last executing test programs:

1m10.69785602s ago: executing program 0 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x8, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0x10000, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="c15b00"})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

54.878161656s ago: executing program 32 (id=1):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x100, 0xe}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001400)=@newtfilter={0x64, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0xb, 0x4}, {}, {0x8, 0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x38, 0x2, [@TCA_U32_SEL={0x34, 0x5, {0xd, 0x6, 0x2, 0xfffd, 0x7, 0x9, 0x8, 0x8, [{0x0, 0x575e, 0x6, 0x9}, {0x1, 0x10000, 0xfffffffe, 0xd5bd}]}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
close(r4)
socket$kcm(0x10, 0x400000002, 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="c15b00"})
r5 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r3, 0xc}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4)

3.834145278s ago: executing program 5 (id=362):
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x200000087}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000000)={[{@discard_async}, {@metadata_ratio}, {@nodatasum}]}, 0xfc, 0x559e, &(0x7f0000005680)="$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")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
connect$can_bcm(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000800), 0x1, 0x76a, &(0x7f0000001800)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x8, &(0x7f0000000c40)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0)

3.029666133s ago: executing program 5 (id=370):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0)
socket$netlink(0x10, 0x3, 0x4)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

2.82425009s ago: executing program 4 (id=373):
syz_open_procfs(0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x80000)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)

2.18188431s ago: executing program 3 (id=377):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x46, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})

2.080479074s ago: executing program 3 (id=379):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.980511557s ago: executing program 3 (id=380):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16)
connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x4, 0x0, 0xfffffffffffffff8, 0x0, 0x2}, {0x0, 0x0, 0x400000003, 0xfffffffffffffffc}, 0x1, 0x0, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x4d3, 0x32}, 0x0, @in=@remote, 0x0, 0x0, 0x1, 0xb7, 0x3, 0xfffffffe}}, 0xe8)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0))
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040))
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={<r2=>0xffffffffffffffff}, 0x111, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000380)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0xb, @empty, 0x3}, {0xa, 0x4e22, 0x2, @remote, 0x80000000}, r2, 0xfffffe4d}}, 0x48)

1.980339037s ago: executing program 5 (id=381):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

1.980221947s ago: executing program 4 (id=382):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x7e}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffd}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x54}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x4004)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r2, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

1.86719925s ago: executing program 2 (id=384):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000003c0)={0x2, 0x1, 0x1})

1.737088605s ago: executing program 2 (id=386):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000002340)=ANY=[], 0xfe, 0x5f3, &(0x7f0000001d40)="$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")
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x6f9, &(0x7f00000011c0)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
munlockall()
sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd", 0x32, 0x24044084, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
write$UHID_INPUT(r4, 0x0, 0x0)

1.627720978s ago: executing program 4 (id=388):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)

1.134659424s ago: executing program 5 (id=390):
r0 = socket$alg(0x26, 0x5, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
unshare(0x26020480)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x80000, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'rfc3686(ctr-aes-aesni)\x00'}, 0x58)
r2 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x89901)
move_mount(r2, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)

1.106669215s ago: executing program 4 (id=392):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x88a00, 0x0)
socket$netlink(0x10, 0x3, 0x4)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0)
pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xfffffffffffffffc, 0x8000, 0x2, 0x10001}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0)

997.146088ms ago: executing program 3 (id=393):
r0 = socket$inet6(0xa, 0x3, 0x8000000003c)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94)
r4 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000040)=ANY=[], 0x1c)
writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000280)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
getsockopt$inet6_int(r0, 0x29, 0x7, 0x0, 0x0)

524.497533ms ago: executing program 2 (id=397):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
setreuid(0xee00, 0x0)
keyctl$join(0x1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000180)=@framed, 0x0, 0x5}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
keyctl$session_to_parent(0x12)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000003c0)='./mnt\x00', 0x2008042, &(0x7f00000000c0), 0x1, 0x571, &(0x7f0000000780)="$eJzs3c+PG1cdAPDvzP5yk7SbQA9QAQlQCCiKnXXaqOql5QJCVSVExQFxSJddZ7XEjkPsLd0lUrd/A0ggcYI/gQMSB6SeOHDjiMQBEOWAVCACJUgcBs3Yu+ts7MSNvXaz/nykybyZN+Pve/bOvOdnxy+AmXUuInYjYjEi3oyI5e7+pLvEq50lP+7undtr9+7cXksiy974Z1Lk5/ui55zcye5jliLim1+L+G7yYNzW9s711Xq9dqu7XWk3blZa2zsXNxurG7WN2o1q9crKlUsvXX6xOra6nm388oOvbr72rd/8+tPv/373yz/Mi3Wqm9dbj3HqVH1hP05uPiJeO4pgUzDXXS9OuRw8njQiPhYRnyuu/+WYK/46AYDjLMuWI1vu3QYAjru0GANL0nJEpGm3E1DujOE9GyfSerPVvnCtuXVjvTNWdjoW0mub9dqlM0t//H5x8EKSb68UeUV+sV09tH05Is5ExI+Xniq2y2vN+vp0ujwAMPNO9rb/EfGfpTQtl4c6tc+negDAE6M07QIAABOn/QeA2aP9B4DZM0T73/2wf/fIywIATIb3/wAwe7T/ADB7tP8AMFO+8frr+ZLd6/7+9fpb21vXm29dXK+1rpcbW2vlteatm+WNZnOj+M2exqMer95s3lx5IbberrRrrXaltb1ztdHcutG+Wvyu99XawkRqBQA8zJmz7/0hiYjdl58qluiZy0FbDcdbOsajgCfL3Cgn6yDAE81sXzC7hmrCi07C7468LMB09P0x71Lf5P1++iGC+J4RfKSc/+Tw4//meIbjxcg+zK7HG/9/ZezlACbvscf//zzecgCTl2XJ4Tn/F/ezAIBjaYSv8GXvjKsTAkzVoybzHsvn/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDMnIqI70WSlou5wNP837Rcjng6Ik7HQnJts167FBHPxNmIWFjKt1emXWgAYETp35Pu/F/nl58/dTh3MfnvUrGOiB/87I2fvL3abt9ayff/a3//0t70YdWD80aYVxAAGN5fhzmoaL+r3XXPG/m7d26v7S1HWMYHfPCV/clH1+7duV0snZz5yLIsiygVfYkT/05ivntOKSKei4i5McTffTciPtGv/kkxNnK6O/Npb/zoxn56ovHT++KnRV5nnT99Hx9DWWDWvJfff149fP3NFVfWueKI/td/qbhDja64/5Ui9u59B/e/veu9VJTmcPz8mj83bIwXfvv1B3Zmy528dyOem+8XP9mPnwyI//yQ8f/0qc/86JUBednPI85H//i9sSrtxs1Ka3vn4mZjdaO2UbtRrV5ZuXLppcsvVivFGHVlb6T6Qf94+cIzg8qW1//EgPidV/7kofov7p/7hSHr/4v/vfmdzx5sLh2O/6XP93/9ny3W/Z//vE384pDxV0/8auD03Xn89QH1f9Trf2HI+O//bWd9yEMBgAlobe9cX63Xa7dGSuTvQj/8WVmWvZOX4SHH5NnDPeBed3G06vwlisTB05JEEqM/P/cn8s7YMAcvjFyd+xJ7wyXjrk6fxPx+X3G8j/zth/+1DEosjhI0HXstHicRp7uJu5MKOpXbETBBBxf9tEsCAAAAAAAAAAAAAAAMMon/wzTtOgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB8/T8AAP//Z1e+LQ==")
r1 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x2)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a5a438, &(0x7f00000079c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x20000088)

492.785964ms ago: executing program 1 (id=398):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x7e}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffd}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x54}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x4004)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r2, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

394.645787ms ago: executing program 1 (id=399):
r0 = shmget$private(0x0, 0x1000, 0x800, &(0x7f0000896000/0x1000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f00000004c0)=""/246)

349.180619ms ago: executing program 2 (id=400):
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000001340))
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000180)=0x6f)
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r0, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)

349.037089ms ago: executing program 1 (id=401):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d149909748"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})

346.809949ms ago: executing program 1 (id=402):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x4, 0x127d, &(0x7f00000011c0)="$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")
syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000000280)='./bus\x00', 0xdb9303c4987113b7, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x37)
chdir(&(0x7f0000001180)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x0)

282.075191ms ago: executing program 2 (id=403):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x5, 0x7, 0xb3}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000884)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x48, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xffffbddc, {0x0, 0x0, 0x0, r5, {0x6}, {}, {0xfff2, 0x1}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x2, '\x00', 0x9, 0x0, 0x3, 0xfffffffd}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040098}, 0x0)

274.374731ms ago: executing program 1 (id=404):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x20000800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)={0x7c, r1, 0x5, 0x4, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3f, 0xe, {{{}, {}, @device_b, @broadcast, @from_mac}, 0x0, @random=0x4, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x7, 0x3c, 0x2}}, @void, @void, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x1, 0x1, 0xf0, 0x8}}, @void}}, @NL80211_ATTR_FTM_RESPONDER={0x8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x7c}}, 0x0)

201.598284ms ago: executing program 5 (id=405):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x3d, 0xfffffffffffffcac, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

