
[   79.501936][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.516313][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.528386][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.543136][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.551101][ T4281] Bluetooth: hci4: command 0x041b tx timeout
[   79.565086][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.575590][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.585293][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.608638][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.617459][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.625912][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.638055][ T4270] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.646329][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.665879][ T4272] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.681138][ T4272] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   79.693658][ T4269] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.708247][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   79.720478][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   79.729611][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.740027][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   79.749778][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   79.761564][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   79.793788][ T4269] 8021q: adding VLAN 0 to HW filter on device team0
[   79.821415][ T4271] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   79.833017][ T4271] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   79.886597][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   79.908320][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   79.931307][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   79.964700][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   79.989306][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.012935][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   80.038065][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   80.056814][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.092228][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   80.118460][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   80.139687][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.146893][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   80.180955][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   80.198902][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.217180][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.224720][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   80.257467][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   80.276871][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.284109][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   80.342933][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.372945][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   80.393700][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   80.437581][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   80.467915][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   80.520672][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   80.557392][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   80.595126][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   80.616982][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   80.631682][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   80.647276][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.667683][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.680527][ T4269] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   80.705862][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   80.730201][ T4272] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.750735][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   80.759954][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   80.796138][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.817134][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.835602][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.866684][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.880595][ T4270] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.893024][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   80.922293][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.933960][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   80.965194][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   80.988701][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.018069][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.027197][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.108308][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.123121][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.144218][ T4272] device veth0_vlan entered promiscuous mode
[   81.172989][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.184156][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.192612][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.203542][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.212965][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.222266][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.233091][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.241928][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.250461][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.259454][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.279685][ T4270] device veth0_vlan entered promiscuous mode
[   81.288920][ T4271] device veth0_vlan entered promiscuous mode
[   81.329539][ T4271] device veth1_vlan entered promiscuous mode
[   81.354925][ T4270] device veth1_vlan entered promiscuous mode
[   81.377909][ T4272] device veth1_vlan entered promiscuous mode
[   81.440753][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.466752][ T4278] Bluetooth: hci2: command 0x040f tx timeout
[   81.477481][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.487585][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.503709][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.513168][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   81.528196][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   81.546951][ T4278] Bluetooth: hci3: command 0x040f tx timeout
[   81.550145][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   81.554875][ T4281] Bluetooth: hci0: command 0x040f tx timeout
[   81.563086][ T4280] Bluetooth: hci1: command 0x040f tx timeout
[   81.579826][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   81.626665][ T4281] Bluetooth: hci4: command 0x040f tx timeout
[   81.638416][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.648771][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.658342][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   81.665786][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   81.677067][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.685666][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.699260][ T4270] device veth0_macvtap entered promiscuous mode
[   81.712323][ T4269] 8021q: adding VLAN 0 to HW filter on device batadv0
[   81.723199][ T4271] device veth0_macvtap entered promiscuous mode
[   81.733264][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.742085][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.750736][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   81.760849][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   81.777829][ T4272] device veth0_macvtap entered promiscuous mode
[   81.786305][ T4282] device veth0_vlan entered promiscuous mode
[   81.796861][ T4270] device veth1_macvtap entered promiscuous mode
[   81.810226][ T4271] device veth1_macvtap entered promiscuous mode
[   81.817814][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.826351][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.835788][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   81.844379][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   81.853722][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   81.862660][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   81.872026][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   81.883289][ T4272] device veth1_macvtap entered promiscuous mode
[   81.928548][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_0
[   81.940340][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   81.949599][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   81.959628][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   81.972942][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   81.984551][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   81.999425][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.010956][ T4282] device veth1_vlan entered promiscuous mode
[   82.022398][ T4270] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.034946][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.044336][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.055949][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.064754][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.076614][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.087417][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.101791][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.128799][ T4270] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.149682][ T4270] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.162224][ T4270] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.171309][ T4270] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.189840][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.198890][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.212137][ T4271] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.224799][ T4271] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.233754][ T4271] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.243017][ T4271] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.257849][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.273489][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.283681][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.294358][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.309248][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.334649][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.343396][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.352856][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   82.361986][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   82.385122][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.395945][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.406330][ T4272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   82.417657][ T4272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.431423][ T4272] batman_adv: batadv0: Interface activated: batadv_slave_1
[   82.459930][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   82.474878][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   82.489296][ T4272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   82.499307][ T4272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   82.510094][ T4272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   82.519144][ T4272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   82.547840][ T4282] device veth0_macvtap entered promiscuous mode
[   82.556825][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   82.565564][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   82.607578][ T4282] device veth1_macvtap entered promiscuous mode
[   82.641824][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   82.651087][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   82.659350][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   82.669915][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   82.684913][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   82.697773][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   82.726170][ T4269] device veth0_vlan entered promiscuous mode
[   82.788563][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.812423][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.822870][ T4328] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   82.848947][ T4328] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   82.864750][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.878207][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.888286][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.899003][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.910054][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   82.920767][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   82.932747][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0
[   82.940594][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.952642][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   82.960954][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   82.970159][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   82.984274][ T4269] device veth1_vlan entered promiscuous mode
[   83.010483][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.021492][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.034576][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.042637][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.053463][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.065899][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.076547][ T4282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.087630][ T4282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.101140][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.121026][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.131497][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   83.141124][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   83.174301][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.181899][ T4282] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.197398][ T4282] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.206259][ T4282] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.207385][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.225493][ T4282] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.251934][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   83.304256][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   83.313426][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   83.325293][ T4269] device veth0_macvtap entered promiscuous mode
[   83.380514][ T4269] device veth1_macvtap entered promiscuous mode
[   83.388717][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.417058][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.434873][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.447026][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   83.461865][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   83.466586][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.488226][ T4357] loop1: detected capacity change from 0 to 64
[   83.507122][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.525904][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   83.547304][ T4281] Bluetooth: hci2: command 0x0419 tx timeout
[   83.627044][ T4281] Bluetooth: hci1: command 0x0419 tx timeout
[   83.633125][ T4281] Bluetooth: hci0: command 0x0419 tx timeout
[   83.639648][ T4278] Bluetooth: hci3: command 0x0419 tx timeout
[   83.663111][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.691883][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.706751][ T4281] Bluetooth: hci4: command 0x0419 tx timeout
[   83.715515][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.718907][ T4359] loop0: detected capacity change from 0 to 164
[   83.756190][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.766626][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.777878][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.788802][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   83.799381][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.809015][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.819747][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   83.837967][   T32] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   83.894382][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   83.947638][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   83.993632][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.023979][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.025081][ T4362] loop1: detected capacity change from 0 to 256
[   84.056964][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.076545][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.094397][ T4269] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   84.133043][ T4269] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   84.145541][ T4269] batman_adv: batadv0: Interface activated: batadv_slave_1
[   84.149940][ T4362] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   84.174336][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   84.192721][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.202457][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.211365][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   84.221574][ T4318] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.240231][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   84.260421][ T4269] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   84.277887][ T4362] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[   84.296800][ T4362] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[   84.304518][ T4362] UDF-fs: Scanning with blocksize 512 failed
[   84.316602][ T4269] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   84.332743][ T4269] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   84.351887][ T4362] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   84.399459][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.412725][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.434122][ T4362] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   84.460319][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.565256][ T4318] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.590371][ T4318] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.665062][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   84.704470][ T4318] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   84.737798][ T4318] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   84.745426][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   84.805110][ T4370] loop1: detected capacity change from 0 to 128
[   84.891610][ T4373] loop0: detected capacity change from 0 to 16
[   84.917632][ T4373] =======================================================
[   84.917632][ T4373] WARNING: The mand mount option has been deprecated and
[   84.917632][ T4373]          and is ignored by this kernel. Remove the mand
[   84.917632][ T4373]          option from the mount to silence this warning.