147.525045ms ago: executing program 4 (id=406):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
write$uinput_user_dev(r2, &(0x7f00000002c0)={'syz0\x00', {0x8001, 0xfff8, 0x3, 0x4}, 0x3a, [0x2, 0x5, 0x10000, 0x1, 0x16c000, 0x9, 0x2, 0xfffffff8, 0x1000, 0x1, 0x4, 0x982, 0x9eb0, 0x7, 0x80000, 0x9, 0x3, 0x8, 0x6, 0xc, 0x800, 0x1, 0x4, 0xc, 0xffffff7f, 0x2, 0x6962, 0xfffffff9, 0x0, 0x7fffffff, 0x7, 0x5, 0x9, 0x7, 0x100, 0x4, 0x7, 0x0, 0x1, 0x6692, 0x8, 0x4, 0x7, 0xe, 0x2, 0x1ff, 0x285c6e68, 0x3, 0x5, 0x1, 0x9, 0x23e, 0x4, 0x400, 0x8, 0x2000000, 0x4, 0x81, 0x1, 0xd850737, 0xffff0001, 0x6bdd, 0x7, 0x6], [0x2, 0xdcbf, 0x4, 0x1ff, 0x4, 0x0, 0xb3, 0xfffffffc, 0x3, 0x1ff, 0xfffffc01, 0x6c, 0xa, 0xc, 0x7fff, 0xfff, 0x7, 0x1, 0x4, 0x4, 0x7, 0x7c77, 0x1b, 0x6, 0x7, 0x5, 0x5, 0x2, 0x4, 0x0, 0x7d2, 0x413, 0xf0, 0x7, 0xae, 0x7fff, 0x1, 0x1, 0x80, 0x8, 0x5, 0x1, 0x80, 0x2, 0x2, 0xfffffffe, 0x8, 0x9, 0x7, 0xffffff80, 0x9, 0x7, 0x1, 0x4, 0x3, 0x1, 0x40, 0x101, 0x1, 0x7, 0x9, 0x5, 0x8001, 0x9], [0x9, 0x8001, 0x4, 0xfffffff8, 0x8, 0x0, 0x8001, 0x4, 0x200, 0xfffffffc, 0x2, 0xff, 0xffffffff, 0x134, 0x2, 0x5, 0x3, 0x6, 0x1, 0x1, 0x9, 0x8, 0xfffffff9, 0x5, 0xeb5, 0x7fffffff, 0x2, 0x7, 0x3, 0x225, 0xffffffff, 0xe, 0x1, 0x1, 0xffffffff, 0x80000000, 0xfffff001, 0x5, 0x5, 0x2, 0x7fffffff, 0x80, 0x400, 0x8000, 0x6, 0x32ac, 0x4, 0x4, 0x7fff, 0x0, 0x6, 0x0, 0x1e, 0x5, 0x7, 0x9, 0x4, 0x0, 0x2, 0x9, 0x1200000, 0x9, 0x2, 0xfffeffff], [0x1, 0x6, 0x4, 0x4, 0xc5, 0x1, 0x970, 0x5, 0x0, 0x9, 0x8, 0x9, 0x1, 0x40, 0x7, 0x3, 0xffff, 0x400, 0xffff, 0x99e, 0xb, 0x80000001, 0x2f8b, 0x9, 0x2, 0xe, 0x1, 0x6, 0x4, 0x8, 0x100, 0x3, 0x3, 0x2, 0x0, 0x1ff, 0x8, 0x8, 0x4, 0x8, 0x6, 0x28, 0x4b, 0x3, 0xe, 0x3, 0x41c0, 0x4, 0x5, 0x0, 0xffffff77, 0x0, 0xfffffffd, 0x9, 0x0, 0x9, 0xd6cb, 0x3, 0x6, 0x0, 0xf2, 0x9, 0x0, 0x714f]}, 0x45c)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r3=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r3, @ANYBLOB], 0x6f4}}, 0x0)

147.299855ms ago: executing program 5 (id=407):
syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000002340)=ANY=[], 0xfe, 0x5f3, &(0x7f0000001d40)="$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")
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x1, 0x6f9, &(0x7f00000011c0)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
shutdown(0xffffffffffffffff, 0x0)
socket$packet(0x11, 0x3, 0x300)
munlockall()
sendto$inet(r0, &(0x7f0000000000)="660b8fcffd635376e1fe007898f7200c67904d41b7cf075592f7f66d5ff464259af040ccbf554b1f711982796b3a1d9fb2fd", 0x32, 0x24044084, 0x0, 0x0)
r4 = dup(0xffffffffffffffff)
write$UHID_INPUT(r4, 0x0, 0x0)

147.118705ms ago: executing program 3 (id=408):
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, 0x0)
r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r2, 0x0, 0x0)
ioctl$SNDCTL_SEQ_PANIC(r0, 0x5100)

34.151829ms ago: executing program 1 (id=409):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x54, 0x0, 0x852dd6c070cd7e4d, 0x0, 0x25dfdbfe, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x1}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x7e}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xfffd}, @IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x54}, 0x4, 0x700000000000000, 0x0, 0x80c0}, 0x4004)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00'})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), 0xffffffffffffffff)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x1c, r2, 0x1, 0x1f, 0x0, {0x8}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0)

33.750869ms ago: executing program 3 (id=410):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x2)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

508.5µs ago: executing program 4 (id=411):
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x2aa}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f630932206960e9076c7d7fc99fce018701c50d39b811a7427a7a9fcb340c2755541f228462010ec40ba945a0febd460dad5d548f1be090f5dbaa8ae8835dc47ed2537681827f6129759272574cf58f2f", 0x1be}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400})

0s ago: executing program 2 (id=412):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
mmap$fb(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0xd8000)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x4b, 0x0, &(0x7f0000000440)="97713b46fbaa2b1044f2d408ffca802db4d770eb9874f493e0ef367e4bde497c403b450c72ff2417d079bb892435a1e107fa5c0ecd207d9e6f2a209bf148e6bc56955cb53347d149909748"})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000600)=[@reply={0x40406301, {0x2, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, @increfs={0x40046304, 0x1}], 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.124' (ED25519) to the list of known hosts.
[   29.813568][ T4255] cgroup: Unknown subsys name 'net'
[   30.011054][ T4255] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   30.309758][ T4255] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SSFS
[   31.508023][ T4272] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   31.512569][ T4279] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   31.515743][ T4279] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   31.518419][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   31.520356][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   31.520845][ T4282] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   31.521903][ T4280] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   31.523191][ T4282] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   31.524173][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   31.525611][ T4282] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   31.526582][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   31.527813][ T4282] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[   31.529248][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   31.530619][ T4282] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   31.531265][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   31.534819][ T4280] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   31.537107][ T4280] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   31.539128][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   31.540401][ T4280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[   31.543585][ T4282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   31.546844][ T4284] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   31.547155][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[   31.548205][ T4284] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[   31.549792][ T4283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   31.550522][ T4284] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   31.553147][ T4284] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   31.555157][ T4272] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   31.585120][ T4283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   31.587871][ T4283] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[   31.591924][ T4283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   31.662936][ T4267] chnl_net:caif_netlink_parms(): no params data found
[   31.688269][ T4274] chnl_net:caif_netlink_parms(): no params data found
[   31.704178][ T4271] chnl_net:caif_netlink_parms(): no params data found
[   31.720858][ T4268] chnl_net:caif_netlink_parms(): no params data found
[   31.735463][ T4267] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.736802][ T4267] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.738439][ T4267] device bridge_slave_0 entered promiscuous mode
[   31.747124][ T4274] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.748413][ T4274] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.750221][ T4274] device bridge_slave_0 entered promiscuous mode
[   31.753394][ T4267] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.754626][ T4267] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.756182][ T4267] device bridge_slave_1 entered promiscuous mode
[   31.770817][ T4274] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.772002][ T4274] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.773508][ T4274] device bridge_slave_1 entered promiscuous mode
[   31.784152][ T4267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.790636][ T4278] chnl_net:caif_netlink_parms(): no params data found
[   31.797632][ T4267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.803129][ T4271] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.804454][ T4271] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.806074][ T4271] device bridge_slave_0 entered promiscuous mode
[   31.810696][ T4274] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.818115][ T4271] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.819729][ T4271] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.821346][ T4271] device bridge_slave_1 entered promiscuous mode
[   31.825311][ T4274] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.829573][ T4267] team0: Port device team_slave_0 added
[   31.832564][ T4268] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.833935][ T4268] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.835471][ T4268] device bridge_slave_0 entered promiscuous mode
[   31.845378][ T4271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.847522][ T4267] team0: Port device team_slave_1 added
[   31.848729][ T4268] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.850053][ T4268] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.851551][ T4268] device bridge_slave_1 entered promiscuous mode
[   31.853997][ T4274] team0: Port device team_slave_0 added
[   31.857048][ T4271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.866965][ T4274] team0: Port device team_slave_1 added
[   31.868417][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.870086][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.874503][ T4267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.886364][ T4267] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.887614][ T4267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.892862][ T4267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.895100][ T4278] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.896382][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.897871][ T4278] device bridge_slave_0 entered promiscuous mode
[   31.900471][ T4268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.904250][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.905430][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.912322][ T4274] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.915219][ T4271] team0: Port device team_slave_0 added
[   31.917862][ T4278] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.919525][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.921125][ T4278] device bridge_slave_1 entered promiscuous mode
[   31.923239][ T4268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   31.925508][ T4271] team0: Port device team_slave_1 added
[   31.932263][ T4274] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.933400][ T4274] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.937993][ T4274] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   31.955451][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_0
[   31.956667][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.961497][ T4271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   31.966384][ T4278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   31.969303][ T4268] team0: Port device team_slave_0 added
[   31.971088][ T4268] team0: Port device team_slave_1 added
[   31.973081][ T4271] batman_adv: batadv0: Adding interface: batadv_slave_1
[   31.974334][ T4271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   31.979215][ T4271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.009979][ T4267] device hsr_slave_0 entered promiscuous mode
[   32.048723][ T4267] device hsr_slave_1 entered promiscuous mode
[   32.092123][ T4278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   32.149499][ T4274] device hsr_slave_0 entered promiscuous mode
[   32.188718][ T4274] device hsr_slave_1 entered promiscuous mode
[   32.238524][ T4274] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.239899][ T4274] Cannot create hsr debugfs directory
[   32.246016][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.247277][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.252233][ T4268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.254890][ T4268] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.256147][ T4268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.260950][ T4268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.265284][ T4278] team0: Port device team_slave_0 added
[   32.267011][ T4278] team0: Port device team_slave_1 added
[   32.329606][ T4271] device hsr_slave_0 entered promiscuous mode
[   32.368768][ T4271] device hsr_slave_1 entered promiscuous mode
[   32.408586][ T4271] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.409966][ T4271] Cannot create hsr debugfs directory
[   32.423489][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_0
[   32.424753][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.431743][ T4278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   32.441490][ T4278] batman_adv: batadv0: Adding interface: batadv_slave_1
[   32.442680][ T4278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   32.447160][ T4278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   32.499437][ T4268] device hsr_slave_0 entered promiscuous mode
[   32.548789][ T4268] device hsr_slave_1 entered promiscuous mode
[   32.588533][ T4268] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.589884][ T4268] Cannot create hsr debugfs directory
[   32.649632][ T4278] device hsr_slave_0 entered promiscuous mode
[   32.698670][ T4278] device hsr_slave_1 entered promiscuous mode
[   32.738552][ T4278] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   32.739879][ T4278] Cannot create hsr debugfs directory
[   32.801152][ T4267] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   32.839561][ T4267] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   32.886845][ T4267] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   32.919518][ T4267] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   32.961702][ T4274] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   32.999847][ T4274] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   33.042647][ T4274] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   33.080135][ T4274] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   33.134099][ T4268] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   33.172254][ T4268] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   33.223732][ T4268] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   33.261889][ T4268] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   33.349180][ T4271] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   33.381249][ T4271] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   33.429523][ T4271] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   33.486149][ T4278] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   33.530584][ T4278] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   33.562090][ T4271] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   33.602122][ T4278] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   33.608759][ T4283] Bluetooth: hci1: command 0x0409 tx timeout
[   33.618772][ T4283] Bluetooth: hci4: command 0x0409 tx timeout
[   33.618795][ T4279] Bluetooth: hci3: command 0x0409 tx timeout
[   33.619833][ T4283] Bluetooth: hci2: command 0x0409 tx timeout
[   33.620986][ T4279] Bluetooth: hci0: command 0x0409 tx timeout
[   33.629369][ T4278] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   33.666704][ T4267] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.681050][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.683122][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.685941][ T4267] 8021q: adding VLAN 0 to HW filter on device team0
[   33.697706][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.699575][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.701261][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.702565][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.707287][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   33.713158][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.714902][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.716579][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.717873][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.721025][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.729553][ T4268] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.737543][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.744164][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.746183][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.747765][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.750897][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.752486][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   33.756080][ T4268] 8021q: adding VLAN 0 to HW filter on device team0
[   33.763372][ T4274] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.767478][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.769640][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.771233][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   33.772764][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.774511][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.776218][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.777928][ T4314] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.779265][ T4314] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.781771][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   33.789541][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   33.791228][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.792813][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.794349][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.795812][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.797416][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.799414][ T4314] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.800649][ T4314] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.807447][ T4274] 8021q: adding VLAN 0 to HW filter on device team0