[   84.917632][ T4373] =======================================================
[   84.964776][ T4370] syz.1.8: attempt to access beyond end of device
[   84.964776][ T4370] loop1: rw=2049, sector=138, nr_sectors = 112 limit=128
[   85.063591][ T4373] erofs: (device loop0): mounted with root inode @ nid 36.
[   85.120242][ T4364] loop3: detected capacity change from 0 to 32768
[   85.154690][ T4364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.4 (4364)
[   85.241737][ T4364] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   85.272091][ T4378] loop2: detected capacity change from 0 to 4096
[   85.284291][ T4364] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[   85.338102][ T4378] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[   85.350847][ T4364] BTRFS info (device loop3): using free space tree
[   85.566855][ T4393] loop1: detected capacity change from 0 to 128
[   85.577790][ T4378] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[   85.777509][ T4406] syz.1.12: attempt to access beyond end of device
[   85.777509][ T4406] loop1: rw=1, sector=145, nr_sectors = 464 limit=128
[   85.792761][ T4364] BTRFS info (device loop3): enabling ssd optimizations
[   86.106388][ T4318] kworker/u4:5: attempt to access beyond end of device
[   86.106388][ T4318] loop1: rw=1, sector=609, nr_sectors = 432 limit=128
[   86.306079][ T4377] loop4: detected capacity change from 0 to 32768
[   86.423635][ T4411] capability: warning: `syz.2.13' uses 32-bit capabilities (legacy support in use)
[   86.594594][ T4377] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz.4.10 (4377)
[   86.674661][  T127] cfg80211: failed to load regulatory.db
[   87.220009][ T4377] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[   87.283977][ T4377] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[   87.639610][ T4377] BTRFS info (device loop4): using free space tree
[   88.184483][ T4377] BTRFS error (device loop4): open_ctree failed: -12
[   88.274804][ T4272] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   88.716583][ T4381] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by udevd (4381)
[   89.045010][ T4452] loop0: detected capacity change from 0 to 4096
[   89.203973][ T4461] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.438929][ T4452] syz.0.20 (4452) used greatest stack depth: 19728 bytes left
[   89.528368][ T4467] loop3: detected capacity change from 0 to 128
[   91.147462][ T4484] loop1: detected capacity change from 0 to 1024
[   91.309023][ T4484] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   91.796495][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   91.806518][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   91.816484][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   91.826482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   91.836481][    T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!!
[   91.846479][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   91.856484][    T0] NOHZ tick-stop error: local softirq work is pending, handler #8a!!!
[   91.866482][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.876481][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   91.886479][    T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!!
[   92.897420][ T4499] genirq: Flags mismatch irq 4. 00000000 (pcmmio) vs. 00000000 (ttyS0)
[   95.874287][ T4538] loop1: detected capacity change from 0 to 512
[   95.932504][ T4538] EXT4-fs: Ignoring removed oldalloc option
[   96.087614][ T4538] EXT4-fs (loop1): 1 truncate cleaned up
[   96.121689][ T4538] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   96.175084][ T4542] loop0: detected capacity change from 0 to 2048
[   99.441611][ T4542] EXT4-fs: error -4 creating inode table initialization thread
[   99.469697][ T4547] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(8)
[   99.476851][ T4547] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   99.486041][ T4547] vhci_hcd vhci_hcd.0: Device attached
[   99.540339][ T4553] vhci_hcd: connection closed
[   99.544331][ T4554] vhci_hcd: stop threads
[   99.787529][ T4542] EXT4-fs (loop0): mount failed
[   99.803546][ T4554] vhci_hcd: release socket
[   99.939619][ T4554] vhci_hcd: disconnect device
[  100.121776][ T4560] loop2: detected capacity change from 0 to 1024
[  100.134126][ T4560] hfsplus: invalid uid specified
[  100.139413][ T4560] hfsplus: unable to parse mount options
[  100.248355][ T4537] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  100.352651][ T4537] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  100.378938][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  100.597281][ T4567] loop0: detected capacity change from 0 to 2048
[  100.661838][ T4567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  104.859698][ T4585] loop3: detected capacity change from 0 to 32768
[  105.034875][ T4585] XFS (loop3): Mounting V5 Filesystem
[  105.133724][ T4585] XFS (loop3): Ending clean mount
[  105.150244][ T4585] XFS (loop3): Quotacheck needed: Please wait.
[  105.241973][ T4585] XFS (loop3): Quotacheck: Done.
[  105.648608][   T26] audit: type=1800 audit(1777402476.347:2): pid=4607 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.59" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0
[  106.084358][ T4272] XFS (loop3): Unmounting Filesystem
[  106.114988][ T4609] loop0: detected capacity change from 0 to 512
[  106.167473][ T4609] EXT4-fs: Ignoring removed oldalloc option
[  106.393248][ T4609] EXT4-fs (loop0): 1 truncate cleaned up
[  106.766583][ T4609] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  107.723953][ T4622] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  107.730575][ T4622] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  107.744070][ T4622] vhci_hcd vhci_hcd.0: Device attached
[  108.846608][ T4312] usb 33-1: new low-speed USB device number 2 using vhci_hcd
[  108.901495][ T4623] vhci_hcd: connection reset by peer
[  108.909163][ T4557] vhci_hcd: stop threads
[  108.913492][ T4557] vhci_hcd: release socket
[  108.924280][ T4557] vhci_hcd: disconnect device
[  109.175640][ T4640] loop4: detected capacity change from 0 to 1024
[  109.231689][ T4640] EXT4-fs: Ignoring removed bh option
[  109.342986][ T4640] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  109.508220][ T4640] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2800: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  110.955529][ T4270] EXT4-fs (loop0): unmounting filesystem.
[  111.543193][ T4655] loop3: detected capacity change from 0 to 32768
[  111.833186][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  112.083673][ T4655] XFS (loop3): Mounting V5 Filesystem
[  112.275410][ T4655] XFS (loop3): Ending clean mount
[  112.380853][ T4677] loop1: detected capacity change from 0 to 2048
[  112.643373][ T4677] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  112.715075][ T4655] XFS (loop3): Quotacheck needed: Please wait.
[  113.273762][ T4678] loop4: detected capacity change from 0 to 2048
[  113.946716][ T4312] vhci_hcd: vhci_device speed not set
[  114.480403][ T4678] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  114.598757][ T4655] XFS (loop3): Quotacheck: Done.
[  114.635790][ T4272] XFS (loop3): Unmounting Filesystem
[  115.514526][ T4696] loop4: detected capacity change from 0 to 512
[  115.579224][ T4696] EXT4-fs: Ignoring removed oldalloc option
[  115.729346][ T4696] EXT4-fs (loop4): 1 truncate cleaned up
[  115.762840][ T4696] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  117.744069][ T4702] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  117.750897][ T4702] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  117.758689][ T4702] vhci_hcd vhci_hcd.0: Device attached
[  117.968372][ T4703] vhci_hcd: connection closed
[  117.970127][ T4318] vhci_hcd: stop threads
[  118.045270][ T4318] vhci_hcd: release socket
[  118.056810][ T4458] usb 41-1: new low-speed USB device number 2 using vhci_hcd
[  118.134289][ T4318] vhci_hcd: disconnect device
[  118.560683][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  118.962240][ T4711] device syzkaller0 entered promiscuous mode
[  119.198751][ T4715] loop1: detected capacity change from 0 to 32768
[  119.352586][ T4715] XFS (loop1): Mounting V5 Filesystem
[  119.420880][ T4715] XFS (loop1): Ending clean mount
[  119.432938][ T4715] XFS (loop1): Quotacheck needed: Please wait.
[  119.486278][ T4715] XFS (loop1): Quotacheck: Done.
[  119.739659][ T4731] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  119.779491][   T26] audit: type=1800 audit(1777402490.507:3): pid=4732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.92" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop1" ino=4429 res=0 errno=0
[  119.821175][    C0] vkms_vblank_simulate: vblank timer overrun
[  120.174584][ T4271] XFS (loop1): Unmounting Filesystem
[  122.438661][ T4753] loop2: detected capacity change from 0 to 512
[  122.867310][ T4753] EXT4-fs: Ignoring removed oldalloc option
[  123.009069][ T4753] EXT4-fs (loop2): 1 truncate cleaned up
[  123.026598][ T4753] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  123.226106][ T4760] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(8)
[  123.232720][ T4760] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  123.240721][ T4760] vhci_hcd vhci_hcd.0: Device attached
[  123.248236][ T4458] vhci_hcd: vhci_device speed not set
[  123.394210][ T4761] vhci_hcd: connection closed
[  123.396181][ T4498] vhci_hcd: stop threads
[  123.505515][ T4498] vhci_hcd: release socket
[  123.546660][ T4445] usb 37-1: new low-speed USB device number 2 using vhci_hcd
[  123.641344][ T4498] vhci_hcd: disconnect device
[  124.235523][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  124.394403][ T4764] loop0: detected capacity change from 0 to 32768
[  124.435874][ T4764] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.102 (4764)
[  124.472413][ T4776] loop3: detected capacity change from 0 to 256
[  124.550450][ T4764] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  124.649230][ T4779] loop4: detected capacity change from 0 to 256
[  124.734795][ T4776] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3ec, utbl_chksum : 0xe619d30d)
[  124.762675][ T4779] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d)
[  125.512145][ T4764] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  125.602296][ T4764] BTRFS info (device loop0): turning on sync discard
[  125.682525][ T4764] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  126.008356][ T4783] loop2: detected capacity change from 0 to 32768
[  126.026453][    C0] sched: RT throttling activated
[  126.059997][ T4764] BTRFS info (device loop0): use zstd compression, level 3
[  126.084095][ T4764] BTRFS info (device loop0): turning on async discard
[  126.164915][ T4764] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  126.238085][ T4783] XFS (loop2): Mounting V5 Filesystem
[  126.305250][ T4764] BTRFS info (device loop0): trying to use backup root at mount time
[  126.402349][ T4764] BTRFS info (device loop0): enabling auto defrag
[  126.466799][ T4764] BTRFS info (device loop0): using free space tree
[  126.634247][ T4783] XFS (loop2): Ending clean mount
[  126.644462][ T4783] XFS (loop2): Quotacheck needed: Please wait.
[  126.759785][ T4764] BTRFS error (device loop0): open_ctree failed: -12
[  126.802375][ T4793] loop1: detected capacity change from 0 to 4096
[  126.948406][ T4783] XFS (loop2): Quotacheck: Done.
[  127.213277][   T26] audit: type=1800 audit(1777402497.947:4): pid=4783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.108" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=4429 res=0 errno=0
[  127.255576][    C0] vkms_vblank_simulate: vblank timer overrun
[  127.729046][ T4269] XFS (loop2): Unmounting Filesystem
[  128.746748][ T4445] vhci_hcd: vhci_device speed not set
[  129.075724][ T4830] loop1: detected capacity change from 0 to 8192
[  129.228379][ T4839] loop2: detected capacity change from 0 to 2048
[  129.252381][ T4839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.293166][ T4839] UDF-fs: error (device loop2): udf_read_inode: (ino 1410) failed !bh
[  129.449633][ T4830] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  129.728380][ T4830] REISERFS (device loop1): found reiserfs format "3.5" with non-standard journal
[  129.825265][ T4838] loop0: detected capacity change from 0 to 1024
[  129.900755][ T4830] REISERFS (device loop1): using ordered data mode
[  129.958151][ T4830] reiserfs: using flush barriers
[  129.966076][ T4830] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  129.983990][ T4830] REISERFS (device loop1): checking transaction log (loop1)
[  129.996328][ T4830] REISERFS (device loop1): Using r5 hash to sort names
[  130.008470][ T4830] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  130.016966][ T4838] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  130.066018][ T4838] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945)
[  130.088396][ T4838] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  130.099476][ T4838] EXT4-fs (loop0): Can't support bigalloc feature without extents feature
[  130.099476][ T4838] 
[  130.110679][ T4838] EXT4-fs (loop0): Skipping orphan cleanup due to unknown ROCOMPAT features
[  130.119735][ T4838] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  130.853483][ T4848] loop2: detected capacity change from 0 to 164
[  131.529096][ T4270] EXT4-fs (loop0): unmounting filesystem.