[   33.811116][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   33.822849][ T4278] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.824906][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.830142][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.837875][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.839675][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.841422][   T39] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.842674][   T39] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.848127][ T4268] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.853986][ T4268] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.857806][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   33.860303][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.862479][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.864209][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.865780][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.867453][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   33.870335][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.872004][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   33.873576][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.875154][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.876771][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.878301][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.879676][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.881656][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   33.883298][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   33.886461][ T4271] 8021q: adding VLAN 0 to HW filter on device bond0
[   33.895338][ T4274] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   33.897089][ T4274] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   33.905150][ T4278] 8021q: adding VLAN 0 to HW filter on device team0
[   33.907199][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   33.909186][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   33.910886][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   33.912541][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   33.914205][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   33.915925][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   33.918101][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   33.921852][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.923613][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   33.925287][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.926854][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.928381][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.930624][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   33.932262][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   33.940576][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   33.942061][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   33.951573][ T4271] 8021q: adding VLAN 0 to HW filter on device team0
[   33.962142][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   33.963707][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.965122][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.966735][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.968332][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.969695][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.972848][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.979729][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.981562][   T11] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.982882][   T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.984459][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   33.987635][ T4267] 8021q: adding VLAN 0 to HW filter on device batadv0
[   33.993815][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.995596][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.997428][ T4315] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.998656][ T4315] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.002247][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.004030][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.013375][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.015064][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.016555][   T39] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.017787][   T39] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.021033][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   34.023231][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.031465][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   34.037856][ T4278] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   34.041124][ T4278] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   34.045068][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.047269][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.051510][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.053206][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.054799][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.056367][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.058030][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.059879][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.061443][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.063021][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.068425][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   34.070408][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   34.073260][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   34.079985][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   34.081766][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   34.091572][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   34.093304][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.094886][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.096273][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.097583][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.108348][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.114442][ T4268] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.117216][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   34.119267][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.123209][ T4271] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   34.127365][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.129098][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.130990][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.132383][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.133746][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.135239][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.137576][ T4267] device veth0_vlan entered promiscuous mode
[   34.152229][ T4274] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.154679][ T4267] device veth1_vlan entered promiscuous mode
[   34.173784][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.175415][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.177180][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.190513][ T4278] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.194252][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.195934][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.197241][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.205705][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.207322][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.210296][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.211776][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.216638][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.218305][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.221486][ T4268] device veth0_vlan entered promiscuous mode
[   34.230038][ T4271] 8021q: adding VLAN 0 to HW filter on device batadv0
[   34.234219][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.235933][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.237550][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   34.240375][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   34.243210][ T4267] device veth0_macvtap entered promiscuous mode
[   34.251121][ T4267] device veth1_macvtap entered promiscuous mode
[   34.253863][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.255585][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.257111][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.259327][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.266751][ T4268] device veth1_vlan entered promiscuous mode
[   34.273803][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.275493][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.277054][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.282580][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.284175][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.285874][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.289524][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.292075][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.293413][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.297537][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.300005][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.301730][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.307906][ T4271] device veth0_vlan entered promiscuous mode
[   34.311118][ T4267] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.312810][ T4267] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.314385][ T4267] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.315990][ T4267] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.319555][ T4274] device veth0_vlan entered promiscuous mode
[   34.321088][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.322797][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.324683][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.326084][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.333495][ T4271] device veth1_vlan entered promiscuous mode
[   34.341153][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.342719][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.344249][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.345853][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.347719][ T4268] device veth0_macvtap entered promiscuous mode
[   34.350921][ T4268] device veth1_macvtap entered promiscuous mode
[   34.367836][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.369888][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.371486][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   34.373127][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   34.377387][ T4274] device veth1_vlan entered promiscuous mode
[   34.386056][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.387604][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.389812][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.393405][ T4271] device veth0_macvtap entered promiscuous mode
[   34.399310][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.400907][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   34.402553][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   34.404169][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   34.405629][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   34.407470][ T4278] device veth0_vlan entered promiscuous mode
[   34.410815][ T4271] device veth1_macvtap entered promiscuous mode
[   34.416459][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.418366][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.421126][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.427116][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.428797][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.430325][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.432071][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.441994][ T4278] device veth1_vlan entered promiscuous mode
[   34.443791][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.445540][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.447759][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.450996][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.452851][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.454549][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.456444][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.459437][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.461611][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   34.463129][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.463146][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.463378][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.464521][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.466155][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.471593][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.473269][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.477391][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.479472][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.481045][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.482567][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.488780][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   34.491801][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.493484][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.496026][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.497943][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.501732][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.503453][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.505735][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.512064][ T4274] device veth0_macvtap entered promiscuous mode
[   34.513504][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.515132][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.516878][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.520466][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.520953][ T4271] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.521875][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.523571][ T4271] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.526437][ T4271] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.527927][ T4271] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.532644][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.534615][ T4274] device veth1_macvtap entered promiscuous mode
[   34.547284][ T4278] device veth0_macvtap entered promiscuous mode
[   34.554506][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.556073][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   34.557695][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   34.563215][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   34.572806][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.576196][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.583042][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.591149][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.592487][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.595119][ T4278] device veth1_macvtap entered promiscuous mode
[   34.599193][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   34.600815][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.605021][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.606825][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.612308][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.615603][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.617267][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.619505][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.621817][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.637489][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.640434][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.644828][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.646616][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.648308][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.651667][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.653427][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.655325][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.657647][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.671173][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.672798][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.674704][ T4315] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.678783][ T4315] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.684051][ T4274] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.685716][ T4274] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.687348][ T4274] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.689508][ T4274] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.691548][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.695816][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.697662][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.700057][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.702080][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.703903][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.705784][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.707640][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   34.710281][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.713754][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0
[   34.748081][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   34.749995][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   34.766854][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.769508][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.771196][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.773117][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.774856][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.776685][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.778436][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   34.792683][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   34.795030][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1
[   34.797678][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   34.799742][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   34.801239][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   34.802899][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   34.828625][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   34.830352][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   34.832037][   T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.833778][   T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.844782][   T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   34.875671][ T4354] loop3: detected capacity change from 0 to 32768
[   34.884104][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   34.885560][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   34.887347][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   34.890567][ T4354] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.6 (4354)
[   34.896102][ T4354] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   34.897960][ T4354] BTRFS info (device loop3): using crc32c (crc32c-generic) checksum algorithm
[   34.899629][ T4354] BTRFS info (device loop3): turning on sync discard
[   34.900795][ T4354] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[   34.902304][ T4354] BTRFS info (device loop3): use zstd compression, level 3
[   34.903621][ T4354] BTRFS info (device loop3): turning on async discard
[   34.904919][ T4354] BTRFS warning (device loop3): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[   34.906810][ T4354] BTRFS info (device loop3): trying to use backup root at mount time
[   34.908237][ T4354] BTRFS info (device loop3): force zlib compression, level 3
[   34.909808][ T4354] BTRFS info (device loop3): using free space tree
[   34.937768][   T39] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[   34.940661][ T4354] BTRFS error (device loop3): failed to load root extent
[   34.942056][ T4354] BTRFS warning (device loop3): try to load backup roots slot 1
[   34.943581][    T9] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[   34.945902][ T4354] BTRFS warning (device loop3): couldn't read tree root
[   34.947220][ T4354] BTRFS warning (device loop3): try to load backup roots slot 2
[   34.949923][ T4354] BTRFS error (device loop3): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7
[   34.952124][ T4354] BTRFS warning (device loop3): couldn't read tree root
[   34.953413][ T4354] BTRFS warning (device loop3): try to load backup roots slot 3
[   34.957188][ T4354] BTRFS info (device loop3): enabling ssd optimizations
[   34.959673][ T4354] BTRFS info (device loop3): rebuilding free space tree
[   34.967524][ T4354] BTRFS info (device loop3): checking UUID tree
[   35.014199][ T4267] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   35.067967][ T4259] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop3 scanned by udevd (4259)
[   35.106537][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.107937][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.112608][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.163789][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.165191][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.166641][ T4315] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   35.217714][ T4392] loop1: detected capacity change from 0 to 164
[   35.227513][   T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   35.229013][   T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   35.234653][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   35.354151][ T4399] binder: 4386:4399 ioctl c01064b5 20000280 returned -22
[   35.355788][ T4399] binder: 4386:4399 got reply transaction with no transaction stack
[   35.357207][ T4399] binder: 4386:4399 transaction reply to 0:0 failed 2/29201/-71, size 0-0 line 2946
[   35.521437][ T4385] device syzkaller0 entered promiscuous mode
[   35.758852][ T4279] Bluetooth: hci2: command 0x041b tx timeout
[   35.758873][ T4283] Bluetooth: hci3: command 0x041b tx timeout
[   35.761471][ T4275] Bluetooth: hci0: command 0x041b tx timeout
[   35.762782][ T4275] Bluetooth: hci4: command 0x041b tx timeout
[   35.764199][ T4283] Bluetooth: hci1: command 0x041b tx timeout
[   36.279006][ T4408] netlink: 'syz.4.5': attribute type 4 has an invalid length.
[   36.289079][ T4375] binder: undelivered TRANSACTION_ERROR: 29201
[   36.426945][ T4414] loop3: detected capacity change from 0 to 32768
[   36.479685][ T4420] Bluetooth: MGMT ver 1.22
[   36.481164][ T4414] XFS (loop3): Mounting V5 Filesystem
[   36.501322][ T4414] XFS (loop3): Ending clean mount
[   36.901746][ T4267] XFS (loop3): Unmounting Filesystem
[   37.768672][ T4284] Bluetooth: hci4: command 0x040f tx timeout
[   39.236735][ T4470] loop4: detected capacity change from 0 to 256
[   39.254379][ T4471] loop1: detected capacity change from 0 to 1024
[   39.752150][ T4478] loop3: detected capacity change from 0 to 2048
[   39.756217][ T4478] =======================================================
[   39.756217][ T4478] WARNING: The mand mount option has been deprecated and
[   39.756217][ T4478]          and is ignored by this kernel. Remove the mand
[   39.756217][ T4478]          option from the mount to silence this warning.
[   39.756217][ T4478] =======================================================
[   39.764524][ T4478] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   39.781573][ T4478] syz.3.24: attempt to access beyond end of device
[   39.781573][ T4478] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[   39.784856][ T4482] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   39.790006][ T4458] loop2: detected capacity change from 0 to 32768
[   39.794373][ T4458] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.20 (4458)
[   40.163973][ T4458] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   40.165860][ T4458] BTRFS info (device loop2): using sha256 (sha256-ce) checksum algorithm
[   40.167862][ T4458] BTRFS info (device loop2): enabling auto defrag
[   40.170019][ T4458] BTRFS info (device loop2): use no compression
[   40.171159][ T4458] BTRFS info (device loop2): max_inline at 4096
[   40.172237][ T4458] BTRFS info (device loop2): using free space tree
[   40.211593][ T4485] syz.3.24: attempt to access beyond end of device
[   40.211593][ T4485] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[   40.214119][ T4485] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0)
[   40.231678][ T4478] syz.3.24: attempt to access beyond end of device
[   40.231678][ T4478] loop3: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[   40.236783][ T4478] NILFS (loop3): I/O error reading meta-data file (ino=6, block-offset=0)
[   40.312619][ T4505] loop3: detected capacity change from 0 to 256
[   40.426776][ T4458] BTRFS info (device loop2): enabling ssd optimizations
[   40.513592][ T4515] loop4: detected capacity change from 0 to 32768
[   40.804813][ T4515] BTRFS warning: duplicate device /dev/loop4 devid 1 generation 8 scanned by syz.4.30 (4515)
[   41.152053][ T4274] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   41.202417][ T4522] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.204359][ T4522] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.261213][ T4527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   41.262943][ T4527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   41.299617][ T4257] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 9 /dev/loop2 scanned by udevd (4257)
[   42.422513][ T4539] loop1: detected capacity change from 0 to 1024
[   42.442222][ T4539] hfsplus: request for non-existent node 33423360 in B*Tree
[   42.443601][ T4539] hfsplus: request for non-existent node 33423360 in B*Tree
[   42.773961][ T4543] loop1: detected capacity change from 0 to 2048
[   42.820609][ T4548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.822654][ T4548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.873617][ T4543] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   43.164361][ T4554] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   43.177446][ T4554] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   43.180016][ T4554] EXT4-fs (loop1): This should not happen!! Data will be lost
[   43.180016][ T4554] 
[   43.228725][ T4554] EXT4-fs (loop1): Total free blocks count 0
[   43.230085][ T4554] EXT4-fs (loop1): Free/Dirty block details
[   43.231314][ T4554] EXT4-fs (loop1): free_blocks=2415919504
[   43.232534][ T4554] EXT4-fs (loop1): dirty_blocks=48
[   43.233609][ T4554] EXT4-fs (loop1): Block reservation details
[   43.234795][ T4554] EXT4-fs (loop1): i_reserved_data_blocks=3
[   43.579873][ T4431] Bluetooth: hci5: Frame reassembly failed (-84)
[   43.587049][ T4431] Bluetooth: hci5: Frame reassembly failed (-84)
[   43.831256][ T4560] loop2: detected capacity change from 0 to 256
[   43.834114][ T4268] EXT4-fs (loop1): unmounting filesystem.
[   44.032244][ T4567] netlink: 64 bytes leftover after parsing attributes in process `syz.1.45'.
[   44.192831][    C0] vcan0: j1939_tp_rxtimer: 0x0000000045740b2c: rx timeout, send abort
[   44.692921][    C0] vcan0: j1939_tp_rxtimer: 0x00000000771e1906: rx timeout, send abort
[   44.694966][    C0] vcan0: j1939_tp_rxtimer: 0x0000000045740b2c: abort rx timeout. Force session deactivation
[   45.187475][    C0] vcan0: j1939_tp_rxtimer: 0x000000003ca7f1e8: rx timeout, send abort
[   45.191420][    C0] vcan0: j1939_xtp_rx_abort_one: 0x000000003ca7f1e8: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   45.194277][    C0] vcan0: j1939_xtp_rx_abort_one: 0x0000000047c309b5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   45.196806][    C0] vcan0: j1939_tp_rxtimer: 0x00000000771e1906: abort rx timeout. Force session deactivation
[   45.608521][ T4283] Bluetooth: hci5: command 0xfc11 tx timeout
[   45.610359][ T4284] Bluetooth: hci5: Entering manufacturer mode failed (-110)
[   45.690328][ T4586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   45.691996][ T4586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.466819][    C0] vcan0: j1939_tp_rxtimer: 0x00000000496279e5: rx timeout, send abort
[   46.468438][    C0] vcan0: j1939_xtp_rx_abort_one: 0x00000000496279e5: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   46.471049][    C0] vcan0: j1939_xtp_rx_abort_one: 0x000000008459e6e6: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[   46.501804][ T4597] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.503554][ T4597] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.596835][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.601922][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.815475][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.817649][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.820550][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.822107][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   46.824615][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   46.826172][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.035953][ T4606] binder: 4605:4606 ioctl c0306201 0 returned -14
[   47.037920][ T4606] binder: 4605:4606 got transaction to invalid handle, 1
[   47.039506][ T4606] binder: 4606:4605 cannot find target node
[   47.040514][ T4606] binder: 4605:4606 transaction call to 0:0 failed 6/29201/-22, size 0-0 line 3045
[   47.042395][ T4606] binder: 4605:4606 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   47.044917][ T4606] binder: 4606 RLIMIT_NICE not set
[   47.045823][ T4606] binder: 4605:4606 ioctl c0306201 20000240 returned -11
[   47.047257][ T4606] binder: 4605:4606 got reply transaction with no transaction stack
[   47.053388][ T4606] binder: 4605:4606 transaction reply to 0:0 failed 7/29201/-71, size 0-0 line 2946
[   47.061794][ T4463] binder: undelivered TRANSACTION_ERROR: 29201
[   47.062988][ T4463] binder: undelivered TRANSACTION_ERROR: 29201
[   50.948399][ T4284] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   50.950436][ T4284] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   50.952928][ T4284] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   50.955231][ T4284] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   50.957036][ T4284] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   50.958371][ T4284] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   50.967408][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[   50.969036][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[   50.970420][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[   50.972297][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[   50.973860][ T4275] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3
[   50.975202][ T4275] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[   52.388824][ T4613] Zero length message leads to an empty skb