[  132.773090][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  132.786739][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  133.165521][ T4860] loop1: detected capacity change from 0 to 2048
[  133.188319][ T4860] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  133.221687][ T4860] UDF-fs: error (device loop1): udf_read_inode: (ino 1410) failed !bh
[  133.395873][ T4861] loop0: detected capacity change from 0 to 16
[  133.403370][ T4861] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  135.726713][ T4883] loop4: detected capacity change from 0 to 1024
[  135.966489][ T4883] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  136.472306][ T4883] EXT4-fs error (device loop4): ext4_get_journal_inode:5762: inode #32: comm syz.4.131: iget: special inode unallocated
[  136.491826][ T4883] EXT4-fs (loop4): no journal found
[  136.497364][ T4883] EXT4-fs (loop4): can't get journal size
[  136.570133][ T4883] EXT4-fs (loop4): filesystem is read-only
[  136.582806][ T4883] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  136.609749][ T4883] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.131: bad inode number: 12
[  136.839598][ T4888] EXT4-fs error (device loop4): ext4_lookup:1850: inode #2: comm syz.4.131: bad inode number: 12
[  137.559564][ T4896] loop3: detected capacity change from 0 to 64
[  138.401107][ T4892] loop2: detected capacity change from 0 to 4096
[  138.423670][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  139.707031][ T4909] loop1: detected capacity change from 0 to 2048
[  139.744457][ T4909] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.782381][ T4909] UDF-fs: error (device loop1): udf_read_inode: (ino 1410) failed !bh
[  140.444891][ T4901] loop4: detected capacity change from 0 to 4096
[  140.511099][ T4269] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22.
[  140.542120][ T4269] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  140.554376][ T4901] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512)
[  140.610431][ T4912] loop0: detected capacity change from 0 to 16
[  140.643728][ T4912] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  140.737593][ T4901] ntfs3: loop4: ntfs_sync_inode r=1e failed, -22.
[  140.744603][ T4901] ntfs3: loop4: Mark volume as dirty due to NTFS errors
[  142.231603][    T9] ntfs3: loop4: ntfs3_write_inode r=1e failed, -22.
[  142.282863][ T4282] ntfs3: loop4: ntfs_evict_inode r=1e failed, -22.
[  145.308259][ T4960] loop3: detected capacity change from 0 to 2048
[  145.331936][ T4960] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  145.361468][ T4960] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh
[  145.385645][ T4957] loop2: detected capacity change from 0 to 8192
[  145.662139][ T4957] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  145.901586][ T4957] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  145.996789][ T4957] REISERFS (device loop2): using ordered data mode
[  146.003385][ T4957] reiserfs: using flush barriers
[  146.009883][ T4957] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  146.026885][ T4957] REISERFS (device loop2): checking transaction log (loop2)
[  146.050198][ T4957] REISERFS (device loop2): Using r5 hash to sort names
[  146.064028][ T4957] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  146.086692][   T26] audit: type=1804 audit(1777402516.827:5): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.151" name="/newroot/29/file1/file1" dev="loop2" ino=2 res=1 errno=0
[  146.108734][ T4957] REISERFS warning: reiserfs-5093 is_leaf: item entry count seems wrong *3.5*[2 3 0(1) DIR], item_len 35, item_location 3633, free_space(entry_count) 2
[  146.129001][ T4957] REISERFS error (device loop2): vs-5150 search_by_key: invalid format found in block 532. Fsck?
[  146.157377][ T4957] REISERFS (device loop2): Remounting filesystem read-only
[  147.443830][ T4970] loop3: detected capacity change from 0 to 16
[  147.451061][ T4970] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  148.654322][ T4974] loop0: detected capacity change from 0 to 2048
[  148.678178][ T4974] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.714284][ T4974] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh
[  150.966793][ T4997] loop0: detected capacity change from 0 to 2048
[  150.989165][ T4997] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.029796][ T4997] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh
[  151.288615][ T4992] loop4: detected capacity change from 0 to 2048
[  151.699248][ T4992]  loop4: unable to read partition table
[  151.705534][ T4992] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  151.858591][ T3639] Alternate GPT is invalid, using primary GPT.
[  151.864955][ T3639]  loop4: p1 p2 p3
[  151.963901][ T5001] device bridge0 entered promiscuous mode
[  152.788203][ T4790] udevd[4790]: inotify_add_watch(7, /dev/loop4p3, 10) failed: No such file or directory
[  152.789271][ T4381] udevd[4381]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory
[  152.808778][ T4360] udevd[4360]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  152.959930][ T5009] loop1: detected capacity change from 0 to 16
[  152.973367][ T5009] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  153.654689][ T5019] loop4: detected capacity change from 0 to 2048
[  154.998624][ T5019] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.042285][ T5019] UDF-fs: error (device loop4): udf_read_inode: (ino 1410) failed !bh
[  157.339720][ T5045] loop0: detected capacity change from 0 to 2048
[  157.452192][ T5045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  157.490183][ T5045] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh
[  158.562236][ T5054] loop0: detected capacity change from 0 to 128
[  159.840460][ T5064] loop1: detected capacity change from 0 to 16
[  159.913792][ T5064] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  159.987675][ T5067] loop2: detected capacity change from 0 to 512
[  160.001133][ T5067] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  160.226833][ T5067] EXT4-fs error (device loop2): ext4_orphan_get:1405: inode #15: comm syz.2.186: casefold flag without casefold feature
[  160.283503][ T5067] EXT4-fs error (device loop2): ext4_orphan_get:1410: comm syz.2.186: couldn't read orphan inode 15 (err -117)
[  160.364853][ T5067] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  160.445015][ T5072] loop4: detected capacity change from 0 to 128
[  162.445740][ T5070] EXT4-fs error (device loop2): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  162.510498][ T4269] EXT4-fs (loop2): unmounting filesystem.
[  162.780617][ T5087] loop4: detected capacity change from 0 to 128
[  164.045064][ T5086] loop2: detected capacity change from 0 to 32768
[  164.080075][ T5086] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.190 (5086)
[  164.137446][ T5086] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  164.164013][ T5086] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  164.187458][ T5086] BTRFS error (device loop2): support for check_integrity* not compiled in!
[  164.218122][ T5086] BTRFS error (device loop2): open_ctree failed: -22
[  164.525215][ T5105] loop3: detected capacity change from 0 to 16
[  164.601405][ T4352] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by udevd (4352)
[  164.667762][ T5105] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  164.749438][ T5109] loop4: detected capacity change from 0 to 512
[  164.806133][ T5109] EXT4-fs: inline encryption not supported
[  164.816700][ T5109] EXT4-fs: Ignoring removed oldalloc option
[  164.829924][ T5111] loop1: detected capacity change from 0 to 512
[  165.555991][ T5111] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  165.673940][ T5109] EXT4-fs (loop4): 1 truncate cleaned up
[  165.679948][ T5111] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.201: casefold flag without casefold feature
[  165.701214][ T5109] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  165.755652][ T5111] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.201: couldn't read orphan inode 15 (err -117)
[  165.804317][ T5111] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  165.918563][ T5109] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.202: invalid indirect mapped block 234881024 (level 0)
[  167.511262][ T5118] EXT4-fs error (device loop1): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  168.557430][ T4271] EXT4-fs (loop1): unmounting filesystem.
[  168.617373][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  169.406246][ T5139] loop0: detected capacity change from 0 to 4096
[  169.430487][ T5139] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512)
[  169.771440][ T5144] loop4: detected capacity change from 0 to 2048
[  169.795860][ T5144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  169.840860][ T5144] UDF-fs: error (device loop4): udf_read_inode: (ino 1410) failed !bh
[  171.506107][ T5147] loop1: detected capacity change from 0 to 8192
[  174.133313][ T5173] netlink: 16 bytes leftover after parsing attributes in process `syz.2.219'.
[  174.732454][ T5187] loop0: detected capacity change from 0 to 2048
[  174.753984][ T5187] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  174.787939][ T5187] UDF-fs: error (device loop0): udf_read_inode: (ino 1410) failed !bh
[  175.909633][ T5197] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  176.106642][ T5202] loop3: detected capacity change from 0 to 2048
[  176.138468][ T5202] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  176.196169][ T5202] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh
[  176.686659][ T4450] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  176.726381][    C0] raw-gadget.0 gadget.4: ignoring, device is not running
[  176.986545][ T4450] usb 5-1: device descriptor read/64, error -32
[  177.006356][ T5207] loop1: detected capacity change from 0 to 16
[  177.048572][ T5207] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  177.459034][ T4450] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  177.904515][ T4450] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  177.954992][ T4450] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.977194][ T4450] usb 5-1: Product: syz
[  177.981763][ T4450] usb 5-1: Manufacturer: syz
[  178.007835][ T4450] usb 5-1: SerialNumber: syz
[  178.112172][ T5194] loop0: detected capacity change from 0 to 32768
[  178.215529][ T5194] (syz.0.226,5194,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  178.230721][ T4450] usb 5-1: config 0 descriptor??
[  178.252478][ T4450] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  178.325765][ T5194] (syz.0.226,5194,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  178.439865][ T5201] loop2: detected capacity change from 0 to 32768
[  178.469273][ T5201] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz.2.230 (5201)
[  178.490304][ T5201] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.517019][ T5201] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  178.525775][ T5201] BTRFS info (device loop2): using free space tree
[  178.526714][ T5194] JBD2: Ignoring recovery information on journal
[  178.661278][ T5194] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  178.680052][   T26] audit: type=1326 audit(1777402549.427:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  178.751393][ T5197] netlink: 'syz.4.227': attribute type 4 has an invalid length.
[  178.763215][   T26] audit: type=1326 audit(1777402549.457:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  178.806819][   T26] audit: type=1326 audit(1777402549.457:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  178.830218][   T26] audit: type=1326 audit(1777402549.457:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  178.852704][   T26] audit: type=1326 audit(1777402549.457:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  178.861944][ T5201] BTRFS info (device loop2): enabling ssd optimizations
[  178.879495][   T26] audit: type=1326 audit(1777402549.457:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  178.916323][   T26] audit: type=1326 audit(1777402549.457:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  179.058833][   T26] audit: type=1326 audit(1777402549.457:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  179.110776][   T26] audit: type=1326 audit(1777402549.457:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  179.216720][   T26] audit: type=1326 audit(1777402549.457:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5193 comm="syz.4.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  179.246322][ T5249] loop3: detected capacity change from 0 to 256
[  179.295484][ T4269] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  179.356616][ T5204] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.404207][ T5204] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.797447][ T4270] ocfs2: Unmounting device (7,0) on (node local)
[  180.123266][ T5260] loop3: detected capacity change from 0 to 2048
[  180.149222][ T5260] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  180.182721][ T5260] UDF-fs: error (device loop3): udf_read_inode: (ino 1410) failed !bh
[  181.390556][ T5267] loop3: detected capacity change from 0 to 512
[  181.476253][ T5267] EXT4-fs: Ignoring removed oldalloc option
[  181.585063][ T4442] usb 5-1: USB disconnect, device number 3
[  181.649416][ T5272] loop2: detected capacity change from 0 to 16
[  181.664262][ T5267] EXT4-fs (loop3): 1 truncate cleaned up
[  181.715140][ T5272] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  181.722703][ T5267] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  181.940256][ T5275] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  181.946902][ T5275] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  181.981031][ T5275] vhci_hcd vhci_hcd.0: Device attached
[  182.243579][ T5276] vhci_hcd: connection closed
[  182.244707][ T4529] vhci_hcd: stop threads
[  182.276703][ T4312] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[  182.366312][ T4529] vhci_hcd: release socket
[  182.455308][ T4529] vhci_hcd: disconnect device
[  183.888842][ T4272] EXT4-fs (loop3): unmounting filesystem.
[  184.004577][ T5292] loop4: detected capacity change from 0 to 1024
[  184.065052][ T5292] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  184.086093][ T5296] loop3: detected capacity change from 0 to 128
[  184.103959][ T5292] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945)
[  184.352537][ T5292] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  184.387757][ T5292] EXT4-fs (loop4): Can't support bigalloc feature without extents feature
[  184.387757][ T5292] 
[  184.461925][ T5300] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  185.237077][ T5292] EXT4-fs (loop4): Skipping orphan cleanup due to unknown ROCOMPAT features
[  185.246004][ T5292] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback.
[  185.533270][ T5306] loop1: detected capacity change from 0 to 512
[  185.549940][ T4281] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  185.560047][ T4281] CPU: 0 PID: 4281 Comm: kworker/u5:5 Not tainted syzkaller #0
[  185.567642][ T4281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  185.577713][ T4281] Workqueue: hci0 hci_rx_work
[  185.582522][ T4281] Call Trace:
[  185.585861][ T4281]  <TASK>
[  185.588834][ T4281]  dump_stack_lvl+0x188/0x24e
[  185.593566][ T4281]  ? show_regs_print_info+0x12/0x12
[  185.598790][ T4281]  ? load_image+0x400/0x400
[  185.603357][ T4281]  sysfs_create_dir_ns+0x26a/0x290
[  185.608535][ T4281]  ? sysfs_warn_dup+0xa0/0xa0
[  185.613345][ T4281]  ? do_raw_spin_unlock+0x11d/0x230
[  185.618585][ T4281]  kobject_add_internal+0x61c/0xcc0
[  185.623814][ T4281]  kobject_add+0x160/0x230
[  185.628258][ T4281]  ? kobject_init+0x1d0/0x1d0
[  185.633024][ T4281]  ? klist_children_get+0x50/0x50
[  185.638121][ T4281]  ? get_device_parent+0x121/0x3f0
[  185.643318][ T4281]  device_add+0x483/0xfb0
[  185.647690][ T4281]  ? kmem_cache_free+0xf7/0x290
[  185.652682][ T4281]  hci_conn_add_sysfs+0xd1/0x1e0
[  185.657689][ T4281]  le_conn_complete_evt+0x1062/0x1670
[  185.663226][ T4281]  ? hci_le_big_info_adv_report_evt+0x2f0/0x2f0
[  185.669708][ T4281]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  185.675427][ T4281]  ? skb_pull_data+0xf7/0x200
[  185.680152][ T4281]  hci_le_conn_complete_evt+0x183/0x440
[  185.685757][ T4281]  ? hci_remote_host_features_evt+0x270/0x270
[  185.691975][ T4281]  hci_event_packet+0x7b9/0x1280
[  185.696978][ T4281]  ? bis_list+0x280/0x280
[  185.701534][ T4281]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  185.707468][ T4281]  ? kcov_remote_start+0x4c7/0x7e0
[  185.712621][ T4281]  ? patch_conexant_auto+0x1260/0x1650
[  185.718150][ T4281]  ? hci_send_to_monitor+0x9c/0x4a0
[  185.723415][ T4281]  hci_rx_work+0x3eb/0xd40
[  185.727911][ T4281]  ? _raw_spin_unlock+0x40/0x40
[  185.732809][ T4281]  ? process_one_work+0x7b0/0x1160
[  185.737942][ T4281]  process_one_work+0x8a2/0x1160
[  185.742909][ T4281]  ? worker_detach_from_pool+0x240/0x240
[  185.748584][ T4281]  ? _raw_spin_lock_irq+0xb7/0xf0
[  185.753625][ T4281]  ? _raw_spin_lock_irqsave+0x100/0x100
[  185.759192][ T4281]  ? kthread_data+0x4b/0xc0
[  185.763722][ T4281]  worker_thread+0xaa2/0x1270
[  185.768461][ T4281]  kthread+0x29d/0x330
[  185.772580][ T4281]  ? worker_clr_flags+0x1a0/0x1a0
[  185.777651][ T4281]  ? kthread_blkcg+0xd0/0xd0
[  185.782251][ T4281]  ret_from_fork+0x1f/0x30
[  185.786698][ T4281]  </TASK>
[  185.803376][ T4281] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  185.817652][ T4281] Bluetooth: hci0: failed to register connection device
[  186.907007][ T4282] EXT4-fs (loop4): unmounting filesystem.