[   52.459130][ T4650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   52.460783][ T4650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   52.568102][ T4659] loop1: detected capacity change from 0 to 256
[   52.577913][ T4659] exfat: Deprecated parameter 'namecase'
[   52.610782][ T4659] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x18d51376, utbl_chksum : 0xe619d30d)
[   52.627533][ T4641] chnl_net:caif_netlink_parms(): no params data found
[   52.944934][ T4665] netlink: 'syz.2.70': attribute type 4 has an invalid length.
[   52.962041][ T4641] bridge0: port 1(bridge_slave_0) entered blocking state
[   52.963459][ T4641] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.965123][ T4641] device bridge_slave_0 entered promiscuous mode
[   52.967794][ T4641] bridge0: port 2(bridge_slave_1) entered blocking state
[   52.970069][ T4641] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.971734][ T4641] device bridge_slave_1 entered promiscuous mode
[   52.985966][ T4641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   52.989559][ T4641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   53.001052][ T4641] team0: Port device team_slave_0 added
[   53.003114][ T4641] team0: Port device team_slave_1 added
[   53.009160][ T4641] batman_adv: batadv0: Adding interface: batadv_slave_0
[   53.010637][ T4641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.015490][ T4641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   53.018175][ T4641] batman_adv: batadv0: Adding interface: batadv_slave_1
[   53.023489][ T4641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   53.028721][ T4641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   53.049073][ T4284] Bluetooth: hci5: command 0x0409 tx timeout
[   53.070045][ T4641] device hsr_slave_0 entered promiscuous mode
[   53.077339][ T4671] loop1: detected capacity change from 0 to 32768
[   53.079615][ T4671] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.72 (4671)
[   53.083570][ T4671] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   53.085416][ T4671] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   53.086836][ T4671] BTRFS info (device loop1): turning on async discard
[   53.088109][ T4671] BTRFS info (device loop1): metadata ratio 0
[   53.089340][ T4671] BTRFS info (device loop1): setting nodatasum
[   53.090414][ T4671] BTRFS info (device loop1): using free space tree
[   53.100060][ T4671] BTRFS info (device loop1): enabling ssd optimizations
[   53.119134][ T4641] device hsr_slave_1 entered promiscuous mode
[   53.139511][ T4641] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   53.141299][ T4641] Cannot create hsr debugfs directory
[   53.340098][ T4641] netdevsim netdevsim5 netdevsim0: renamed from eth0
[   53.360068][ T4698] loop4: detected capacity change from 0 to 2048
[   53.362535][ T4698] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[   53.373757][ T4698] syz.4.75: attempt to access beyond end of device
[   53.373757][ T4698] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[   53.379246][ T4699] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   53.391339][ T4698] syz.4.75: attempt to access beyond end of device
[   53.391339][ T4698] loop4: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[   53.393898][ T4698] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0)
[   53.406472][ T4696] loop3: detected capacity change from 0 to 4096
[   53.519704][ T4641] netdevsim netdevsim5 netdevsim1: renamed from eth1
[   54.058015][ T4705] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   54.062894][ T4641] netdevsim netdevsim5 netdevsim2: renamed from eth2
[   54.069111][ T4268] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   54.109884][ T4641] netdevsim netdevsim5 netdevsim3: renamed from eth3
[   54.145650][ T4710] loop4: detected capacity change from 0 to 4096
[   54.157446][ T4710] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   54.205583][ T4641] 8021q: adding VLAN 0 to HW filter on device bond0
[   54.211158][ T4641] 8021q: adding VLAN 0 to HW filter on device team0
[   54.223151][ T4641] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   54.225158][ T4641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   54.255470][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   54.257177][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.267358][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   54.280031][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.292912][ T4716] loop2: detected capacity change from 0 to 1024
[   54.294824][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.296088][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.361126][ T4718] syz.3.80 sent an empty control message without MSG_MORE.
[   54.594944][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   54.596865][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.602479][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.603808][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.605343][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   54.610252][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   54.613011][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   54.615374][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   54.618381][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   54.621198][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   54.621382][ T4716] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   54.625155][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.643440][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.645285][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.657752][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.752065][ T4734] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   54.757162][ T4734] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   54.859307][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   54.861018][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[   54.862558][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[   54.921852][ T4443] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   54.951298][ T4641] 8021q: adding VLAN 0 to HW filter on device batadv0
[   54.952680][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   54.954188][ T4591] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   55.128683][ T4275] Bluetooth: hci5: command 0x041b tx timeout
[   56.265410][ T4777] fuse: Invalid rootmode
[   57.166622][ T4783] binder: 4782:4783 tried to acquire reference to desc 0, got 1 instead
[   57.171749][ T4783] binder: 4782:4783 ioctl c0306201 0 returned -14
[   57.173077][ T4783] binder: 4782:4783 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   57.175340][ T4783] binder: 4783 RLIMIT_NICE not set
[   57.176245][ T4783] binder: 4782:4783 ioctl c0306201 20000240 returned -11
[   57.177637][ T4783] binder: 4782:4783 got reply transaction with no transaction stack
[   57.179277][ T4783] binder: 4782:4783 transaction reply to 0:0 failed 12/29201/-71, size 0-0 line 2946
[   57.187186][ T4383] binder: undelivered TRANSACTION_ERROR: 29201
[   57.218577][ T4284] Bluetooth: hci5: command 0x040f tx timeout
[   59.288495][ T4275] Bluetooth: hci5: command 0x0419 tx timeout
[   64.491604][ T2060] ieee802154 phy1 wpan1: encryption failed: -22
[   65.860705][ T4443] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   65.896749][ T4792] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.899537][ T4792] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.006418][ T4795] loop1: detected capacity change from 0 to 32768
[   66.013857][ T4795] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.101 (4795)
[   66.017710][ T4795] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.019729][ T4795] BTRFS info (device loop1): using sha256 (sha256-ce) checksum algorithm
[   66.021293][ T4795] BTRFS info (device loop1): turning on async discard
[   66.022490][ T4795] BTRFS info (device loop1): metadata ratio 0
[   66.023565][ T4795] BTRFS info (device loop1): setting nodatasum
[   66.024703][ T4795] BTRFS info (device loop1): using free space tree
[   66.032127][ T4443] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.043560][ T4795] BTRFS info (device loop1): enabling ssd optimizations
[   66.130808][ T4443] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   66.139006][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   66.141555][ T4444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   66.188275][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   66.190541][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   66.194592][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   66.196166][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   66.204000][ T4641] device veth0_vlan entered promiscuous mode
[   66.218265][ T4826] loop4: detected capacity change from 0 to 1024
[   66.222368][ T4826] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   66.235000][ T4641] device veth1_vlan entered promiscuous mode
[   66.280378][ T4828] fuse: Bad value for 'rootmode'
[   66.284253][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[   66.286097][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[   66.287775][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   66.289918][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   66.294818][ T4830] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.296474][ T4830] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.333444][ T4641] device veth0_macvtap entered promiscuous mode
[   66.345762][ T4641] device veth1_macvtap entered promiscuous mode
[   66.353528][ T4832] netlink: 64 bytes leftover after parsing attributes in process `syz.3.109'.
[   66.364635][ T4268] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   66.365825][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.368268][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.380941][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.382786][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.394701][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.396577][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.398372][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.409497][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.411269][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   66.413056][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.442986][ T4641] batman_adv: batadv0: Interface activated: batadv_slave_0
[   66.444373][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   66.447201][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   66.455085][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   66.459512][ T4431] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   66.472024][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.473872][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.475689][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.477667][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.488278][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.492097][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.494051][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.497830][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.500509][ T4641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   66.502342][ T4641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   66.505906][ T4641] batman_adv: batadv0: Interface activated: batadv_slave_1
[   66.507390][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   66.513491][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   66.517024][ T4641] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   66.523988][ T4641] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   66.525759][ T4848] binder: 4847:4848 tried to acquire reference to desc 0, got 1 instead
[   66.525814][ T4641] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   66.529308][ T4641] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.586666][ T4853] loop2: detected capacity change from 0 to 16
[   66.622998][ T4853] erofs: (device loop2): mounted with root inode @ nid 36.
[   66.662602][ T4853] syz.2.110: attempt to access beyond end of device
[   66.662602][ T4853] loop2: rw=524288, sector=1056, nr_sectors = 16 limit=16
[   66.665185][ T4853] syz.2.110: attempt to access beyond end of device
[   66.665185][ T4853] loop2: rw=524288, sector=8, nr_sectors = 16 limit=16
[   66.671719][ T4853] syz.2.110: attempt to access beyond end of device
[   66.671719][ T4853] loop2: rw=0, sector=1056, nr_sectors = 8 limit=16
[   66.864450][ T4848] binder: 4847:4848 ioctl c0306201 0 returned -14
[   66.878912][ T4848] binder: 4847:4848 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   66.885441][ T4848] binder: 4848 RLIMIT_NICE not set
[   66.886637][ T4848] binder: 4847:4848 ioctl c0306201 20000240 returned -11
[   66.888105][ T4848] binder: 4847:4848 got reply transaction with no transaction stack
[   66.890577][ T4848] binder: 4847:4848 transaction reply to 0:0 failed 17/29201/-71, size 0-0 line 2946
[   66.912041][ T4374] binder: undelivered TRANSACTION_ERROR: 29201
[   67.085313][ T4866] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.087099][ T4866] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.087475][ T4868] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   67.091053][ T4868] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   67.124461][ T4314] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.126055][ T4314] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.129913][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.138344][ T4314] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.140603][ T4314] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.181424][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.345458][ T4888] loop2: detected capacity change from 0 to 2048
[   67.349048][ T4884] netlink: 60 bytes leftover after parsing attributes in process `syz.5.65'.
[   67.368038][ T4888] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   67.430055][ T4886] netlink: 'syz.3.117': attribute type 1 has an invalid length.
[   67.546073][ T4896] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   67.549055][ T4896] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   67.551217][ T4896] EXT4-fs (loop2): This should not happen!! Data will be lost
[   67.551217][ T4896] 
[   67.552855][ T4896] EXT4-fs (loop2): Total free blocks count 0
[   67.553850][ T4896] EXT4-fs (loop2): Free/Dirty block details
[   67.555030][ T4896] EXT4-fs (loop2): free_blocks=2415919504
[   67.556111][ T4896] EXT4-fs (loop2): dirty_blocks=48
[   67.557020][ T4896] EXT4-fs (loop2): Block reservation details
[   67.558085][ T4896] EXT4-fs (loop2): i_reserved_data_blocks=3
[   68.141739][ T4902] loop4: detected capacity change from 0 to 1024
[   68.202591][ T4274] EXT4-fs (loop2): unmounting filesystem.
[   69.064283][ T4886] device macvlan2 entered promiscuous mode
[   69.205460][ T4947] loop4: detected capacity change from 0 to 2048
[   69.206667][ T4949] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.220812][ T4949] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.223007][ T4951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.225856][ T4951] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.243513][ T4947] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   69.348224][ T4960] loop1: detected capacity change from 0 to 4096
[   69.414944][ T4961] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   69.417947][ T4961] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   69.420179][ T4961] EXT4-fs (loop4): This should not happen!! Data will be lost
[   69.420179][ T4961] 
[   69.421799][ T4961] EXT4-fs (loop4): Total free blocks count 0
[   69.422887][ T4961] EXT4-fs (loop4): Free/Dirty block details
[   69.424067][ T4961] EXT4-fs (loop4): free_blocks=2415919504
[   69.425218][ T4961] EXT4-fs (loop4): dirty_blocks=48
[   69.426248][ T4961] EXT4-fs (loop4): Block reservation details
[   69.427376][ T4961] EXT4-fs (loop4): i_reserved_data_blocks=3
[   69.618419][    T7] cfg80211: failed to load regulatory.db
[   69.648650][ T4962] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.734675][ T4967] loop1: detected capacity change from 0 to 1024
[   69.736865][ T4968] netlink: 64 bytes leftover after parsing attributes in process `syz.3.136'.
[   70.226169][ T4278] EXT4-fs (loop4): unmounting filesystem.
[   70.288599][ T4976] netlink: 'syz.5.140': attribute type 1 has an invalid length.
[   70.342714][ T4976] team0: Device vxcan3 is of different type
[   70.817769][ T4985] team0: Port device gretap1 added
[   70.866787][ T5004] loop3: detected capacity change from 0 to 4096
[   70.887645][ T5007] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.929532][ T4976] device macvlan2 entered promiscuous mode
[   70.930939][ T4976] team0: Device macvlan2 is already an upper device of the team interface
[   71.009103][ T5015] loop4: detected capacity change from 0 to 4096
[   71.019650][ T5015] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   71.069088][ T5020] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   71.070640][ T5020] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   71.088062][ T5023] loop5: detected capacity change from 0 to 2048
[   71.137569][ T5023] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   71.310065][ T5038] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   71.312905][ T5038] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   71.315034][ T5038] EXT4-fs (loop5): This should not happen!! Data will be lost
[   71.315034][ T5038] 
[   71.316796][ T5038] EXT4-fs (loop5): Total free blocks count 0
[   71.317942][ T5038] EXT4-fs (loop5): Free/Dirty block details
[   71.319176][ T5038] EXT4-fs (loop5): free_blocks=2415919504
[   71.320266][ T5038] EXT4-fs (loop5): dirty_blocks=48
[   71.321274][ T5038] EXT4-fs (loop5): Block reservation details
[   71.322421][ T5038] EXT4-fs (loop5): i_reserved_data_blocks=3
[   71.579734][ T4443] device hsr_slave_0 left promiscuous mode
[   71.584467][ T5043] fuse: Unknown parameter 'user_i00000000000000000000'
[   71.608674][ T4443] device hsr_slave_1 left promiscuous mode
[   71.623360][ T5047] loop3: detected capacity change from 0 to 1024
[   71.696734][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   71.698895][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_0
[   71.701138][ T4443] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   71.702670][ T4443] batman_adv: batadv0: Removing interface: batadv_slave_1
[   71.706292][ T4443] device bridge_slave_1 left promiscuous mode
[   71.708164][ T4443] bridge0: port 2(bridge_slave_1) entered disabled state
[   72.075090][ T4443] device bridge_slave_0 left promiscuous mode
[   72.076447][ T4443] bridge0: port 1(bridge_slave_0) entered disabled state
[   72.086389][ T4641] EXT4-fs (loop5): unmounting filesystem.
[   72.125648][ T5059] loop5: detected capacity change from 0 to 1024
[   72.127600][ T5059] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   72.169340][ T4443] device veth1_macvtap left promiscuous mode
[   72.170893][ T4443] device veth0_macvtap left promiscuous mode
[   72.172140][ T4443] device veth1_vlan left promiscuous mode
[   72.173588][ T4443] device veth0_vlan left promiscuous mode
[   72.514322][ T5072] loop3: detected capacity change from 0 to 4096
[   72.522033][ T5072] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   74.570501][ T4443] team0 (unregistering): Port device team_slave_1 removed
[   74.740065][ T4443] team0 (unregistering): Port device team_slave_0 removed
[   74.900271][ T4443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   75.099446][ T4443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   76.609495][ T4443] bond0 (unregistering): Released all slaves
[   76.924139][ T5066] netlink: 'syz.5.162': attribute type 1 has an invalid length.
[   76.947178][ T5083] fuse: Unknown parameter 'user_i00000000000000000000'
[   76.951182][ T5086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.953509][ T5086] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.955090][ T5070] device macvlan2 entered promiscuous mode
[   77.016289][ T5091] loop2: detected capacity change from 0 to 2048
[   77.065245][ T5102] loop5: detected capacity change from 0 to 1024
[   77.067856][ T5102] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   77.085650][ T5091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   77.549584][ T5116] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   77.552203][ T5116] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   77.554331][ T5116] EXT4-fs (loop2): This should not happen!! Data will be lost
[   77.554331][ T5116] 
[   77.556055][ T5116] EXT4-fs (loop2): Total free blocks count 0
[   77.557130][ T5116] EXT4-fs (loop2): Free/Dirty block details
[   77.558186][ T5116] EXT4-fs (loop2): free_blocks=2415919504
[   77.559368][ T5116] EXT4-fs (loop2): dirty_blocks=48
[   77.560251][ T5116] EXT4-fs (loop2): Block reservation details
[   77.561305][ T5116] EXT4-fs (loop2): i_reserved_data_blocks=3
[   77.862275][ T4274] EXT4-fs (loop2): unmounting filesystem.
[   77.905705][ T5120] loop2: detected capacity change from 0 to 4096
[   77.940980][ T5126] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   77.976041][ T5121] loop4: detected capacity change from 0 to 4096
[   77.983649][ T5121] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512)
[   78.051830][ T5137] fuse: Unknown parameter 'user_i00000000000000000000'
[   78.114649][ T5141] netlink: 'syz.3.182': attribute type 1 has an invalid length.
[   88.904374][ T5141] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[   88.907151][ T5141] bond1: (slave vxcan3): Error -95 calling set_mac_address
[   88.917667][ T5151] bond1: (slave gretap1): making interface the new active one
[   88.920508][ T5151] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   88.923577][ T5156] device macvlan2 entered promiscuous mode
[   88.925090][ T5156] device bond1 entered promiscuous mode
[   88.926116][ T5156] device gretap1 entered promiscuous mode
[   88.927354][ T5156] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   88.969878][ T5156] bond1: (slave macvlan2): the slave hw address is in use by the bond; giving it the hw address of gretap1
[   88.978127][ T5171] loop5: detected capacity change from 0 to 2048
[   88.989264][ T5156] device bond1 left promiscuous mode
[   88.990249][ T5156] device gretap1 left promiscuous mode
[   88.993359][ T5171] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[   89.173561][ T5188] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   89.176502][ T5188] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   89.178739][ T5188] EXT4-fs (loop5): This should not happen!! Data will be lost
[   89.178739][ T5188] 
[   89.180385][ T5188] EXT4-fs (loop5): Total free blocks count 0
[   89.181472][ T5188] EXT4-fs (loop5): Free/Dirty block details
[   89.182559][ T5188] EXT4-fs (loop5): free_blocks=2415919504
[   89.183575][ T5188] EXT4-fs (loop5): dirty_blocks=48
[   89.184465][ T5188] EXT4-fs (loop5): Block reservation details
[   89.185631][ T5188] EXT4-fs (loop5): i_reserved_data_blocks=3
[   89.489532][ T5192] loop3: detected capacity change from 0 to 4096
[   89.555811][ T5196] loop2: detected capacity change from 0 to 1024
[   89.557395][ T5197] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   89.564909][ T5196] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   89.590351][ T5199] loop4: detected capacity change from 0 to 1024
[   89.710656][ T5205] fuse: Unknown parameter 'user_id00000000000000000000'
[   89.734116][ T5206] loop3: detected capacity change from 0 to 4096
[   89.735851][ T5206] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[   90.178237][ T5217] binder: 5215:5217 tried to acquire reference to desc 0, got 1 instead
[   90.182315][ T5217] binder: 5215:5217 got reply transaction with no transaction stack
[   90.183861][ T5217] binder: 5215:5217 transaction reply to 0:0 failed 23/29201/-71, size 0-0 line 2946
[   90.187169][ T4641] EXT4-fs (loop5): unmounting filesystem.
[   90.213942][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[   90.215196][   T22] binder: send failed reply for transaction 22 to 5215:5217
[   90.227308][   T22] binder: undelivered TRANSACTION_COMPLETE
[   90.228356][   T22] binder: undelivered TRANSACTION_ERROR: 29189
[   90.393448][ T5233] netlink: 'syz.5.200': attribute type 1 has an invalid length.
[   90.458304][ T5233] device macvlan2 entered promiscuous mode
[   90.495262][ T5247] loop1: detected capacity change from 0 to 4096
[   90.501166][ T5250] loop4: detected capacity change from 0 to 1024
[   90.516545][ T5250] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   90.522657][ T5253] loop3: detected capacity change from 0 to 2048
[   90.526328][ T5255] fuse: Unknown parameter 'user_id00000000000000000000'
[   90.537105][ T5256] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   90.596266][ T5253] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   90.622557][ T5263] binder: 5262:5263 tried to acquire reference to desc 0, got 1 instead
[   90.625256][ T5263] binder: 5262:5263 got reply transaction with no transaction stack
[   90.626842][ T5263] binder: 5262:5263 transaction reply to 0:0 failed 29/29201/-71, size 0-0 line 2946
[   90.635571][   T22] binder: undelivered TRANSACTION_ERROR: 29201
[   90.636751][   T22] binder: send failed reply for transaction 28 to 5262:5263
[   90.638277][   T22] binder: undelivered TRANSACTION_COMPLETE
[   90.639517][   T22] binder: undelivered TRANSACTION_ERROR: 29189
[   90.765883][ T5273] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   90.768684][ T5273] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   90.770851][ T5273] EXT4-fs (loop3): This should not happen!! Data will be lost
[   90.770851][ T5273] 
[   90.772607][ T5273] EXT4-fs (loop3): Total free blocks count 0
[   90.773791][ T5273] EXT4-fs (loop3): Free/Dirty block details
[   90.774865][ T5273] EXT4-fs (loop3): free_blocks=2415919504
[   90.775875][ T5273] EXT4-fs (loop3): dirty_blocks=48
[   90.776792][ T5273] EXT4-fs (loop3): Block reservation details
[   90.777851][ T5273] EXT4-fs (loop3): i_reserved_data_blocks=3
[   91.015170][ T5259] loop5: detected capacity change from 0 to 4096
[   91.022093][ T5259] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512)
[   91.085820][ T5286] loop2: detected capacity change from 0 to 1024
[   91.785386][ T4267] EXT4-fs (loop3): unmounting filesystem.
[   91.920173][ T5311] netlink: 'syz.4.218': attribute type 1 has an invalid length.
[   91.927765][ T5310] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   91.976993][ T5311] bond1: (slave gretap1): making interface the new active one
[   91.980901][ T5318] fuse: Unknown parameter 'user_id00000000000000000000'
[   91.984542][ T5311] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   92.021981][ T5321] binder: 5320:5321 tried to acquire reference to desc 0, got 1 instead
[   92.023855][ T5311] bond1: (slave bridge1): Enslaving as an active interface with a down link
[   92.024667][ T5321] binder: 5320:5321 got reply transaction with no transaction stack
[   92.060127][ T5311] device macvlan2 entered promiscuous mode
[   92.067479][ T5311] device bond1 entered promiscuous mode
[   92.078830][ T5327] overlayfs: failed to resolve './file1/file0': -2
[   92.080715][ T5311] device gretap1 entered promiscuous mode
[   92.082055][ T5311] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   92.083829][ T5311] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   92.095395][ T5311] device bond1 left promiscuous mode
[   92.096370][ T5311] device gretap1 left promiscuous mode
[   92.211523][ T5332] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512)
[   92.235199][ T5335] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[   92.416931][ T5351] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   92.419941][ T5351] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   92.422143][ T5351] EXT4-fs (loop1): This should not happen!! Data will be lost
[   92.422143][ T5351] 
[   92.423842][ T5351] EXT4-fs (loop1): Total free blocks count 0
[   92.424960][ T5351] EXT4-fs (loop1): Free/Dirty block details
[   92.426033][ T5351] EXT4-fs (loop1): free_blocks=2415919504
[   92.427071][ T5351] EXT4-fs (loop1): dirty_blocks=48
[   92.427961][ T5351] EXT4-fs (loop1): Block reservation details
[   92.429141][ T5351] EXT4-fs (loop1): i_reserved_data_blocks=3
[   92.788905][ T5353] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   92.790555][ T5353] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   92.793621][ T5353] F2FS-fs (loop2): invalid crc value
[   92.802840][ T5353] F2FS-fs (loop2): Wrong journal entry on segno 2466250753
[   92.805881][ T5353] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[   92.832883][ T5362] fuse: Bad value for 'fd'
[   93.232207][ T4268] EXT4-fs (loop1): unmounting filesystem.
[   93.275773][ T5370] overlayfs: failed to resolve './file1/file0': -2
[   93.320651][ T5374] binder: 5371:5374 tried to acquire reference to desc 0, got 1 instead
[   93.335709][ T5374] binder: 5371:5374 got reply transaction with no transaction stack
[   93.395464][ T5385] netlink: 'syz.3.241': attribute type 1 has an invalid length.
[   93.415927][ T5388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.417656][ T5388] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.423354][ T5385] bond2: (slave bridge1): making interface the new active one
[   93.425343][ T5385] bond2: (slave bridge1): Enslaving as an active interface with an up link
[   93.448947][ T5385] device macvlan2 entered promiscuous mode
[   93.450437][ T5385] device bond2 entered promiscuous mode
[   93.456261][ T5385] device bridge1 entered promiscuous mode
[   93.457519][ T5385] 8021q: adding VLAN 0 to HW filter on device macvlan2
[   93.459726][ T5385] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened)
[   93.466714][ T5385] device bond2 left promiscuous mode
[   93.467717][ T5385] device bridge1 left promiscuous mode
[   93.518191][ T5398] fuse: Bad value for 'fd'