[  187.107674][ T5321] loop1: detected capacity change from 0 to 16
[  187.130907][ T5321] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  187.364489][ T5331] loop0: detected capacity change from 0 to 512
[  187.393373][ T5331] EXT4-fs: Ignoring removed oldalloc option
[  187.434790][ T5331] EXT4-fs (loop0): 1 truncate cleaned up
[  187.442223][ T5331] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  187.466604][ T5252] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  187.646654][ T4312] vhci_hcd: vhci_device speed not set
[  188.456279][ T5331] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[  188.462997][ T5331] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  188.471201][ T5331] vhci_hcd vhci_hcd.0: Device attached
[  188.708451][ T5339] vhci_hcd: connection closed
[  188.709604][ T4581] vhci_hcd: stop threads
[  188.766933][ T4317] usb 33-1: new low-speed USB device number 3 using vhci_hcd
[  188.788021][ T4581] vhci_hcd: release socket
[  188.882443][ T4581] vhci_hcd: disconnect device
[  189.251596][ T5252] usb 5-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  189.266517][ T5252] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.274849][ T5252] usb 5-1: Product: syz
[  189.279829][ T5252] usb 5-1: Manufacturer: syz
[  189.284544][ T5252] usb 5-1: SerialNumber: syz
[  189.291605][ T5252] usb 5-1: config 0 descriptor??
[  189.373710][ T5252] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  189.705456][   T26] kauditd_printk_skb: 418 callbacks suppressed
[  189.705470][   T26] audit: type=1326 audit(1777402560.447:434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  189.761905][ T5322] netlink: 'syz.4.255': attribute type 4 has an invalid length.
[  189.787464][ T5347] kAFS: No cell specified
[  190.576516][   T26] audit: type=1326 audit(1777402560.477:435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  190.598915][    C0] vkms_vblank_simulate: vblank timer overrun
[  190.638753][ T4270] EXT4-fs (loop0): unmounting filesystem.
[  190.770522][   T26] audit: type=1326 audit(1777402560.507:436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  190.799369][ T5350] loop1: detected capacity change from 0 to 512
[  190.863583][ T5350] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem
[  190.873120][   T26] audit: type=1326 audit(1777402560.507:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  191.384692][   T26] audit: type=1326 audit(1777402560.507:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  191.513093][   T26] audit: type=1326 audit(1777402560.507:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  191.543039][   T26] audit: type=1326 audit(1777402560.507:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  191.568048][   T26] audit: type=1326 audit(1777402560.507:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  191.595993][   T26] audit: type=1326 audit(1777402560.507:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  191.620397][   T26] audit: type=1326 audit(1777402560.507:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5320 comm="syz.4.255" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe86199cdd9 code=0x7ffc0000
[  191.686772][ T5322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.703086][ T5322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.752991][ T4442] usb 5-1: USB disconnect, device number 4
[  191.931005][ T5343] loop3: detected capacity change from 0 to 32768
[  191.960733][ T5350] EXT4-fs (loop1): failed to open journal device unknown-block(0,0) -6
[  191.986053][ T5343] JBD2: Ignoring recovery information on journal
[  192.036723][ T4283] Bluetooth: hci0: command 0x0406 tx timeout
[  192.122714][ T5364] loop0: detected capacity change from 0 to 512
[  192.135370][ T5343] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  192.301653][ T5343] 
[  192.304100][ T5343] ======================================================
[  192.311171][ T5343] WARNING: possible circular locking dependency detected
[  192.318589][ T5343] syzkaller #0 Not tainted
[  192.323023][ T5343] ------------------------------------------------------
[  192.330065][ T5343] syz.3.261/5343 is trying to acquire lock:
[  192.335977][ T5343] ffff888071d389c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  192.349273][ T5343] 
[  192.349273][ T5343] but task is already holding lock:
[  192.356693][ T5343] ffff8880554e1538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0
[  192.366284][ T5343] 
[  192.366284][ T5343] which lock already depends on the new lock.