[   93.566139][ T5396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[   93.638702][ T5406] overlayfs: failed to resolve './file1/file0': -2
[   93.738003][ T5410] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1126: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   93.740784][ T5410] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 34 with error 28
[   93.742776][ T5410] EXT4-fs (loop2): This should not happen!! Data will be lost
[   93.742776][ T5410] 
[   93.744522][ T5410] EXT4-fs (loop2): Total free blocks count 0
[   93.745558][ T5410] EXT4-fs (loop2): Free/Dirty block details
[   93.746648][ T5410] EXT4-fs (loop2): free_blocks=2415919504
[   93.747684][ T5410] EXT4-fs (loop2): dirty_blocks=48
[   93.748679][ T5410] EXT4-fs (loop2): Block reservation details
[   93.749767][ T5410] EXT4-fs (loop2): i_reserved_data_blocks=3
[   94.092692][ T5418] binder: 5417:5418 tried to acquire reference to desc 0, got 1 instead
[   94.459895][ T5418] binder: 5417:5418 got reply transaction with no transaction stack
[   94.473108][ T4274] EXT4-fs (loop2): unmounting filesystem.
[   94.688433][   T27] audit: type=1326 audit(94.670:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.2.256" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99377a28 code=0x7ffc0000
[   94.692790][   T27] audit: type=1326 audit(94.670:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.2.256" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=33 compat=0 ip=0xffff99377a28 code=0x7ffc0000
[   94.856073][   T27] audit: type=1326 audit(94.670:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.2.256" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99377a28 code=0x7ffc0000
[   94.907068][   T27] audit: type=1326 audit(94.670:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.2.256" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=20 compat=0 ip=0xffff99377a28 code=0x7ffc0000
[   94.918226][ T5445] fuse: Bad value for 'fd'
[   94.930165][   T27] audit: type=1326 audit(94.670:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.2.256" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99377a28 code=0x7ffc0000
[   94.947160][   T27] audit: type=1326 audit(94.670:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5428 comm="syz.2.256" exe="/root/ci2-linux-6-1-kasan-arm64/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffff99377a28 code=0x7ffc0000
[   94.991443][ T5453] overlayfs: overlapping lowerdir path
[   95.010496][ T5455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.263'.
[   95.214017][ T5467] netlink: 'syz.1.264': attribute type 4 has an invalid length.
[   95.473013][ T4322] binder_debug: 16 callbacks suppressed
[   95.473024][ T4322] binder: release 5463:5464 transaction 52 out, still active
[   95.475601][ T4322] binder: undelivered TRANSACTION_COMPLETE
[   95.476811][ T4322] binder: undelivered TRANSACTION_ERROR: 29201
[   95.477962][ T4322] binder: send failed reply for transaction 52, target dead
[   95.959703][ T5515] binder_user_error: 2 callbacks suppressed
[   95.959711][ T5515] binder: 5514:5515 tried to acquire reference to desc 0, got 1 instead
[   95.963505][ T5515] binder: 5514:5515 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   95.966161][ T5515] binder: 5515 RLIMIT_NICE not set
[   95.967392][ T5515] binder: 5514:5515 got reply transaction with no transaction stack
[   95.969337][ T5515] binder: 5514:5515 transaction reply to 0:0 failed 59/29201/-71, size 0-0 line 2946
[   95.978225][ T4383] binder: undelivered TRANSACTION_ERROR: 29201
[   95.979762][ T4383] binder: send failed reply for transaction 58 to 5514:5515
[   95.982135][ T4383] binder: undelivered TRANSACTION_COMPLETE
[   95.983333][ T4383] binder: undelivered TRANSACTION_ERROR: 29189
[   96.371630][ T5536] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'.
[   96.756796][ T5542] binder: 5541:5542 tried to acquire reference to desc 0, got 1 instead
[   96.764270][ T5544] netlink: 'syz.4.291': attribute type 4 has an invalid length.
[   96.772998][ T5542] binder: 5541:5542 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   96.778011][ T5542] binder: 5542 RLIMIT_NICE not set
[   96.780989][ T5542] binder: 5541:5542 got reply transaction with no transaction stack
[   96.783437][ T5548] set_capacity_and_notify: 7 callbacks suppressed
[   96.783442][ T5548] loop3: detected capacity change from 0 to 1024
[   96.787098][ T5542] binder: 5541:5542 transaction reply to 0:0 failed 65/29201/-71, size 0-0 line 2946
[   97.682794][ T5596] binder: 5595:5596 tried to acquire reference to desc 0, got 1 instead
[   97.685884][ T5596] binder: 5595:5596 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[   97.712013][ T5598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   97.713747][ T5598] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   98.301306][ T5611] loop3: detected capacity change from 0 to 128
[   98.399164][ T5618] netlink: 'syz.2.310': attribute type 4 has an invalid length.
[   98.643981][ T5611] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[   98.668387][ T5625] loop4: detected capacity change from 0 to 1024
[   98.694649][ T5625] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[   98.726802][ T4267] EXT4-fs (loop3): unmounting filesystem.
[   98.773077][ T5631] loop5: detected capacity change from 0 to 1024
[   98.862898][ T4278] EXT4-fs (loop4): unmounting filesystem.
[   99.871406][ T5694] netlink: 'syz.5.333': attribute type 4 has an invalid length.
[  100.134367][ T5699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  100.136215][ T5699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  100.267300][ T5710] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'.
[  100.281229][ T5712] loop3: detected capacity change from 0 to 1024
[  100.775595][ T5724] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.346'.
[  101.137240][ T5753] binder_user_error: 14 callbacks suppressed
[  101.137249][ T5753] binder: 5748:5753 tried to acquire reference to desc 0, got 1 instead
[  101.140745][ T5753] binder: 5748:5753 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  101.142993][ T5753] binder: 5753 RLIMIT_NICE not set
[  101.144052][ T5753] binder: 5748:5753 got reply transaction with no transaction stack
[  101.145464][ T5753] binder_debug: 24 callbacks suppressed
[  101.145476][ T5753] binder: 5748:5753 transaction reply to 0:0 failed 95/29201/-71, size 0-0 line 2946
[  101.154458][ T4322] binder: undelivered TRANSACTION_ERROR: 29201
[  101.155563][ T4322] binder: send failed reply for transaction 94 to 5748:5753
[  101.156972][ T4322] binder: undelivered TRANSACTION_COMPLETE
[  101.157969][ T4322] binder: undelivered TRANSACTION_ERROR: 29189
[  101.921820][ T5778] netlink: 1752 bytes leftover after parsing attributes in process `syz.5.359'.
[  102.055061][ T5789] loop5: detected capacity change from 0 to 32768
[  102.059471][ T5789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 scanned by syz.5.362 (5789)
[  102.063243][ T5789] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.064813][ T5789] BTRFS info (device loop5): using sha256 (sha256-ce) checksum algorithm
[  102.066109][ T5789] BTRFS info (device loop5): turning on async discard
[  102.067193][ T5789] BTRFS info (device loop5): metadata ratio 0
[  102.068209][ T5789] BTRFS info (device loop5): setting nodatasum
[  102.069300][ T5789] BTRFS info (device loop5): using free space tree
[  102.244259][ T5814] binder: 5813:5814 tried to acquire reference to desc 0, got 1 instead
[  102.246723][ T5814] binder: 5813:5814 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  102.250700][ T5814] binder: 5814 RLIMIT_NICE not set
[  102.251705][ T5814] binder: 5813:5814 got reply transaction with no transaction stack
[  102.253093][ T5814] binder: 5813:5814 transaction reply to 0:0 failed 101/29201/-71, size 0-0 line 2946
[  102.264842][ T4523] binder: undelivered TRANSACTION_ERROR: 29201
[  102.265982][ T4523] binder: send failed reply for transaction 100 to 5813:5814
[  102.267345][ T4523] binder: undelivered TRANSACTION_COMPLETE
[  102.268403][ T4523] binder: undelivered TRANSACTION_ERROR: 29189
[  102.318179][ T5821] loop3: detected capacity change from 0 to 1024
[  102.438562][ T5789] BTRFS info (device loop5): enabling ssd optimizations
[  102.807908][ T4641] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  102.894813][ T5842] loop1: detected capacity change from 0 to 2048
[  102.902397][ T5848] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.372'.
[  102.904231][ T5842] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  102.917250][ T5842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  103.633932][ T5892] binder: 5891:5892 tried to acquire reference to desc 0, got 1 instead
[  103.636566][ T5892] binder: 5891:5892 ERROR: Thread waiting for process work before calling BC_REGISTER_LOOPER or BC_ENTER_LOOPER (state 10)
[  103.930624][ T5904] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.383'.
[  104.096153][ T5922] loop2: detected capacity change from 0 to 1024
[  104.852274][ T5953] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.395'.
[  105.328893][ T5969] loop2: detected capacity change from 0 to 512
[  105.362012][ T5969] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  105.366495][ T5969] EXT4-fs (loop2): re-mounted. Quota mode: writeback.
[  105.416658][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  105.474940][ T5989] loop1: detected capacity change from 0 to 8192
[  105.499936][ T5989] FAT-fs (loop1): error, clusters badly computed (2 != 1)
[  105.501552][ T5989] FAT-fs (loop1): Filesystem has been set read-only
[  105.646797][ T6009] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.406'.
[  105.677140][ T6011] loop5: detected capacity change from 0 to 1024
[  105.870606][ T6019] ------------[ cut here ]------------
[  105.871937][ T6019] WARNING: CPU: 1 PID: 6019 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c
[  105.873659][ T6019] Modules linked in:
[  105.874383][ T6019] CPU: 1 PID: 6019 Comm: syz.3.410 Not tainted syzkaller #0
[  105.875830][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  105.877800][ T6019] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  105.879356][ T6019] pc : hugetlb_split+0x234/0x29c
[  105.880297][ T6019] lr : hugetlb_split+0x234/0x29c
[  105.881197][ T6019] sp : ffff800023947830
[  105.881993][ T6019] x29: ffff800023947830 x28: dfff800000000000 x27: 0000000020600000
[  105.883442][ T6019] x26: ffff0000f2d47e58 x25: ffff800015220000 x24: 1ffff00002a44070
[  105.884972][ T6019] x23: dfff800000000000 x22: 0000000000000001 x21: 0000000000000000
[  105.886509][ T6019] x20: 0000000020000000 x19: ffff0000f2d47e58 x18: ffff800011b9bf60
[  105.888077][ T6019] x17: ffff8000088c2ae8 x16: ffff8000082d7db8 x15: 0000000000000000
[  105.889657][ T6019] x14: 0000000000000001 x13: 1fffe0001893b9db x12: 0000000000080000
[  105.891224][ T6019] x11: 0000000000003658 x10: ffff8000272e9000 x9 : ffff800008897c90
[  105.892778][ T6019] x8 : 0000000000003659 x7 : 0000000000000000 x6 : 000000000000003f
[  105.894322][ T6019] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008897b10
[  105.895929][ T6019] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
[  105.897499][ T6019] Call trace:
[  105.898123][ T6019]  hugetlb_split+0x234/0x29c
[  105.899006][ T6019]  __vma_adjust+0x3a0/0x1724
[  105.899897][ T6019]  __split_vma+0x324/0x444
[  105.900761][ T6019]  split_vma+0xa0/0xf8
[  105.901549][ T6019]  mbind_range+0x490/0x6ec
[  105.902370][ T6019]  __arm64_sys_mbind+0x678/0x858
[  105.903294][ T6019]  invoke_syscall+0x98/0x2b4
[  105.904163][ T6019]  el0_svc_common+0x138/0x258
[  105.905102][ T6019]  do_el0_svc+0x58/0x130
[  105.905962][ T6019]  el0_svc+0x58/0x128
[  105.906769][ T6019]  el0t_64_sync_handler+0x84/0xf0
[  105.907774][ T6019]  el0t_64_sync+0x18c/0x190
[  105.908678][ T6019] irq event stamp: 1664
[  105.909450][ T6027] binder: BINDER_SET_CONTEXT_MGR already set
[  105.909497][ T6019] hardirqs last  enabled at (1663): [<ffff800011b23b24>] _raw_spin_unlock_irqrestore+0x48/0xac
[  105.910696][ T6027] binder: 6023:6027 ioctl 4018620d 20000040 returned -16
[  105.912570][ T6019] hardirqs last disabled at (1664): [<ffff800011a389f4>] el1_dbg+0x24/0x80
[  105.915288][ T6019] softirqs last  enabled at (1574): [<ffff800008030954>] local_bh_enable+0x10/0x34
[  105.915661][ T6027] binder: 6023:6027 ioctl c0306201 20000240 returned -11
[  105.916976][ T6019] softirqs last disabled at (1572): [<ffff800008030920>] local_bh_disable+0x10/0x34
[  105.919844][ T6019] ---[ end trace 0000000000000000 ]---
[  106.293333][ T6019] ------------[ cut here ]------------
[  106.294299][ T6019] WARNING: CPU: 1 PID: 6019 at include/linux/fs.h:503 hugetlb_split+0x234/0x29c
[  106.295848][ T6019] Modules linked in:
[  106.296569][ T6019] CPU: 1 PID: 6019 Comm: syz.3.410 Tainted: G        W          syzkaller #0
[  106.298113][ T6019] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  106.300010][ T6019] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--)
[  106.301516][ T6019] pc : hugetlb_split+0x234/0x29c
[  106.302472][ T6019] lr : hugetlb_split+0x234/0x29c
[  106.303410][ T6019] sp : ffff800023947830
[  106.304201][ T6019] x29: ffff800023947830 x28: dfff800000000000 x27: 0000000020600000
[  106.305709][ T6019] x26: ffff0000f2d47e58 x25: ffff800015220000 x24: 1ffff00002a44070
[  106.307278][ T6019] x23: dfff800000000000 x22: 0000000000000003 x21: 0000000000000000
[  106.308831][ T6019] x20: 0000000020600000 x19: ffff0000f2d47e58 x18: ffff800011b9bf60
[  106.310388][ T6019] x17: ffff8000088c2ae8 x16: ffff8000082d7db8 x15: 0000000000000000
[  106.311976][ T6019] x14: 0000000000000001 x13: 1fffe0001893b9db x12: 0000000000080000
[  106.313496][ T6019] x11: 000000000007ffff x10: ffff8000272e9000 x9 : ffff800008897c90
[  106.315048][ T6019] x8 : 0000000000080000 x7 : 0000000000000000 x6 : 000000000000003f
[  106.316591][ T6019] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff800008897b10
[  106.318130][ T6019] x2 : 0000000000000000 x1 : 0000000000000000 x0 : 0000000000000000
[  106.319665][ T6019] Call trace:
[  106.320310][ T6019]  hugetlb_split+0x234/0x29c
[  106.321192][ T6019]  __vma_adjust+0x3ac/0x1724
[  106.322113][ T6019]  __split_vma+0x324/0x444
[  106.322993][ T6019]  split_vma+0xa0/0xf8
[  106.323815][ T6019]  mbind_range+0x490/0x6ec
[  106.324678][ T6019]  __arm64_sys_mbind+0x678/0x858
[  106.325655][ T6019]  invoke_syscall+0x98/0x2b4
[  106.326560][ T6019]  el0_svc_common+0x138/0x258
[  106.327503][ T6019]  do_el0_svc+0x58/0x130
[  106.328350][ T6019]  el0_svc+0x58/0x128
[  106.329133][ T6019]  el0t_64_sync_handler+0x84/0xf0
[  106.330123][ T6019]  el0t_64_sync+0x18c/0x190
[  106.331010][ T6019] irq event stamp: 2070
[  106.331816][ T6019] hardirqs last  enabled at (2069): [<ffff800011a3a99c>] exit_to_kernel_mode+0xcc/0xfc
[  106.333687][ T6019] hardirqs last disabled at (2070): [<ffff800011a389f4>] el1_dbg+0x24/0x80
[  106.335326][ T6019] softirqs last  enabled at (2056): [<ffff8000081ac394>] handle_softirqs+0xaec/0xc60
[  106.337150][ T6019] softirqs last disabled at (1667): [<ffff800008020164>] __do_softirq+0x14/0x20
[  106.338870][ T6019] ---[ end trace 0000000000000000 ]---