[  192.366284][ T5343] 
[  192.376822][ T5343] 
[  192.376822][ T5343] the existing dependency chain (in reverse order) is:
[  192.385889][ T5343] 
[  192.385889][ T5343] -> #4 (&oi->ip_xattr_sem){++++}-{3:3}:
[  192.393786][ T5343]        down_read+0x42/0x2d0
[  192.398568][ T5343]        ocfs2_init_acl+0x307/0x770
[  192.403987][ T5343]        ocfs2_mknod+0x15e8/0x25b0
[  192.409142][ T5343]        ocfs2_create+0x1b6/0x4b0
[  192.414225][ T5343]        path_openat+0x1181/0x2ee0
[  192.419385][ T5343]        do_filp_open+0x1f1/0x430
[  192.424453][ T5343]        do_sys_openat2+0x150/0x4b0
[  192.429723][ T5343]        __x64_sys_openat+0x135/0x160
[  192.435150][ T5343]        do_syscall_64+0x4c/0xa0
[  192.440149][ T5343]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.446608][ T5343] 
[  192.446608][ T5343] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  192.455184][ T5343]        down_read+0x42/0x2d0
[  192.460008][ T5343]        ocfs2_start_trans+0x3a4/0x6f0
[  192.465534][ T5343]        ocfs2_modify_bh+0xe0/0x4c0
[  192.470777][ T5343]        ocfs2_local_read_info+0x13c8/0x1750
[  192.476800][ T5343]        dquot_load_quota_sb+0x756/0xac0
[  192.482475][ T5343]        dquot_load_quota_inode+0x2d8/0x5d0
[  192.488411][ T5343]        ocfs2_enable_quotas+0x1c5/0x490
[  192.494184][ T5343]        ocfs2_fill_super+0x43b5/0x5090
[  192.499762][ T5343]        mount_bdev+0x287/0x3c0
[  192.504660][ T5343]        legacy_get_tree+0xe6/0x180
[  192.509980][ T5343]        vfs_get_tree+0x88/0x270
[  192.514976][ T5343]        do_new_mount+0x24a/0xa40
[  192.520070][ T5343]        __se_sys_mount+0x2e3/0x3d0
[  192.525410][ T5343]        do_syscall_64+0x4c/0xa0
[  192.530396][ T5343]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.536851][ T5343] 
[  192.536851][ T5343] -> #2 (sb_internal#5){.+.+}-{0:0}:
[  192.544464][ T5343]        ocfs2_start_trans+0x2a5/0x6f0
[  192.549975][ T5343]        ocfs2_mknod+0xf77/0x25b0
[  192.555041][ T5343]        ocfs2_create+0x1b6/0x4b0
[  192.560193][ T5343]        path_openat+0x1181/0x2ee0
[  192.565365][ T5343]        do_filp_open+0x1f1/0x430
[  192.570427][ T5343]        do_sys_openat2+0x150/0x4b0
[  192.575785][ T5343]        __x64_sys_openat+0x135/0x160
[  192.581194][ T5343]        do_syscall_64+0x4c/0xa0
[  192.586171][ T5343]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.592669][ T5343] 
[  192.592669][ T5343] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}:
[  192.603351][ T5343]        down_write+0x36/0x60
[  192.608111][ T5343]        ocfs2_reserve_local_alloc_bits+0x11e/0x2700
[  192.614831][ T5343]        ocfs2_reserve_clusters_with_limit+0x1b6/0xc10
[  192.621729][ T5343]        ocfs2_mknod+0xf15/0x25b0
[  192.626902][ T5343]        ocfs2_create+0x1b6/0x4b0
[  192.632017][ T5343]        path_openat+0x1181/0x2ee0
[  192.637176][ T5343]        do_filp_open+0x1f1/0x430
[  192.642230][ T5343]        do_sys_openat2+0x150/0x4b0
[  192.648674][ T5343]        __x64_sys_openat+0x135/0x160
[  192.654096][ T5343]        do_syscall_64+0x4c/0xa0
[  192.659074][ T5343]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.665562][ T5343] 
[  192.665562][ T5343] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  192.676311][ T5343]        __lock_acquire+0x2d07/0x7d10
[  192.681747][ T5343]        lock_acquire+0x1bb/0x4a0
[  192.687004][ T5343]        down_write+0x36/0x60
[  192.691754][ T5343]        ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  192.698324][ T5343]        ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  192.705232][ T5343]        ocfs2_init_xattr_set_ctxt+0x314/0x7b0
[  192.711524][ T5343]        ocfs2_xattr_set+0xc3b/0x13e0
[  192.717030][ T5343]        __vfs_setxattr+0x3e0/0x420
[  192.722298][ T5343]        __vfs_setxattr_noperm+0x129/0x5e0
[  192.728138][ T5343]        vfs_setxattr+0x167/0x2e0
[  192.733195][ T5343]        setxattr+0x346/0x360
[  192.737996][ T5343]        path_setxattr+0x147/0x290
[  192.743143][ T5343]        __x64_sys_setxattr+0xb7/0xd0
[  192.748557][ T5343]        do_syscall_64+0x4c/0xa0
[  192.753569][ T5343]        entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  192.760138][ T5343] 
[  192.760138][ T5343] other info that might help us debug this:
[  192.760138][ T5343] 
[  192.770390][ T5343] Chain exists of:
[  192.770390][ T5343]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> &journal->j_trans_barrier --> &oi->ip_xattr_sem
[  192.770390][ T5343] 
[  192.787577][ T5343]  Possible unsafe locking scenario:
[  192.787577][ T5343] 
[  192.795149][ T5343]        CPU0                    CPU1
[  192.800692][ T5343]        ----                    ----
[  192.806168][ T5343]   lock(&oi->ip_xattr_sem);
[  192.810957][ T5343]                                lock(&journal->j_trans_barrier);
[  192.819211][ T5343]                                lock(&oi->ip_xattr_sem);
[  192.826382][ T5343]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  192.833713][ T5343] 
[  192.833713][ T5343]  *** DEADLOCK ***
[  192.833713][ T5343] 
[  192.841997][ T5343] 3 locks held by syz.3.261/5343:
[  192.847062][ T5343]  #0: ffff88807783c460 (sb_writers#26){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90
[  192.856409][ T5343]  #1: ffff8880554e1808 (&type->i_mutex_dir_key#19){+.+.}-{3:3}, at: vfs_setxattr+0x140/0x2e0
[  192.866771][ T5343]  #2: ffff8880554e1538 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x472/0x13e0
[  192.877051][ T5343] 
[  192.877051][ T5343] stack backtrace:
[  192.882974][ T5343] CPU: 0 PID: 5343 Comm: syz.3.261 Not tainted syzkaller #0
[  192.890851][ T5343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  192.901131][ T5343] Call Trace:
[  192.904486][ T5343]  <TASK>
[  192.907469][ T5343]  dump_stack_lvl+0x188/0x24e
[  192.912208][ T5343]  ? load_image+0x400/0x400
[  192.916747][ T5343]  ? show_regs_print_info+0x12/0x12
[  192.922011][ T5343]  ? print_circular_bug+0x12b/0x1a0
[  192.927251][ T5343]  check_noncircular+0x296/0x330
[  192.932313][ T5343]  ? look_up_lock_class+0x75/0x140
[  192.937525][ T5343]  ? add_chain_block+0x940/0x940
[  192.942671][ T5343]  ? lockdep_lock+0xf1/0x1f0
[  192.947321][ T5343]  ? _find_first_zero_bit+0xcf/0x100
[  192.952653][ T5343]  __lock_acquire+0x2d07/0x7d10
[  192.957573][ T5343]  ? verify_lock_unused+0x140/0x140
[  192.963014][ T5343]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  192.968686][ T5343]  ? do_raw_spin_lock+0x128/0x2f0
[  192.973737][ T5343]  ? mutex_unlock+0x10/0x10
[  192.978372][ T5343]  ? __rwlock_init+0x140/0x140
[  192.983163][ T5343]  ? do_raw_spin_unlock+0x11d/0x230
[  192.988387][ T5343]  lock_acquire+0x1bb/0x4a0
[  192.992947][ T5343]  ? ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  192.999176][ T5343]  ? __might_sleep+0xd0/0xd0
[  193.003800][ T5343]  ? check_noncircular+0x189/0x330
[  193.008945][ T5343]  ? read_lock_is_recursive+0x10/0x10
[  193.014380][ T5343]  down_write+0x36/0x60
[  193.018613][ T5343]  ? ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  193.024707][ T5343]  ocfs2_reserve_suballoc_bits+0x16d/0x4810
[  193.030652][ T5343]  ? mark_lock+0x94/0x320
[  193.035109][ T5343]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  193.041131][ T5343]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  193.047140][ T5343]  ? lockdep_hardirqs_on+0x94/0x140
[  193.052398][ T5343]  ? ocfs2_block_group_search+0x4f0/0x4f0
[  193.058240][ T5343]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  193.064164][ T5343]  ? _raw_spin_unlock+0x40/0x40
[  193.069135][ T5343]  ? stack_trace_save+0xa6/0xf0
[  193.074023][ T5343]  ? __stack_depot_save+0x421/0x460
[  193.079267][ T5343]  ? kasan_set_track+0x60/0x70
[  193.084069][ T5343]  ? kasan_set_track+0x4b/0x70
[  193.088865][ T5343]  ? __kasan_kmalloc+0x8e/0xa0
[  193.093692][ T5343]  ? ocfs2_reserve_new_metadata_blocks+0x109/0x9a0
[  193.100327][ T5343]  ? ocfs2_init_xattr_set_ctxt+0x314/0x7b0
[  193.106267][ T5343]  ? ocfs2_xattr_set+0xc3b/0x13e0
[  193.111325][ T5343]  ? __vfs_setxattr+0x3e0/0x420
[  193.116214][ T5343]  ? __vfs_setxattr_noperm+0x129/0x5e0
[  193.121744][ T5343]  ? vfs_setxattr+0x167/0x2e0
[  193.126476][ T5343]  ? setxattr+0x346/0x360
[  193.130867][ T5343]  ? path_setxattr+0x147/0x290
[  193.135734][ T5343]  ? __x64_sys_setxattr+0xb7/0xd0
[  193.140886][ T5343]  ? do_syscall_64+0x4c/0xa0
[  193.145550][ T5343]  ? entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.151773][ T5343]  ocfs2_reserve_new_metadata_blocks+0x412/0x9a0
[  193.158146][ T5343]  ? ocfs2_init_steal_slots+0x150/0x150
[  193.163724][ T5343]  ? ocfs2_xattr_block_set+0x3090/0x3090
[  193.169392][ T5343]  ? do_raw_spin_lock+0x128/0x2f0
[  193.174462][ T5343]  ocfs2_init_xattr_set_ctxt+0x314/0x7b0
[  193.180161][ T5343]  ? _raw_spin_unlock+0x24/0x40
[  193.185224][ T5343]  ? ocfs2_prepare_refcount_xattr+0xff0/0xff0
[  193.191422][ T5343]  ? ocfs2_truncate_log_needs_flush+0x12c/0x300
[  193.197705][ T5343]  ? ocfs2_remove_btree_range+0x15e0/0x15e0
[  193.203636][ T5343]  ? up_write+0x1bb/0x420
[  193.208026][ T5343]  ocfs2_xattr_set+0xc3b/0x13e0
[  193.212930][ T5343]  ? __ocfs2_xattr_set_handle+0xf30/0xf30
[  193.218789][ T5343]  ? __lock_acquire+0x13cf/0x7d10
[  193.223876][ T5343]  ? aa_get_newest_label+0xf9/0x5b0
[  193.229120][ T5343]  ? verify_lock_unused+0x140/0x140
[  193.234355][ T5343]  ? end_current_label_crit_section+0x170/0x170
[  193.240760][ T5343]  ? kasan_set_track+0x60/0x70
[  193.245599][ T5343]  ? kasan_set_track+0x4b/0x70
[  193.250605][ T5343]  ? evm_protected_xattr_common+0x170/0x190
[  193.256678][ T5343]  ? evm_protect_xattr+0x7e9/0x9d0
[  193.261847][ T5343]  ? ocfs2_xattr_security_get+0x40/0x40
[  193.267431][ T5343]  __vfs_setxattr+0x3e0/0x420
[  193.272194][ T5343]  __vfs_setxattr_noperm+0x129/0x5e0
[  193.277571][ T5343]  vfs_setxattr+0x167/0x2e0
[  193.282116][ T5343]  ? xattr_permission+0x500/0x500
[  193.287171][ T5343]  ? _copy_from_user+0x10b/0x170
[  193.292173][ T5343]  ? setxattr+0x2ce/0x360
[  193.296572][ T5343]  setxattr+0x346/0x360
[  193.300802][ T5343]  ? path_setxattr+0x290/0x290
[  193.305649][ T5343]  ? __mnt_want_write+0x21f/0x2a0
[  193.310733][ T5343]  path_setxattr+0x147/0x290
[  193.315375][ T5343]  ? simple_xattr_list_add+0xf0/0xf0
[  193.320715][ T5343]  ? lock_chain_count+0x20/0x20
[  193.325615][ T5343]  __x64_sys_setxattr+0xb7/0xd0
[  193.330510][ T5343]  do_syscall_64+0x4c/0xa0
[  193.334961][ T5343]  ? clear_bhb_loop+0x60/0xb0
[  193.339672][ T5343]  ? clear_bhb_loop+0x60/0xb0
[  193.344561][ T5343]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  193.350590][ T5343] RIP: 0033:0x7f760119cdd9
[  193.355048][ T5343] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.375118][ T5343] RSP: 002b:00007f76020c4028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  193.383584][ T5343] RAX: ffffffffffffffda RBX: 00007f7601415fa0 RCX: 00007f760119cdd9
[  193.391591][ T5343] RDX: 0000200000000340 RSI: 0000200000000140 RDI: 0000200000000100
[  193.399601][ T5343] RBP: 00007f7601232d69 R08: 0000000000000000 R09: 0000000000000000
[  193.407609][ T5343] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  193.415708][ T5343] R13: 00007f7601416038 R14: 00007f7601415fa0 R15: 00007ffe534d6a18
[  193.423802][ T5343]  </TASK>
[  193.427268][    C0] vkms_vblank_simulate: vblank timer overrun
[  193.614861][ T4272] ocfs2: Unmounting device (7,3) on (node local)
[  193.946535][ T4317] vhci_hcd: vhci_device speed not set
[  194.189826][ T1268] ieee802154 phy0 wpan0: encryption failed: -22
[  194.196194][ T1268] ieee802154 phy1 wpan1: encryption failed: -22
[  201.386503][ T4278] Bluetooth: hci2: command 0x0406 tx timeout
[  201.386603][ T4283] Bluetooth: hci0: command 0x0406 tx timeout
[  201.392737][ T4278] Bluetooth: hci1: command 0x0406 tx timeout
[  201.403882][ T4283] Bluetooth: hci3: command 0x0406 tx timeout